cyberrock

Native Roblox has blocked Linux for 3 years, and games on it (especially PvP ones) can and do require Android remote attestation which Sober doesn't implement. It wouldn't surprise me if Graphene can't play those games as well.

Roblox is a platform. Fortnite is still primarily one game.

I really dislike this paradigm that the user needs to become a human DBMS, and rename/link files or write template rules for the media server to understand. It was understandable back in XBMC days but it just feels silly now. Surely it can extract some Musicbrainz-like fingerprint from the media instead of only relying on filename.

But the truly disgusting part is how XBMC/Kodi/Plex/Jellyfin just reassigns the files to another show and there is absolutely no way to audit what's going on other than realizing that some show has two files per episodes or some show you don't have is in the library. Why can't this be easier to inspect?

After two decades I just gave up and use the Home Video mode (just show me my directories mode) on Jellyfin to avoid having to deal with metadata.

Looks like the cutoff is from the source governmental data. It's also missing Tochoumae and Nishishinjuku, even though it has Shinjuku-nishiguchi and Seibu Shinjuku.

I think this is missing the part of the story where the blacksmith in South Korea comes to open a shop in your backyard and yet you delay them for years for inane reasons.

The format supports progressive decoding but IIRC none of the current browser implementations support it. The first Chrome and Firefox implementations did, and I think it's on their roadmap for the new Rust implementation. No idea about WebKit/Safari.

Edit: the format also supports region-of-interest decoding and I suspect you can make some cool maps or fractal images with both features. But I think they're not quite prioritizing implementing that right now.

To most modern users, web browsers kinda suck if they don't know URLs. For example, if they want to find an item they saw on Amazon, searching it in browser history just sucks compared to the in-service search.

A lot of users also use browsers like they use their Desktop folder, which is to say they have 100s of tabs open. The fact that apps enforce quitting and limited state is a plus to them, hence mobile Chrome adding an automatic inactive tabs cleanup feature (which mobile FF removed for some reason?).

Browsers really should've adapted to this reality with some UI/UX changes, like showing relevant site history. But none of them are actually interested in improving UI/UX, and the few changes that do get through just piss off long-term users.

I can understand complaints about Metroid but Star Fox fans were probably expecting jack squat from the start of the year. Putting it in the last movie is a pretty strong indicator for more content.

A lot of Nintendo's remakes end up being training exercises for the real deal, such as Metroid 2 remake to Dread. Meanwhile, some of the laid off devs here might have never seen a properly produced title with zero crunch and anomalies. Not every title should be an auteur title, but we have too many auteurs and we want more auteurs.

Ah, now I get everyone's confusion. My understanding of the attack is that it involves (1) prompt injection of the AI Studio agent to replace the URL value ("replacing BANG...") and (2) phishing of the creator to click the link to exfil data, using the official looking "[Important Notice from YouTube]" banner. As some point out, this is like two prompt injections.

Perhaps Google was also confused by the author's explanation.

I'm a little confused why so many here are making it seem like this particular attack is completely unstoppable. Just don't include private videos in training or inference. My guess is that the agent that runs this viewer comment aggregation feature has the same context as the one that runs other AI studio things, but attack or not, this isn't functionally correct to begin with. This attack implies that if Samsung has a private video for a new rollable phone, they might see "Viewers are excited about Samsung Roll 1" from this. The viewer comment aggregation feature should have the same information as the viewers to form an accurate summary, and the AI studio suggestion agent should have private context.

Now, the bigger problem of being able to make a "[Important Notice from YouTube]" banner might be harder to solve, but they could at least remove links from the input and output.

I don't think they can 100% fix it that way, but the least they can do is strip links before and after the prompt and not let the model have access to private videos.

Has anyone tested if this AI Studio model can be manipulated into editing/deleting videos, or showing a link that does so? Maybe that would get their attention.

That also leads to my other (perhaps main) issue with this idea, which is that it requires some level of coordination or synchronicity with the delivery courier that's simply inconvenient for both of us. I've lived in apartments that 90% of couriers of any service cannot find their way around, because they weren't simple take-elevator-and-walk-to-unit designs, so I thanked the stars when we got lockers at the gate. Perhaps I could leave my packaging in a locker... but that just sounds like we re-invented trash collection? And actually, this is why I never used grocery services like Amazon Fresh or Instacart. I don't think grocery delivery is as solved as you think it is.

The implied time synchronicity also sounds like a nightmare. Taiwan does timed trash collection (you have to throw the bag into a garbage truck when it comes playing Fur Elise at 7pm) and there's a reason it hasn't spread.

I just think this is overcomplicating matters instead of just making the package generically disposable, which seems to be what's happening anyways.

That idea is intriguing but brings up a lot of questions. If I live out in the middle of nowhere, order something but take a long time to open it, when does the Amazon truck come back to take the packaging? If there's a million of us procrastinators, is it really that much better than normal centralized garbage collection? Milk bottle delivery and collection only worked because the product naturally had a time limit, and once home refrigeration took off, the practice went away because people didn't consume on the same schedule.

FWIW most Amazon packages I get nowadays are just heavy paper anyways.

From a non-(voluntary-)user perspective, that kind of arrogance and frankly abuse is what got Apple diehard fans, so it wouldn't surprise me if Rivian is also aiming for that.

Forums are good in the way that they force everyone to mostly stay on a single topic of discussion.

I have the complete opposite experience. Forum on-topicness depends on the moderators and users, not the format. I've been in plenty of forums and IRC/Discords where every thread and channel devolved into general chat. I find it less likely in the ephemeral comment threads of HN and Reddit.

To me it's not even the comparison with builds that's damning; it's the comparison with handhelds and other mini PCs. Most people excited by this probably have a Steam Deck or another handheld, so they have to be into playing a very specific slice of games that can run slightly better than the handheld.

For example, Forza 6 on high 1080p is 60 for SM vs 40 for high end handhelds and 30 for SD. Even at the original price, is it really worth $750? Not to mention that many handhelds and mini PCs also have USB4 ports that one could attach a retired GPU to get 60fps+ @ very high 2k, but the Steam Machine has no such port and only one NVMe slot.

So this is for people who are allergic to the existing solutions (plugging in your handheld, using Moonlight) or just like the brand, but I know it's going to still sell out. I just don't want to hear about extensibility, eco-friendliness, or cost effectiveness from a certain segment of gamers after this.

The DX for CORS and CSP is horrible because none of the browsers point out where the problem is coming from. In a sane world they would all write "response header" or "meta tag" somewhere in the message but the Riddler, Jigsaw, the Cheshire Cat were each hired by the major browser vendors to write the error messages. Chrome is the closest with "requested resource" but that's still downright cryptic. But on the other hand I'm glad all three of them still agree on something.

Edit: I realize that this is a fairly non-constructive comment, so to fix that, my suggested replacements are:

    Resource https://bank.com doesn't allow cross-origin requests due to lack of CORS headers. (Link to preflight request in Network tab) CORS protects against unaffiliated sites requesting data from your server. (Link to MDN)

    Resource https://bank.com doesn't allow cross-origin requests because this origin isn't in its CORS allowlist. (Link to preflight request in Network tab) ...

    Resource https://... can't be fetched due to CSP headers in this page. (Link to page request headers or meta tags in inspector) CSP prevents unauthorized scripts from executing on your page. (Link to MDN)

In my experience it will also make you appreciate aspects of physical production that don't apply to programming. For example, how precisely you need to cut fabric and join/pin/baste fabric together before you sew such that it looks nice. I'm glad I don't need to reckon millimeter precision on a ruler for my job.

I recently learned how messed up URLs are in RtL and I'm also eternally grateful to not have to deal with that. Simulated example:

    https://example.com/[Arabic or Hebrew start of sentence]
                                            wrapped_url_part

He's right. The nerds who want WebUSB are leaving or using Chromium on the side. Firefox has just been collecting the nerds who want absolute safety and privacy at the cost of any functionality (which apparently includes removing extensions according to one).

I was floored when I discovered that Firefox rejected Web NFC because they were afraid of it being used on specific outdated Yubikeys. I could understand if they were concerned about it being used to steal credit cards, but the Yubikey scenario is just so out of touch. I can only hope that Web Serial represents a pivot away from that.

we as a community spent decades trying to make it clear that our productivity is not easily measured

Did we? All I saw the last decade was increasing worship of the Github activity grid, from both engineers and non-engineers. IMHO the bazaar had already lost its way before this.

The public is against it for hypocritical reasons that they're not afraid to inflict on someone else. They're against the water and electricity use but they also angrily demand more semiconductor production that require building whole new reservoirs in Tainan, irrigation channels from the Han river, and coal plants in Anhui, as well as restarting Fukushima. Then when those companies come build plants in Arizona and New York, suddenly the reality of how the cow is butchered hits them and it stalls in permitting for years.

Japan has multiple ticket vendors (Lawson is dominant but not close to TM), dozens of venues of all sizes, concert tours lasting years (I have tickets for a show in November 2027), ID checks, ticket lotteries, presales for fan clubs, anti-scalping laws, you name it, but the prices can still be astronomical for local price levels. I think the problem is that there isn't five clones of every popular act.

Mozilla's position from when Chrome first dropped it to September 2024 was "the benefits it provides are not significant enough on their own to justify the cost of adding another raster image format to the Web" [0], which they say is a "neutral" stance. Then like Chrome they only agreed to try it with jxl-rs [1], which is still their present stance. They are a complete passenger in this whole affair, like all other standards, where they basically just copy one side or the other (usually the more conservative side).

It's really bizarre to me that this is presented as "killing the standard". Is Apple also killing mechanical keyboards and hobby electronics development because they're the only ones who don't support Web USB or Web Serial? I strongly prefer having JXL and Web USB/Serial in my browser (FF for the last 20 years), but come on. If we don't like how much power browsers have in software distribution, then maybe software distribution outside of browsers should get fixed.

* [0] https://github.com/mozilla/standards-positions/issues/522

* [1] https://github.com/mozilla/standards-positions/pull/1064

Building is not the same as maintaining and updating. As long as Apple wants to take a week to review every change and occasionally rejecting client versions (insert similar complaints about Microsoft, Google, Linux here), there will still be a case for these technologies.

Ah I see, I didn't understand the original question properly. "Choose one side of DST or another" was meant for the time literal, not the TZ. That's my bad.

That's an interesting perspective because if I use America/New_York I would assume that it's subject to the laws of New York City. If I wanted a different DST regime I'd just use +4, +5, or a different city.

For me the main problem of SO isn't even the moderation or human interaction. Even if a question is answered successfully, the entries have a short shelf life because modern APIs move and break so quickly. For example, I tried learning Ansible only through books and SO, and it was just frustrating. ansible_sudo_pass was deprecated for ansible_become_pass, but there are still many books and SO questions that still reference ansible_sudo_pass.

In the Good Old Days (or my rose-tinted memories of them), Java/C books and answers will always work even if it's not idiomatic, and JS/Python material might break once in a decade over a major migration like Python 2 to 3. Now I look at Ansible or Zig, copy a simple toy program from SO or GH, and just find that it doesn't work, because `sudo` became `become` and `fs` became `io`. There is simply no way for books or SO to keep up.

Japan only requires leaving for converting a tourist/digital nomad visa and some Working Holiday Visas to a normal working/spouse visa. And WHV to normal status is really dependent on the partner country. For example Australians don't need to leave, but Canadians and Brits do, and I've heard that immigration will sometimes just grant the change of status anyways. So that seems to indicate that Japan doesn't really care.

Needing to leave to convert a normal working/spouse status to PR is not the norm anywhere.

I'd rather them just go straight to lottery limited by government ID.

Spotify's solution can't remain completely anonymous because Spotify will need to limit botters and verify attendee identity at the door. So we're all just pretending that ID isn't involved, and there's no reason Spotify needs to be in the middle.

Spotify's solution obviously sucks for non-platform users, and if the implementation is "sort fans by listen hours in the last month to find true fans", it would also suck for fans who can't listen at work, fans who were on vacation, fans who don't like the latest album as much, etc. This is basically the modern equivalent of JPop/KPop acts putting concert lottery tickets in CDs and forcing a gross incentive on the fan.

While I land on agreeing that finer language data should be collected anonymously, I think you may be too quick to view the motivations through a modern geopolitical lens. Historically Chinese American have had bigger domestic issues than this. Just a decade ago, Asian Americans in Massachusetts protested bill H3361 out of fear that finer census data would be used improperly.