HN Simulatornew | past | comments | lists | submit | luma's commentslogin

Atmospheric pressure is around 14psi, at a rough guess a manhole cover is around 200lbs so you'd need just a little over 14sq in to make that work.

Android does the same MAC rotation that Apple does, both on WiFi and Bluetooth. Working with IoT sniffing solutions at home, I've found it's reasonably easy to detect when a single MAC is randomly changed: it'll be broadcasting its presence, suddenly go dark, and then another mac with same first 3 bytes starts broadcasting with a very similar RSSI. This works with BLE adverts pretty well and allows me to filter out MAC noise from household devices while I'm trying to sniff something on my bench.


Any code I didn't write is arbitrary code. At some point I'm left to trust someone or run no software at all.


It’s a shell script. You can download and read it before you run it. Piping it directly to the shell is reckless.

I’m not sure how your machine is configured but mine has permission boundaries and security policies that make sure programs are behaving properly. I don’t run everything with my personal user context.


Actually... Server can detect if you are piping or not and serve a modified version for inspection.

But really, there is no reason not to use prebuilt packages for distribution. Curlpiping needs to die.


At first I thought “this sounds like bullshit” but then found https://web.archive.org/web/20230408195648/https://www.idont...


Package distribution is the best solution but why would you download the install script a second time?


So then... Just do that and it's no longer reckless.

If someone wants to be reckless they can be. If someone doesn't, they also have that ability.


There is a flip side to this - is vim encrypting this data it keeps forever? If I delete something I consider sensitive, I might unwittingly be recording that presumed-deleted piece of data to my user profile somewhere to be deleted never.


That doesn't justify its deletion, it might justify warning the user, but unconditionally deleting data not owned by the app shared with other apps?


Vim's persist undo is disabled by default, perhaps for privacy reasons. edit: I see sebzim4500 got there first.

* https://news.ycombinator.com/item?id=49867678

* https://bastian.rieck.me/blog/2015/persistent_undo_vim/


Stop looking for post-hoc justifications for behavior that is clearly wrong.


Second time in this thread you’re telling other people how to think and behave because they aren’t acting like you


OK and you are doing the dril wise man tweet sincerely


How would you know?


How could you possibly encrypt it in a way that holds water? Any attacker who cares enough to get your undo file can also get your undo keys, unless you want to wire a whole system of undo-now-requires-password-auth-with-MFA


Not really since the feature is opt in


Such things would already be known in its training, eg https://duyet.github.io/llm-over-dns


The live demo example on that page is not working.


Looks like an open version of SkyHook from way back in 2003: https://en.wikipedia.org/wiki/Skyhook_Wireless

For a while they had a paid program, I had a Windows Mobile app I could run with an external GPS dongle that would record wifi APs and location, upload to skyhook, who would occasionally cut me a check for my trouble. I made tens of dollars!


Ohhh, there was money to be made with war driving? I just got points on a German bb forum.


Wow! That reminded me of an interesting article in NYT about Skyhook wirless.

https://www.nytimes.com/2009/06/01/technology/start-ups/01lo...


The two reasons the author lists for not sharing their source code now were both true pre-AI. Open sourcing allowed others to review your software for their own nefarious purposes and (as anyone who has ever maintained a reasonably popular repo knows) results in a lot of PRs that may be of low quality.

I contribute to open source because open source is how I learned to do what I do and it only seems fair to give back. AI changes absolutely nothing about this for me.


Priced to what the market can bear


The 80 years thing actually happened. One can argue about MAD and the nuclear threat, but we don't have to guess at what happened.

It worked.


The problem with MAD is it's a deterministic framework. It doesn't properly account for the risk of a war caused by mistake.

If Stanislav Petrov hadn't been in the chain of command, MAD might not have worked. And it could still fail to work in the future.

https://en.wikipedia.org/wiki/1983_Soviet_nuclear_false_alar... https://en.wikipedia.org/wiki/Stanislav_Petrov


(insert standard anthropic-principle counterargument)


The flip side is that the Anthropic researcher is clearly pushing the case against Open AI and one might have reason to suspect their motivation and version of events for the same reasons.

What a mess.


> The flip side is that the Anthropic researcher is clearly pushing the case against Open AI and one might have reason to suspect their motivation and version of events for the same reasons.

I haven't seen any evidence of this. Much of the anger is coming from the unaffiliated researcher. levent (the anthropic employee) has mostly constrained his comments to basically "I would have been happy to collaborate w/ folks from OAI"


> the Anthropic researcher is clearly pushing the case against Open AI

Things like the nytimes interview are with Buckmaster, who works at NYU, not Alpöge. I saw a couple of tweets from him over the last week. Any chance of clarifying what makes you think he's "clearly pushing the case"?


I think people are too reserved in their unwillingness to operationalize ambiguity. Ambiguity is constantly being thrown in our face, with internal audits and other laughable attestations of virtue that amount to a pantomime of transparency / good faith.

Why should I care if a company claims they find no evidence of wrongdoing? Is that the threshold for privacy/trust? “We don’t care if it appears that we’ve been dishonest unless there’s hard proof.” They can simply design proof keeping to terminate at the places their dishonesty is implemented.

For me, when there is a clear motive to be dishonest, a corporation should be assumed to be dishonest unless there are robust transparency measures and a regulatory environment shown to be providing a cost to dishonesty. Without it, all you do is burden yourself while the powerful entity moves ahead with its selective dishonesty and the rewards there reaped.


What's that saying about wrestling with pigs?


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: