Kiboneu

Good idea, I will stop having fun this instant.

See the last paragraph of my comment.

If you want to do a version of this yourself quickly --

Install Luanti with Minetest (open source minecraft), and instruct your agent to write a mod that gives it network access to the game's Lua interpreter. The agent can then do anything from modifying the world state directly to controlling NPCs.

I had it build giant bases similar to black mesa in half life with power distribution mods. It would write solvers to optimally place the power cables / repeaters in accordance to the spacial dimensions of the rooms that it would build (lol). I guess this is how I discovered vibe gaming.

I suppose you can have multiple agents interact with each other through that, provided an adapter to proxy agent player navigation and perception to get real information asymmetry between them. Or just emulate / hook the client and do away without a remote Lua mod entirely.

Man, we've come a long way since "An Evolved Circuit, Intrinsic in Silicon, Entwined with Physics" (1997)

https://gwern.net/doc/ai/1997-thompson.pdf

[delayed]

Just wrap it in wireguard. WG won't respond to any incoming handshake without a valid and authorized client key, it's essentially invisible.

This is one of the laziest false comments that I have ever read.

See also: a "font" that only people high on drugs can read!

https://qri.org/blog/psycrypto-contest

https://www.youtube.com/watch?v=oD4nV0CMkBI

Of course, the psychedelic hidden message is reversible with some video processing techniques for everyone else to see. And calling it cryptography is a mis-use of the term. Still an interesting use of the effect.

I don't think "ghost font" will work as well as the author claims.

> WASM has strong tried and proven sandboxing. We basically can build on nearly 30 years of experience. The decoders don't need a lot of access, they can basically be pure functions.

I've heard that kind of sentiment many times before. It's not a good (thought-terminating) mindset to have for any secure software.

There are several WASM implementations, WASM is just a format. "Pure functions" are pure at a superficial level. Many people say that they don't mutate global state, but they do ... it's just hidden. The decoders "not needing a lot of access" doesn't matter if the WASM engine is pwned through arbitrary code execution inside the environment, or if it's contorted to bypass the access control you are mentioning through various side-effects.

> The conclusion I’m currently at is that I don’t know and probably can’t ever know.

I think about this quote often, straight from Data's voice module in another episode:

'The most elementary and valuable statement in science, the beginning of wisdom, is, "I do not know".'

Ah yes, the TSA of the internet.

In other words, Cloudflare requires you to substantially increase your browser’s attack surface in order to visit websites.

> "Blue pill" attacks on Vista and Xen [...] Her work demonstrated that hardware virtualization is not in fact the security panacea we wish it was, but that it too is vulnerable to attack just like any other layer of the stack.

Blue-pilling is a method for malware to hide from the OS by virtualizing it, not an attack on VMs. That's why it's called "blue pilling". I do agree though that VMs are not airtight and VM escapes have been demonstrated.

KeepassXC can also be configured to allow / deny when a browser extension requests a password.

Why not both approaches? Creativity is not just making the most use of what you have but also the most of what you are.

The other side of this is that we can still make software more efficient, and make better use of the old hardware than we had ever thought possible.

I’m doing more with a decade old GPU, which was manufactured before “Attention is all you need“, than I could 5 years ago, when quantization techniques were implemented.

I’m holding on to my 32 bit machines.

Most linux distributions dropped support for them (for good reason). But at the end of the day these machines are a fabric of up to ~ 4 billion bytes that can be used in a myriad of ways, and we only covered a fraction of the state space before we had moved on.

Does disabling “fade popups in and out” help? Settings -> Animations

> Even something as simple as alt-tabbing lagged for seconds on an overpowered machine.

In what way? If there’s a delay for the task switching menu to close after alt-tabbing (~500ms) this might be due to a kde animation default (it really tripped me up, I’m a rapid window switcher). I can share the fix once I get on my kde machine.

No it doesn’t explain it. This is legitimately a difficult target. Did you watch the talk?

The people that MS hired to make and break this were top notch, and there is definitely incentive to maintain control over a content platform. This dude has been at this for /years/. I’ve been a fly on the wall on all sides to observe this.

There has been a lot of interest in underground / pirate communities to hack this, but that’s not the only reason why people hack things.

Oh yes you’re right, I did neglect physical block erase which does happen outside the data path.

That wasn’t my point. You almost got there when you wrote “there are abstractions (which exist in you brain, whatever the language)”. And your point on leaky abstractions is exactly the indication that they exist in your mind, not out there.

My point is that we settle with what we see for convenience/utility and base our models on that. We build real things on top of these models. Then the result meets reality. If only that transition were so simple.

When an effect jumps unexpectedly between layers of abstraction we call it an abstraction leak. As you mentioned. The correct response is to re-examine these leaks and make other frameworks to cover the edge cases, not to blame the world.

Hackers actively seek these “leaks” by suspending assumptions that arise out of the abstractions that humans tend to rely on.

I’m not surprised that my OP got downvoted. It can be very upsetting when one’s conceptual frameworks are challenged without prescription. No one even mentioned the specific example that I referenced. Well, if they can’t parse it, they don’t deserve it. Keeps me in the market.

Neat. The author is about to stumble onto a secret.

> In Sum# > Abstractions. They don’t exist in assembler. Memory is read from registers and the stack and written to registers and the stack.

Abstractions do not exist periodi. They are patterns, but these patterns aren’t isolated from each other. This is how a hacker is born, through this deconstruction.

It’s just like the fact that electrons and protons don’t really exist. but the patterns in energy gradients are consistent enough to give them names and model their relationship. There are still points where these models fail (QM and GR at plank scale, or just the classical-quantum boundaries). It’s gradients all the way down, and even that is an abstraction layer.

Equipped with this understanding you can make an exploit like Rowhammer.

https://en.wikipedia.org/wiki/Row_hammer

I introduced my dad to claude code. He doesn’t even code, but now it’s a more welcoming and rewarding experience from the get-go. He’s happy, became more comfortable with linux.

Occasionally I remote in to help fix something, but the coding agent really takes a load off my back, and he can start learning without knowing where the endpoints are.

Let’s not pretend anymore.

The uncomfortable truth is that that people in affluent countries don’t want to change their lifestyle. Affluent countries are less affected by global warming than countries responsible for a fraction of global emissions. All the emissions from manufacturing follow suit.

Yesterday I was just watching an episode of futurama where bender (the robot) “finds” his imagination and believes that he is a dnd character. He goes around Don Quixote style.

To defeat bender, Fry pretends to a destructive spell on him.

I couldn’t find the exact scene but…. https://youtube.com/watch?v=chjVoVcVi3A

GOSH am I thankful to my old self running npm packages in containers with very specific access to the filesystem.

And that filesystem is CoW with snapshots, of course.

The story won’t end here. It will soon be time to do the same for other programming language environments too.

The SSD lies :) TRIM is a scam.

What happens when you XOR a 0 with a byte in a one time pad? You get the corresponding byte from the pad, right? And the block full of 1s or 0s is exactly a case the scrambler needs to be used.

It's not for compression or anything like that, it is used because the cells are packed so tightly that sharp changes in energy gradients over the space will even themselves out by donating electrons to their neighbors (flipping bits). It's kind of like rowhammer.

Instead of just a ont-time-pad, a more complicated and often proprietary scrambler is used. But it's towards the same end. It's a deterministic, pseudo-random bit sequence.

If you can bypass the controller (read directly from NAND) you will see the true values that it returns, and it will likely be scrambled even if the flash controller reports otherwise. This also allows you to recover the scrambler, since you know that the other side of the XOR operation is 0.

FWIW I did not assume that you were trolling, and yes we did come out fine.

I have good faith, though I should get off hn now... :P

I still don't need to assume what the intent is. Troll or no troll, it works. My comments might inspire someone else to try a CoW fs. I'm also really impressed with wikimedia's technical team.