HN user

jackjeff

1,051 karma
Posts5
Comments270
View on HN

So a fake ID but using your face?

How would they know? Does the US government expose their database to private businesses? I always wondered how these things work.

I normally run away from these ID checks. It’s just a matter of time until lone of these databases with everyone passports and videos get hacked. And vibe coding only makes it more likely.

I don’t care how good Claude is, it’s not good enough for that kind of risk.

That’s the most puzzling part to me. What’s the point of the PIN then? I was assuming it was mixed with the TPM secret somehow but if it can be bypassed then it shows it just an IF statement somewhere. Dang…

God I hate this stupid design of burying the decryption key in the TPM and hoping the software does not get fooled to reveal it.

Microsoft always sucks. Why don’t you ask for the password at boot time and derive the key from it. So much simpler and makes this kind of attacks impossible. Nobody is going to bypass LUKS or FileVault like this.

They are? Nobody writes JavaScript anymore. Everything is Typescript. Even PHP and Python have sort of back ported type annotations. What major language is still purely dynamic these days?

I know the whole dynamic vs static typing is an age old flame war, but it sure seems that static is winning to me.

Too easy to dunk on the EU. The UK, USA and Australia seem to have reached the same conclusions. In UK all young males now have a VPN rather than do whatever you’re supposed to do to see porn. VPNs went from “nerd talk” to “vpn=porn” in the space of weeks. Whatever is next will suffer a similar fate.

Isn’t this “high level rust” idea similar to swift?

Everything is ARC. Clones are cheap. But you still have a reasonable sound type system and no garbage collection.

I get it. Tooling on swift is meh the further you are from Apple, so I’m not suggesting it’s better.

But from a language point of view; is it not essentially a high level rust?

Ps. I don’t really know swift. Just asking where/why I’m wrong really.

Besides being racist this is kind of dumb. If you’re going to bring down the plane you’re defo not going to look like someone who gets randomly selected 100% of the time. Even the 9/11 terrorists knew this and shaved their beard instead of looking like the fundamentalists scumbags they were.

I think this was explained before. But basically the processing takes so long (over a year) that you are guaranteed to overstay most visas and leaving the US is considered as abandoning your petition for a green card.

So you are in this limbo state where you are given some kind of status while the application is pending and you absolutely can’t leave the country.

But that’s not the issue here nor why people are being detained.

People came to the US with intend to marry and apply for a green card on non immigrant visa. For instance British citizens on a visa waiver can just show up and get married. That’s legal.

But it turns into immigration fraud if you always intended to apply for a green card afterwards.

What you are supposed to do is apply for a K1 fiancé visa which takes another year.

The UK has no problem asking their ISPs to block the Pirate Bay. Why can’t OFCOM do this? I don’t understand the attempt to pursue this in a foreign country. It’s fairly obvious that what they’re doing are not considered crimes in the US and politically it looks bad from Trump and his administration. And also, until 5 mins ago I had no idea this site existed. Now I do. Seems to achieve the polar opposite as I’m in the UK and browsing a dangerous forbidden site now. Wooooo

The problem is that these private companies have taken a disproportionate place in public discourse. You are absolutely right that freedom of speech does not guarantee the right to post anything on YouTube (someone else's website). In fact YouTube has the right (protected speech) to censor you and refuse to let you post long as they don't do in a discriminatory way (for instance, only "white people" can post would be discriminatory/illegal).

The problem is that in practice, if you can't do YouTube, Facebook, Tiktok, INsta, etc... your speech will not be heard by anyone. It's like if a tree falls in the forest and nobody is there to hear it, the fact that it makes sound is irrelevant. So effectively, it amounts to censorship, even though the government potentially had no hand in it.

Now imagine someone in Trump administration pressured Google with a juicy contract, or the prospect of an expensive lawsuit, and the quid pro quo was dumping these videos that annoy "our Israeli friends". This kind of "pay to play" is at minimum corruption. It may also fall of short of constitutional guarantees for free speech. Ironically, it is exactly the same thing a lot of members of the Trump administration have accused Biden of doing (exhibit: the so called "Twitter Files" etc... ), although I don't believe this went anywhere in federal courts (am I wrong?)

I honestly don't know what the answer is. But I would not be surprised if in 50 years time, some of these large companies get regulated as "utilities" and are no longer able to yank "videos" from their platform just because they feel like it. And every time they "abuse" their powers, I feel like we get an inch closer to that onerous regulation.

The article has a very long list of alleged Israeli violations of international law and human rights. Here's a quick summary.

Genocide in Gaza. It is described as a "genocidal campaign" implying systematic targeting of a national, ethnic, or religious group, prohibited under the 1948 Genocide Convention. This is what the ICC is investigating now.

War Crimes:

- Killing of Palestinian civilians, including children and families.

- Killing of journalist Shireen Abu Akleh, a violation of the Geneva Conventions protecting civilians and journalists in conflict zones.

- Destruction of Palestinian homes in the occupied West Bank, possibly constituting collective punishment or unlawful destruction of property under the Fourth Geneva Convention.

- Intentionally starving civilians by blocking humanitarian aid into Gaza, explicitly prohibited under Article 54 of Additional Protocol I to the Geneva Conventions and cited in ICC arrest warrants for Israeli officials.

- Torture of Palestinian detainees by Israeli forces, a violation of the UN Convention Against Torture.

The article also alleges complicity from the US authorities and corporations (YouTube, Google, MailChimp).

Don’t cars and ropes and drills occasionally kill people too? Society seems to have accepted that fact long ago.

Somehow we expect the digital world to be devoid of risks.

Cryptography that only the good guys can crack is another example of this mindset.

Now I’m not saying ClosedAI look good on this, their safety layer clearly failed and the sycophantic BS did not help.

But I reckon this kind of failure more will always exist in LLMs. Society will have to learn this just like we learned cars are dangerous.

The video stream is encoded as one single JPEG2000 picture per frame. Each frame is encrypted with the same static AES key.

Is this not a problem? It’s not a good idea to reuse the same key to encrypt very similar files. Similar to ECB. See the famous penguin https://words.filippo.io/the-ecb-penguin/

I’m surprised they don’t use something like XTS commonly used for disk encryption. It derives a unique key for each block/frame and allow you to access each individual blocks/frames non sequentially.

Checking for errors after every line (like in Go) is the worst. Used to do that in c/c++ calling win32 APIs. Know what happened when sloppy developers come along? They don’t bother checking and you have really bizarre impossible to debug problems because things fail in mysterious ways. At least with an exception if you “forget” to catch it blows up in your face and it’ll be obvious

Sure monads are cool and I’d be tempted to use them. They make it impossible for forget to check for errors and if you don’t care you can panic.

But JS is not Rust. And the default is obviously to use exceptions.

You’ll have to rewrap every API under the moon. So for Monads in JS to make sense you need a lot of weird code that’s awkward to write with exceptions to justify the costs.

I’m not sure the example of doing a retry in the API is “enough” to justify the cost. Also in the example, I’m not sure you should retry. Retries can be dangerous especially if you pile them on top of other retries: https://devblogs.microsoft.com/oldnewthing/20051107-20/?p=33...

That’s not necessarily true.

RIPA notices do indeed assume you’re in possession of the keys of anything encrypted and you must disclose when asked nicely.

You just need an airtight provable way of showing you have a way to destroy that key when you push a button and do that before the notice arrive. I suspect that’s after they seize your stuff.

Could not agree more! I have 20+ years experience and use Cursor/Sonnet daily. It saves huge amounts of time.

But I can’t imagine this tool in the hands of someone who does not have a solid understanding of programming.

You need to understand when to push back and why. It’s like doing mini code reviews all the time. LLMs are very convincing and will happily generate garbage with the utmost authority.

Don’t trust and absolutely verify.

I think it’s unprecedented for every FBI agent to fill up a questionnaire to admit whether they worked on a case where the president himself was an active participant.