Hacker Newsnew | past | comments | ask | show | jobs | submit | contravert's commentslogin

Watching the video, it's not really clear how this game is substantially different than a normal mobile game. What is the actual mechanism here for treating ADHD?


If the gameplay amounts to what's in the video, it seems to be based on a poor or at least vastly simplified understanding of what ADHD is, seems to be training some a simple kind of multimodal attention and context switching between simultaneous things, but pretty much any complex video game will do that. Being designed around that premise seems to be taking the name "attention deficit" a bit too literally given the wide array of symptoms that have little to do with that kind of skill. Anecdotally, as someone with ADHD, I seem to be naturally better at that kind of "doing 2 things at once" skill than my peers anyway. Perhaps we're just seeing a tiny slice of the game and there's a lot more to it, but my experience of healthcare software and startup culture makes me think no, that's probably the entirety of the game, dressed up in some technobabble and references to medical journals/papers without much actual evidence-based efficacy.


Placebo effect for parents who pay money for this, I assume.


You definitely won't see anything like this in the US: https://www.businessinsider.com/china-tells-evergrande-found...

Like in 2008, bankers made a killing selling toxic products and socialized all the losses when everything came crashing down.


Actually it's the US government that made a killing with TARP loans and acquisitions.

Bankers lost their shirts in the whole thing - having to pay interest on those TARP loans or had to sell their shares to the government to get capital to survive.


List of banks acquired or bankrupted during the Great Recession

https://en.m.wikipedia.org/wiki/List_of_banks_acquired_or_ba...


There is clear intellectual interest in comparing and contrasting why certain events receive outsized attention compared to objective outcomes (e.g. number of casualties).


I just want to add my $0.02 currently working at a games studio that is integrating AI generated art into our art pipelines.

Midjourney definitely generates really high quality art based on simple prompts, but the inability to really customize the output basically kills its utility.

We heavily use Stable Diffusion with specific models and ControlNet to get customizable and consistent results. Our artists also need to extensively tweak and post-process the output, and re-run it again in Stable Diffusion.

This entire workflow is definitely beyond a Discord-based interface to say the least.


If you would give a talk about this, I would watch it - despite being out of the graphics for almost 10 years now. Really want to hear from the trenches about the workflows, benefits and challenges you have.


Here is a test I did the other day of rough sketch (hand drawn) -> clean line work (AI) -> coloured (AI). This workflow gives 100% control over the output because you can easily adjust the linework in the intermediary step.

https://twitter.com/P_Galbraith/status/1649317290926825473?c...

This is using Stable Diffusion and the Control Net Lineart Model. The coloured version is pretty rough but it was a quick test.

In my opinion Stable Diffusion is vastly superior to Midjourney if you have the skill to provide input to img2img/ControlNet.

I have some other earlier workflow experiments on Youtube if you're interested in this kind of thing https://www.youtube.com/pjgalbraith


use https://github.com/deep-floyd/IF, it uses LLM to generate exact art you need.


The image quality of DeepFloyd is much lower than Stable Diffusion 1.5 though, it's a pretty major tradeoff. Can definitely be part of the workflow since it really is good at composition, but right now it's not a replacement.


Deep Floyd doesn't allow commercial usage, such as a game studio using it.


They said that they will change the licence for the final version IIRC.


Really curious about the challenges you've been seeing as your art team's been trying to integrate AI generated art into your pipeline.

Excited by the potential for artists to accelerate their creative process with advances like ControlNet, but makes sense there's a lot frustrating about the process today.

Exploring tools that might help. If you might be interested in chatting, email me at tom@adobe.com. Thanks!


> AI generated art into our art pipelines

I'd be interested to know where the art ends up in the game? Do you mean 2D backgrounds and billboards in-game? Or are we talking cut-scenes and menu screen art?


Although smart contract audits are pretty much security theatre where the auditor charges $10k-$30k to run your code through a program, rug pulls are way more common just through simple methods.

A few common ways:

1. Use your admin privilege to withdraw or upgrade the smart contract to drain the funds

2. Withdraw all liquidity for your token and disappear

3. Sell the entire token supply all at once, which is functionally equivalent to (2)

4. Pretend to get "hacked" and lose your private key

5. Program a backdoor into the smart contract (the least common way). Some of these are economic in nature (e.g. frontrunning), which can't necessarily be found in an audit


Although a flashloan was used in this exploit, that's just a tool to leverage a fundamental flaw in the protocol. Flash loans clearly do more harm than good, so it's completely irresponsible for major DeFi platforms to still have this feature at this point.

The actual flaw is in Cream's oracle design for certain exotic long-tail assets. Basically, smart contracts need to get the price of an asset, and Cream was using the most naive way of simply calling the equivalent of asset.getPrice().

The reason this approach is critically unsafe is highlighted by this incident. A flashloan can alter price, borrow assets based on the new price, then return the price to normal before the transaction is finished.

This is not merely a coding bug but a basic design flaw that should have been caught by anyone with even a basic understanding of oracle design. It really reflects poorly on the competence of the entire DeFi space, considering CREAM is a pretty major protocol.


I think that a lot of the motivation for flash loans is that they democratize capital-intensive arbitrage attacks, making the attacks happen sooner, making all of the insecure contracts fail fast and improving the overall security of the DeFi ecosystem. In other words, it's supposed to make platforms fail and people lose money, because each hack exposes a bad contract and takes it out of the environment.

If flash loans didn't exist, then an entity with sufficient capital can still alter prices and exploit differentials in borrowing costs to profit. This is a common complaint about the mainstream financial system - examples include market corners, short squeezes, George Soros breaking the Bank of England, or the Fed artificially lowering borrowing costs for the U.S. Treasury. But they're limited to people who already have a billion dollars. Flash loans let everybody have a billion dollars, so that if there's an arbitrage opportunity you don't need capital to take advantage of it.


> In other words, it's supposed to make platforms fail and people lose money, because each hack exposes a bad contract and takes it out of the environment.

I can already hear my grandma say "I'm glad I lost all my savings, now the platform gets safer."

Apart from that, it's naive to think that this makes the ecosystem safer. We still have SQL injections and XSS in the wild even though everybody should know how to avoid them after literal decades of exploits.


The issue with SQL injection and XSS is that there is usually no cost to the website with the vulnerability. They can keep on doing business as usual, after a suitable mea culpa, without significant consequences.

When there's a crypto vulnerability, the contract usually gets drained. It goes bankrupt. There is no funds and no viable business there. Therefore, there's not just a significant incentive to guard against security holes, but there's also a selection mechanism.

People underestimate the power of bankruptcy, failure, death, revolution, nonexistence, and other selection mechanisms. Selection bias is the most powerful force in nature, because natural systems without a selection mechanism tend to get selected away. Arguably a lot of the problems with our current economy come about because we fail to let things fail.


Flash loans are incredibly powerful and allow those without capital to take advantage of arb opportunities. I don't believe it is a given that they do more harm than good at a philosophical level. Not to mention, this exploit still exists without flashloans (however, anyone with $500,000,000 in crypto has likely KYC'd somewhere, so the risk profile is different).

The solution is better coding practices, and plenty of platforms have protections against this.


> This is not merely a coding bug but a basic design flaw that should have been caught by anyone with even a basic understanding of oracle design. It really reflects poorly on the competence of the entire DeFi space, considering CREAM is a pretty major protocol.

How is CREAM a "pretty major protocol"? It was forked from Compound so no innovation on their own, and their token is not even in the top 100, and their platform is around #30 compared to others in DeFi. There is so much shit things in both DeFi and Cryptocurrency that it's unfair to judge other projects based on how bad they are.

It's like saying a well-written Rust project gets bad rep because some PHP developer once had a SQL injection, and somehow all programmers are the same...


Since Hacker News is the place for pendency, let me point out that the oracle here worked 100% correctly, and correctly reported the actual value of yUSD.

yUSD's value did actually double during the attacker, because the attacker gave yUSD holders millions of dollars as part of the attack.


I’m a total cryptocurrency noob. Could you elaborate a bit further on what an oracle is in this context? I’m familiar with the term oracle in crypto for things such as a padding oracle, but I feel that what you’re referring to is a different kind of oracle.


An Oracle is a way to tell the blockchain about external data like the price of something in the general markets. As I understand, a flash loan is a loan that is both created and paid in the same blockchain transaction (thus if it can't be paid it won't be included in the transaction), and that the exploit here was to both modify the price given by the oracle twice (up and down) and have a flash loan in the middle, all in the same transaction.

I hope I'm not adding to the confusion because I am not an expert.


that clears a lot up, thank you.

does the oracle in this specific case use external data? and combine that with internal / blockchain inputs? how does one sanitize all those inputs?

are oracles transactional, ie if you manage to alter the state of an oracle within a contract’s transaction, other transactions don’t get any “dirty reads” from the oracle, etc?


An oracle is just a provider of some kind of off-chain data. For example if I wanted to incorporate the stock price of AAPL in my smart contract I would need to "trust" some off-chain (and possibly centralized) provider of data to deliver that information to my smart contract.

The obvious problem is that if that data is manipulated somehow, the smart contract can potentially execute with malicious information.


What made it click for me was that smart contracts are similar to stored procedures in db speak.

So in this case someone wrote a smart contract/stored procedure that:

- loan $a_lot_of_money from $defi_a

- do something with $a_lot_of_money to confuse an oracle (e.g. a price feed)

- exploit $defi_b who relies on above oracle data

- return $a_lot_of_money to $defi_a

This all happens in a single "db transaction" so as long as $defi_a receives its money back the tx is going to pass.

If $defi_b relies on an oracle that takes it's data from on-chain, and thus is manipulatable with $a_lot_of_money, it is suspectible to those attacks.

To counteract this, $defi_b could only rely on oracles that are secure against manipulation from $a_lot_of_money, but they don't always exist.

This mechanism can be used for good (riskless arbitrage across decentralized exchange) or for bad exploits.


Others have answered, but there is a tool that helps with trusting oracle data, called Chainlink ($LINK)

Chainlink uses a proof a stake (POS) concept where it calls out to a number of LINK nodes that have staked assets for liability in order to win rewards. With all of the Oracles data it goes through an algorithm, for simplicity, let's say the average of all the prices it received, gives the nodes a reputation score, on top of that it uses the reputation of the nodes to choose who ultimately fulfills the request, the number of tokens staked will also take into account. If reputation starts going negative, they could lose the tokens they have staked.


Chainlink solves a lot of this. Another irresponsible move by Cream.


How many PMs does Core have compared to other PAs?

The problem isn’t really with SWEs but with the entire incentive structure of PMs and the product management chain.

They in turn are able to get more SWE headcount for these unfruitful ventures and end up failing upwards.


Core seems to have fewer PMs but we have similar problems with triaged products due to lack of heads. The PMs we do have also struggle with getting heads just as much as the SWEs do.

At the very least, I think it is clear that Google’s product failings are not just a result of the promo system.


It's interesting how one can simultaneously think China is "war mongering" while at the same time see nothing wrong with advocating starting a war immediately.


This racist superiority complex is the pride before the fall. What exactly is TikTok's recommendation algorithms or Huawei's 5G technology cloning?


Here's a backgrounder on the Huawei IP thefts: https://www.zdnet.com/article/us-charges-huawei-with-rackete...

TikTok's For You algorithm is pretty clearly based on YouTube and Netflix's published recommendation platforms, but I'm not sure why you're framing this so narrowly. The entire product is a Vine clone and they regularly steal content for marketing purposes (c.f. https://twitter.com/xTempex/status/1182185566999318529).

We don't really see this level of abuse from American or European firms who have ethnically Chinese executives. It's not really a matter of race; it's a corporate culture that is more common in highly-competitive markets with weak IP protections. Trying to frame it as racist isn't really productive, especially since the parent comment wasn't specifically talking about Han Chinese, but about the nation.


> TikTok's For You algorithm is pretty clearly based on YouTube and Netflix's published recommendation platforms

This is true of virtually any recommendation system implemented anywhere and YouTube and Netflix most certainly did not invent any of the basic concepts involved. In fact the core algorithms for recommendations are very classic and the newest techniques can be credited to Microsoft research and Geoff Hinton.


There is nothing wrong with being culturalist, to be so is absolutely not racist. A black, white, etc orphan child raised in communist China, would grow up in the same culture, with the same beliefs.

Those that decry 'racist', when one complains about China are indeed the true racists, for they think culture and race = the same thing.


They take it a step further by conflating the CCP with Chinese people, Chinese culture and the Chinese nation. This is a tactic I frequently see where proponents of the CCP seek to call any criticism or skepticism racist.


As an Israeli who is not very supportive of the Israeli government, I am very well familiar with this tactic.


I think the parent comment was talking about innovation in the sense of Peter Thiel's idea of Zero-to-One innovations, not step-by-step improvements of existing technology. In this sense I agree because chinese culture is indeed seeking harmony and unity a lot and thereby seems prone to groupthink and to the detriment of new and different ideas. (Heresy and novelty, anyone?).


It's the risk that has to be taken. Also it isn't racist a lot of techie in silicon valley are asian. It's a difference in philosophy if anything.


How is that racist? I’m talking specifically about the cultural aspects of growing up in China.


If the US didn't pay 3-4x the salary for software engineers compared to Canada, I wouldn't be here either. If China paid me more, I'd move in a heartbeat.


This comment encapsulates in a very crisp way why people are skeptical of immigration free-for-alls. Many feel the same way you do, that it's just a method of economic extraction and they don't have any skin in the game for the long term health and viability of the host Country.


Why should global citizens be tied to an outdated Westphalian concept of a nation state?

Note that during the time they're in a certain country, these experts are most likely paying taxes at the top tax bracket.


Because there is no such thing as a "global citizen", first of all. And just taking a look around, the death of the nation state must've been greatly exaggerated in some circles.

>these experts are most likely paying taxes at the top tax bracket.

Who cares. This is a thinly veiled attempt to say that any person's worth in a given society is approximately equal to how much they pay in taxes - which is insane, for a great many reasons.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: