Hacker Newsnew | past | comments | ask | show | jobs | submit | mike-cardwell's commentslogin

> a secrets store that the model can "use" but never "read".

How would that work? If the AI can use it, it can read it. E.g:

    secret-store "foo" > file
    cat file
You'd have to be very specific about how the secret can be used in order for the AI to not be able to figure out what it is. You could provide a http proxy in the sandbox that injects a HTTP header to include the secret, when the secret is for accessing a website for example, and tell the AI to use that proxy. But you'd also have to scope down which URLs the proxy can access with that secret otherwise it could just visit a page like this to read back the headers that were sent:

https://www.whatismybrowser.com/detect/what-http-headers-is-...

Basically, for every "use" of a secret, you'd have to write a dedicated application which performs that task in a secure manner. It's not just the case of adding a special secret store.


This seems like an under-rated comment. You are right, this is a vulnerability and the blog doesn't talk about this.


I bought a 300 litre aquarium about 6 weeks ago for the living room. Added soil, plants and water. Have spent the last 6 weeks watching plants grow, and snails that smuggled in on plants, multiply. I over fertilised it and left the light on accidentally for a couple of days whilst I was away and experienced an algae bloom, which was interesting. Added some cardinal tetras and amano shrimp yesterday and have spent a lot of time just watching them potter around. Has been a nice change from looking at a screen.


Oh man... you just throwback thursdayed me to my last weeks thought. I really want to get a pet fish, like a betta for my mental health. I feel like it would motivate me when im working on projects to have a buddy near me.

Is cleaning the tank a lot of work? Agh!


The main work is doing a water change, which I think I'll have to do every couple of weeks going forwards, but we'll see. I had to do it more often at the start whilst the tank was cycling. Takes me about 40 minutes. I also have to trim the plants every so often. Oh, and feed them of course. It doesn't feel like a lot of work or a chore to me atm.


Not bad.


That's amazing. I've been looking at getting my first fish tank lately with my kids. Seems like a lot to learn. Any tips for a newbie?


If your first fish tank is just going to be something small with a goldfish or two in it, I'm not sure how you go about doing that as I've not done that before. Maybe you just fill the tank from the tap and chuck the fish in? I decided to go for a large planted heated freshwater tank with interesting fish and shrimps and snails, so I had to be careful to monitor the water and find out what species could co-exist, what pH and temp they like, etc. It took 6 weeks before I could put anything in it safely, so one tip would be to patient. Another would be, go and speak to the people in the pet shop / aquatics center about what you're doing as they can tell you everything you need to know. I got most of my advice from ChatGPT, but double checked it with the kind people at the aquatics center as I was setting things up.


Thanks for the advice!


I'd love to get in my car and go to sleep for a couple of hours or read a book whilst it drives me somewhere. Imagine if it could even pull over and charge up without any kind of intervention too. You could get in your car, and get a full nights sleep whilst it drive you somewhere 500 miles away.

Also, at some point, I'm probably going to be too old to drive safely, which will restrict my travels. Not if self driving gets to the point where that doesn't matter anymore.


Too bad the law says you can’t do this


Yeah. The tech isn't there yet. The question I was responding to was "Why do people what self driving cars at all". I responded why I want a self driving car.


Cool and all, but up until companies started putting this stuff in cars they cost $30k. Now the average car is 50k. The average car is now more expensive than my BMW 3 series with the premium package from a few years back. I don't want to pay for your fantasy of going to sleep in your car and waking up someplace new. I dont want to pay for the ability of my car to self park or be summoned to me. Most new features of cars dont interest me in the slightest.


> I don't want to pay for your fantasy of going to sleep in your car and waking up someplace new

So vote with your wallet. And take a bus.


You're suggesting that the only alternative to autonomous self-driving cars is public transit?

By the way, I do vote with my wallet. I won't buy a car that has these features. I won't buy a car that serves me ads. I won't buy a car that charges a subscription fee. However, this is becoming increasingly challenging. Most luxury vehicle manufacturers want to pad their bottom lines by charging a premium or worse a subscription for things I (and I suspect many people) don't want.

These premium features ultimately trickle down so every new car must have a rear-view camera and many have LED lighting. Examples of two premium features that now everyone must pay for. My eldest daughter failed her driving test because she used the rear view camera when parallel parking. Yes these cameras are mandated but you fail if you use them. The tail light on an F-150 can cost upwards of $3,000 to replace. A tail light!

My first car, a jeep, came with a bikini top, no doors. the windshield actually folded down without a special tool, and I used a kerosene heater in between the seats when it was cold. Now wranglers come with touch screens, heated steering wheels and cruise control. Apparently they are difficult to find with a manual transmission. I loved mine back in the day but as you say I'll vote with my wallet and will not buy from Stellantis.

I'll happily get my kids a Slate. Of course your mileage may vary and if you want to pay for these premiums then power to you. I just don't want to subsidize your choice.


> You're suggesting that the only alternative to autonomous self-driving cars is public transit?

No. But hopefully one day. I don't mind if you want to subsidise my choice or not. I want self driving tech to get to the point that it is safer than manually driven cars, and I then want people who want to still drive manually to be slowly priced off the roads and then outright banned from doing it.

My preference is that you stop being allowed to drive manually, and as far as I can see, that's the future, as long as the technology works out.


Average includes trucks and other stuff which are very above the average and pull it up, because god forbid the avg joe from getting a Honda civic instead of a f150 or above.

Also, inflation is a thing. You can get a new Honda civic for less than 30k$ today, as well as other sedans and small cars.


This is a train.

You want a train.

If you don't like sharing space with other people, you want a private room on a train.

These cars and their supporting infrastructure should cost more than a private room on a train because they are less efficient and have more negative externalities than a private room on a train.


A train can't take me to the beach. It can't take me camping away from civilization. It can't haul lumber from a hardware store so I can build a treehouse.

I love trains, but let's not pretend there is a perfect Venn diagram of overlap between what their use cases are.


Trains can take you to the beach and away from civilization. Build a station where you want to go. At one point trains were the most practical way to get to national parks.

How often are you building treehouses that you need to pay hundreds of dollars extra a month to justify the cost, versus a one-time delivery fee?


If you build train station away from civilization pretty quickly it will be filled with civilization.

Trains are ok for mass transit. Rest of world is for cars.


You must be an American, because plenty of trains exist to bring people to nature elsewhere. You know, when you drive a car to a nature place, you put it into a parking lot, then you are no longer in the car, right? Same works for trains.


Low density places exist outside america. You should check them out.


I have. A lot of them have trains!


A lot of them don’t. What is your point? How should one visit places without train access like this one?

https://maps.app.goo.gl/kgjVaPRdi6zGDQeu6?g_st=ic


Man I love this silly debate. The original comment just wanted to travel 500 miles to "somewhere" and most instances of "somewhere" that people travel to could be accessed by train.

Also no one has said that no one is allowed to drive ever again anywhere. I'm trying to be generous but the victim complex is crazy.


Sorry but train-people scare me more than orange-man.


You should get yourself checked out. No one is trying to take your car away.


> A train can't take me to the beach

Yes it can!! Why can't a train take you to the beach?

https://www.amtrak.com/top-beach-destinations-by-train

> It can't take me camping away from civilization.

How many vehicle miles do you travel every year? How many of those are to go camping?

> It can't haul lumber from a hardware store so I can build a treehouse.

Have you tried? Like really tried? https://philsturgeon.com/carry-shit-olympics/

> but let's not pretend there is a perfect Venn diagram of overlap between what their use cases are.

I never said anything of the sort and I'm not pretending that at all. You're creating a strawman. The comment I was responding to said this:

> I'd love to get in my car and go to sleep for a couple of hours or read a book whilst it drives me somewhere. Imagine if it could even pull over and charge up without any kind of intervention too. You could get in your car, and get a full nights sleep whilst it drive you somewhere 500 miles away.

That's a train. Most instances of "somewhere" can be accessed by train. Or by a train to do the long miles and then other modes of transit once you're closer.

My overall stance is that there's a lot more overlap between why folks want a super expensive self-driving car and more robust public transit and better support for multi-modal transit. I've not pretended anything like you've claimed.


> Or by a train to do the long miles and then other modes of transit once you're closer

Of your many points in various posts, this is maybe the only point I'm really on board with. Amtrak already supports this, even. My car can drive me to the train and then the train can do the long haul, and at the other end my car will drive me off the train and to the destination.

Still need waaaay more rail routes than we have now, though, so this is a dream for a century from now, not something in my lifetime.


This isn’t strictly directed at you, but I’m saddened that HN is immediately ready to dream big when it comes to solving hard problems and making the world a better place in spaces like AI, crypto, and technology in general. But suddenly shuts down over things as simple as trains, buses, and bike lanes.

There’s plenty of examples of guerrilla urbanism that I think align closely to the hacker ethos. Even more these problems are very solvable and can net huge gains in metrics without having to “dream for a century”.

> waaaaay more rail routes

It’s actually much simpler, Amtrak just needs right of way along with some other straight forward regulations to help balance freight and transit on America’s railroads.

Amtrak has also been doing great at incremental expansion and brining back (or increasing!) ridership just in the 5 years since the pandemic in a number of areas like Chicago to Milwaukee, and in the PNW.

The defeatist attitude isn’t what I expect from HN. You already found the best piece of actionable advice which is to look for incremental ways you can adjust your life to be different. My wife and I hardly drive anymore. Most of our trips: her work, groceries, restaurants, most leisure activities, etc are now by bike. We live in the suburbs too, a full 10 miles (20-30min drive and across an interstate) from the city’s downtown.

Cars are only perceived as necessary in America bc it is assumed that they are. There are many small and safe ways to shed the car dependence and they’ve all been huge positives to my life. We’re happier, healthier, building more community, spending less money on gas and maintenance. It’s nice.


I live in Manhattan, and don't own a car, so I get where you're coming from. The reality here is that America doesn't like trains and isn't going to build trains in any kind of a timeframe that's helpful to me. I'm about to move to Westchester, but I need to get to the Upper West Side every day. Yes, I can take the train from Westchester, but it goes into Grand Central, so then I need to take another train from there. And I'll have my kid with me.

So my options are:

1. Drive, walk, or bike with my kid to the train station in Westchester, ride to grand central, switch to subway, drop her off at school, then take the subway to my office. Total time about 90 mins.

or

2. Drive 35-45 mins.

I'll be driving.

There's talk of having one of the train lines go into Penn instead of Grand Central, with stops on the Upper West Side! But that'll be a decade or more, if it ever happens, and it won't be relevant to me anymore at that point.


Are you suggesting that you cant get to Home Depot without a self driving smart car?


Not even close


My domain registrar has their email address and phone number in the very header of their page. It's a breath of fresh air. https://gkg.net/


For anyone else that wants to block traffic from Russia, here's how to do it with nginx: https://www.grepular.com/Blocking_Russian_IPs


This works for me:

    FROM python:3-slim
    RUN python3 -m pip --no-cache-dir install 'yt-dlp[default]'
    RUN apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends -q -y ffmpeg curl unzip \
     && curl -fsSL https://deno.land/install.sh -o /tmp/deno.sh \
     && sh /tmp/deno.sh -y \
     && mv /root/.deno/bin/deno /usr/local/bin/ \
     && rm --force --recursive /var/lib/apt/lists/* /tmp/* /var/tmp/*
    ENTRYPOINT ["yt-dlp"]


Thank you!


How does the US government, force a Russian website, hosted in Russia, for Russian people, following Russian laws, to shut down?


It shouldn't be able to, clearly. Not any more than Russia should be able to shut down a US website, hosted in the US, for US people, following US laws.


Same thing they do to every country, Pinky. Have a small team invade the country and disappear the people they don't like[1].

Or tap the fiber lines at the border and inject RST packets from off-path, which is something the Great Firewall of China does, and is ironically much more transparent than what they actually are doing.

Or cut the cables between the USA and Russia, or between the USA and any country that doesn't cut their own cables to Russia. The USA did this to Iran with the banking system and it worked: the USA cuts money transfers with any country that doesn't cut money transfers with Iran. I don't think it would necessarily go their way if they did it right now with the internet.

[1] https://en.wikipedia.org/wiki/Abu_Omar_case


Dove a bit into this topic superficially out of curiosity. Maybe not shut it down but greatly limit reach:

- Domain Name Seizures via ICANN and registrars

- Political/legal pressure on CDNs, SSL certificate providers, bandwidth providers.

- Propaganda and legal labeling ("malicious actor", "foreign agent", "terrorist")

- There are technical workarounds to keep the page up within Russia's sovereign internet (Runet).


Other than labeling, aren't these just different ways to block foreign sites? Some of them are mentioned in the article.

> This blocking regulation requires network providers, including CDNs, to comply with blocking notices within 30 minutes.

> orders that go beyond regular Internet providers, requiring DNS resolvers and VPN services to take action as well.


It doesn't.


They shouldn't.


This looks good, but we're using GKE and it looks like it only works there with some hacks. Is there a timeline to make it work with GKE properly?


I am having some discussions about getting things working on GKE but I can't give an ETA as it really depends on how things align with deployment schedules. I am positive however that this will soon be resolved.


Thanks. I will keep an eye on your project as it looks great and something we would definitely benefit from.

P.S. Your blog could do with an rss feed ;). I will track https://github.com/spegel-org/spegel/releases.atom for now


Google Cloud has its own cache of Docker Hub that you can use for free, AWS does as well


Our images are in a private docker registry on quay.io


I've been forced to use Macbooks for development at work for the past 7 years. I still strongly prefer my personal Thinkpad running Debian for development in my personal life. So don't just put it down to lack of familiarity.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: