* Posts by Michael Wojcik

12271 publicly visible posts • joined 21 Dec 2007

FTC: Please stop falling for social media scams, you've given crooks at least $650M so far this year

Michael Wojcik Silver badge

Indeed, I've found it better to be beautiful and rich, rather than just one or the other. Recommended.

Michael Wojcik Silver badge

Re: These usually involve someone buying something advertised on Facebook, Instagram or Snapchat

It wasn't clear to me from the article whether these were primarily advertisements or just regular posts, offering (bogus) goods for sale from private sellers, as with e.g. Facebook Marketplace.

I mean, in either case I wouldn't engage – I don't even like buying online from (ostensibly) reputable vendors, if I can find a local source. But policing regular SM posts for scams would be technologically infeasible and potentially cause a lot of false positives. And getting rid of things like Facebook Marketplace and Craigslist would largely destroy the private-individual markets in many areas, now that such things have largely destroyed the newspaper classified ads, flea markets, and the like that came before them.

(Yes, I know there are still newspaper classified ads; I read them every week in our paper. And yes, I know there are still flea markets; there's one that happens weekly not far from here. They are greatly diminished.)

Michael Wojcik Silver badge

Re: Meanwhile, here in the UK

Hey, there's a lot of boot-putting-in to be done. The police can't investigate every white-collar crime.

Michael Wojcik Silver badge

Re: Well, seeing as ...

And, of course, it's economically effective. Greatly reducing the cost of approaching each potential victim is obviously a competitive advantage, so simple scams will adopt it.

Michael Wojcik Silver badge

Seems people are still a bit naive.

Seems people are still people. FTFY.

I'm an ABC'er, Assume nothing, Believe nothing, Challenge everything, seems a lot of people skip these steps.

Perfect vigilance is impossible. While we're playing Dueling Anecdotes, see Cory Doctorow's 2010 account, for example. Or the NCC Group study showing IT services workers are more likely than average to click on phishing links, possibly due to overconfidence.

Michael Wojcik Silver badge

It says more younger people report being victims of such scams. Since it's self-reported, we don't know whether that correlates to actual victimization rates.

Michael Wojcik Silver badge

The "digital native" theory has been widely debunked for years.

That said, I've yet to see any methodologically-sound study supporting any claim that any generational cohort is better or worse, on average, at avoiding becoming the victim of fraud. We've had fraud for all of human history and no doubt long before that. Humans are highly susceptible to it – even (in some cases especially) educated people, people who routinely deal with fraud, people who are habitually suspicious, and so on. There are plenty of studies establishing that.

You've just spent $400 on a baby monitor. Now you need a subscription

Michael Wojcik Silver badge

Re: Blink

Hmm. Unfortunately I wasn't able to find any FOSS firmware for Blink cameras in a quick search. Doesn't appear that OpenIPC supports them.

Still, rather than throwing them away, you might find a local Hackerspace or the like that would take them to tear down for components, or perhaps even create new firmware for.

Michael Wojcik Silver badge

Re: This is why I'm missing out on a lot of stuff

They are just buying a wildly-overpriced baby monitor. They already failed the first test.

Michael Wojcik Silver badge

Re: This is why I'm missing out on a lot of stuff

For me, subscription is well down on the list of reasons to tell Ring to fuck off, with at least corporate spying, police surveillance, and security risks well higher.

But then I take a dim view of the entire Internet of Unnecessary.

Michael Wojcik Silver badge

Re: Device no longer working as sold

But, alas, who wants the cost (money, time, stress) of taking them to court over it? And what would you get if you won?

In the US I could see perhaps filing against the new owners in Small Claims Court for the original cost of the device, on the hope that they wouldn't respond and would be hit with a default judgement. So you'd get $400 less the filing costs. Might be worth it just for the lulz. But if you were foolish enough to purchase one of these things in the first place, are you the sort of consumer who'd go even that far?

So the new owners will probably get away with this. Some users won't bother paying – some of them probably aren't even using the monitors anymore. Some will probably suck it up and pay, for a while. Eventually the new owners will stop making a profit on the service and they'll shut it down. Consumers lose, vendor doesn't care.

And despite this happening over and over again, most people Just Don't Learn.

Michael Wojcik Silver badge

Re: "the sudden imposition of subscription fees"

A Smart House is fine

I wouldn't go that far. Even if you build all the components yourself, you're still increasing complexity and attack surface, and adding new failure modes.

Add features, add risk. That's how the world works. Maybe you're happy with the tradeoff; maybe you're not. Personally, I'd have so little return from a "smart home" (negative return, really, since I find the whole concept annoying) that it'd never be worth it to me.

Online tracking is alive and well in link decoration

Michael Wojcik Silver badge

Re: Link decorations ?

URL-decoration detection will always be heuristic and incomplete. There are some mechanisms which are more robust, but it's impossible to eliminate entirely in the general case, because the user agent (browser, usually) doesn't have complete information about the resource a URL describes – that's the whole point of HTTP, after all.

A user agent could completely prevent fragments from being used as tracking decorations, since user agents aren't supposed to send fragments to servers anyway. If a fragment is being used for tracking, that has to be done with scripting, and the user agent's scripting engine could block scripts from seeing fragments. But that still leaves query parameters and abs_path decorations. The latter are particularly hard to distinguish from "innocent" URL components.

As long as there's any sort of information flowing from the server to the user agent, and then back from the user agent to the server, tracking will be possible. And, again, that's pretty much the entire point of hypermedia.

From vacuum tubes to qubits – is quantum computing destined to repeat history?

Michael Wojcik Silver badge

There is no "quantum only" problem

not whether we can go faster, whether we can actually solve new classes of problems

Argh. There are no such classes of problems. Quantum computers can be simulated by classical computers.

What QCs potentially will be able to do is make certain problems feasible at larger sizes. Some of those problems, such as quantum simulation, become intractable for classical computers even at fairly small sizes, so this would be a Nice Thing to Have. But there are no magical quantum-computer-only problems as such, except arguably for engineering ones like "can we build an economically-viable quantum computer?".

Michael Wojcik Silver badge

Re: Cost/Performance

Assume that there is a class of algorithms that are "well designed" of Q machines and, conversely, not well dealt with on transistor machines.

If P≠NP, then this assumption is almost certainly true. Unless the complexity hierarchy collapses, BQP is a thing.

Michael Wojcik Silver badge

Re: Don't put all your boffins in one basket.

Any Turing-complete machine with sufficient resources can run Grover's algorithm. QCs can be simulated on non-quantum computers.

Algorithms in BQP aren't magic; they're just amenable to computation with a lower time (really number-of-operations) complexity when using qubits. If you have to simulate the qubits, the complexity goes back up, but it's still computable.

Michael Wojcik Silver badge

Again, that's not how QCs work. But error correction, which is essentially what "noise reduction" means in this context, is indeed still a big problem.

Michael Wojcik Silver badge

Re: A Promising Technology

it's not clear that ANY of the current crop of Quantum computers actually work

That's incorrect. The quantum-circuit-simulation tests, for example, demonstrate pretty conclusively that QCs work. That is, Google and others have demonstrated QC machines which use quantum algorithms to solve problems using fewer operations than any known classical algorithm would use. What's not clear is whether they've actually achieved quantum advantage, since it's really hard to prove that there isn't a better classical algorithm that wouldn't bring the classical time into the realm of feasibility.

And what's even less clear is whether and when we'll have QCs that offer any sort of economic advantage for any plausible real-world problems; and when that happens, how common such problems will be. It still appears we're a long way away from the quantum cryptocalypse, for example, because being able to economically break a lot of (non-post-quantum) asymmetric-cryptography keys using Shor's algorithm1 would take big, cheap, fast2 QCs, not just usable ones.

1Or Regev's recent improvement, assuming Regev's assumption of the smoothness conjecture holds.

2"Fast" because "fewer operations" doesn't necessarily mean "done by lunchtime".

Michael Wojcik Silver badge
Michael Wojcik Silver badge

Re: A solution without a problem

You really have no idea what you're talking about, do you?

The broad strokes of "how does one build a Quantum Computer" are easily understood, for a variety of designs, by educated people; there are any number of articles available that explain how the major architectures work, such as this one. Josephson-junction, ion-trap, and laser-atom designs are all working in multiple labs, and research on NMR and photonic designs continues. Obviously the technical details are understood primarily by people actually working in the field, as with any other technical field. Your "conditions" are bogus; they're equivalent to "explain how to build a modern automobile engine, in terms which any mechanical engineer can understand". Few mechanical engineers are experts in flame chemistry or CANBUS or other aspects of automotive engineering, because they're not automotive engineers. It's a different fucking discipline.

As for "how one programs a quantum computer": A number of algorithms in BQP are well-documented, and many are quite straightforward. Actual details of programming are going to depend on the actual machine and its software, just as for any other programming task.

Constructing incoherent decision procedures isn't a persuasive argument; it just demonstrates you're not willing to argue in good faith.

Michael Wojcik Silver badge

Re: A solution without a problem

Quantum simulation is likely the best use of QC in the foreseeable future. There are potential applications for other problems in BQP, but economically-practical use cases are hard to find.

Musk's first year as Twitter's Dear Leader is nigh

Michael Wojcik Silver badge

Re: GET OFF THE WEBZ

This story really brought out the kooks.

Michael Wojcik Silver badge

Nor was he everybody's darling.

Michael Wojcik Silver badge

Re: Where's Bond?

If the "Global War on Terror" and the government's frequent labeling of "masterminds" has taught us anything, it should be that masterminds are idiots.

Michael Wojcik Silver badge

Re: What's your definition of "dead"

Mastadon

I've seen so many people spell it this way that I had to check to make sure the developers of the software hadn't deliberately used an unconventional spelling. But it appears they have not.

Michael Wojcik Silver badge

Re: Going downhill fast, and so is Twitter

outside the USA nobody knows of any cars openly made by GM

Checked with everyone, have you?

I suppose if you're going to parade your ignorance, you might as well tell the band to play loudly.

Michael Wojcik Silver badge

Re: Mastodon remains the most exciting alternative

I'm glad Mastodon works for some people, but I have to say that I browsed recent posts on a couple of servers that people had recommended, and while there was content relevant to some of my interests, I just couldn't warm to it. Maybe I'm just no longer temperamentally suited to that sort of thing. I was very active on Usenet for several years, but that was a long time ago. These days I find most social media just irritating.

Michael Wojcik Silver badge

Re: Won't be missed

Rhetoricians were observing this effect long before Twitter existed. I touched on it in a piece I wrote on Usenet for Works and Days twenty years ago. Nearly the speed of conversation, plus the perceived authority and reduced information content1 of print. It's a tricky combination.

1No tone of voice, prosody, body language; often much less knowledge about interlocutors and situational context – basically a loss of social-linguistic factors such as footing and framing, plus all the paralinguistic signals.

Michael Wojcik Silver badge

It's still there.

So is MySpace. So is Something Awful, which though less well-known played a larger role in Internet cultural history than MySpace; it hasn't had any new front-page content in three years (essentially since Kyanka sold it) but the site is still there. It can take a long time to completely wipe out an Internet site with a community.

And, as another commentator pointed out, many of the users seem to be unable to kick the habit. I ignore Twitter myself, but I read a lot of technical articles that refer to things (announcements of papers in pre-print, arguments over theoretical questions, etc) posted there.

Watermarking AI images to fight misinfo and deepfakes may be pretty pointless

Michael Wojcik Silver badge

Re: Guarantee

Yes, that will work. People consistently avoid doing anything fraudulent. Students never cheat. No one lies on their tax returns, or exceeds the speed limit when driving. It's impossible to find artists who engage in any sort of malfeasance.

I'm also curious how this dictum would be enforced. How does someone "discover" that work X was machine-generated? How much of the creation process has to involve "AI" for it to fall foul of this rule? What counts as "AI"? What evidence does the offended party present to the Copyright Police? How does this move through the courts? Does some member of the work's audience even have standing to bring an action? How were they harmed? What recourse is available to an artist falsely accused?

Michael Wojcik Silver badge

Re: A stupid idea

Specifically, people will believe what they want to believe. A perceptibly-watermarked deepfake video that "proves" some conspiracy theory will be hailed by believers regardless of the watermark. They'll just say the watermark was added afterward by the Forces of Evil.

It's a small minority who even explicitly attempt to evaluate evidence and account for their own biases when considering arguments, and all the evidence from methodologically-sound psychological studies (and history) supports the claim that no human can be perfectly vigilant, or even mostly vigilant, when it comes to doing so.

Michael Wojcik Silver badge

Re: A stupid idea

it should be possible to prove in some cases that the image was AI generated by specific systems

OK, so propose a system for doing so. Is it robust against digital image manipulation, including noise addition and removal, blurring and sharpening, cropping, etc? Is it robust against the classic point-a-camera-at-the-screen technique? Remember that the same approaches used to create imperceptible watermarks are often useful for invalidating imperceptible watermarks, and removing perceptible watermarks by interpolating a close-enough match to the original image data is something machine-learning approaches are already good at.

A cryptographically-signed watermark is easily defeated (bypass confirmation) by trivially altering it. If the watermark detector ignores watermarks that fail signature verification, then you just alter the watermark in a genuinely-watermarked image and, presto, it's no longer detected as watermarked.

You can't make the watermark harder to spoof without making it easier to break. That's the whole point of the paper.

Outlook's clingy 'reopen last session' prompt gets the boot

Michael Wojcik Silver badge

Re: Perpetual Office

I don't think you need the adjective "perpetual". Office is already a nightmare.

Michael Wojcik Silver badge

Re: Is it just me...

Every modal dialog is a user-interface smell. (I want to tell software what to do; I don't want it to force me to answer its questions.) Every additional prompt is an annoyance.

For people who like the feature, fine, leave it there for them. For the rest of us, give us a way to turn the goddamned thing off.

Michael Wojcik Silver badge

Re: Why...

"Beta testing" implies someone looks at the results of the "tests".

Microsoft's current development practice is to implement any feature that comes into their pretty little heads, no matter how idiotic or obnoxious, and foist it on users, often with one of those grating messages like "Hold on a moment – we're making Teams even better!". They're optimizing for punchability.

Mozilla's midlife crisis has taken it from web pioneer to Google's weird neighbor

Michael Wojcik Silver badge

The original what now?

Netscape was the original open source web browser

www, lynx, Viola, and Mosaic would like a word.

Hell, I wrote my own text-mode mini-browser in Perl in 1993, before Netscape appeared in 1994. It wasn't open source merely because there were so many already out there that there was no demand for one.

Among closed-source browsers, Spyglass and IBM WebExplorer both beat Netscape to the door too.

Michael Wojcik Silver badge

Re: separate URL and search boxes

My car has a separate steering wheel and brake pedal. Dedicated controls? So primitive!

Michael Wojcik Silver badge

Re: Self-reinforcing

Pale Moon is my default browser (except on Android, where it's Vivaldi). I haven't had problems with it in recent years.

There are sites that don't work properly except under Chromium-based browsers. For those I used to use Comodo Dragon, but Comodo made their add-ons mandatory, so I've been switching to Vivaldi for my Chromium-based work. Been using Pale Moon and Vivaldi on my work laptop for a while now and that's all been good. My personal machine still has Pale Moon and Dragon, as I haven't gotten around to replacing Dragon there.

Michael Wojcik Silver badge

Re: Why I Use Vivaldi

It could mean many things, due to the lack of context, but my guess is OP meant that Gecko isn't suitable for building dedicated applications on top of a canned rendering engine, like Electron is.

Personally, I think those things are abominations.

Search for phone signal caused oil spill, say Japanese investigators

Michael Wojcik Silver badge

Re: Who decided to give him command and how much experience did he have beforehand ?

Yeah, and their modern Major-Generals ... whew!

"Some unspecified fraction of unspecified N, source unexplained, were below an unspecified metric."

Compelling argument you have there.

Microsoft Bing Chat pushes malware via bad ads

Michael Wojcik Silver badge

Re: Bing Chat contains ads as part of the user experience

Since chatbot use promotes learned helplessness and discourages critical thinking and research, it makes users more vulnerable to malvertising.

Raspberry Pi 5 revealed, and it should satisfy your need for speed

Michael Wojcik Silver badge

Re: Lost the plot

eadon was more fun, frankly. This one's just annoying. Doesn't have true kook-nature.

Michael Wojcik Silver badge

Re: Lost the plot

Agreed. I've never bought a Pi, and never really contemplated doing so; if I had more space for projects and time to spend on them I might well get one, but as it is I don't really have any justification for it.

But I see articles in places like Hackaday all the time where people have done something interesting with a Pi as the controller or whatnot. Clearly they're working for a lot of folks, so I don't see any reason to complain.

Yelp sues Texas for right to publish actual accurate abortion info

Michael Wojcik Silver badge

The current ideology of the US Republican Party is authoritarian, anti-democratic, populist, nationalist, repressive, and thoroughly odious, but it's not fascist.

Fascism is distinguished from other nationalist-authoritarian political ideologies primarily by central (state) control of the economy and industry. The current crop of right-wing zealots aren't advocating that, because their private-sector paymasters don't want it.

Calling the MAGAts "fascist" is technically incorrect and misleading, and it's unnecessary. Authoritarian and anti-democratic are bad enough.

Could the current GOP ideology slide into fascism, or set the stage for an actually fascist figurehead to seize the reins? Sure. Anything's possible. It would probably take a massive economic downturn, though, because so much of the US popular mythology is focused on individual liberty (even if little of that is actually available to many people) and achievement. Central planning is anathema to the lies we tell ourselves, so advocating it is generally a non-starter.

Michael Wojcik Silver badge

That is not what "fascism" means. If you want to persuade, learn to use terminology correctly.

Michael Wojcik Silver badge

Re: Pure performative politics

I don't know about "far worse", but I'd certainly agree with "no better, and probably worse".

Chinese snoops stole 60K State Department emails in that Microsoft email heist

Michael Wojcik Silver badge

If only there were some to be found.

The state of the software industry as a whole is dreadful. Yes, there were a number of glaring errors on Microsoft's part in this case; yes, we can certainly question the decision to use Microsoft's stack. But it's not like there's some alternative which we can hold up as an exemplar of rigorous attention to security. Even the OpenBSD team have made some rather questionable decisions.

Feds' privacy panel backs renewing Feds' S. 702 spying powers — but with limits

Michael Wojcik Silver badge

So close

Instead of changing the surveillance program itself, the board's minority suggests reforming the FBI

Now, if only they'd started with "in addition to", they might have had something.

I doubt these restrictions, if they even make it into the reauthorization, will have much effect. Who monitors for violations, and how? What are the consequences of violating the restrictions? I haven't looked into the details, but this all could be completely toothless.

After failing at privacy, again, Google is working to keep Bard chats out of Search

Michael Wojcik Silver badge

Re: "We're working on blocking them from being indexed now"

It can be both.

In this case, it looks like a combination of a systemic desire to harvest as much data as possible – which includes publishing much of it, because then you get additional data about who wants it – and a design failure that arose in part from the culture produced by that systemic problem.

More and more LLMs in biz products, but who'll take responsibility for their output?

Michael Wojcik Silver badge

Re: It's your own fault you trusted us

Customers leave en masse because company is irresponsible

Nice thought, but let's be honest: this very rarely happens. And sometimes the customers of the company aren't the ones harmed – take Equihax, for example. The people whose data was exposed by the breach were consumers, but they weren't the customers; lenders are the customers, and they Didn't Give a Fuck.