Readit News logoReadit News
jinseokim commented on MIT asks arXiv to withdraw preprint of paper on AI and scientific discovery   economics.mit.edu/news/as... · Posted by u/carabiner
elcritch · 3 months ago
In my opinion the paper shouldn’t be take down. Instead a note should be added noting the concerns with the pre-print and that’s it’s likely fraudulent.

Edit: Since the paper has been cited, others may still need to reference the paper to determine if it materially affects a paper citing it. If the paper is removed it’s just a void.

jinseokim · 3 months ago
That's what happens when a paper is withdrawn [1], and MIT requested to withdraw the paper [2]. This news title saying that they requested to take down the paper is subtly incorrect.

[1]: https://info.arxiv.org/help/withdraw.html#:~:text=Previous%2...

[2]: https://economics.mit.edu/news/assuring-accurate-research-re...

jinseokim commented on Twitch will now let streamers simultaneously stream on any service they want   theverge.com/2023/10/20/2... · Posted by u/my12parsecs
jinseokim · 2 years ago
> Streamers will have to make sure the quality of their stream on Twitch is “no less than the experience on other platforms or services.”

Note that Twitch limits stream quality in certain country. For example, in South Korea, content is transcoded to 720p or lower. [1]

[1] https://www.thegamer.com/twitch-korea-limiting-stream-qualit...

jinseokim commented on IPinside: Korea’s Mandatory Spyware   palant.info/2023/01/25/ip... · Posted by u/pat-jay
grishka · 3 years ago
What about people using Apple computers? Were they simply advised to borrow something capable of running Windows from a friend?
jinseokim · 3 years ago
Some softwares: Yes. People with Mac are advised/forced to use Windows. For instance, Uwayapply, a college admission application service, doesn't support macOS.

Or: they provide .pkg file to install similar program.

Most of them want sudo. They use root permission for various purpose, but the most impressive one for me was registering their CA certificate on Firefox root store, to support WebSocket over TLS to localhost on Firefox.

jinseokim commented on IPinside: Korea’s Mandatory Spyware   palant.info/2023/01/25/ip... · Posted by u/pat-jay
guntherhermann · 3 years ago
I think this requires some prior knowledge.

From https://palant.info/2023/01/02/south-koreas-online-security-... :

> I’ve heard about South Korea being very “special” every now and then. I cannot claim to fully understand the topic, but there is a whole Wikipedia article on it. Apparently, the root issue were the US export restrictions on strong cryptography in the 90ies. This prompted South Korea to develop their own cryptographic solutions.

> It seems that this started a fundamental distrust in security technologies coming out of the United States. So even when the export restrictions were lifted, South Korea continued adding their own security layers on top of SSL. All users had to install special applications just to use online banking.

> Originally, these applications used Microsoft’s proprietary ActiveX technology. This only worked in Internet Explorer and severely hindered adoption of other browsers in South Korea.

Wowsa!

jinseokim · 3 years ago
Well... SSL was unsafe then.

The problem came from U.S. cryptography export regulation which makes exportable cryptographic algorithm feasible to crack. Bundled Internet Explorer didn't support good algorithms on SSL.

So, South Korea government wanted to add another security layer. They wanted to state "good to go" algorithm (just like FIPS did), so they built and recommended the encryption algorithm, SEED. And it required ActiveX, because 128 bits cryptography on JavaScript was infeasible then.

The real problem of South Korea is, the slowness of deprecation.

They deprecated ActiveX (and created NPAPI or WebSocket on localhost) in 2014. After Microsoft deprecated Windows XP, they established "Windows XP Task Forse" to respond security issues with Windows XP computers on government agencies. Yeah, this was fairly late, considering MS declared the Windows XP deprecation schedule in 2007.

IE/ActiveX/Java Applet/etc algorithms aren't still completely deprecated in Korea. NEIS, a giantic service used by every K-12 school to record and manage education-related information, still uses the technology based on Internet Explorer by using IE compatibility mode of MS Edge. Repeat, EVERY K-12 school teacher and staff uses this service, with IE compatibility mode.

I want South Korea to adapt new technology and deprecate old one more in due course. I mean, they should accept TLS provides decent end-to-end encrpytion, and they should recognize Triple DES is deemed unsafe algorithm.

jinseokim commented on IPinside: Korea’s Mandatory Spyware   palant.info/2023/01/25/ip... · Posted by u/pat-jay
gkanai · 3 years ago
I'm the one who originally first wrote about the situation in S. Korea in the 90s when I was working for Mozilla and we noticed that Firefox had almost no market share there.

At the end of the day, it's up to the S. Korean govt. or regulator to make the changes necessary to get rid of this nonsense. The govt./regulators have other issues to deal with so these S. Korean 'tech' companies get to make a mess of citizens' computers and privacy. It's been well over 2 decades of crappy S. Korean software like the keyloggers and whatnot and no end in sight.

If S. Korean citizens cared, they would force the politicians to do something and it would change. They don't, so it doesn't change.

jinseokim · 3 years ago
Disclaimer: I'm Korean.

A LOT of Korean citizens cared and got angry with this issue. So governments, agencies, and. yeah, "security companies", finally decided/declared to deprecate ActiveX-fu softwares and follow Web Standard.

We didn't expect WebSocket on localhost.

jinseokim commented on IvorySQL: Open-source Oracle-compatible PostgreSQL   github.com/IvorySQL/Ivory... · Posted by u/flymetothemoon
rnd0 · 3 years ago
Wiped out by Oracle's legal team (patents, whatever) in 4...3...2...
jinseokim · 3 years ago
A Korean company Tmax sells Tibero, the Oracle-compatible DBMS (proprietary). AFAIK, it's quite so much "compatible" (it even has same typos with Oracle DB), and they're not sued by Oracle.
jinseokim commented on AirDrop is now limited to 10 minutes   twitter.com/tibor/status/... · Posted by u/doener
concinds · 3 years ago
For context: AirDrop was one of the only ways protesters had to communicate en-masse.

Signal is unsafe for Chinese protesters, since it requires SMS verification upon signup and is therefore linked to your identity.[0] Mesh networks are the only real solution there, and AirDrop is about the only mainstream one. AirDrop has been used by Asian protesters for years.[1] I highly recomment you read the full China Digital Times article, which gives excellent context, and lets these protesters explain the value of AirDrop in their own words.[1]

Apple's timing is unmistakeably suspicious; keep in mind that there have been protests for weeks, which preceded the iOS update.

It must also be pointed out that Apple issued an official statement to Western media outlets that the goal was to prevent spam.[2] At no point did Apple ever admit that this was done to follow any government demand. It's unknown whether Apple could be under a Chinese gag-order, but we shouldn't speculate that it's the case unless experts say it's likely. If Apple is complying with a Chinese government orders, then it has an ethical duty to make that public, and again, we have, as of yet, no reason to assume there are gag orders related to this. Apple deserves criticism for the update, and for trying to hide its true purpose.

[0]: https://twitter.com/RealSexyCyborg/status/159707255662827929...

[1]: https://chinadigitaltimes.net/2022/11/netizen-voices-apple-r...

[2]: https://www.bloomberg.com/news/articles/2022-11-10/apple-lim...

jinseokim · 3 years ago
Note: AirDrop is unsafe for broadcasting message anonymously. It will also broadcast your hashed phone number and email[1], which can be reversed by rainbow table.

[1]: https://privatedrop.github.io/

jinseokim commented on Researchers quietly cracked Zeppelin ransomware keys   krebsonsecurity.com/2022/... · Posted by u/feross
jinseokim · 3 years ago
Where would be the sanest choice if I need some CPU computational resources (say, 10k CPU-hours)? Researchers simply used DigitalOcean (under their generous resource grants), but I believe there would be another better way for computing if I can't get such donation...
jinseokim commented on Microblog.pub – A self-hosted, single-user, ActivityPub powered microblog   docs.microblog.pub/... · Posted by u/nafnlj
cetra3 · 3 years ago
> Uses SQLite, and no external dependencies except Python 3.10+

I don't know if it's the way it's been written, but it reads to me that only python is needed, no libraries.

I'm assuming this isn't true though: I can see a lot of libraries: https://github.com/tsileo/microblog.pub/blob/v2/pyproject.to...

jinseokim · 3 years ago
I feel like Python 3.10 is large dependency -- almost no one would use it unless required.
jinseokim commented on Stable Diffusion PR optimizes VRAM, generate 576x1280 images with 6 GB VRAM   github.com/basujindal/sta... · Posted by u/avocado2
ceeplusplus · 3 years ago
Unfortunately the author of this PR decided to include garbage like this [1] in it, so this PR is pretty useless.

[1] https://github.com/basujindal/stable-diffusion/pull/103/file...

jinseokim · 3 years ago
I just reminded "clean room design" technique: https://en.m.wikipedia.org/wiki/Clean_room_design

u/jinseokim

KarmaCake day224February 7, 2021View Original