HN user

Arnt

7,040 karma

Arnt Gulbrandsen, arnt@gulbrandsen.priv.no

Posts33
Comments4,430
View on HN
badsmtp.com 5mo ago

BadSMTP — the reliably unreliable SMTP server

Arnt
12pts1
timharford.com 6mo ago

The relentless rule of my fitness tracker

Arnt
20pts8
bsky.app 8mo ago

Signal Runs Partly on AWS

Arnt
10pts1
changelog.complete.org 9mo ago

I'm Not Popular, Thankfully. That Makes the Internet Fun Again

Arnt
2pts1
bsky.app 1y ago

The official report on the blackout in Spain and Portugal was just released

Arnt
12pts8
www.ft.com 1y ago

UK hopes of security deal with EU hit by fishing dispute

Arnt
2pts2
www.ft.com 1y ago

Heathrow expansion plan faces sky high challenges

Arnt
2pts2
timkellogg.me 1y ago

LRMs Are Interpretable

Arnt
2pts0
jl.ly 1y ago

Is Verisign a monopoly? Does it matter?

Arnt
3pts0
cleantechnica.com 1y ago

Core Battery Fundamentals

Arnt
1pts0
cleantechnica.com 1y ago

CATL Founder Burns Elon Musk

Arnt
10pts0
airports.swtch.tel 1y ago

Airports / Filetypes

Arnt
2pts0
domainincite.com 1y ago

Five times ICANN deleted a ccTLD, and what it means for .io

Arnt
7pts0
www.flightradar24.com 1y ago

What's stopping you? Runway excursions and how to prevent them

Arnt
1pts0
www.flightradar24.com 1y ago

This week's key orders at the Farnborough airshow

Arnt
2pts1
electrek.co 2y ago

China is on track to reach its 2030 clean energy targets already

Arnt
34pts16
www.bnnbloomberg.ca 2y ago

Major oil surplus seen this decade as demand peaks, IEA says

Arnt
6pts2
www.web3isgoinggreat.com 2y ago

Phishing scammers impersonate AH employee to drain crypto wallets

Arnt
47pts38
www.flightradar24.com 2y ago

Boeing and Airbus: What's the Difference?

Arnt
3pts0
changelog.complete.org 2y ago

The Xz Issue Isn't About Open Source

Arnt
6pts1
textslashplain.com 2y ago

Cloaking, Detonation, and Client-Side Phishing Detection

Arnt
1pts0
forums.slimdevices.com 2y ago

Uesmartradio and Mmysqueezebox Closing

Arnt
2pts4
www.exurbe.com 2y ago

Tools for Thinking About Censorship

Arnt
15pts5
progress.institute 3y ago

Why Does Nuclear Power Plant Construction Cost So Much?

Arnt
1pts5
mubi.com 4y ago

The invisible Spectrum – an interview with (film) colorist Matt Wallach

Arnt
1pts0
vrtx.uio.no 4y ago

On the Covid models in Norway, by the chief statistician

Arnt
1pts1
www.markbernstein.org 4y ago

“Art, Kitsch, and the Totalitarian Gamer”

Arnt
2pts0
mubi.com 5y ago

Film Restoration Today: The Elusive Perfect Viewing Experience

Arnt
48pts20
www.flightradar24.com 5y ago

How to Operate an Airport in Antarctica

Arnt
299pts68
toroid.org 6y ago

How are Unix pipes implemented?

Arnt
425pts49

As an alternative: install Mox and do as the installer says.

Seeing up your own mail server is too hard, particularly if you don't use one of the easy ways.

Weird what people will believe.

In this case GP probably knows that e.g. Italy has a life expectancy well above that of the US. Still, when he read that well-off people in the US have much better health coverage and it takes months to see a doctor in Italy, he believed it. How is it even possible to believe such a thing when you know the numbers?

You read that? I can get either in a day or two if I need it, they want much longer-term planning though.

For a vaccination I'll call several weeks in advance. If I want an appointment before/after work I'll call well in advance, if I want something tomorrow they may say "11:30, take it out leave it", which isn't great for my work.

Don't trust whoever wrote what you read there. FUD scaremongers.

I've done something like that too, but I find it restricting.

I want back-and-forth, very approximately like when I do pair programming. The dividing line between what I do and what the AI does varies according to task and sometimes during the task, and is seldom clear at the start.

Then there's the work that wants a human to click buttons and decide whether something is a good and correct user experience. The AI does not have access to my display if I can avoid it.

Overall, the model you describe is one that's worked very well for me, but for some problems. An unsatisfyingly small set.

"let's send this stuff from the warehouse to Ukraine" "let's say it's a value of $x even though it's close to the use-by date" and then come you and write that someone sent $x, and expect anyone to believe that.

And you even write that $x makes hard things easy. Hope much did the US pay to lose against Iran? Winning against anyone for the same sum isn't easy.

Why is it going to be huge? Who are the customers and what do they want?

I don't follow this closely, just look at the pretty pictures. If there's demand for lifting much bigger/heavier things to orbit than presently possible, I would probably not know, for lack of pretty pictures. So please tell.

Uh-huh.

A small town where I've lived was very much like its neighbours, but one particular neigbour was different in two clearly visible ways: ① there were (still are) more rich people in that neighbour and ② it was much easier to get financing for starting and growing companies in that neighbour.

I live in Munich. Couldn't find numbers for the metro area, but I found numbers for Bavaria. It seems that Google's electricity usage has grown to the point where it uses more than half as much energy as the Bavarian car-using commuters do. Still less, but more than half. (This counts only trips between home and work and only those by car, and the number is decidedly imprecise.)

So at this point, I assume that Google uses more power than the Munich metro-area single-car commuters, even for the widest definition of metro area (the widest I've heard spans 6m people, four times Munich's own population).

Is this reasonable? Is it reasonable that a collection of services with >1B users uses more energy than the single-car commuters in a metro area like Munich? I rather think so. (But then I don't have a high opinion of the value of driving to work.)

Enshittification is neither invariant nor universal — Rolls Royce has built cars for a hundred years and the new models still aren't Ladas or supermarket shopping carts.

Claude is a paid service, not one of those freebies where you are the product and receive as little consideration as practically possible, while advertisers are the paying customers for whom the service is optimised.

We're still arguing for several reasons, one of them is that people still confuse the user with the owner, as you do. "The user must be able to override" is implies that if you have physical access to someone's phone, you can install a keylogger before handing the phone back its owner. Nice for you but I imagine the owner might still quibble, even if you quote TRON.

It's complicated… in a sense the bulletproof solutions are the ones that raise the cost of executing the attack above the average take. In another sense even they aren't bulletproof.

This particular attack requires getting users to sideload apps that would be rejected by the play store, and most users don't have developer mode enabled. Therefore, the cost of persuading someone to enable developer mode matters. If the procedure to enable developer mode changes from "open settings, scroll down, tap, scroll down, tap seven times" to include e.g. a 96-hour wait for developer mode to be enabled, then the cost of the attack rises by whatever it costs to stay in close contact with the victim for 96 hours, close enough to react if the victim comes close to realising the truth.

This isn't a guarantee. You can still get phished even if the phisher has to spend 96 hours in intensive contact with you. Some victims are worth that effort, maybe you are, and maybe the phisher made a mistake and puts in the effort to phish you based on the mistaken assumption that you're a millionaire.

There are also other things like that. If Google can ban the keylogger you use quicker than you can deploy new builds, for example. Still no guarantee.

Are you in Brazil, Indonesia, Singapore or Thailand? Those were the four worst-affected countries IIRC. Although I seen to remember Ecuador or Bolivia as well?

(They do something about other scams too. There was another thing they published recently, I didn't pay attention since no side effect of that concerned me, something to do with caller ID.)

I think there's a misunderstanding here.

The attack in question doesn't use apps on the store, or even any attempt to get them on the store. There are also other attacks, but the one that prompted this change uses social engineering to get people to tap the build number seven times, sideload something and get a keylogger that then picked up their banking details and used them. Several governments raised the issue, Google acted. (The actions are to slow down the tap-seven-times process, so it becomes harder for the scammers to keep their victims fooled until the keylogger is installed, and also to tweak the timings, so the scammers can't outrun the app-banning process.)

If you haven't had your bank account drained, the scammers you met were different ones. (And I'm sorry that you've been scammed.)

Of course Google generally tries to squeeze profits out of… whatever it does, but eh, by closing something? Google is the company that makes a million in profit from the openness of the web in the time it takes me to write this paragraph, why would that company think that closing something improves its competitive stance?

I know Graphene has innovative security measures, do you happen to know whether that includes anything wrt. phishing or social engineering?

(For those who haven't been following along: this whole affair started with phishing. People were social-engineered into installing an app and a little later their bank accounts were empty. A big issue in various poor countries.)

This seems to sum it up: "At least four Spanish projects or companies have been offered for sale, according to people familiar with the matter. Arena Green Power SL and Matrix Renewables have been shopped around, the people say, asking not to be named discussing private processes. Both companies declined to comment. Privately held RIC Sun España SL was on the market, but the company says that’s been shelved as it works to add batteries to its parks."

"... involve a commitment to buy a certain quantity of product and pay for it in a pricing band that has a floor and a ceiling price. The floor price covers the historically high gross margins mentioned above, and the ceiling price means those who commit to an SCA are insulated if memory prices go even higher."

So clearly 16 large buyers consider it likely that prices will go even higher. How likely? >10% chance? Likely enough to sign an agreement.