I often wonder how exactly you'd mitigate this. Further, as a user, I wonder what incentive there is for me to write anything at all online, let alone commenting on forums, if it will just be fed back into an LLM.

Is paywalling or forcing user accounts the solution? That feels antithetical to the reason for the internet at all.

Just musings.

Lip Bu Tan, for instance, has performance targets on a five year timeline, which are all negated if the stock falls below a certain threshhold in 3 years. [1]

Or, ever controversial Elon Musk, certainly has an (also egregious) $1 Trillion dollar pay package, but it has some pretty extreme goals over 10 years, such as shipping 1 million Optimus robots [2].

All in all, we can debate about the Goodharting of these metrics (as Musk is keen to do), but I feel boards of these public companies are trying to make more long-term plans, or at least moving away from tying goals to pure quarterly metrics. Perhaps we can argue about the execution of them.

Note: I own neither of these stocks and my only vested interest is buying the S&P.

[1] https://www.cnbc.com/2025/03/14/new-intel-ceo-lip-bu-tan-to-... [2] https://www.bbc.com/news/articles/cwyk6kvyxvzo

This makes some intuitive sense to me. Money provides freedom, but freedom is not happiness. It's freedom to explore, which is quite scary in and of itself. But if your mindset is proper, your creativity and appetite for exploration will be unbounded.

[1]: https://www.pnas.org/doi/10.1073/pnas.2208661120

1.6 Bil in 1969 dollars translates to 13.6 Bil in 2024 dollars.

Oftentimes I hear complaints that today's projects cost too much, or I come across ballot measures where the other side is always like "something something we have no moneys" such as Prop 4 in California [1]. Sometimes reading about the past puts the present in perspective.

[1] - https://ballotpedia.org/California_Proposition_4,_Parks,_Env...

It's really hard to describe what the book's about. It's an epic, through and through, and all epics are hard to detail precisely. Inter-generational trauma? Handling one's "sin"? Making a livelihood after repeated failure, be it yourself or external factors?

Contrary to my first sentence, there is one character that I would describe as pure evil. But I feel that just supports one of the conflicts; however incredibly rare, what can an individual do when they come across a bonafide force of evil?

It is dripping with Biblical imagery, and Steinbeck's prose is rambling and tangential for some (though poetic for me), and his characters are not "realistic" and larger than life (but that's what makes them pop off the page for me and so memorable. I guess it's always a balance).

"Now that you don't have to be perfect, you can be good."

When you had kids (or I guess anyone who is considering having kids), did you ever fear of "passing down" your trauma?

I feel that us tech workers, for all intents and purposes, have "made it," which might best position us in general to overcome and prevent a cycle of trauma to the next generation.

My main barriers are 1) writing discipline and 2) some obsessive need to link/cite every claim I make. This results in me taking months to write an article, be it due to laziness or constant rabbitholes/google scholar searches about an idea.

Any clue on dedicated disciplined writing time or even considering "reducing" the rigor of writing?

Sure, anybody can make a RISC-V CPU, but who really has the capabilities to verify them?

There's a reason the ARM model has succeeded-- that is, providing totally off-the-shelf IP with pre-verified cores (because of their own large verif team). The logical end of RISC-V is that we have custom cores literally everywhere, but verifying them is quite costly.

The (equally) hard part with CPU design is funnily enough not in creating the design, but the verification. (That's kinda one small reason why I think CoPilot-esque tools haven't permeated the hardware design space very much).

Comments URL: https://news.ycombinator.com/item?id=40445473

Points: 3

# Comments: 0

• Lindsay Lohan

• Jake Paul

• DeAndre Cortez Way (Soulja Boy)

• Austin Mahone

• Michele Mason (Kendra Lust)

• Miles Parks McCollum (Lil Yachty)

• Shaffer Smith (Ne-Yo)

• Aliaune Thiam (Akon)

I had to doubletake. Never did I ever think I'd see this permutation of celebrities in an SEC report.

Applied to Chat-GPT, a charitable take on this self-aggrandizement would be that the speaker has requires deep knowledge on the model they're attacking, in the same way a reverse engineer generally knows how X system is built. But I'm just being nice.

[1] https://proceedings.neurips.cc/paper/2019/file/7fea637fd6d02...

[2] https://www.usenix.org/system/files/sec21-vicarte.pdf

I like to draw parallels with the '90s and all of the Pentium bugs. These events really really lit a fire under Intel's ass to get their crap working. Cue decades worth of research and $$$ into formal verif, EDA tooling, and perhaps most importantly, organizational ownership.

Software models, where many security paradigms have been explored decently, don't map too well or don't have a great solution, like fuzzing or linters. So it's kinda hard to provide various security guarantees if you don't have tooling to verify them. Plus, the tools that do exist require domain expertise from the engineer, so the thought to look for some MMIO exploit will never occur to a cache designer.

This kinda turned into a ramble, but ultimately, while I agree I wish Intel would do better, I can't fully fault them since I feel like the whole industry is ill-equipped to provide these security guarantees. Spectre has started some efforts, but it's slow to pickup, which is why it's rather patchwork-y still. Frankly, it kinda feels like the only thing that'll kick asses into gear is some lawsuits, F00F and FDIV style.

P.S. A couple questions--

1) Would you happen to have the "EGX" framework you wrote in Appendix A? That seems massively useful.

2) Can I just screenshot the rubber duck NFT? :)

This assumes you'd anticipate rate cuts in the near-ish future. This property tax arbitration could easily go wrong.

One might then ask, do higher-class wages match/exceed inflation more than lower-class wages? This is debatable. But here's some interesting data from the Atlanta FED, where you can track wages by quintile, education, "skill", hourly vs. non-hourly, etc. Make your own conclusions.

[1] https://www.atlantafed.org/chcs/wage-growth-tracker

Third Q-- What's your opinion on BTI as a possible mitigation? Given it's an v8.5 feature meant for JOPs, and this attack is essentially a speculative JOP, maybe we could use BTI to mitigate and heavily reduce the number of gadgets, speculative or not.

2 questions.

1) it's relatively known that PAC is brute-forcable given its relatively small key space (16 bits, sometimes 8 if TBI is enabled). How does your attack differ from general brute forces? (My impression is just your leveraging of the BTB/iTLB is a bit more stealthy.) Similarly, in your opinion, would a fix be more ISA-level or you think it's more specific to the M1 (given brute forcing in general is a PtrAuth problem)?

2) you mention in section 8 that this took 3 minutes for a 16b key and tons of syscalls. Wouldn't another proper mitigation be to limit the number of signatures per key? 3 minutes is definitely a long time, and some form of temporal separation may be quite helpful.