Hacker Newsnew | past | comments | ask | show | jobs | submit | lapcat's commentslogin

See "Little Snitch for Linux" https://news.ycombinator.com/item?id=47697870

Also:

> Little Snitch is not there to replace OpenSnitch. It's just an additional option you can choose from. Some people might prefer it, others not.

https://news.ycombinator.com/item?id=47701918

> But I currently can't make the entire project Open Source. My other option would be to keep it completely private (wrote it mostly for myself in the first place).

> I think it's still better to make it public and only partially Open Source so that some people can benefit from it. If you don't trust us, that's completely reasonable, just don't install it.

https://news.ycombinator.com/item?id=47701740


> Many from linux crowd are slightly paranoid

Slightly? There are quite a few tin foil hat comments on this submission.


Well, it's all relative and depends on perception.

I tried to briefly explain a typical i-own-my-computer mindset regarding the linux monetization question from the parent comment.

I can pay for cool stuff I can trust, but the "I can trust" part is very tricky.


You call it paranoia, I call it zero tolerance for enshitification.

It's like the Nazi bar problem. You need to be vigilant to prevent the thing you rely on becoming yet another platform for Microsoft to exfil your personal data to NSA servers.


> All a long way to say, anyone know anything about this company?

Yes, they are indie Mac developers who have been in business for more than 20 years, and Little Snitch for Mac is beloved by many users for a long time.


Everything has a price though… (I also use little snitch)

> Everything has a price though…

What is that supposed to mean in this context?


Given sufficient motivation the little snitch dev could essentially supply chain attack every user, or even specific users.

Said motivation could be a nation state handing them $XXX million dollars


Or even sell the whole org for say $50M and no one ever mentions anything.

I think the type of users it attracts (techies, crypto ppl, etc) makes it worth more too.


Like how it happened for Bartender, another macOS app which required a lot of permissions. It was sold to a company and they told no one, until a user noticed via the now defunct MacUpdater that the app signature changed.

Ben Surtees (Bartender’s original developer) burned all the good will accumulated over years in one moment. Never again can anyone trust software under that name.


Bartender was not a supply chain attack! The app was sold for monetary reasons to another developer for monetary reasons.

There were no targets involved. There were no nation-states involved. There were no attacks involved. You might not like the new developer, but this whole discussion of a nation-state and 9 figure payoff is totally ridiculous.


> You might not like the new developer

What I didn’t like was the secrecy, that was a breach of user trust. Why wasn’t it announced is the problem.


That's a legitimate criticism. Nonetheless, this subthread started with a comment about supply chain attacks and nation states, which is ridiculous.

> I think the type of users it attracts (techies, crypto ppl, etc) makes it worth more too.

No, this by itself doesn't make Little Snitch or any business worth $50M. You're dreaming. That's a crazy valuation.


Various intelligence agencies are willing to pay 2-3M for a working exploit for iphone or android. I think that they would be fine with paying 50M for a userbase that has a high population of devs, admins, etc. Being able to backdoor someone like this in the right organization down the line is probably worth 50M.

> Various intelligence agencies are willing to pay 2-3M for a working exploit for iphone or android.

Little Snitch is not a working exploit for iPhone or Android.

> I think that they would be fine with paying 50M for a userbase that has a high population of devs, admins, etc. Being able to backdoor someone like this in the right organization down the line is probably worth 50M.

No, sorry, this is absurd. A ton of products have a high population of devs, admins, etc. These are not getting acquired by intelligence agencies. Give me one example. There's nothing inherently valuable about this population.

Who is a Little Snitch customer worth 50M to attack? Name them.


Depends on the target and what you can get. Think about Bartender, an app requiring an insanely high level of trust and permissions, which was quietly sold.

If you know of someone specific you want to target who uses it, the investment could pay off.

For example, we know from your blog posts that you use LittleSnitch. Someone who wanted to target you might do a lot to spy on you by buying LittleSnitch, probably.

Think of your own apps, too. I don’t think you’d do the same that Ben Surtees did and sell everything in secret, but then again I don’t personally know you. You may have a price that I’m not aware of. For that reason alone, even as I trust the current code is not nefarious, I can never give StopTheMadness access to every website and can only use it selectively, which is inconvenient.


> Depends on the target and what you can get. Think about Bartender,

As I said in another comment, Bartender had no target! It was not an attack. An app was sold by one developer to another developer. End of story.

> If you know of someone specific you want to target who uses it

But you don't. And you don't in the case of Little Snitch either.

You can dream up a bunch of absurd hypothetical scenarios, but they are not the reality.

> Someone who wanted to target you

Nobody wants to target me. Nobody cares about me. I am insignificant.


> Bartender had no target! It was not an attack.

The point is that it shows it can happen. You’re a browser extension developer, surely you know how often it happens that developers of popular extensions are approached by shady businesses and sometimes do even sell.

> You can dream up a bunch of absurd hypothetical scenarios, but they are not the reality.

As someone else has pointed out to you, not hypothetical.

https://news.ycombinator.com/item?id=47699068

> Nobody wants to target me. Nobody cares about me. I am insignificant.

You give yourself too little credit. I know of several developers and other people with influence who use your extensions with complete trust. Compromising you means compromising them, which means compromising even more people. Jia Tan has aptly demonstrated you don’t need to directly attack your final target, only a link in the chain, even if it looks insignificant.


> surely you know how often it happens that developers of popular extensions are approached by shady businesses and sometimes do even sell.

Yes, developers of free extensions who sell for a pittance.

I don't have a popular extension. My extension is relatively expensive and thus unpopular. I don't have enough users to be interesting to shady businesses. My extension is more valuable to me than to anyone else, because I, one person, can make a living from it.

> As someone else has pointed out to you, not hypothetical.

That link seems a bit silly. There's a screenshot with no explanatory context whatsoever. There's a list of items, many of which look quite mundane and uninteresting. Certainly it is not suggesting acquiring the company for millions of dollars. It sounds like someone—could even be an intern for all we know—is interested in attacking the app from the outside.

I agree with tptacek: "This is clownish" https://news.ycombinator.com/item?id=13813828

> You give yourself too little credit.

No, I give myself too much credit. ;-)

> I know of several developers and other people with influence who use your extensions with complete trust. Compromising you means compromising them, which means compromising even more people.

What is the value of compromising these people? Oh noes, the CIA can now write Daring Fireball articles!

> Jia Tan has aptly demonstrated you don’t need to directly attack your final target, only a link in the chain, even if it looks insignificant.

What chain? I have no third-party dependencies. If someone can compromise Apple's operating systems, then my software or Little Snitch is the least of our worries.

I do specifically and intentionally avoid using NPM, because of frequent compromises. Little Snitch is not even JavaScript, so no worries there.


> My extension is more valuable to me than to anyone else, because I, one person, can make a living from it.

I believe you, and as a fellow indie developer trust you and your intentions and that you’re careful to not be compromised. But if I’m being honest with myself I don’t have concrete proof of any of those. So I trust but also try to limit the blast radius if anything goes wrong. Does that make sense? I think you might agree there.

Your blog helps with that trust and with understanding the human behind it.

> Certainly it is not suggesting acquiring the company for millions of dollars.

Alright, yeah, I see we’re talking a bit past each other in that regard. You’re right that’s how the conversation started (before I joined in) but I don’t care for that angle fully either. I agree there are more plausible ways to achieve the objective.

> Oh noes, the CIA can now write Daring Fireball articles!

Not sure that’d be a downgrade. Maybe they could fix the Markdown perl script, too. Joking aside, I think there would be better targets, like someone on Apple’s Passwords team.

> What chain? I have no third-party dependencies. If someone can compromise Apple's operating systems

I don’t mean it in the sense of software dependencies, but in the sense that some app you use would compromise you. You know macOS’ permissions are mostly security theatre. We know people inside Apple use third-party apps. I can imagine ways of exploiting that, given a bit more knowledge of people from inside (which could be gathered from working there for a while, trawling social media, maybe reading Gruber’s emails, …).

> I do specifically and intentionally avoid using NPM, because of frequent compromises.

Same, no argument from me there.


> I don’t mean it in the sense of software dependencies, but in the sense that some app you use would compromise you. You know macOS’ permissions are mostly security theatre. We know people inside Apple use third-party apps. I can imagine ways of exploiting that, given a bit more knowledge of people from inside (which could be gathered from working there for a while, trawling social media, maybe reading Gruber’s emails, …).

You seem to be waffling here between targeted and untargeted attacks.

There's a world of difference between compromising me or an Apple employee and compromising my software or Apple's software. You don't magically get the latter from the former.

Untargeted attacks are just looking for the usual stuff, e.g., money. They don't care about who the victims are or what else they have.

It would require a targeted attack to insert mallicious code into my software or into Apple's software. You claim, "I can imagine ways of exploiting that," but I don't actually believe you. If you can imagine it, then explain exactly how.

There's no evidence that anyone is targeting my software or that anyone has any reason to target my software. Even if I downloaded a typical malware app from the web, that wouldn't result in malicious code getting shipped in my software.

I'm not aware of anyone on the Apple Passwords team using my software, so if someone were trying to attack me to get to them, that's seems a bit fruitless, to use a pun. In any case, the chain from compromising me, to compromising my software releases, to compromising an Apple engineer, to compromising Apple software releases, is convoluted to the extreme and would require much more specifics than anyone has given here (or is capable of giving).

In any case, I'm quite careful—though not tin foil hat paranoid—about which software I download and run on my Mac, and I've never downloaded malware in more than 20 years as a Mac user. Obviously I'm careful about my own privacy and security, since I use Little Snitch too!


> You seem to be waffling here between targeted and untargeted attacks.

Why do you think it matters? Little Snitch is used by enough people that it would be completely worthwhile as just an asset. With an infinite budget you don't look for the exploits once you have the target; you accumulate the exploits, and use them as you get targets.

I don't know how you think these apps are useful for small-time criminals to exploit, but governments somehow wouldn't be able to figure out a use for them. It reeks of "I have nothing to hide."

Maybe they use Little Snitch just to figure out what you're running, use another exploit to get into that, get blackmail material on one of your family members through connections made from files on your computer, and offer not to release it and to donate $500K to your project (that they'll set up for you, and will come from some obscure European foundation's fund), or "invest" (with no expectation or even mechanism for getting a return) into your LLC if you insert code into your software. Or even simply accept a pull request, which will be totally deniable if the code gets caught, and the pull request eventually traced to a Chinese/Russian/Iranian/North Korean IP.

I have no idea what evidence you expect people to leave. The goal is not to leave evidence. Why would someone announce that they were interested in you or targeting you?


Yes, the number is silly. But that makes the danger even more relevant. They could really get it for a couple million to a couple of people, and double or triple that payment (or stretch it out over a long period) to make sure everybody knows to shut up about it.

(Taking this reply as an excuse to write a concurring rant...)

Also, once you've compromised somebody's integrity and got them on the payroll, why not use them for other things? They can join other projects, they can sit on foundation boards, they can become tech media personalities, etc., etc....

There's nothing tinfoil about this. It's cheap and easy. You could subvert every open source project in the world for less than the cost of one fancy plane, or a few fancy missiles. The CIA went in on a crypto company, got it to weaken everyone's crypto, and likely killed the son who inherited it from the previous owner. "Nation-state buying Little Snitch" is not some crazy fantasy, it's a mundane scenario (I'm sounding like LLM today, I think.) Even though OpenSnitch could be compromised even more cheaply, they show all their code.

Also, aggressors don't just use carrots, they use sticks. The Altman sister stuff for example (true or not, works even better if it's true) certainly seems like a stick. Top of the world, then suddenly a jury (easily subverted by a state) puts you in prison or takes away control of your company, and now you're killed (or "kill yourself") in prison or otherwise. Now your widower and your sister own the company, and they say yes to everything. If my multi-billionaire brother molested me, you'd never hear about it because he would have trivially given me enough money to forget about it and him. I wouldn't be filing any lawsuit. Makes me suspect that he's being resistant to something.


That’s what i meant. Thanks for reading my mind. :)

> Said motivation could be a nation state handing them $XXX million dollars

You're missing the most important part of the motivation here: why in the world would a nation-state give a damn about Little Snitch, especially to the tune of $XXX million dollars?

A nation-state could pay $XXX million to your significant other to spy on you. But again, a nation-state doesn't give a damn about you.


>why in the world would a nation-state give a damn about Little Snitch, especially to the tune of $XXX million dollars?

Per user hacked, it can be very cheap¹ compared to bribing anyone. And give data/access that SO can't get.

State is not interested in you until it does. Being Jewish, Polish, Gypsy, Gay. Or just WrongThinking. Or maybe it becomes super cheap and easy to process all information?

1: it can even be free. You either give us backdoor to all your users or you rot in jail. Here's a complementary beating up or pictures of your kids, to argument our position further.


> it can even be free. You either give us backdoor to all your users or you rot in jail.

It is already a thing, at least in UK and AU [1]:

> Both countries now claim the right to secretly compel tech companies and individual technologists, including network administrators, sysadmins, and open source developers – to re-engineer software and hardware under their control, so that it can be used to spy on their users. Engineers can be penalized for refusing to comply with fines and prison; in Australia, even counseling a technologist to oppose these orders is a crime.

[1] https://www.eff.org/deeplinks/2018/12/new-fight-online-priva...


1) Little Snitch is not based in the UK or Australia.

2) They are interested in software will billions of users. They are not interested in software with thousands of users.


> Per user hacked, it can be very cheap¹ compared to bribing anyone.

How many users do you think Little Snitch has?


its been known for some time that little snitch and other personal firewalls are established targets of three-letter agencies https://news.ycombinator.com/item?id=13813160

That comment is a screenshot presented with no context, listing a bunch of rather mundane stuff.

"This is clownish" https://news.ycombinator.com/item?id=13813828


Well, that is obvious, is it not? It means They are interested in The Plan and have enough power that a vague comment is all you gonna get. Cannot have Them finding out that we are on to Them. Though of course, The Plan already accounts for that, so They already know and will do Something about it. Want facts? Wake up, do your Research!

> Do you still trust them not to do self-reporting or phoning home, even though it is $0 and closed source?

If you trust Little Snitch on Mac, then yes.

They've been in business for over 20 years. They're not going to blow their entire business and reputation for a few Linux users.


Yep, I trust the obdev.at / Snitch guys.

I do wonder however, are they sufficiently careful about their processes and own machines to avoid a supply chain attack completely.

They must be a target for the various hacking groups out there.


We have not detected a targeted attack yet. On the Mac side, we are safe: No dependencies on any third party libraries. Only Apple.

On the Linux side, there is no single big vendor such as Apple who provides all the necessary libraries. I have tried to choose reputable sources from crates.io only, but to be honest, I don't know a secure solution to the problem.


This comment seems a bit confused.

A supply chain attack doesn't directly attack an end developer but rather a supplier of the developer. So who or what is the supplier in this case?


They don't build their own machines or write their compilers or write their own crpyto code or ... so many other things.

> They don't build their own machines or write their compilers or write their own crpyto code or ... so many other things.

An attack on any of these things has nothing specifically to do with the developers of Little Snitch and would have vastly more widespread and important effects.

Why would you even be talking about Little Snitch if a compiler were compromised?!? Your paranoia here is bizarrely narrow. Little Snitch would be the least of our problems in that case.


Their copy of the compiler. Just an example. ¯\_(ツ)_/¯

> Their copy of the compiler.

This doesn't even make sense. You have no examples.


That seems... not correct?

The comment was asking about preventing a compromised supplier for the developers.

A supply chain attack can be anywhere in the supply chain to the target. If I, the end user, am the target, then a supply chain attack compromising the developer of LittleSnitch is effective.

I may then be a conduit to compromising other software or components, and would both I and LittleSnitch would be part of the supply chain that could be attacked targeting them.


> If I, the end user, am the target

You're not a target, anonymous rando.


Many supply chain attacks aim to run malware on the end-users machine to harvest authentication tokens, etc. So pretty much everyone here who is a developer is the target.

> So pretty much everyone here who is a developer is the target.

Are you going to have this same discussion about every piece of software every mentioned on Hacker News? Why are we having it for Little Snitch specifically?


This seems pedantic and I think you know what they’re questioning and why.

If they trust the devs why would they not trust them to not yolo deploy new versions?

because a company worthy of trust doesn't yolo their versions. a company that does yolo versions is not trustworthy.

Because it might not be the developers doing the deploying, but a malicious actor?

> I think you know what they’re questioning and why.

No, not really. And I disagree with the premise, "They must be a target for the various hacking groups out there."

How would you even hack them? I'm a developer too; how would you hack me?


Options range from carefully targeted phishing or social engineering attacks to poor opsec and a five dollar wrench.

> a five dollar wrench.

I'm not even going to respond to this ridiculousness.

I still don't know why anyone thinks that, among all developers in the world, a little indie Mac developer is getting targeted specifically.


Some targets are more valuable than others. A firewall product has obvious security value. The fact that it requires high privilege is another reason.

I have the same thoughts about other Mac apps. e.g. iTerm2 - cause they "see" so much sensitive data.


> I have the same thoughts about other Mac apps. e.g. iTerm2

You need to take a chill pill.


Yeah just yolo install whatever, it’s not like applications or libraries such as axios which have a decade of trusted history would all of a sudden become malicious and do nasty things to developer machines, just chill, everything’s fine.

> Yeah just yolo install whatever

That's not even remotely what I said.

> it’s not like applications or libraries such as axios

iTerm doesn't use NPM. Little Snitch doesn't use NPM. I don't use NPM.


So it’s npms fault and if npm didnt exist, no developers would ever get compromised?

You’re an incompetent idiot, and a risk to your employer.


WTF? This is not an acceptable comment on HN, no matter who or what you're replying to. This style of commenting is not what this site is for, and destroys what it is for.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.


> I'm not even going to respond to this ridiculousness.

Why is it ridiculous? If you have electronic access to something of value and broadcast that fact on the internet, you’re at risk of a physical attack. That’s not controversial? Companies make employees do training about this for a reason.


> If you have electronic access to something of value and broadcast that fact on the internet, you’re at risk of a physical attack. That’s not controversial? Companies make employees do training about this for a reason.

You're talking as if all all "value" and all "risk" is equal, when they're definitely not. You can't equate a megacorporation with a little indie developer. Nobody cares about the latter.

I am a software developer, and I broadcast that fact on the internet. But nobody is coming to Wisconsin to hit me on the head with a wrench. That's just a silly paranoid fantasy.

If anyone hits me on the head with a wrench, it would be not be a nation-state but rather a two-bit local mugger who has no idea who I am and just wants cash from my wallet. I live in a pretty safe area though.


Nobody that you know of.

The same people who targeted the open source uncommercial library axios *last week*?

Access to little snitch would be worth millions to the right party.


>> I still don't know why anyone thinks that, among all developers in the world, a little indie Mac developer is getting targeted specifically.

> The same people who targeted the open source uncommercial library axios last week?

axios is an NPM package. Little Snitch doesn't use NPM. Thus, these people must be pretty damn incompetent if they were trying to target Little Snitch.

> Access to little snitch would be worth millions to the right party.

This is a bold claim with no evidence. I don't think it's true.


Shell (and probably root) access to tens of thousands of development machines wouldn’t be worth millions to the right party?

?! The same way every other developer that has been hacked. You surely cannot be suggesting you're un-hackable. That seems ludicrously hubristic.

> The same way every other developer that has been hacked.

There's not one single way, so, no, you're just hand-waving here.


Just saying developers have been hacked. Underrated existence proof.

> Just saying developers have been hacked.

So are you going to have this same discussion in every HN submission that mentions any piece of software?


What software do you actually develop? You clearly don’t give a shit about your users and I want to make sure I’m not using your software .

"I researched a bit, found OpenSnitch, several command line tools, and various security systems built for servers. None of these gave me what I wanted: see which process is making which connections, and in the best case deny with a single click." https://obdev.at/blog/little-snitch-for-linux/

I've used OpenSnitch for years, and while LittleSnitch definitely has a better UI for showing which process is making which connections over time, OpenSnitch does a pretty good job here. I get a modal popup when a program that hasn't made a connection tries to make a connection, and I can either allow/deny in one click, or further customize the rule e.g. allowing ntpd to connect, but only to pool.ntp.org on port 123.

Where LittleSnitch is definitely ahead is showing process connections over time after said process has been allowed.


When I looked at OpenSnitch (years ago), it didn't support running headless on a server. Am I mistaken about this, or has it changed?

You can run daemons on several nodes (different machines) and view them all through a central ui, it is pretty cool.

The UI is a separate package. Though you might just configure the firewall yourself at that point.

> Terminal both require an admin password

Not in my testing.


> in Recovery Mode, Terminal does require mounting the data volume first, which typically prompts for an admin password.

This is not my experience. The Data volume mounts automatically, and there's no password prompt.


I concur, that is the normal behavior without FDE. But besides, you can still use the Terminal of _any_ other bootable OS X disk, not just the recovery itself. With FDE, neither of this will work.

I think you missed the point. The entire article is about specialists: astrophysicists. The problem with AI is that specialists are delegating their thinking about their specialty! The fear here is that society will stop producing specialists, and thus society will no longer progress.

You are assuming that set of specialists are fixed system! That's not the case. With change in technology, you would get more and more specialists, the same way Agricultural revolution allowed for more specialists to exist.

This comment sounds like hand-waving to me.

The author describes specifically how specialists are produced and how AI undermines their production.

No, we won't get more and more specialists literally "the same way" as the agricultural revolution. You need to be much more specific about how we'll get more specialists under the incentive structure created by AI, otherwise this sounds like some kind of religious faith in AI and progress.


I can't tell what specialists we will get the same way you wouldn't be able to tell me we will have Linux Kernel specialists at the year 1945.

People do more things with AI.

More things = more inventions = the field growing.

The field grows and people become specialists on what used to be a small or trivial.

A mathematician in 1500's wouldn't think algebraic topology would be a specialisation.


> I can't tell what specialists we will get the same way you wouldn't be able to tell me we will have Linux Kernel specialists at the year 1945.

How about addressing astrophysics specifically. What are you claiming about it? Are you claiming that in the future, we won't need astrophysicists at all, AI can do all of our astrophysics for us, freeing humans to specialize in... other subjects?

And doesn't the same problem exist for Linux kernel specialists? Why even become a Linux kernel specialists when AI can write your source code for you?

> people become specialists

This is precisely what is in question.

> A mathematician in 1500's wouldn't think algebraic topology would be a specialisation.

The specific subjects have changed over time, but the production of specialist mathematicians hasn't really changed. It takes hard work, grunt work, struggling, making mistakes and learning from them, as well as expert supervision. The problem with AI is that it encourages and incentivizes intellectual laziness, the opposite of what is required to produce specialists.

A related problem: LLMs have been trained with papers written and supervised by Alice-type specialists. There's a common claim that LLMs will hallucinate less in the future, but I think that LLMs will hallucinate more in the future, when specialty fields become dominated by Bob-type "specialists" who have a harder time distinguishing fact from fiction. When LLMs have to train on material produced by earlier versions of LLMs, the quality trend will go down, not up.


> The specific subjects have changed over time, but the production of specialist mathematicians hasn't really changed. It takes hard work, grunt work, struggling, making mistakes and learning from them, as well as expert supervision. The problem with AI is that it encourages and incentivizes intellectual laziness, the opposite of what is required to produce specialists

Let's take the example of economics. Economists use ideas in Mathematics like integrals, statistics, PDE's and so on. They know that these concepts exist. They know how to apply them. They don't know these concepts deep enough to make progress here.

Do you think that Economists should deeply learn integrals, PDE's, Functional Analysis and Differential Geometry and all other concepts they use? Or do you think its better for them to focus just on their specific domain while learning just enough from other domains?

You keep coming back to AI replacing mathematicians. I'm not making that claim. I'm not saying Linux kernel specialists will be replaced by AI. I'm simply claiming that not everyone needs to be Linux Kernel specialists. This is precisely what AI is allowing: it automates things I don't need to know deeply so that I can focus on things I do need to understand deeply.


> I'm simply claiming that not everyone needs to be Linux Kernel specialists.

This is an uninteresting and indeed silly claim, because nobody has ever asserted the opposite.

The point is that society needs some Linux kernel specialists, and some astrophysicists, but AI is undermining their production.

> This is precisely what AI is allowing: it automates things I don't need to know deeply so that I can focus on things I do need to understand deeply.

The submitted article is about how AI is automating the things that a specialist does need to understand deeply. It's about so-called astrophysicists using AI to produce astrophysics papers, not about how non-astrophysicists use AI to produce astrophysics papers so that they can focus on whatever their non-astrophysics specialty may be, if they have any specialty.


I'm responding to this quote

> Frank Herbert (yeah, I know I'm a nerd), in God Emperor of Dune, has a character observe: "What do such machines really do? They increase the number of things we can do without thinking. Things we do without thinking; there's the real danger." Herbert was writing science fiction. I'm writing about my office. The distance between those two things has gotten uncomfortably small.

If we both agree that an astrophysicist may not need to understand things (even in their own domain) to make progress then we are in agreement. Not all the things a researcher works on while writing their paper is useful or necessarily done by them manually. In such cases it becomes necessary to let LLM take over.


> I'm responding to this quote

> > Frank Herbert (yeah, I know I'm a nerd), in God Emperor of Dune, has a character observe

The article author and I share a love of Frank Herbert, God Emperor of Dune, and the quote in question. Nonetheless, it's a mistake to focus on this quote rather than on the rest of the article. The quote is nothing more than a nice literary reference; it's not central to the argument.

The character who spoke the quote is a magically prescient human-sandworm hybrid, thousands of years old, speaking to his distant relative who was specially bred by him to be invisible to the magical prescience, so let's take the quote with a grain of... sand. ;-)

> If we both agree that an astrophysicist may not need to understand things (even in their own domain) to make progress then we are in agreement.

Your parenthetical remark is actually the main problem!


This blog post is self-promotion, essentially an advertisement for a paid product, Lubeno, submitted by the developer of the product.

... on a website owned by the VC that invested in the developer.

I believe that the ideas in the blog post are novel enough and should spark curiosity and interesting discussions. Also I submitted this last week, someone must have hand-picked and given it another chance because it's a good fit for HN.


> ... on a website owned by the VC that invested in the developer.

Thanks for disclosing the financial conflict of interest, but this doesn't change the self-promotion factor.


> this is precisely the kind of thing that will help humanity outgrow the dark age of war, inequality and climate mismanagement.

How do you figure? The previous Moon missions certainly didn't accomplish that.


The key phrase is "kind of thing". It certainly does matter what kinds of things we focus our attention on as a species. I think you would have to be quite cynical to think that progress in spaceflight over the past 60+ years hasn't had a positive impact.

> I think you would have to be quite cynical to think that progress in spaceflight over the past 60+ years hasn't had a positive impact.

Spaceflight aside, how exactly has humanity started to outgrow war, inequality, and climate mismanagement? Call me cynical, but I'm not seeing it.


Global rates of poverty are 83% lower than they were in 1969 when we landed on the moon.

So actually, millions of lives have massively benefited from science and technology. To be cynical in the face of all that is a personal take, not a reflection of the facts.


So landing on the moon triggered a reduction in global rates of poverty? do you have any research or citations for this claim?

Vaccines, Mobile Phones, Internet, GPS (How do you think container ships navigate), High yield seeds/fertilizers and the Green Revolution, Weather Satellites, I could go on.

It's really getting tiring repeating this stuff over and over again to the anti-space crowd.


It’s not the anti-space crowd.

You’re arguing against the misanthrops. To them, nothing humans could do would be good enough. We could end slavery in the West and they’d accuse us of not ending slavery enough.


Vaccines were invented during the moon landings? High yield seeds and fertilizers are due to the moon landings? The internet was invented due to the moon landings?

You didn't provide any citations that show any of the above has lifted people out of poverty. Please go on, and maybe tell us how ships navigated the seas before GPS, sounds impossible.

There are no causal connections between going to the moon and lifting global poverty. In fact, the money spent on going to a dried up satellite could have lifted people out of poverty.


> Global rates of poverty are 83% lower than they were in 1969 when we landed on the moon.

Obvious post hoc fallacy


It’s only a fallacy if the purported facts are fallacious.

And in the case of lifting most of humanity out of poverty, two things are responsible: capitalism and technology.

You can argue that China is a communist state, but it’s the allocation of capital to things that matter that has enable China to thrive.


> And in the case of lifting most of humanity out of poverty, two things are responsible: capitalism and technology.

You alleged above it was due to the moon landings that people were lifted out of poverty. Do you understand the difference here?


Was not the space race, and the cold war context it happened it, a driving force in pushing technological advances forward?

I'm sorry, so now it's not capitalism, technology, or the moon landings, but the cold war context? Could you pick a specific "event" you believe lifted so many people out of poverty, and provide research or supporting documentation?

> It’s only a fallacy if the purported facts are fallacious.

These don't appear to be the words of someone who understands what the post hoc fallacy is.

In any case, the subject is not "capitalism and technology" generally but rather manned Moon missions specifically.


Just because one thing happened after another thing, doesn’t mean the first thing caused the second thing.

Happy now?

However, sometimes it is true that the first thing caused the second thing.

Therefore, it’s only a fallacy when it’s fallacious.

My argument is that going to space was an allocation of capital that mattered in driving technology forward and improved the lives of everyone.


You don't solve these problems in a single step, but notice how space imagery and analogies pop up every time people try to talk about peace, global problems, mutual empathy, understanding, etc. The Pale Blue Dot, images of Earth from orbit or the Moon, etc. Those are anchors in public consciousness, competing in memetic space with usual divisive, dystopian, hope-draining pictures and soundbites - we need more of them to improve on the big problems, and we absolutely would not have them if not for people actually flying to space.

Or, put differently, space exploration is one of the few things "feeding the right wolf" for humanity at large.


It's crazy to believe that people who believe in one holy book are killing people over another holy book in countries like (but certainly not limited to) Nigeria, while another country launches people to the moon.

But, alas, I agree with you. There's no way out but through I guess.


You seem to be forgetting that the country launching people to the moon is primarily of one holy book and is currently bombing the people of another holy book.

The United States is not a Christian country and is not at war with anyone due to religion. I know you're talking about Iran but Iranian Christians are as affected as Iranian Muslims. Muslim countries in the area have pushed America to continue this war.

I am completely against this military excursion. Just an honest takeaway. A lot of rhetoric in America on religion is due to people's religious trauma. I blame American evangelicals.


And mainly in the name of these holy books too lol. The forgetfulness of people when they see news like this is always funny to me.

That other country has also people killing other people over a holy book.

That this dissonance hurts, already tells you why space is important.

> You don't solve these problems in a single step

Obviously, but there's no evidence that the previous Moon missions were a step toward solving the problems.

> notice how space imagery and analogies pop up every time people try to talk about peace, global problems, mutual empathy, understanding, etc.

You think these problems will be solved with... photos?

How many more photos do we need? Everyone has seen the photos already. I'm sure Putin and Trump have seen the photos of Earth.


Nobody it'll say space exploration will alone solve those problems. But it helps, and can help more - much more, if we go all the way in and establish permanent economic activity and eventually settlements in the space near Earth and beyond.

> if we go all the way in and establish permanent economic activity and eventually settlements in the space near Earth and beyond.

Could you please explain exactly how these would help to stop war and inequality?

As far as I can tell, space exploration is going to exacerbate inequality, for example, by making Elon Musk even more obscenely wealthy than he already is.


Is the problem inequality or rather poverty? Because those are not the same thing.

What we've done in space has absolutely helped with poverty. It makes weather forecasts possible, which helps even the poorest farmers.

This can happen at the same time a handful of people become obscenely wealthy from it.

Though in Musk's case, I suspect the wealth is a bubble which will pop before he can cash out more than 8% of it.


> Is the problem inequality or rather poverty? Because those are not the same thing.

According to the OP, inequality: "Regardless of whether this particular mission is perfectly planned, this is precisely the kind of thing that will help humanity outgrow the dark age of war, inequality and climate mismanagement."

> What we've done in space has absolutely helped with poverty. It makes weather forecasts possible, which helps even the poorest farmers.

Are you talking about manned Moon missions or unmanned Earth-orbiting satellites? To use your own words, those are not the same thing.

In any case, poverty is a policy decision, a refusal to redistribute the wealth.


This is a policy decision insofar as the policy isn’t to liquidate entire groups of people over class and status resentment. “Just redistribute the wealth bro, it’ll work this time bro I swear let’s just do a redistribution”.

> “Just redistribute the wealth bro, it’ll work this time bro I swear let’s just do a redistribution”.

Bro, have you considered that NASA, the topic of this submission, is government redistribution of wealth via taxes?


Yeah, the difference is that NASA is cool, and lighting money on fire for utopian and inevitably corrupt money transfer schemes is not.

Hope that helps.


NASA may be cool, but the main reason SpaceX was able to undercut old launch providers was all the I Can't Believe It's Not Corruption of pork barrel spending by those old launch providers.

So SpaceX made space cheaper, was good value for the US taxpayer, and was also a money transfer scheme from the government to him. (Worse with Tesla, but this isn't about Musk just SpaceX).

That said, now there's questions about if Musk is corrupt with all those US government ties that result in suspicious direct pressure on non-US governments, including with Starlink which even if theoretically separate to SpaceX is obviously functionally inseparable at present.


> NASA may be cool, but the main reason SpaceX was able to undercut old launch providers was all the I Can't Believe It's Not Corruption of pork barrel spending by those old launch providers.

FWIW, SpaceX did literally what NASA paid them to. It might be no one dared to hope that the Commercial Space budget will turn out so spectacularly effective at disrupting legacy structures of corruption, but the point of the exercise was still to pay private players like SpaceX to make access to space cheaper, and they absolutely delivered on that. This wasn't a competition between public and private interests, it was a successful cooperation.

> So SpaceX made space cheaper, was good value for the US taxpayer, and was also a money transfer scheme from the government to him.

Obviously paying someone to do something is a money transfer, and if the payer is the government and recipient a private organization, it is a transfer of money from government to private interests. Same happens every time a federal employee buys a coffee on their way to work.


> Hope that helps.

It doesn't.

I think that helping the less fortunate is cool, and launching people to the Moon is lighting money on fire for utopian and inevitably corrupt money transfer schemes.


Well you’re in luck because we spend 4-5x the NASA budget on things like SNAP alone. Still not enough? Too bad!

> “Just redistribute the wealth bro, it’ll work this time bro I swear let’s just do a redistribution

Literally 100% of taxes work like this, it happens every monthly paycheck.


That's part of a general meme shift. 60s tech was defined by a mix of fear, awe, and optimism. Apollo had elements of all three.

There was a confidence underlying all of them. From the New Deal to the late 60s, there was a public belief a better future was possible.

2020s tech is defined by fear, pessimism, and dystopia. The utopian edge has either gone or been replaced by horrific anti-utopian tech - surveillance, manipulation, exploitation, and irrationality.

Tech has become anti-science. Musk's DOGE cut around $1.5 of science funding, science education, and NASA exploration.

The naive sense that a better future is possible, and tech will make it happen, has almost disappeared.


Sparked the environmental movement, to name but one major impact.

> > The previous Moon missions certainly didn't accomplish that.

> Sparked the environmental movement, to name but one major impact.

It...really didn't. There was a new wave with a different political orientation (less conservative/elite) in the environmental movement roughly contemporary to the space program from—the 1950s through the 1970s—but it was driven by a variety of human driven (nuclear testing, oil spills, etc.) environmental disasters combined with more modern media coverage that occurred in that time than by the space program itself.

I know there are people who try to ignore all that and pretend that the whole thing was just the Earthrise photo in 1968 but much of the development of the new character of the movement happened before Earthrise, and even what happened after generally clearly had other more important causes.


Regardless of what you think of those first shots from Apollo 8, you have to admit they put things into a different perspective for a lot of people. Seeing the whole of the Earth like that moved a lot of people into realizing this planet is worth saving. That one image was a significant moment causing such a spike in people paying attention that it can be forgiven for being confused as the thing. It's not like John Muir needed to see the Blue Marble image to start his movement. It's just so many more people did

> Regardless of what you think of those first shots from Apollo 8, you have to admit they put things into a different perspective for a lot of people.

“Regardless of what you think about X, you must think Y about X” is a particularly tiresome rhetorical device, but its also being deployed as part of a motte-and-bailey argument here.

> It's not like John Muir needed to see the Blue Marble image to start his movement. It's just so many more people did

Blue Marble (1990) is a completely different image than Earthrise (1968), and Earthrise was only adopted as a symbol of the environmental movement because the movement was already ascendant when it came out, not because it was the trigger for it.


I didn’t say it was the sole cause of the environmental movement, you’re being silly.

Also wrt. "climate mismanagement", pretty much all tools we get to measure climate exist because of space program, and many require it to function.

Okay well we have those already and it hasn't really changed anything.

> we have those already and it hasn't really changed anything

What’s the term for antibiotics having been so successful that we forget all their benefits?

The Montreal Protocol worked [1]. It probably couldn’t have without our satellite data.

[1] https://en.wikipedia.org/wiki/Montreal_Protocol


Disagree about the change. Even the fact that you know and care enough to argue this on-line is a change that can be attributed to space missions - and it's even more true about the overall global conversation about climate situation, and all activities taken to help with it.

These things do take time though.


This is absurd. Have you heard of Rachel Carson's 1962 "Silent Spring"?

No, what’s that?

QED


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: