Hacker Newsnew | past | comments | ask | show | jobs | submit | T3OU-736's commentslogin

Nor are our thought processes inspectable.

My own helacipusly amateur take is that given the speed of and, intentional or otherwise, access to various things that the models are granted, it does seem super-useful to maintain the inspectability of chain of reasoning which lead to actions taken (and other artifacts) by the model.

If things become inscrutable, they are on the path of being ineffable.


Or a nice tooth issue. Those get even dicier in austere environments.


More of a BBS, I'd argue. Replace dialing with a modem with SSH, and otherwise the analogy holds decentky well.


Of the varied reasons for not using them, can you share yours?


That is what I was thinking, too, but rather than the keyfile being an actual file, it is, instead, on the USB-C HW token. So, to decrypt your KeePassXC db, you'd need the physical token to do the decryption, and ask it to be, effectively, an HSM.

https://keepass.info/help/kb/yubikey.html talks of different ways of doing something like that, but I've not played with it yet.

Another option is just to store passkeys natively on the token itself?


There's a [DEFCon 33 talk](https://youtu.be/xdl08cPDgtE?si=SwZ-87jzDbNeP1Mx) on this, too.

I... Am not sure how I feel about it. On tech merits, this absolutely makes sense - the tech is slinging private keys around, and their secure storage is a hard problem.

On the practical merits - maybe? Token-backed decryption of the password manager's database seems like a devent solution? But does this happen? Is there a password manager which uses the public key derived from FIDO2 token's on-chip private key to decrypt the database?

On-token storage is limited (though 100 passkeys on a YK 5 Nano is fairly generous) - but what if we just used the YK as the "Private key is here and ONLY here" setup?

I kinda like the OFFOAD+ design - it promises to show me to where I am authenticating. With origin binding should be a nobrainer, but still, it speaks to me.


D'oh. Typo. OFFPAD not OFFOAD.


Not quite filesystem navigation, but SGI IRIX's Performance CoPilot software had an IrixGL (OpenGL's precursor) UI for monitoring things like memory state, CPU/storage loads, etc.

The PCP is absolutely nowhere _near_ the graphical wizardry of the state of this app, and the overlay of executing code atop a given directory structure is quite beautiful (practicality be damned), but I can see the inspiration.

I do wonder if, on a modern Linux system with SELinix, this model (code accessing a directory) is actually closer to viable? SELinux's contexts/labels for subjects overlaying with the same for objects can, I imagine, be visualized. The normal access patterns would be way too overwhelming, I think - but exceptions/policy violations? :ponder:


PCP is still in active development. It's very cool, but probably made obsolete by otel and others. I used it on servers and services regularly until a few years ago. Very lightweight, robust and powerful.

https://github.com/performancecopilot/pcp


SGI's HW also had ccNUMA (cache-coherent Non-Uniform Memory Access), which, given the latencies possible in systems _physically_ spanning entire rooms, was quite a feat.

The IRIX OS even had functionality to migrate kobs and theor working memory closer to each other to lower the latency of access.

We see echoes of this when companies like high-frequency traders pay attention to motherboard layouts and co-locate and pin the PTS (proprietary trading systems) processes to specific cores based on which DIMMs are on which side of the memory controller.


```you should know the Uvalde school shooter was a minor but he managed to buy the guns legally from a gun shop on credit!```

That does not appear to be true. The investagiom reporting shows that the shooter bought the guns after he turned 18 - the legal age to purchase them (long guns, aka rifles - different from pistols) in the state of Texas.

Buying things on credit seems like a reasonable way to do business in general - are you suggesting that all deadly weapons should be sold for cash to increase the difficulty of legally acquiring them and so lowering the frequency of mass shootings?


In my country, no firearm can be issued to any civilian (certainly not a minor), without verification and license from police.

In Texas, there is no minimum age for purchasing ammunition beyond federal limits, no requirement for an ammunition seller to keep a record of the purchaser, and no specific license to buy or sell ammunition, according to the Giffords Law Center.

https://www.kxan.com/investigations/uvalde-shooter-had-1600-...

Salvador Ramos, the Uvalde school shooter, legally purchased two AR platform rifles Ramos got his guns legally through Oasis Outback, a Uvalde sporting goods store and federal firearms licensee, according to published reports. He also purchased hundreds of rounds of ammunition, on his 18th birthday.

https://edition.cnn.com/2022/05/25/us/uvalde-texas-school-sh...

I know the USA has a bad habit of buying things on credit, but firearms & ammo should never be allowed to be purchased on credit. Let it be purchased only after a verification and license from police, and only via debit card or bank transaction with proper legal paper trail, not credit or cash. And any firearm and ammo purchase should be ratified with local police, so they know if someone is making a suspicious purchase.


```… the pipe was so fast, you could only pcap if you had a SCSI hard drive!```

This is why NSA asked for (and got from SGI) a guranteed rate I/O API - to make sure that whstever the signal intelkigence platform sensors captured could be written to storage.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: