HN user
Got this toast/notification message from your desktop app.
Added ok to your PATH — managed block in ~/.zshrc, ~/.config/fish/conf.d/open-knowledge.fish.
Took a while to see that 'ok' is the name of your product.
It is only a problem if you claim it to be an independently developed OS with no attribution to base
Why isn't there a middle man service to do IRL verification.
Like - account is locked, you must use 2FA backup codes.
Else go to western union / 7-eleven / super-market, show ID proof, pay $10 for recovery service.
Wait 2 days (of someone not clicking on this-was-not-me)
If account is already hacked - pay $100 for expert support
Laptop without internet access, sure. Pencil and paper? that is brutal :)
Well, you don't know how many more would have died if doctors and hospital didn't care about their insurance going higher???
It's interesting that it's the universities being ransomed, while the technical failure was Instructure's.
My guess would be they get likelihood of getting paid when blackmailing 9,000 schools (at least a few would pay up) than blackmailing Canvas/Instructure.
I don't think any SLA/terms would change who gets to feel the pain.
The guy who bought friendster.com lurks here
Is the last photo on that page, describing the cabling, a screenshot of another photo displayed using flipdiscs? that is a whole lot of discs!!
On the credentials point. Here is what I find.
Day 1: Carefully handles the creds, gives me a lecture (without asking) about why .env should be in .gitignore and why I should edit .env and not hand over the creds to it.
Day 2: I ask for a repeat, has lost track of that skill or setting, frantically searches my entire disk, reads .env including many other files, understands that it is holding a token, manually creates curl commands to test the token and then comes back with some result.
It is like it is a security expert on Day 1 and absolute mediocre intern on Day 2
with secrets possibly baked into source
please don't suggest this. The right way is to have the creds fetched from a vault, which is programmed to release the creds auth-free to your VM (with machine level identify managed by the parent platform)
This is how Google Secrets or AWS Vaults work.
The providers themselves can't keep this straight even within their own ecosystem. Plus everyone is running at a million miles/hour.
For example `Claude code` used to set 2 specific beta headers with some version numbers for their Max subscription to be supported.
Oauth tokens for Max plan is different from how their API keys looked. They kind of look similar, but has specific prefix that these tool pre-validate.
It is barely working at this point even within a single provider
A comment from the PR
Not a serious problem, but the weekdays are wrong. For example, 18-Apr-2127 is a Friday, not Sunday.
There is now many magical dates to remember - 2126 ( I think PR was updated after that comment) and 2177. There is also 2028 also somewhere.
The only people panicking are probably those state level actors who were using these for their own benefit.
Somewhat unrelated to the language itself:
The compiler bootstraps through 3+ generations of self-compilation.
I guess it applies to any language compiler, but f you are self-hosting, you will naturally release binary packages. Please make sure you have enough support behind the project to setup secure build pipeline. As a user, we will never be able to see something even one nesting-level up.
Thank you for PartitionMagic!! I remember using it to undo whatever disk partitioning mistake I did when originally setting up a machine :)
I struggled with disappearing icons (like our company VPN client - which wasn't tailscale by the way) thinking the app was somehow "stuck". I would go kill the app, restart machine etc - during restart it would get fixed "automatically" by being an app earlier in the order!
Took me months to figure out it was running afterall and just hidden by the notch.
How hard is for apple to move the "least used icons" to a fold? (but still accessible)
Somewhat counter quote...
"Don’t worry about people stealing your ideas. If your ideas are any good, you’ll have to ram them down people’s throats." -- Howard Aiken
...to mean that, usually, the good ideas are the crazy sounding ones...
Not everything done by claude-code is decided by LLM. They need the wrapper to be deterministic (or one-time generated) code?
He was told, he had a call from Pope
I think the point would be that - some random upcoming revision of claude-code could remove or simply change the config name just as silently as it was introduced.
People might genuinely want some other software to do the sandboxing. Something other than the fox.
The UI options are also shady af. The setting reads
Enabled - "You will have access to this feature" as help text. Disabled - "You will not have access to this feature".
WTF does that mean?
Anthropic is not stoping you from using API (pay per token). They are only saying Pro or Max 'all-you-can-eat' plans have to be used via their tools
Unless you have some first hand information that I have, you are more than 10x off.
I refuse to buy Youtube ad free until they drop the price to something $3 or below...
There in lies the problem. Your eye balls (assuming well employed with $$$ disposable income) is another 10x worth to advertisers.
If I were to make a guess, Youtube for sure will lose money at $14/month on your specific browser.
You are literally subsidizing internet for, let us say for arguments sake, some zip code in rural america or <sub any rural part of the world> 's Youtube streaming needs.
1. If alternate UX exists, the user can easily replace them with another model as soon as it comes out.
2. All 'all-you-can-eat' plans everywhere comes with clause. Whether it is lunch at a restaurant or it is token-proxy-providers who might think of reselling Max plan to individuals at 20% markup.
Let the weirdos at Anthropic do what weirdos do, and hopefully one day their name is never mentioned again in polite society.
Woof, that is a bit harsh... :) OpenAI will also face the same problem. They are doing it right now because they need to stand out in some way.
I thought you could only do it if you have own TM backup. Do they offer cloud recovery for older versions?
Apart from the mess it caused for iPhone and Mac, my watch upgraded last night to 26 flavor. I am not kidding - I can't see anything on the screen now before coffee. Watch has become completely useless for my early morning eyes.
What they did to Watch is much worse than what they did to iPhone and Mac
Installing an app that silently intercepts SMS/MMS data is a persistent technical compromise. Once the app is there, the attacker has ongoing access.
In contrast, convincing someone to read an OTP over the phone is a one-time manual bypass. To use your logic..
A insalled app - Like a hidden camera in a room.
Social engineering over phone - Like convincing someone to leave the door unlocked once.
I’ve lived the Microsoft Access times. The downfall of those tools was the refusal to keep the interface simple. They kept layering on features and UI cruft until they became massive apps pretending to be databases
Google Fiber was struggling for a while because cable companies are in bed with power companies and wouldn't let them run fiber through their easement areas. In fact, even cities couldn't run their own fiber.
What you envision might happen in 2100+
Haha... I think gp meant touch-screen, but thanks for the chuckle :)