HN user

brians

2,435 karma

Chief Architect, Information Security, Akamai Technologies. I do not speak for my employer.

Posts0
Comments620
View on HN
No posts found.

I’ve seen several projects like this that offer a network server with access to these Apple models. The danger is when they expose that, even on a loop port, to every other application on your system, including the browser. Random webpages are now shipping with JavaScript that will post to that port. Same-origin restrictions will stop data flow back to the webpage, but that doesn’t stop them from issuing commands to make changes.

Some such projects use CORS to allow read back as well. I haven’t read Apfel’s code yet, but I’m registering the experiment before performing it.

I do not agree with your interpretation of copyright law. It does ban copies: there has to be information flow from the original to the copy for it to be a "copy." Spontaneous generation of the same content is often taken by the courts to be a sign that it's purely functional, derived from requirements by mathematical laws.

Patent law is different and doesn't rely on information flow in the same way.

The US FDA requires that schools not serve whole milk or any products containing normal and natural saturated fats, and instead serve “low fat” versions which literally remove the fats and replace them with sugar.

You say nobody is doing this, but all the subsidized meals for my kids do this.

Gpg.fail 7 months ago

No. You can always take the MIT-licensed source. And GnuPG got used through a CLI “API” anyway.

And now every kid in Massachusetts gets free lunch—funded through the millionaire’s tax. Unfortunately, the food is in general pretty gross. It has to conform to Federal guidelines, which means low fat, low sodium, high sugar to hit calorie targets.

There are. But there are many more such bugs in DirectX on Windows, and it’s a much bigger target. If a national intelligence organization wants to burn a Proton zero-day on my Steam Deck, cool!

Amber Room 10 months ago

What an amazing construction. It reminds me of a story from the metallurgist who visited the Breakers, the elaborate mansion complex of the Vanderbilt family, and on a tour was shown the Morning Room. The guide said the brilliant silver-white walls were silver plate. “How do you keep it from tarnishing?” He asked. The guide didn’t know, so the scientist asked for permission to test it.

Stories vary on whether he tested it or someone stopped him before taking a sample, but all agree on the technology used: that’s not silver. They coated an entire room with platinum.

I had lunch with the Amazon leader most responsible for ensuring all staff in the fast-moving-cardboard half of the company had health insurance from day one of employment, no waiting time. Of a decades long career, that was the one thing I saw most animate her—care for fellow humans.

When the 90th percentile employee has a GED and works warehouse or delivery, actions to earn “best employer” may be invisible or worse to the 5% who are software people. I’ve worked at Meta too, and Meta absolutely had better coffee. And WAY better health insurance. But Amazon’s health insurance is uniform for all staff, and that means something.

Can you help me understand what’s happening between the split and the filter on “a <space> <space> <space> b”? I expect that to be a series of calls to split, each yielding an empty slice. So the whole iterator yields a slice pointing at a, then a slice pointing at b—but it’s had to handle three intermediate slices to get the b. Right?

Good Writing 1 year ago

He was a titan for more than half of the twentieth century. His shadow will extend far into human influence beyond that of many names that won prizes.

Thank you for mentioning this, because—not having followed the link—I thought someone was using Mercury for a backend. And... I wasn't sure I was prepared to follow that link.

Every TCP session leaks some PRNG state for the ISN. That might leak information about key material.

Every NTP session leaks time desync information, which reveals—on modern hardware—relativistic travel, including long airplane trips.

Every software update leaks a fortune about what you run and when you connect.

I don’t think it’s reasonable to ask that people consent to these; I don’t think they can. I absolutely agree that photo metadata is different and at a way higher level of the stack.