Claude Code wont let me use their sub with one as far as I remember. So I'm stuck with their convoluted TUI. It does what I need, and when it doesn't I just build tools that Claude consumes. The new "Artifacts" feature has helped a bit though.
People would have to use it in some drastic catastrophic way for them to force it out in an update, which they might push it out in the next macOS update, which don't come nearly as frequently as Windows bloatware updates do.
This seems important enough to just send out a patch update that removes the cert and does nothing else. But apparently at least a couple people at Apple disagree; or, something I'm not familiar with makes that type of update impossible.
I mean, I agree with you, I'm just basing my thoughts of what I've seen managers at different companies prioritize as "important" even when engineers cry that a security issue should be of higher priority...
> 2022: Apple's iPhone Emergency SOS gave Globalstar a major new purpose.
I wondered who it was that Apple was using for that but never looked into it. Was it for any particular reason on Apple's part other than it probably saved them a bundle compared to going with literally anyone else? Or is there something else I'm missing? Just curious. I wish I could be a fly on the wall for some of these corporate events nobody thinks too much about.
Globalstar's technology over everyone else. They've just been crude bent pipes up in the sky. They still are. C-3 is just a bunch of new radio repeaters.
Globalstar's original network was just CDMA over the bent pipe satellite link, their second-gen Duplex network (sold as Sat-Fi 2) was an attempt to go WCDMA, then Apple dangled a lot of cash at them to build out and drop the entire Sat-Fi 2 product, the entire WCDMA core, and go roll Apple's new toys out for them. I'm assuming C3 is going to be heavily LTE-based if it isn't already at this point.
(I had a Sat-Fi 2 device and it was an interesting and short-lived experience. I was also there for the weird interim 201x satellite failure era - I remember having to pull up the Optimal Satellite Availability Tool to go see exactly how many long ~2-10 minute windows I could make phone calls in with a GSP-1600.)
((Double-fun-fact: The GSP-1600 is still actively used on Globalstar today, and it's one of the only tri-mode phones that existed of the era. It was satellite via GSTAR, then had CDMA for local calling and AMPS for the sticks. I had my GSP-1600 activated on a Verizon MVNO for local calls, which was a blast to use.))
Isn't that what all the hype about National Security Letters (and related events from those years) were all about? I never thought any of that went away, the media just stopped reporting on it. We had Lavabit and Snowden showing us how unhinged these things can get.
Even more unhinged once you realize that trust fund kids are regularly placed in three-letter agencies because those role provide literal immunity. Much better than just a simple diplomatic passport from some micro nation.
It's not only about assassinations or intelligence, things like organizing beauty pageants or producing snuff porn are valid duties for secret police. And this does not even touch the whole KKK thing. Those are the people writing the NSLs.
I've been saying the same thing, Aaron Swartz arguably contributed more meaningful things long before AI, and was basically forced to make one of the worst decisions a person can make (at least in my opinion).
If you're unaware of who he was, or what happened to him:
* He was one of 12 others who helped to spec out RSS' standard (when he was 14 years old).
* He is widely considered a co-founder of reddit, after merging with reddit, he rewrote the majority of its codebase from Lisp to Python.
* He was one of the reasons Reddit protested SOPA back in the day (the same day that good 'old Kim Dotcom was raided and arrested by the US, the irony of which being that they swore up and down that they needed SOPA in order to do what they did to Kim Dotcom).
* I didn't know this before: he also developed the markdown publishing format with John Gruber.
What happened to him?
He was charged with felonies for stealing PDFs for publicly funded research papers, he was tried as if he hacked these systems. He took his own life as a result of them throwing decades of prison time at him for what's hardly a serious hacking offense (seriously, Kevin Mitnick was way worse). Kevin Mitnick served five years, they were looking to throw up to 35 years at him, and a minimum sentence of seven years if he went to trial.
It is abhorrent to me that we have people doing more malicious hacks that get no repercussions. Someone at OpenAI / Anthropic should be 100% liable for criminal charges of what their AI models do. Need I remind everyone, that these models can run way faster than what we common folk can see, the speed at which they run these models internally can go so quickly that by the time the model is discovered to have hacked someone, it could very well be too late. Just try the "fast" feature of Claude Code, now imagine Claude launching thousands of sub-agents at top speed internally, the capacity for unprecedented destruction is the most concerning thing to me, I say that as someone who uses Claude every week.
>He was charged with felonies for stealing PDFs for publicly funded research papers, he was tried as if he hacked these systems.
He did hack these systems and MIT's network. They had video of him in the MIT wiring closet and a mountain of circumstantial evidence. I'm not saying it wasn't pursued aggressively out of political motivations, which seems supported if you dig enough, but the facts of the case were about more than PDFs.
What if they get blocked from the network and repeatedly change accounts, IPs and then MACs repeatedly to get around progressively escalating blocks from the network admins?
What if they hide a laptop in a wiring closet and then try to come back for it while covering up their face to hide from a camera inside of it?
What if they run from the police who try to stop them?
In any case, we don't have to have quibble over shades of gray, it's all in the well-documented write ups and court docs. Mens rea is easily established here.
> What if they get blocked from the network and repeatedly change accounts, IPs and then MACs repeatedly to get around progressively escalating blocks from the network admins?
If you think anyone who makes a new account in a videogame for getting an old account banned should be charged with felony hacking, that's certainly a position you can take...
> What if they run from the police who try to stop them?
Running from police officers isn't generally considered hacking.
What if they get blocked from the network and repeatedly change accounts, IPs and then MACs repeatedly to get around progressively escalating blocks from the network admins?
Was your response facetious? The AI labs literally do this, right now.
And ultimately, we'll never know what a court of law would have said because he chose (to the extent that anyone wrestling with the mental illness that is suicidal depression really chooses) to never have his day in court, unfortunately.
mitnick also just logged into shit with default passwords and got ppl to send him source codes and give him access to stuff. by todays 20-stage crazy ass exploits its also not really hacking... these things change over time.
If you leave the door to your house unlocked, am I welcome to come in, pop on into your utility closet, plug into a switch port and take everything your machines allow me to fetch?
I don't disagree with what he was doing from a moral standpoint or a hacker standpoint, but it's very easy to convict him.
This discussion typically devolves into an argument about what is "publicly accessible." No reasonable person (i.e. those who serve on juries - not autistic software engineers) would agree that someone who isn't even a student at a school is legally entitled to enter a building (unlocked or not), venture into their utility room and access protected computer resources.
Everyone loves to make this about JSTOR: they weren't the only victim. MIT was far more aggrieved; JSTOR blocking his Harvard account access and him proceeding to breach their TOS ("clickwrap agreements aren't law!!!") and circumvent their defenses isn't required to convict him of CFAA violations.
Why can't I go into a bank, sit down at a personal banker's desk who is away on vacation, plug into a switch port and do whatever I want? There's no lock on his cubicle, the door was open! This is the legal equivalent of "neener neener, I'm not touching you."
Mens rea is an important thing people love to sweep under the rug with this case:
• First and foremost: Why did he have to go to into a closet at MIT to fetch documents? Why not do it at home or a public library?
• Because of rate limits and/or authentication requirements. He *knew* he could not obtain the access he needed through other means, so he had to trespass to do it.
• Why did he cover his face with his bicycle helmet... just when passing by cameras?
• He wasn't some weirdo who liked to wear his helmet that way: he stopped immediately when he believed he didn't need to conceal his identity any further. He *knew* he shouldn't be there.
• He registered his guest account using false credentials: "Gary Host" and "Grace Host" - "Ghost"
• Why wouldn't he just use his real name if he believed what he was doing was legitimate?
• When MIT blocked his IP, he released/renewed and fetched a new one. Fine, no problem on its own, hard to prove intent there. When MIT subsequently blocked his MAC address, he proceeded to change one character and kept on downloading.
• Computer people will try to reduce this to "MAC addresses aren't legal identifiers blah blah blah." The beliefs of zealous third parties are completely irrelevant: direct measures were taken to prevent his access, he recognized and immediately circumvented them. He *knew* what he was doing. That's what matters.
• Why hide his hardware under boxes? In absence of all of the other facts, sure, one could argue that he didn't want students at this ultra-prestigious Ivy League school to steal his shit, but to a reasonable person weighing the totality of the circumstances: he was again concealing his actions because he knew they were wrong.
No one is sweeping mens rea under the carpet. That he knew what he was doing isnt in dispute - its that the punishment didnt fit the crime. If that standard were applied evenly, then the CEOs of certain AI companies would each be facing millennia in prison for the volume of copyright infringement they knowingly and wilfully performed.
If you had them on camera doing it and proof they did it knowingly and willingly, then you could.
Discovery forces evidence to be turned over, but only if it exists and you know about it. Does the evidence exist?
It did in Swartz’s case, unfortunately for him. We don’t excuse an individual just because it’s harder to hold a corporation accountable. States have immense power over corps old and new, btw, it’s a failure of the people to not demand that be exercised, but this whole discussion is a non sequitur already.
> you conceal your actions if you believe others will try to stop you
Which is conveniently exactly what the statute requires to establish criminality: knowingly exceeding authorized access. They have a lawful right to stop you (revoking authorization), you do not have a right to proceed anyway. This is the "wrong" and is accordingly a federal felony.
putting morality to the side in favor of legal pragmatism , certain jurisdictions classify the act of accessing data without prior authority as data espionage
What annoys me is that when I asked Claude to use code I had already written with selenium to scrape a web page, it refused and told me it wasn't going to get into an arms race with cloudflare. One rule for them and another for us.
by the way, a year after swartz worked on RSS (so when he was 15) he joined the creative commons foundation and helped create the technical architecture for it. what a guy
> He was charged with felonies for stealing PDFs for publicly funded research papers, he was tried as if he hacked these systems. He took his own life as a result of them throwing decades of prison time at him for what's hardly a serious hacking offense (seriously, Kevin Mitnick was way worse).
None of the federal charges really had anything to do with copying the files [1].
> Kevin Mitnick served five years, they were looking to throw up to 35 years at him, and a minimum sentence of seven years if he went to trial.
You are comparing the ridiculous DOJ press release number [2] for Swartz to Mitnick's actual sentence. You should compare like to like, so should be comparing 35 years for Swartz to the ridiculous DOJ press release number for Mitnick which was 200 years.
Do you have a citation for the claim that Schwartz was only copying "publicly funded research papers"? My understanding is that he was trying to pull all of JSTOR, which would be copyrighted papers going back to all kinds of funding models from many countries, not just US public-funded research.
Don't get me wrong, as a researcher myself most of us see him (and his successors in piracy) as heroes that make our work a lot easier by making everything so easily accessible, usually even more convenient than our own institutional libraries. But your claim sounds like inaccurate myth-building.
JSTOR is a major repository of twentieth-century humanities publications. When these come from the US, they are usually privately funded research. HN is dominated by a STEM crowd that tends to think only about that scholarship, which is often publicly funded, but in a discussion like this one needs a good familiarity with what JSTOR is and what it contains.
Eh, I assume the humanities are a tiny portion of the funding for academia. Their equipment is what, coloured pencils and expensive tea? Hardly anything compared to a large hadron collider.
I was referring to the comment about private vs public funding. Yes, the only relevant fact is about the morality of hiding knowledge behind exorbitant pay walls. Academics submit papers freely, and sometimes pay for the privilege, peer reviewers work for free, and then the rent seekers charge everybody to read it. It's immoral. I agree.
> He is widely considered a co-founder of reddit, after merging with reddit, he rewrote the majority of its codebase from Lisp to Python.
Internally, this was not the case in 2013. u/kn0thing and u/spez were considered the founders, their retired jerseys hung on the wall, and no one ever mentioned Aaron Swartz.
> He was charged with felonies for stealing PDFs for publicly funded research papers, he was tried as if he hacked these systems.
The Aaron Swartz case is important to know about and has catalyzed some good discussions about CFAA reform, but that specific case is a lot more complicated than your summary.
Before I begin: I agree that the punishment was too significant for the crime. I completely agree on that count. Discussing the facts of the case draws a lot of angry downvotes, so to be clear: I'm not saying he deserved any of these sentences nor that the laws are written well. I'm trying to explain the facts.
The PDFs were open to downloads on the MIT network. Straightforward downloading of the PDFs wouldn't have been a CFAA violation. The case became complicated because he started circumventing restrictions on the downloads. This escalated to breaking into a wiring closet and hiding a laptop in the closed-off infrastructure. Once someone breaks into physical infrastructure to circumvent access restrictions, it gets really hard to argue that they weren't doing a form of unauthorized access.
> He took his own life as a result of them throwing decades of prison time at him for what's hardly a serious hacking offense (seriously, Kevin Mitnick was way worse). Kevin Mitnick served five years, they were looking to throw up to 35 years at him, and a minimum sentence of seven years if he went to trial.
This is another part of the story that gets confused. Kevin Mitnick took a 5 year plea deal. The Swartz case plea deal was 6 months. The maximum sentencing numbers are repeated because they're shocking, but maximum sentencing was never on the table due to the low severity.
The plea deal (the correct comparison to Kevin Mitnick's case) would have been 6 months, not 35+ years.
One thing to note is that Aaron was, at the time, increasingly working in traditional politics, through his activist group Demand Progress[1] and his work with up-and-coming progressive politicians. I think he had come to the conclusion -- rather presciently -- that working in mainstream politics was the most effective thing he could do. Any criminal sentence would have severely hampered that work. I heard that played on his mind a lot.
There's a what-if story here: one of the people Aaron worked most closely with in this part of his life was a young Ben Wikler[2]. They shared a lot of views about how things should change, and how to change them. Watching Ben's career since then, I can't help but feel that Aaron would have followed a similar path. By 2025, Ben was senior enough in the Democratic Party to be a competitive candidate for Chair of the DNC.
I often wonder whether Carmen Ortiz[3], the U.S. Attorney whose office prosecuted the case, or any of the rest of that generation, realise what they did to the Democratic Party's future chances by unjustly targeting one of its most promising figures.
It's one of the parts of the story that highlights the tragedy of it: Swartz going through the process and out the other side could have bent mainstream politics. His story restonated, and continues to do so, with a technocratic community that itself gained a lot of political sway in the subsequent decades.
> This is another part of the story that gets confused. Kevin Mitnick took a 5 year plea deal. The Swartz case plea deal was 6 months. The maximum sentencing numbers are repeated because they're shocking, but maximum sentencing was never on the table due to the low severity.
I'm aware, though I will note, in the case of Kevin Mitnick the crimes were abhorrent, and I am sure Aaron was 100% in the wrong, and I don't think he should have gotten a slap on the wrist, but felonies + prison time for a few publicly funded PDFs is a bit drastic.
To be fair, I'm trying to remember things that happened over a decade ago, I could get some things wrong. I think me and you agree for the most part either way.
> To be fair, I'm trying to remember things that happened over a decade ago, I could get some things wrong.
The reason I know these things is because I remembered it the same way you did up until a few years ago. Then I re-read the case and was surprised at how much it differed from the version that has been repeated everywhere for years.
This is a serious misunderstanding of the Bartz case, which resulted in a $1.5B settlement on the part of Anthropic to authors whose works they pirated from LibGen
even back then, having 1 day in prison can forever impact your employment aspects. Perhaps the rising trend of internet influencer could have gotten around it, but it's less about the sentence and more about the federal government choosing to prosecute a young man over a situation both parties already settled.
Meanwhile, Claude does the same thing and it is deemed "progress" when the federal government profits from it.
Sure, but he also denied that plea deal, so he was definitely looking at possibly 7 years in prison. This corporal treatment or whatever you want to call it, of our legal system is a bit ridiculous... "Take our offer or its worse!"
It basically treats you guilty until proven innocent, which I hate. I know Aaron Swartz very likely did, it was an activist level "hack" but what if someone else "did it" and they threw the book at them, and they took the felonies despite not actually having done it? Lots of people have taken plea deals because its less costly than fighting the law in court.
My assumption is he did not want to plea guilty to a bunch of felonies, I think I read that this was part of it. It's rather extreme to throw that many years at someone like him AND felonies, I don't think he should have gotten a complete slap on the wrist, but what he did was literally web scraping PDFs, the kind that OpenAI and Anthropic do all the time and get away with, only instead of them being some authors IP, they were publicly funded in many, many cases.
In the US you have two types of legal systems, the state and federal level. Within each, you have misdemeanors and felonies. Misdemeanors are the lower level and cover non-serious crimes (vandalism, theft, minor traffic violations), and typically are fines or imprisonment of up to a year. They have no bearing on your rights as an American on either level. Some federal misdemeanors exist (poaching at natural parks or defacing monuments) but most federal crimes are felonies, leaving misdemeanors to the state’s discretion.
Felonies, however, impact your rights as an American. You cannot own firearms, you cannot vote, you cannot hold public office, and you are a “high risk” economically and socially, making loans and employment difficult. State-level non-violent felonies can normally be expunged/sealed over time for otherwise lawful citizens, but federal felonies never go away.
He denied the plea deal because he, as an activist, did not want to suffer losing those rights. The prosecution wouldn’t budge and was adamant in making an example out of him because he was a figure of hacktivism. They also desperately wanted the CFAA (a poorly worded law written by tech illiterates in 1986) to maintain its broad power.
For further context, this was a response to Anonymous and other would-be hacktivists, coming right off the heels of Anonymous’s Arab Spring campaign and the hack of HBGary. The Obama administration targeted Swartz to make an example out of him and scare future hacktivists, coinciding with the arrest of Sabu (the co-founder of LulzSec) and him becoming an informant to round up the current group.
Sure, but almost every state blocks it for the duration of your time in prison, at minimum. A fair portion are longer, and some states make it almost impossible for federal felons to vote.
That’s federal, which has no barriers. It’s left up to the states to decide how state level offices work, and being a convicted felon is a knife in the back of any potential political career. In NY specifically (where Swartz lived) you need a “Certificate of Good Conduct” or else you can’t run, and it would have taken (assuming he got convicted with 7 years as was threatened) 8-13 years for him to be legally able.
The exact specifics don’t even matter for Swartz’s case though, because for him it was more ideological than practical.
Because it's true, and he tried when he wasn't being prosecuted. The point has that some people are unfortunately prone to chronic suicidal episodes. It doesn't make sense to blame some external factor in cases like these.
If he was cut off in traffic and then went home and committed suicide, would you say that the driver that cut him off was responsible for his suicide. You might say that's because no normal person would commit suicide over that act, but no normal person would commit suicide when offered a 6 month house arrest.
And if you were going to commit suicide because of a long prison sentence you would probably do it after you were found guilty, like the guy who drank poison right as he was found guilty of something that would put him in jail for most of the rest of his life
That’s a disingenuous presentation of why you added it. Stated clearly, you added it to discredit him, the severity of the contribution that the charges played in harm to him, up to and including contributing to his suicide and to shift the burden from the government and its use of selective coercion to what others are arguing is a victim.
The government was or should have been aware of his mental health history and could have tailored the punishment accordingly so as to not risk pushing him over the edge. The constitution protects against cruel and unusual punishment which includes punishment in excess of the underlying crime, no one would argue his crime warrants death but by proceeding with the threat of excessive punishment on a person know to have suicidal tendencies the government is culpable in the consequences.
To use your example, the government knew he had a history of saying he would drink poison and said “here’s our finest selection of artisanal poisons, we will leave them right here next to your bed”.
The consequences of 6 months house arrest also came with having a felony record which would permanently affect his life making it harder to get a job and a broad set of consequences. And most people wouldn’t think breaking into a broom closet would have resulted in that. I had friends break into the computer lab, use the teachers password to copy games off school computers and get caught: should they face federal felony charges? Definitely not.
Who were the prosecutors and lawyers involved in the Aaron Swartz case? Where are the pitchforks for them? You can't just hide behind "The Government".
Apparently, at least some of the people involved were Carmen Ortiz and Stephen Heymann. While pitchforks did come, they were in no way punished directly for this case and were allowed to ride off into the sunset at the minor cost of their political careers.
Are we on about Flock or other public cameras? Because I would rather not ban regular everyday people doing nothing wrong from streaming certain areas if that's their purview, or in general, citizens being unable to record in public would be bad.
It's kind of crazy how we went from nobody really had cameras in their homes unless they were wealthy, to now people have cameras as their doorbell, and all over their homes.
Personally, I'd never build on top of Roblox itself, but... and I hate to say this, if they made a generic 3D service that let you export to any game engine, I think I'd pay Roblox for said tool if it was good enough, which, they have so many games and capital, I could see them pulling that off, I mean they already have a base model.
I would love to see more text to 3D model models that can wire up straight to a game engine, I think we'll see a lot of interesting things, like children prompting the worlds of their imagination into reality, and the 50 million memes that will plague social media.
> I would love to see more text to 3D model models that can wire up straight to a game engine
Same, but none of the models actually have good enough output yet to make that work. Currently they're all aiming to "fake" the niceness by doing modeling+texturing, but when you look at the wireframe, it's pretty clear they're very far of from being usable, even less so in a game where performance matters a great deal, and you can't just YOLO assets however you want, which is what the "text to 3D" models like to do.
Inevitable that we'll get there eventually though, it's miles ahead where it was just 1-2 years ago. I guess my point is that it's not the "3D model > game engine" that is lacking at the moment, but "text > 3D model" that cannot produce high quality enough results.
I wonder if the solution is either an intermediary "model spec" that can render into others (this becomes the target for all these model models), or an LLM style hack where its trained on recreating 3D models using code, I know for CAD (I forget which one it is) there's a CAD program where your models / designs can be written in code.
One weird thing I run into is, I can have Claude make some interesting things with threejs, but translating it to other engines isn't always so great, and its usually raw code. I'm not a 3D guy, I just want to get up and running with things I can code / think of.
reply