Hacker Newsnew | past | comments | ask | show | jobs | submit | ai_critic's commentslogin


How are they going to MITM communications with certs that never left my machine?

Are you suggesting they broke TLS or that they've somehow acquired every private cert generated?


How closely have you reviewed your browser's list of default trusted CAs?

I second this: HTTPS (as most consumers use it) is probably a front (who are these CA's really anyway?)

Plot twist: _Perhaps_ Mythos / Fable keeps explaining ways (that we can't comprehend or don't always work) to break HTTPS due to the three letter agencies making sure they had input on their creation (and thus backdoors, I mean "bugs"), so the real catastrophe they are hiding is that HTTPS is broken (for most people, most of the time.)

Remember when Quantum computing was the threat to HTTPS? Turns out it was the humans own inability to think outside of the box!


I wouldn't go that far. I remember https://en.wikipedia.org/wiki/Firesheep - HTTPS-everywhere was unambiguously an improvement over the status quo.

It just doesn't protect you all that well from nation-scale adversaries.


My trusted CA doesn't have my private key, they only attest that my public key belongs to me.

Your many, many default-trusted CAs can mint new certs for the sites you visit.

Which would be easily detectable if the cert I'm using on my server didn't match the one that was being served publicly.

There's really no way this conspiracy theory works if "they" have a copy of every single private cert generated. Which would be impressive because I can generate one myself and get it trusted without ever sending it and would be easily able to detect a MITM attack.

Not to mention most sites are going to use pinned certs so any repeat visitors to a site will notice a cert change associated with a MITM.

This whole idea relies on the assumption that everyone is trusting third parties with their private certs. That is not at all required.


> Which would be easily detectable if the cert I'm using on my server didn't match the one that was being served publicly.

I'm not sure why your focus is so heavily on your server. Is that the only thing on the internet you care about?

> Not to mention most sites are going to use pinned certs so any repeat visitors to a site will notice a cert change associated with a MITM.

Most haven't even heard of pinned certs.

https://dl.acm.org/doi/10.1145/3517745.3561439

"we find that 0.9% to 8% of Android apps and 2.5% to 11% of iOS apps use certificate pinning at run time"


You just intercept the traffic after its decrypted on the server side, or are you suggesting you somehow send encrypted traffic that never gets decrypted?

So the NSA streams the memory contents of every virtual machine and bare metal server on the internet to get the decrypted traffic? How would that even work at the scale of the internet?

How it works is they build a huge virtual strawman which decrypts and reads all of the data for them then posts online about how NSA spying on people is literally impossible.

> How are they going to MITM communications with certs that never left my machine?

The long game. They:

- make sure you wouldn't be in a position to need to transmit data anywhere that would receive it without CA's in their hypothetical pocket

- manage the evolution of the cloud industry to make sure portable VM's and Containers can have their data archived (both in-RAM, disk, hey just send us the running VM!)

- backdoor'd encryption algorithms from the design and implementation phase to ensure a global unlocking mechanism for any data encrypted by anybody who used a large class of extremely commonly available software

So, you run your own private bank in a cloud VM with tenant managed keys? They backdoor'd the encryption algorithm your cloud VM disk relies on, because they blackmailed one of the developers at the company who developed the hypervisor system used by your provider. Open source project? Perfect. (If you think this is nonsense, then remember the rapid discovery of ancient "bugs" causing all this drama to begin with.)

Your TLS privately generated certs that are 100% foolproof aren't actually used anywhere encrypting the data they want, because it's either worthless, or, available elsewhere perhaps at a different (or same) time.


And you're saying "they" (red flag) have done this with every cert generated?

They've most certainly tried.

https://en.wikipedia.org/wiki/Dual_EC_DRBG

https://en.wikipedia.org/wiki/Bullrun_(decryption_program)

If you're a specific target of a nation-state level actor, things get worse; they just grab your hardware mid-shipment on its way to you.

https://www.nbcnews.com/tech/tech-news/report-nsa-intercepts...


> They've most certainly tried.

And failed.

> If you're a specific target...

If you're a specific target, they have to spend an incredibly number of man-hours and money to get into your private data. This proves my point. This shows the effort required to infiltrate _one_ target and you're suggesting they've infiltrated everything by default.


> And failed.

How would you know about the successes? Thinking this is the one and only time they tried it is... interesting.

(Plus: "it was, for seven years, one of four CSPRNGs standardized in NIST SP 800-90A")

> If you're a specific target, they have to spend an incredibly number of man-hours and money to get into your private data.

No, this demonstrates an actor of that power level doesn't even need to compromise encryption, and can get deeper access to everything, if it's worth it to them.


I recall having a nuclear meltdown personally when I heard about all of this in the mid aughts. Nobody cared. Nobody understands this today. Everyone just complains about the Donald, but I point to this, and they don't realize the connection.

Even after Snowden exposed everything, nobody really cared unfortunately

Well, humans obviously do those jobs, so a clearly a general purpose robot (in this case, a biorobot) has been found to do the job better. Don't overthink it.

This is such an obviously correct comment that I imagine it'll languish down below the fold.

Playing off of it, the submission says something worth highlighting:

> One of them builds autonomous weapons for the Pentagon.

Luckey was perfectly happy doing VR at Facebook until he got shoved out over politics.

It's not just letting the non-nerds in--it's a decade-plus long campaign to push nerds out if they have the wrong ideology.


> It feels impossible to predict the future and so I am not comfortable putting my chips anywhere.

Life is unpredictable, which is part of what makes it worth living. The only genuinely incorrect move is not putting down your chips.


I don't think you've at all addressed why moving anything there towards the executive is desirable, especially given the capriciousness of the current executive.

I do not understand why you are being downvoted for what is, essentially, a statement of bald fact and realpolitick.

Trump took advantage of a party already weakened by the Tea Party, and successfully turned it into a cult of personality at a time when the opposition was ideologically unprepared to deal with very real policy issues that their constituents were observing.


Do not read Doctor uncritically.

> An army of wreckers, led by the demagogue John Farson (who styles himself "The Good Man") are slowly but surely conquering the land, laying waste to those few remaining outposts of civilization and conscripting the young men in the conquered lands to march on their neighbors.

What he's leaving out is that in the novels Farson explicitly was a rabble-rouser pushing for democracy, egalitarian rule, and the downfall of the aristocratic class--and he used that to cloak anti-social behavior and butchery.

Sound familiar?

(Not that Cory is a butcher--hah!--but that he's deliberately eliding the "type" of demagogue Farson is. Consider why that might be.)


At this point, that mostly seems like extraneous details that would most just lend themselves to rationalizations for people who still don't want to accept the current reality.

That narrative certainly had appeal in decades past when we appeared to be headed towards totalitarianism from the other direction. I was there for it, then. But then the corpo gloves gleefully came off, and the main thing that remains of the prior dynamic is referencing it as a soothing strawman.


Do you think your CEO has no sense of accomplishment when your team ships a product feature?

Yeah, they created a team that accomplished something (or a team that created a team), so it's well-deserved.

I guess that's why I burned out as a manager: I do not get a sense of accomplishment when my team achieves something

Do you have any sort of hardware specs? Architecture? OS?


Mac: Apple Silicon (ARM64), M1–M4. Windows: x64 (Intel/AMD)

4-8B param models work on laptops but the output isn't great. Gemma 12B is decent and 36B is pretty good but both need a Mac Studio or above.


> We have not decided on timing yet; it may be a while because there are things we want to do that are likely easier as a private company.

Presumably those things were harder as a charity/non-profit.


They need to financially engineer a good looking quarter beforehand.

Perhaps Larry Ellison can cut them a nice quid pro quo for a few months to make OpenAI look profitable (like the SpaceX/Anthropic deal), although that's probably unlikely given the debt Oracle is taking on to build it's infra.


> like the SpaceX/Anthropic deal

I understand the scepticism around Google's deal with SpaceX, given the former holds a stake in the latter. But Anthropic buying SpaceX's compute doesn't have any related-party smell to it. That genuinely looks like SpaceX having cornered some valuable compute.


I'm actually talking about both. WSJ publishes Anthropic artificial profitability. Days later the reason for the profitability appears in SpaceX S-1; it's compute costs were artificially suppressed. Both are going public. It's a quid pro quo.


> It's a quid pro quo

This is a reasonable accusation! It doesn't make a lot of sense–the Journal article is worth a hell of lot more than SpaceX referencing Anthropic's profitability. And we have zero evidence for it–one could raise this accusation against any compute partner Anthropic were to buy from.


Reasonable or *un*reasonable?


> Reasonable or unreasonable?

Reasonable. The influencers who just learned the term circular financing are mostly idiots. The ones pointing out the conflict of interest with Google are technically correct, but the conspiracy takes so many moving parts to yield such little gain that it would have to be particularly stupid in vision yet competent in execution to pull off.

But asking if there is a quid pro quo between Anthropic and SpaceX? Like, there could be. We have no evidence of it. The S-1 mention doesn't make any sense. But they're both going public and if I were a journalist I'd look into it.

The base case, that there is commercial value to xAI's datacenters that folks in the frontier-model space are competing to get access to, does seem to be one folks here are actively rejecting.


> That genuinely looks like SpaceX having cornered some valuable compute.

That's nice way to say "invested in AI that turned out to be flop nobody wants to pay for so they are selling spare capacity"


> That's nice way to say "invested in AI that turned out to be flop nobody wants to pay for so they are selling spare capacity"

Both takes are true. xAI invested in capacity that was supposed to yield frontier-model-maker margins. Grok failed to generate enough interest. So now they're selling it.

That's absolutely a good business, in a way that's more certain than the frontier-model one. But it's also lower margin, which doesn't support the sort of valuation SpaceX is going for.


What I don't understand is how it's even a good low-margin business. Maybe I'm missing something but:

Data centers (before recently) are low margin businesses because all the inputs are commodities: you buy power (joules), power (PDU), cooling hardware, physical racks, etc.. from the same vendors as everyone else. Worse, your biggest potential clients have the scale to just build it on their own and cut you out because of their scale and because you don't bring anything unique (outside of maybe physical proximity to an interesting market)

xAI has all the same commodity inputs plus another huge upfront capital expense (GPU/storage/networking), and their customer base is exclusively the well-funded companies who would normally just build it on their own.

I assume that they can't get better deals from nvidia than (e.g.) Microsoft because of their scale, so the unit cost of their inputs is the same or worse than their clients.

So the whole game is hoping that they hope to charge more now because people can't build fast enough and try to recoup their upfront costs before either a) other capacity comes online and b) the installed hardware becomes obsolete.

I'm being earnest -- it seems like they're trading one tiny margin service (datacenter) for another tiny margin service, with the added difficulty that there's an additional 10 figures of upfront expenditures and their viability depends solely on paying everything off before the price floor drops. Maybe it's staunching the bleeding, but it seems like not a great move


It's like buying a ticket for a concert, realizing you can't go and that you can resell it for more than what you paid.

You're right that long term it should stabilize into a low margin business.

Elon is also much less risk averse than others, which helps to build stuff fast, possibly cheaper, pushing legality to the limit. Colossus was definitely built much faster than anything else. I think building datacenters suits him better than a pure software play, where "move fast break things" is already the norm.


The concert analogy makes sense (I analogized it as "staunching the bleeding").

WRT SpaceX building data centers: I think there's a natural tension between a "low margin business" and "being risk adverse". SpaceX (the rocket business) did well because it was high risk and high reward. Building a 10b datacenter to hope to get a slice of a low-margin industry is high risk and low reward and just seems fundamentally like a losing strategy.


It's not like Elon is a stranger to low margin. Making cars is low margin, and it's not like SpaceX has crazy margins now that we know the financials.

Also I think stuff like Hetzner is a commodity. But are gigawatt scale data centers a commodity? You need those for AI training.

Anyways their goal is datacenters in space, not traditional data centers. Although I think that's only viable for inference.


> because all the inputs are commodities

AI compute hardware is not a commodity. And in a shortage, commodities can command high margins.

xAI has lots of NVIDIA GPUs and HBM. It also has permits and power hook-ups, both things that are getting harder to come by day by day in the U.S. Natural gas is a commodity. Doesn't make having lots of right now bad business.

> the whole game is hoping that they hope to charge more now because people can't build fast enough and try to recoup their upfront costs before either a) other capacity comes online and b) the installed hardware becomes obsolete

Correct. But charging people now generates incumbency advantages that make beating (a) and (b) easier. (From what I can tell, (b) isn't an existential issue, at least for xAI, because they've basically already recouped their investment with commited contracts they'd have to fuck up on to lose.)


> AI compute hardware is not a commodity. And in a shortage, commodities can command high margins.

I don't see the distinction you're drawing about "commodity", but I'm happy to be wrong on that. My point was that spaceX's ai division is buying all their inputs from external vendors and can't meaningfully differentiate themselves from person Y who buys all the same hardware except for the fact they bought them first. Which...

> Correct. But charging people now generates incumbency advantages

I don't see now this is an "incumbency advantage". There's nothing that sticks their clients to stay there and sign up for the next data center.


> don't see the distinction you're drawing about "commodity"

People pay markedly more for NVIDIA GPUs than they do for others. That opposes the fungibility requirement of a commodity.


In the west, there's no actual competitor to NVIDIA hardware. Yes, people make other chips, but nothing is a serious drop-in replacement for the nv stack. Between the networking and software, they're truly a different "thing" of accelerator, and I don't consider them fungible at all. The US government tried to build 3 supercomputers with each of nvidia/amd/intel accelerators and you can see how it went


Well, in a largely token-based AI market it doesn't matter what hardware you use to generate those tokens - Google use TPUs, Amazon/Anthropic use Trainium, Musk is apparently contracting with Samsung to have his own chips built...

I expect that Google are renting SpaceX NVIDIA GPUs so they can resell to corporate GCP customers at higher rates, but if the AI growth story remains intact then I would expect the GPU-agnostic token demand to be much higher than the NVIDIA-specific rental demand.


> there's no actual competitor to NVIDIA hardware...I don't consider them fungible at all

Which is why nobody should claim NVIDIA makes a commodity.


You're not wrong in the long term, either in general or for SpaceX.

In the long term, hopefully the market stabilizes, new entrants can challenge Nvidia etc. But of course maybe not!

However for SpaceX, this is a dead end move. They made a good decision on buying this compute when they did but they failed to use it to create a compelling model.

So they're selling access to recoup some of their investment (maybe a profit?). But what's the plan as these chips age out over the next three to five years? Become a compute company? They claim they want to... in space!

Regardless, they bought some valuable chips, failed to use them, but can now sell access and recoup over the next few years before they become outdated.


I wonder if they do have non-commodity AI capabilities, just, ones that don’t translate into a world-class frontier model.

Like they might have hired really good AI infra folks, gotten really good uptimes on their nodes, gotten folks who really know how to configure Infiniband (or whatever). But then, didn’t find the folks who knew what to run on that infrastructure. Or maybe Grok just had too much political drama around it.


Maybe they have something else im the books, I truly have no idea. But once you get down from the top rung of full-bandwidth cross section networking at the 100k node networking scale "AI" infra, theres no shortage of people who can do that. Most importantly, labor isn't the big chunk of the outlay. Even if they have 50 engineers clearing $1m/yr, that's pocket change for everything else

EDIT: said 50 engineers at $50m/yr originally and meant 50 @ $1m/yr


Datacenter is an ok business, but as you say it shouldn't be getting the same growth multiple (P/E) as a high margin rapidly growing software business.

There is also a question of how sustainable this datacenter rental demand is. It would seem unexpected if Anthropic and Google continue renting from SpaceX for more than a few years, and both contracts can be cancelled with 90 days notice.


Why do we think frontier model vendors are high margin?


I think the reference was to Elon giving Dario a two-month discount on compute as part of the deal and Dario immediately announcing a profitable quarter based entirely on that discount.


Google owns 14% of Anthropic.


Google owns 14% Anthropic and 6% xAI.

When Anthropic spends on xAI, it benefits Google. When google spends on xAI, it benefits Google. When xAI spends on Google, believe it or not, that benefits Google.

This is how a Ponzi -style circular financing scheme typically works.


> When Anthropic spends on xAI, it benefits Google

Unless Google is directing these transactions, this is not a novel issue. (We see a similar effect with mutual funds owning most companies [1]. It's a weak effect.)

> This is how a Ponzi -style circular financing scheme typically works

No. It's potential conflicts of interest. It's not circular financing. Circular financing follows the cash. When NVIDIA invests in OpenAI so OpenAI can buy NVIDIA chips, that is circular financing.

[1] https://insights.som.yale.edu/insights/the-rise-of-the-mutua...


I think it depends on how you view the payout google will get when these companies IPO and give Google exist liquidity and a nicer looking balance sheet, if needed, either or.


> it depends on how you view the payout google will get when these companies IPO and give Google exist liquidity and a nicer looking balance sheet

Google has a fantastic balance sheet with or without these investments. None of the recent deals have uniquely enabled an IPO. So they'd be playing to increase their stakes' value by a few points ahead of a dump, a dump that would almost certainly wipe out much more than they'd stand to gain by trying to make someone else a dollar so they get nickels and dimes out of it.


No a Ponzi scheme involves not output, but here there is very much output in the inference being sold by Anthropic. Pretty big difference.


If you were to treat all the hyperscalars as one company with one 10-K then Anthropic buying compute from SpaceX/xAI is an internal bookkeeping transfer between two departments. It isn't the same as top-line revenue into the AI companies. It is still mostly just financing money that Anthropic raised being transferred to SpaceX.


> If you were to treat all the hyperscalars as one company with one 10-K then Anthropic buying compute from SpaceX/xAI is an internal bookkeeping transfer between two departments

This is literally true for any revenue. Treat the buyer and seller as a single company and their transaction is internal.


Because it is hiding the fact that there's very little external revenue coming into the AI sector compared to the costs. AI companies doing business with each other isn't net revenue into the sector. Treating the whole sector as a single entity isn't arbitrary.


> it is hiding the fact that there's very little external revenue coming into the AI sector compared to the costs

There is a lot of revenue dumping into this sector. If there weren’t, you’d have a point about manufactured numbers. But I don’t think anyone seriously doubts Anthropic and Google are hauling in serious dough.

The question, as you point out, is how much they are keeping. But xAI selling compute doesn’t really hide any of that. If anything, given the prices Musk is getting, it adds to the cost line. (And xAI isn’t masking compute revenue as Grok’s.)


Hyperscalar capital spending for 2026 is going to be in the close neighborhood of $700B, which is over 2% of US GDP. That is about 3x the GDP spend of peak Apollo program in the 1960s, and about the same as the telecom/fiber buildout of the late 90s and the railroad buildout of the 19th century (both followed by a collapse). And there just isn't that much revenue coming into the system, and there aren't the productivity gains coming out of it. When 95% of corporate AI initiatives are still failing, the value proposition isn't there. And if you try to look at something like Microsoft's reported $37B in AI revenue a lot of that is really internal spend from leasing compute to OpenAI, which it partially owns. The real revenue coming into the AI industry is likely well under $100B this year, and the productivity gains to end consumers is likely much less. So if you think a few $10B/yr here or there is "serious dough", it just isn't enough to fill the gap. And OpenAI should burn through $14B this year, up by a factor of 3x over last year. Anthropic has a projected revenue for 2026 of $26B and is running around cash flow neutral, but that doesn't approach the $700B spending gap. And that is with accounting that depreciates GPUs on 5-6 year schedule instead of the more realistic 2-3 year schedule--so Anthropic may kick the can down the road a bit, but in 2-3 years they'll still be depreciating GPUs that they're throwing away and having to replace (of course this may be WHY Anthropic is leasing compute from xAI since then that accounting hit falls on xAI instead of Anthropic).

In 10 years, we probably will have $700B/yr in productivity gains and revenue from LLMs, but we're not going to be able to sustain $700B/yr in capital spending until we get there. And the problem is much worse than the fiber buildout of the late 90s. Fiber built out in 1998 was still usable 10 years later. The GPUs that are being built out today are going to be obsolete trash in 3 years.


You are forgetting the google space x deal too


Anthropic basically did that by getting two months of free compute from SpaceX. As I recall, this is how they were able to claim that they were profitable. But in reality, they are only profitable for those two months.


Just depreciate their server farms less this year to reduce losses. ;)


You mean Oracle’s customers will face when their renewal bill includes infrastructure fees.


you mean the 50% of its company that was leveraged to purchase Paramount?


> They need to financially engineer a good looking quarter beforehand.

Eh given the quality of recent IPO proposals I think they can just say there's a couple zillion air molecules to turn into gold and be done with it.


Like financial reporting and "transparency" that's required for public companies.


Capital is going to dry up. All the AI companies are racing to get to market before the dumb money disappears


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: