integralid

There is one EU company in the 50 of the world by companies market cap. One. Just freaking one.

And this is a good thing. All 50 of them should be broken up anyway.

I'm in the EU and honestly it's more than frightening

I'm in the EU and I love it. It's not perfect, but I wouldn't want to live in any other place. And in the coming fight for digital freedom EU is almost always on the right side.

I still pay for Netflix, Disney, Apple, Spotify and bbc

I have to admit that's a lot of subscriptions. Most people here are relatively rich, but no wonder people are priced out.

Most of my life I was strongly opposed to piracy for moral reasons. Now I... intentionally try to own (download/pirate) content I consume and I also do this for ideological reasons. So yeah, this effect is real.

It's not perfect but it was a step forward.

It also made people realize that they are tracked like crazy (there are regularly memes about this for example) - before people reacted to this fact like you were sharing a conspiracy theory.

there's a bug in widely used tool x"

There's a security bug in Openssh. I don't know what it is, but I can tell you with statistical certainty that it exists.

Go on and do with this information whatever you want.

Most people are also n apparently completely off-topic, as in giving advice completely contradictory to the OP (for example "always go to sleep at the same time alway") without even acknowledging that.

I try to explain this to my wife, my baby, and my dayjob but they refuse to listen.

Huh, that's much less than I expected! Apparently it's just for adult population (correctly). Apparently that varies from year to year (in 2024 it was 64%), and by race (highest in white people 70%). I also wonder how that looks when we exclude older people (let's say over 60) who more often have health problems or just tolerate alcohol very badly).

It's higher in my country so good to know that USA drinks less than I assumed.

4 month old should eat every 3-4 hours. You mentioned sleeping for 10-12h and this sounds almost harmful for the baby. I don't think I'd like that.

Thanks for your recommendation anyway. I'm sure that there are many science-based techniques to "tame" children and make child care as atomic family bearable.

Because the threat model is one-sided - if an AI attack fails, the controller simply moves to the next target. If an AI defense fails, the victim is fucked.

This was always the case? Security is asymmetric and attacker only needs to succeed once.

More and more folks just see a headline and comment rather than understand that headlines are designed to mislead you for clicks.

My personal policy is I don't click links I consider clickbait. I mean things that are intentionally misleading and vogue. But I sometimes check HN comments - I never comment about the post itself (since I didn't read it), but I sometimes respond to other comments (like I do now).

What do you mean "stuck with it"? I just don't use LinkedIn. Do you need it for job hunting for example?

BDS boycott list

Looks like a great initiative. Anyone knows about a similar list, but for companies that support Russia and occupation of Ukraine?

I work with actually malicious content (things that make people lose their life savings) and Cloudflare abuse is relatively helpful (compared to most ISPs who just don't care).

They just refuse to take down random things that some media company representatives send their way, without a court order or any oversight. And this is a good thing.

Support jobs are very definitely not "bullshit jobs".

consider how much lobbying money is coming from CEOs and companies

Make lobbying illegal, I don't understand why it's normalized.

Or none

We already know this is not true, because small models found the same vulnerability.

This is not universal. I only drink espresso without sugar or milk, because I love the taste of a strong coffee.

Except Microsoft Authenticator. That's what my company uses and this is the only reason I ever use my work phone.

The company didn't issue any phone. They want GP to install authenticator on their private phone and GP tried to softly refuse by lying (I think) they only own a flip phone. It didn't work.

To be honest, if I were German, I would probably just kill myself the day I was legally mandated by my government to register my identity with Google. That might sound hyperbolic, but I'm really not kidding.

This is honestly not a good argument - it makes you sound desperate and puts in doubt your mental stability. I don't think you actually have mental problems, I just mean this this kind of argument comes off bad.

Also nobody is forcing anyone to do anything. You don't have to own a digital ID. It just makes things easier, because you can sign things over the internet, or present your phone instead of your plastic ID. Both things already have alternatives (qualified signatures and regular physical ID), so no immediate harm is being done.

Don't get me wrong, I am personally anti bigtech, I try to degoogle as much as possible, and I find the thought of my government coercing me to use google/apple duopoly repulsive. I dislike that, but using phones (instead of for example dedicated hardware) IS pragmatic, and you are not forced to do anything.

Sent from my pixel phone.

Yes, a lot of money in fact.

the average person's response is "nah, that would take at least a couple of minutes of my time,

As a data point I, a technical person who tweaks his computer a lot, was against adblocking for moral reasons (as a part of perceived social contract, where internet is free because of ads). Only later I changed mi mind on this because I became more privacy aware.

5:1 death rate (Russian:Ukrainian) is considered good for Russia

pilots with 1k+ kills is not uncommon, kills in the hundreds is normal.

I am strongly pro-Ukraine in this conflict, but this sounds over the top and unbelievable. Are you sure this is not Ukrainian propaganda? Are there any reliable public sources about this?

Was there ever an obfuscated JS code a human couldn't reverse given enough time?

I reverse malware for a living and no there wasn't. With some experience even the best obfuscation is actually pretty easy to defeat. But the goal of malware analysis is to extract some knowledge (what this code does, IPs, URLs, tokens). Getting a runnable, clean version would often be a long tedious work.

minification was originally about sending less bytes on the wire and saving a bit of performance. Somewhere along the road people started misusing this for security, because JS evolved from "a few snippets of code to make my site more interactive" to SPAs

That's exactly 4D. Just like "non euclidean"[1], this term is often abused in entertainment to mean something else, but the post here is about the real 4d world rendering.

[1] For this check out zenorogue work btw

I always type "please continue". I guess being polite is not a good idea.

What type of developer chooses UX and performance over security? So reckless.

Initially I assumed this is sarcastic, but apparently not. UX and performance is what programmers are paid to do! Making sure UX is good is one of the most important things in programmer job.

While security is a moving target, a goal, something that can never be perfect, just "good enough" (if NSA wants to hack you, they will). You make it sound like installing third party packages is basically equivalent to a security hole, while in practice the risk is low, especially if you don't overdo it.

Wild to read extreme security views like that, while at the same time there are people here that run unconstrained AI agents with --dangerous-skip-confirm flags and see nothing wrong with it.

First of all, I think your comment is against HN guidelines.

And I expect GP has actually a lot of experience in mathematics - there are exactly right and this is how professional mathematicians see math (at least most of them, including ones I interact with).