altairprime

7 ms·

31.
by altairprime 1mo ago
Having previously worked near a bounty program, I can confirm that they are regardless flooded with people fishing for bounties, even before AI, no matter how cheap the bounty may be — people will grift anything with the most pathetic skr
32.
by altairprime 1mo ago
The discount Google is getting on bounties versus internal spend is easy to estimate: # assumed to be $0.5mil USD or greater A := What quantity of salaries-and-benefits and AI-dollars does Google spend on zero-day research? # assum
33.
by altairprime 1mo ago
Enable JavaScript and let the site issue a “not an AI” cookie and it should then be usable. (I have a JS button for this on my toolbar and it’s come in handy a lot recently..)
34.
by altairprime 1mo ago
Amazon on HN, recently: Announcement of the FTC lawsuit; (2 days ago, 12 comments) https://news.ycombinator.com/item?id=49529685 > An Amazon senior VP in charge of ads said internally that in Amazon’s auctions, “the sec
35.
by altairprime 1mo ago
The SVCB HTTPS rfc considers downgrade attacks here: https://www.rfc-editor.org/info/rfc9460/#name-handling-resol... And essentially boils it down to ‘either the client implements wire-security to a known dns serv
36.
by altairprime 1mo ago
(2 days ago, 276 comments) https://news.ycombinator.com/item?id=49529621
37.
by altairprime 1mo ago
Yes, DMARC isn't solving the same problem — but DMARC is showing how the category of PSL problems can be solved with DNS. With HTTP/3 now fully expecting browsers to be able to benefit from transparent-upgrade record responses
38.
by altairprime 1mo ago
Yeah, that’s why RFC 9989 replaced use of PSL with a dns signifier.
39.
by altairprime 1mo ago
I may not be able to write a proper post for the blue here at the orange, but I’m glad to see it’s enjoyed all the same :)
40.
by altairprime 1mo ago
This content is from 2014-15; perhaps they AI-rehashed the Yahoo! News story about them? https://www.yahoo.com/news/16-old-girls-win-google-science-f... They posted a video summarizing their efforts in 2014: https:&#x
41.
by altairprime 1mo ago
Look up a list of games that require secure boot; consider whether your VM has secure boot enabled or not (UTM on macOS has a pref for it inside the VM UEFI settings, for example) and consider whether the game(s) you're interested in r
42.
by altairprime 1mo ago
Google’s been pushing creators to use AI thumbnails more heavily since right around the EU deadline for labeling, presumably in the hopes of saturating the label so that everyone burns out and eats their slop quietly.
43.
by altairprime 1mo ago
Prediction duly recorded. I sure hope you’re right, but I’m too cynical after decades of ‘ignoring attestation makes the underlying problem go away’ from my Linux peers to consider a positive outcome likely.
44.
by altairprime 1mo ago
They’re all bad bosses, Brant.
45.
by altairprime 1mo ago
The point here is that mergers and acquisitions are not the underlying cause of the problem. Yes, most M&A is private equity these days, but the problem with that is private equity. Yes, as the post we’re discussing suggests, most AAA g
46.
by altairprime 1mo ago
That’s nice, but 99% of cheaters (pre-Win11, anyways) were software-only because the software is $0 with free same-day delivery. Turning off the spigot of pure-software cheating almost entirely empties today’s cesspool, which is partly why
47.
by altairprime 1mo ago
Wow. .. that must have been some atrocious telemetry data correlating cheaters and Linux. I wish they’d released a report on it — I mean, fuck Ubisoft, but at least we’d have data to argue about rather than this copout of a release note f
48.
by altairprime 1mo ago
Bungie, in its post-Halo standalone incarnation, was running a microtransactions empire from day one and funded itself on the debt owed by those; it was not ‘taken over’ by financial engineers, so to speak, because the call was coming from
49.
by altairprime 1mo ago
From a technical standpoint, there’s no functional difference: without secure boot and OS attestation, age verification is as ineffective as EAC on Linux, because you can simply `insmod GameGenie.ko code=A456-GH4C` to have your mobile devic
50.
by altairprime 1mo ago
Previously on “companies just aren’t run that well anymore”, HN considered this analysis of Boeing’s collapse following a reverse-takeover by an acquired, collapsing, competitor that ended up kicking out the quality-focused management in fa
51.
by altairprime 1mo ago
Which TLDs allow users to registry arbitrary.arbitrary.tld other than .name?
52.
by altairprime 1mo ago
For anyone pursuing this, consider that the EU age verification apps are the EU’s first foray into digital anti-cheat systems at population scale. If you take the time to research how those are being designed and implemented and incorpora
53.
by altairprime 1mo ago
“Steam Deck” here means Steam Deck booted into Windows but not Steam Deck booted into Linux, I thought?
54.
by altairprime 1mo ago
> The only realistic way to solve this on Linux is enforcing secure boot w/trusted kernels and then running the anti-cheat in sandboxed eBPF kernel space. Embark is looking at this approach. Assuming secure boot, there’s another r
55.
by altairprime 1mo ago
EAC is functionally useless on Linux and can be defeated by anyone with the ability to sudo or to boot a modified operating system. Steam Linux does not supported sealed/signed boot with secure attestation, and supporting 1% market sha
56.
by altairprime 2mo ago
What % of their annual spend goes to foreign clouds? For most unicorns that would be their largest or second-largest cost, since unicorns, by design, tend to be focused on growth engines that scale up users without scaling up headcount. Tak
57.
by altairprime 2mo ago
Yep, those work, thanks!
58.
by altairprime 2mo ago
That’s an accurate description of the majority of VC investment outcomes. The outlier-success stories aren’t called unicorns because they’re common . So it tracks that Norway would tax valuations to curtail investments that generate no eco
59.
by altairprime 2mo ago
So, let me see if I understand this right: They took an investment of 70M at a valuation of 1000M, in a country that has a well-known 1% tax of valuation , but they failed to write payment of that tax into the funding papers and fled the c
60.
by altairprime 2mo ago
(FYI, these are comically distorted on mobile.)

More ›