For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | kelseyfrog's commentsregister

Trickle down altruism

Napkin math puts him at ~5,800-11,500 deaths.

More of a mass murderer in my eyes, but I'm willing to be wrong on that point.


If on a Winter’s Night a Traveller gives the reader the impression that there must be a system at play and gives up some of its secrets easily. However, there remains a persistent feeling, after reading each section, that there are other connections - threads of deliberate meaning - between them all that slip through your fingers as you desperately try to clutch more and more fragments passing by.

It's one of my favorite books precisely because it generates this feeling and led me to Perec's Life: A User's Manual among other fantastic works.


You will likely enjoy this discussion of Calvino’s work: https://www.youtube.com/watch?v=vI16Txc7x1s

Definitely! That's what kicked off my interest :)


>[...] and led me to Perec's Life: A User's Manua

For people who may be unfamiliar with this (excellent) connection: https://en.wikipedia.org/wiki/Oulipo


It is also one of my favorite books. Magical writing.

At the same time considering the people participating, there wasn't a way out of the problems that didn't involve violence. Different outcomes would require different choices that require different people.

No one deserves to be attacked.

I also believe that there will be more casualties in the AI Wars. We should be prepared for that. Capitalism, AI, and human life are mutually incompatible and I'm still not sure which two will survive the conflict.


You are absolutely right! It takes incredible bravery to admit that if we cannot solve the problem in totality then incremental improvements are useless.

Fair point, but I have been very surprised by how many normie friends have gotten a VPN since our state mandated age checks for adult content.

This. Incremental progress is one thing, but incremental movement that makes the problem worse and actually harder to solve later is not progress.

It's indicative that maybe you're attempting to solve the wrong problem.


[flagged]


Please explain what the Crispin buxley phenomenon is

You can lookup made up terms if you want.

The connection between ECS and DBs wasn't lost on developers in the early days of ECS. I'm reminded of Scott Bilias's 2002 ECS presentation: A Data-Driven Game Object System[1] which clearly says, "This is a database."

In my mind, there's a pedagogical gap in OOP where ontologies are formed using classes and this almost never works in real life applications (no in real life for that matter). We almost always construct ontological relations using predicates not rigid hierarchies. For this, ECS tends to be flexible, and expressive enough to be a pragmatic choice.

1. https://www.gamedevs.org/uploads/data-driven-game-object-sys...


Anything that restricts user freedom is entirely bad, even if it's at the expense of security.

But...it doesn't restrict user freedom. If the user wishes to do so, they can disable SB.

And will then be locked out from an increasing amount of Applications, Media, and eventually even Websites.

I run Linux with Secure Boot and I don't feel locked out of any media, applications, or websites.

My mom uses Secure Boot with Windows and doesn't know or care that it's enabled at all.


The OP is describing the status quo on mobile phones and tablets. On mobile Secure Boot, and systems like it, are used to lock out the user. If the boot path integrity is altered, some apps won't work or will provide degraded experiences.

What's happening the article is what has already happened on mobile: it requires vendor signing to run anything on mobile OS and the vendor locks out 3rd party drivers from their OS entirely.

It's yet another step towards desktop computing converging with mobile when it comes to software/firmware/boot/etc integrity attestation, app distribution and signing, and the ability to use your own bootloader and system drivers. When Secure Boot was first rolled out on laptops, it was used by Microsoft to lock the user out of the boot process before it was adapted to let users register their own keys, it can always be used for its original purpose, and how it's currently used on mobile, again.


They shouldn't _have_ to do anything. The point is that no demands should be placed upon users.

Same problem with age gating. It's fine, as long as zero additional demands are placed upon users.


Freedom from the consequences of malware is more valuable than the low cost of turning SecureBoot off if you don’t want it.

We shouldn’t need the hassle of locks on our home and car doors, but we understand they are probably worthwhile for most people.


Do you lock your house or car and permanently handover the keys to some stranger, who you then have to depend on always to lock or unlock it for you?

No? I have locks on my house and car that I have the keys for. That an argument _for_ secure boot.

It is absolutely not.

It's a decent one for "locks on an apartment building that someone else owns."

But no, purchasing a house ought not include by default "a set of locks that you must work around, permission-wise."


Funnily enough, when you buy a house, the first task is to change all the locks.

Y’know, for security.


Sure. Now, of the people who buy houses -- how many of them would find this a difficult or onerous task?

And then, do computers.

Apples and oranges here, for this point.


Cost me $500 recently. Not difficult, but costly.

Sorry dwattttt, I’m unable to verify your identity and your keys are disabled. If you have an issue, please fax a copy of your DUNS number.

You don't have the ability to revoke my keys on this machine, that's the point. Not even MS could do that, because these are _my_ keys. The alternative proposed here is no keys at all.

What's the improved security argument for terminating VeraCrypt's account though? SB does have clear benefits but what is unclear is the motivation for the account termination.

What's the likelihood that this account ban provides zero security benefit to users and was instead a requirement from the gov because Veracrypt was too hard to crack/bypass.


Are the demands that users become experts in provider their own security against more advanced actors not significantly worse? The control part is unfortunate but the defaults should make it so users can focus on sharing pictures of cats without fear or need for advanced cyber security knowledge.

Users who care enough to do so can enrol their own keys using the extremely well documented process to do that.

Users who don’t care about the runtime integrity of their machine can just turn it off.

Both options are so easy that you could’ve learned how to do them on your machine in the time that you spent posting misinformation in this thread.


So like banks requiring you to have a PIN on your ATM card, even if you don’t want one… that’s bad? Seatbelt laws are bad?

> If the dollar stops being the reserve currency, the purchasing power of the dollar will crash.

And thus manufacturing will return to the US! I thought we wanted that. It's the only way out of the Triffin dilemma.


Pathological demand avoidance.

In Canada, demands are not actually demands. That way if the demand is avoided, there never was a demand to begin with; however, if it was fulfilled, then of course there was always a demand all along.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You