Tom Murphy VII, who posts as Tom 7, publishes offbeat research projects such as NES-playing programs, printable DOS executables, and odd hardware and floating-point experiments.
Commenters describe his work as amazing rabbit holes that make them fans, and recommend his papers on fluint8 and GradIEEEnt.
The problem with the toxic max-security[0] arguments is that it is always possible to invent a more gullible fool. There is no security measure that will perfectly protect a user from getting scammed out of everything, save for scamming them first and then treating their property as your own. That's the Apple argument. The only way you can keep people secure without falling into the same rhetorical trap Apple employs is with bright red lines that you swear not to cross, no matter how many people wind up getting scammed, because at the end of the day, people are adults, and their property is theirs.
Furthermore, we have to acknowledge that scam-fighting is not Google's job. They can assist with law enforcement (assuming they do not violate the rights of their customers while doing so) but they should not be making themselves judge, jury, and executioner in the process.
If you want a more concrete technical recommendation, locking down device management profiles would be a far more effective and less onerous countermeasure than putting a 24-hour waiting period on unknown app installs. Device management exists almost exclusively for the sake of businesses locking down property they're loaning out to employees, but a large subset of scams abuse this functionality. Part of the problem is that installing a device profile is designed to sound non-distressing, because it's "routine", even though you're literally installing spyware. Ideally, for a certain subset of strong…
>Frankly, writing directly in emojissembly is a miserable, painful slog, lacking reasonable immediate values, arithmetic operations, or sane jump offsets. Therefore it is sensible to construct a loader that can simply build 8088 code in memory and jump to it.
If you think that self-modifying loader is too easy, I recommend Tom7 take on printable x86:
>This is like telling the waiter that you don’t eat poultry but eggs are okay, and then they bring you an egg, but that egg hatches into a chicken right after they bring it to you. Come on.
https://tom7.org/abc/paper.pdf
There was an AI created the absolutely brilliant Tom7 on on his YouTube channel 'SuckerPinch' on April 1, 2013 that paused a game of Tetris instead of losing. In my opinion, Tom doesn't get enough credit for his work. He released his AI a full 8+ months before DeepMind released their Atari playing AI.
Watch the whole thing, it's delightful. The AI pauses Tetris right before it loses at around 16mins into the video.
https://www.youtube.com/watch?v=xOCurBYI_gY
I also recommend his other videos. Brilliant guy.
Edit: Here's the paper http://tom7.org/mario/mario.pdf
the reach is by rough estimates ~2.5–6 million websites globally, 2–5 million of those in Russia and 0.3-1 million in Iran
Whatever USofA, it's not hard to have their own cosmodrome and certificates.
Tangential, in 2026 website certificates feel like nothing, disposable automation artifact, toxic max-security[1], vehicle for those who rent seek, fingerprint.
[1] https://tom7.org/httpv/httpv.pdf
Fantastic. While it's not quite at the level of Bök's work, an inevitable comparison is all of Tom7's projects (and in particular http://tom7.org/harder). I always love when this kind of stuff pops up onto HN. I feel that we're all interesting and experimental, and sometimes need a nudge to remember that people can do weird, neat stuff.
Seems to be inspired by Tom7's "You can't win this game, it exists only to destroy your mind" [1]. Tom7 is like an indie intellectual/artistic hero of mine. Be sure to check out his other stuff. [2]
[1] http://entire.spacebar.org/ [2] http://www.tom7.org/