News for hackers. Stuff that matters.

keeda

>In 1995, Metcalfe argued that the Internet would suffer a "catastrophic collapse" in the following year; he promised to eat his words if it did not. During his keynote speech at the sixth International World Wide Web Conference in 1997, he took a printed copy of his column that predicted the collapse, put it in a blender with some liquid and then consumed the pulpy mass.[26][27] He had suggested having his words printed on a very large cake, but the audience would not accept this form of "eating his words."

https://en.wikipedia.org/wiki/Robert_Metcalfe#Predicted_Inte...

Hah, this triggers my pet peeve about IP for software: Copyright for code is a category error.

Copyright very explicitly does NOT cover functional aspects, only creative expression. But the value of software is not in the expressive aspects of the code that generates it, the value is in the functionality it provides. And this is the exact thing that copyright does NOT protect!

Like, literally, we're protecting the fact that we used a for-loop instead of a while-loop to do a useful thing, not the useful thing itself. This is why rewriting enough code is sufficient to bypass all copyright protection, as the recent AI rewrites have shown.

This was always a huge legislative hack, rightfully controversial at the time it happened, but legislators didn't want to bother figuring out a proper IP regime for software -- maybe something between copyright and patents -- so they shoehorned code into copyright.

Google v Oracle was trivial to decide, but it got decided the wrong way. Because it became a trial around laws based on an ill-founded legislative hack and the decades of flawed case-law it spawned. Stepping back, it is very clear that Sun spent billions making a very useful thing and Google co-opted it for its own uses without recompense because they bet (correctly) that they could legally get away with it.

It is somewhat analogous to what the AI companies are doing with all the code and data out there. Funny that people are unhappy about THAT but cheered when Google did it to Sun / Oracle. I wonder what changed ;-)

Re:Why Anthropic's filing crushed tech stocks on Saturday October 31, 2026 @05:49PM (#50320594)
Most financial reporting seems to be building simplistic narratives around highly complex dynamics and the largely arbitrary reactions of the masses to those dynamics.

My simplistic narrative, based mostly on the timing of market I observed, agrees with yours: the tech selloff was sparked by Google's earnings report. Mostly the fact that Google's Search cash cow seems to be getting cannibalized by its less profitable AI overviews, compounded by their cash flow turning negative due to their insane CapEx bill, which is only going to keep going up. And then Amazon reported a similar plight.

Hilariously, this even affected MSFT, which actually had a good quarter while being the only hyperscaler with positive cash flow, initially sending the stock to record highs. And then Google's earnings report hits and drags everything down. Satya must have been pretty annoyed.

Re:Northflank Breached on Friday October 30, 2026 @04:24PM (#50309655)
That is a great definition of adequate for security! My point is that at scale, bureaucracy is a necessary (though not sufficient!) condition for achieving adequate security.

Another way to look at it is, bureaucracy is an aspect of the corporate culture, and lasting security comes down to having the right culture. At least in that respect Microsoft is doing something right. Doubtlessly a lot of that bureaucracy is ineffective, but it's a signal that the cultural intention exists.

As a relevant counterexample, we've never heard of these kind of processes at Meta and so you get Cambridge Analytica.

My perspective is skewed by my experience being on a security-adjacent platform team for years. Our biggest challenge was not external threats, it was internal teams seeing us as friction on their productivity, to the extent that it regularly led to escalations.

So when Cambridge Analytica happened, I played it up for all it's worth; Meta may move fast because they didn't have our "bureuacratic team", but look where it got them! Unfortunately the $25B penalty happened just last week... I'd have gotten infinite political mileage out of that.

My take is that at least until we achieve our destiny as an immortal, intergalactic species, there will always be a need for more intelligence ;-)

Of course in the short term we have to deal with pesky things like rent and food, for which we need jobs that are little more than filing TPS reports, which keep us from making progress towards our destiny…

But in the long term, after the economy implodes because AI starts filing all the TPS reports, and we rebuild it for a future where humans are actually allowed to reach for their full potential, we’re gonna need all the intelligence we can get!

On the other hand Bernie wants the government to take a 50% stake in the AI labs. Can we make up our minds, do we expect the bubble to burst or do we expect a windfall? ;-P

Either way Anthropic will IPO soon and we’ll be one step closer to finding out.

One thought I had is that, bubble or not, this technology is likely going to upend economies of entire nations and impact all people, so it would be better if controlled by the people which is (in theory) represented by the government.

Looking at this as a backdoor bailout is the wrong perspective; it should be more like giving the people control over their economic future.

Re:Northflank Breached on Friday October 30, 2026 @01:29PM (#50307253)
Correlation is not an absolute measure here, it’s relative. As is the entire concept of security.

As is what constitutes the standard of “adequate.” Which BTW is the standard in ALL engineering (not just security or software) because we live in a world where economic pressures apply and costs must be managed. Trivial example: bridges only use an “adequate” amount of steel and concrete because they are not free. The word “adequate” fundamentally involves the concept of tolerances. There’s a reason we consider over-engineering a bad thing.

So which development approach would you say is better correlated with good security outcomes?

Re:Northflank Breached on Friday October 30, 2026 @12:58PM (#50306740)
Yes and no. They (or anybody else) are not guaranteed to be secure, of course; see all the compromises regularly found in cloud providers; Azure especially has had so many cross-tenant vulnerabilities (there’s one on the front page right now!) that I’m amazed the concept of public multi-tenant clouds still exists.

But they are also very highly incentivized to be more secure. They have millions of customers (hence a correspondingly higher expectation of trust) and billions in revenue from the trillions in economic activity happening on those platforms (hence a correspondingly larger target on their backs.) This means exponentially higher liabilities. And that probably matters more than any other factor.

Re:Northflank Breached on Friday October 30, 2026 @12:38PM (#50306417)
Having crippling bureaucracy does have better correlation with security outcomes than the “move fast, break things” philosophy that most of the software industry lives by.

I’m not even blaming Zuck for that, he didn’t really invent it, though he certainly popularized it — he just made an astute observation of the dynamics in software and turned it into a company motto.

Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @06:39PM (#50297246)
Right, I don't necessarily think Google will lose its userbase -- although ChatGPT and Claude and heck, even Muse, are formidable threats -- but I do think its ability to monetize each user will drop sharply as users shift to AI search.

Like, in the theorycrafting in my comment that I linked before, I didn't assume any change in userbase; just how lucrative (or not) each step in a chat-based journey could be versus a search-based one.

Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @03:10PM (#50294290)
I should have been more precise, it depends on what you mean by "search" -- traditional search is still a huge cash cow, but AI search is not as lucrative, which is what the exec called out in that Ars link. The problem is that AI search is rapidly replacing traditional search.

Personally I have doubts that AI search would ever be as lucrative as traditional search, which I expanded on in that comment I linked.

Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @02:00PM (#50293278)
Yes but search growth has slowed and it’s making less money thanks to AI overviews. An exec called it out in the earnings call.

https://arstechnica.com/gadgets/2026/10/google-admits-ai-sea...

I’ve been saying for a while that AI is going to be a bigger problem for Google than many realize: https://news.ycombinator.com/item?id=47957708

Re:Google Search is now less than half of Alphabet’s revenue on Thursday October 29, 2026 @01:49PM (#50293147)
“Recently”?? Have people not seen the findings of the AdTech Antitrust lawsuit they lost? Y’all should google it (heheh) especially the ad auction rigging parts of it, including Project Bernanke.

What they’re doing now is just being a lot more overt about it, because they want to carve up their old cash cow to feed their AI ambitions before ChatGPT and Claude eat it up first.

Re:Two high-speed trains collide near Toledo, Spain on Wednesday October 28, 2026 @04:45PM (#50280635)
It's a more correct oversimplification than the other one though ;-)

Like I'd be really curious to see evidence of people saying, either directly or indirectly, that "we should be suspicious of competence and excellence."

On the other hand, you already mentioned concrete evidence of money-seeking causing disasters: Boeing.

Re:Two high-speed trains collide near Toledo, Spain on Wednesday October 28, 2026 @04:37PM (#50280544)
Right, we don't know about this one, but typically there are some corners being cut somewhere or some other money motive lurking in the background, like the Boeing one OP mentioned.
Re:Two high-speed trains collide near Toledo, Spain on Wednesday October 28, 2026 @12:51PM (#50276670)
To me it seems the opposite is happening: the push for higher profits by the Capitalists is overriding the competence of rank and file, resulting in these disasters. And all these profits just shoring up wealth that is accruing unequally to those same Capitalists is what is inciting socialist sentiments.

To me Ayn Rand's writings always seemed like an Economics Horror story: effective at instilling dread in its readers, but of some highly unrealistic boogeyman.

Re:Software may be getting worse, but it used to be horrible on Wednesday October 28, 2026 @05:40AM (#50271062)
“Software used to be horrible. It still is, but it used to be, too”
Re:Amazon Is Gutting Its AI Division After Sustained Failure on Wednesday October 28, 2026 @01:52AM (#50269742)
This is democratization of information in the truest sense because the AI can not only find information for you, like Google does, but even patiently explain it to you. We never had that before.

Like, a normal person is not going to open up an arXiv preprint from Google search because for approximately the entire population, it's going to be way beyond the limits of their comprehension. They won't even glance at the link, if Google even serves it up as a result.

But, with a chatbot, they could actually ask questions and get answers in a format they can understand. They may get a very rough understanding of the topic, but I would bet it's 100 times better than the same reference explained by modern "science journalism," which insists on presenting the most clickbait-y interpretation they can find.

And this is not theoretical, I've seen my high-school level kids figure out undergrad (or higher) level concepts like locality sensitive hashing with the help of ChatGPT, and I know they understood it because they could sketch out working solutions using those concepts. They didn't get the Mathematical underpinnings, but they understood the high-level behavior and that was enough.

Everybody can now understand anything if they really want to. Nobody is doing it today because they don't know it's possible. But they can, and we should encourage them to do so.

Re:Amazon Is Gutting Its AI Division After Sustained Failure on Tuesday October 27, 2026 @11:59PM (#50269208)
AWS, Azure and GCP supply a commodity -- compute -- yet each one of them could be a trillion dollar company in its own right. Even when on-prem is nominally much, much cheaper than cloud services.

Turns out there are ways to monetize commodities, to the tune of double-digit billions in revenue per quarter.

Re:AI promised less work. I've never worked more on Tuesday October 27, 2026 @04:26PM (#50265285)
AI promised less drudge work, and this is a natural outcome of that. For all that we complained about drudge work, it had a redeeming quality that it was more cognitively lightweight and gave our brains some latent downtime.

It may not seem like it in the moment, but writing code to specifications, or filling out reports in a given template, or formatting power points, was straightforward enough that it gave our brains some respite between cognitively intense bouts of synthesizing what we were about to write down: diagnosis, analysis, problem solving, "stakeholder alignment", design, architecture.

The act of generating the actual durable work product (code, reports, documents, spreadsheets, slides, etc) is largely just translating the results of this cognitively intense phase. It may not seem like drudge work, but it is a lot more mechanistic and hence cognitively lighter, even meditative in a sense. The separation of phases is never that clean, of course, but I think you see what I mean: writing a for-loop is muscle memory, figuring out that you need that for-loop is the hard part.

Now with all that drudge work being done by AI, all we're left with is the hard part. Which is why it feels more stressful: because it is.

Relevant article: https://hbr.org/2026/02/ai-doesnt-reduce-work-it-intensifies...

> Stocks are already tokens.

If it's not happening on a GPU, is it really a "token"? ;-)

That’s probably the next thing after Software Factories.
Re:The Alien Space of Science on Friday October 23, 2026 @07:22PM (#50216720)
Oooh, very interesting! I'm way out of my depth here but is the intuition that new concepts that by a) connecting other concepts across that space, or b) introducing entirely new dimensions, or c) some mix of both, change the distribution / clustering of concepts within that space, which impacts how well it compresses, which could be a measure of significance based on the change in compression?

It's like information theory for abstract concepts.

Wait, what? "Overpaid compared to the energy they consume"? Firstly, is he talking about the energy resources humans require to be alive? We consume humongous amounts of resources, especially compared to LLMs. It's not clear what that has to do with anything.

Secondly, this is not how Economics works. Relevant terms here would be "supply and demand" because that's what determines almost all wages. Knowledge workers (or any workers) are not paid based on how much it costs to sustain them, like some function of the COGS bill. Knowledge workers are paid so much higher because they supplied the one thing that was pretty rare but for which the demand was very high: intelligence.

AI is not "rectifying" that by consuming less energy, but by providing a supply of intelligence that scales with energy and compute, both of which are technically easier to scale than humans. Which is another piece he misses, the monopoly is not on AI, but on compute. (See: all the kerfuffle about export restrictions on Nvidia chips.)

He is right about some other things in that article though.

I believe the "other services" here includes Personal Intelligence, which Google is pushing very hard anytime you use their AI products directly. I would bet we'll see nudges in more and places. Basically, they want to make it happen.

To be fair, I see where they're coming from: if they're providing you (what they consider) valuable AI services, they would want to monetize it somehow, because that inference ain't free. And people won't pay for it with their money, because they've trained this generation of Internet users to pay with their attention.

I also suspect they have little choice, because they foresee that the old search modality (and with it, their prized cash cow) withering away pretty soon. Personal Intelligence may well be their next big consumer cash cow, and competitors are already swooping in to try to capture that market (especially Apple with its privacy pitch.)

Re:The Alien Space of Science on Friday October 23, 2026 @03:49PM (#50214394)
The problem of course, is how to measure the "movement of the needle." It might help to weight papers and research in the corpus based on some notion of "significance". One metric I know people have used for this is based on citations, on the reasonable premise that influential work gets cited much more. IIRC the original PageRank paper was inspired by work on citation analysis as well.
Re:The foolishness of "natural language programming" (1978) on Friday October 23, 2026 @02:56PM (#50213748)
Programming happens in code. Software development happens in natural language.

Dichotomy solved, let’s go get lunch! ;-)

Hahah yeah that’s exactly what I had in mind when I said everybody does this kind of thing anyway! the surprising part was the nonchalance with which TFA laid it out.
True, the original hack was by the Russians, but they are known adversaries. The surprising aspect was the Dutch, supposed US allies, found that and continued using it for their own intelligence, and TFA is so nonchalant about it! I would have expected some exposition on what made them take this route instead of say, disclosing to US intelligence and earning some brownie points.

Older »