HN user
If they shut down their gaming operation and instead decide to stuff money into bonds, where would that $5B even come from?
As said elsewhere in the thread:
You’re saying that they should take the money people pay to buy Xboxes and put it in T-bills instead of delivering Xboxes?
I agree we'd all be better off if SpaceX figured out how to send Musk to Mars ASAP.
None, unless someone is renewing their certificates only 2 hours before they expire, which is a dumb thing to do.
That's why they take incidents like this seriously and stop issuance until it's fixed. They could get kicked out of trusted roots otherwise.
What do you even mean by LLM help??
And imagine the numbers if downgrading was possible...
It's just like gambling addiction.
Why are you even encrypting? What's the threat model it's protecting against? Clearly it's not "prevent me from reading your data" since you have access to the keys anyway.
KDE Connect sends data directly between your devices, while QuickClip sends data through QuickClip servers using useless encryption.
They made significant changes to the bootloader with the explicit goal of allowing boot of third-party operating systems.
Or you can just sign your Linux kernel from macOS recovery mode, which is what the Asahi Linux installer does already. No need for weird hacks.
You also don't have "kernel access" in macOS. After boot, the memory region corresponding to the macOS kernel is marked as read-only at the memory controller level.
If you're new to the topic, this is a good place to start https://support.apple.com/en-lamr/guide/security/welcome/web
That's exactly how LLMs are so effective: the text looks impressive to people who don't possess enough knowledge to make an accurate judgement. Meanwhile actual researchers with Apple experience found clear errors on a quick skim.
The large amount of rewriting being done within 5 minutes is another sign of LLM...
This article is definitely the latter, not just "fixing grammar".
The bootloader doesn't even have a USB stack capable of reading external storage.
And then the author posts it himself to Hacker News. Nah, that's not opsec.
They just fixed the KBAG thing.
This quickly went from Brandolini's Law to Cunningham's Law. Learn how Apple's boot process works by explaining it wrong and waiting for people to correct you!
There's many factual errors in this AI slop.
For example, it says quite unambiguously that the bootloader is encrypted directly with the GID key (loading the LLB ciphertext into the AES engine), but that's not how it works, the GID key is used to decrypt the LLB's KBAG into an AES key:IV pair and that is used to decrypt the LLB.
More:
The behavior of the Boot ROM changes fundamentally based on the "Security Domain" fuse. Production (CPFM 01):
Security Domain (SDOM) is a different thing than CPFM. And production devices have CPFM 03.
CHIP (Chip ID): Identifies the SoC model (e.g., 0x8101 for M1).
The M1 SoC is 0x8103.
Due to Brandolini's Law I will not continue to list everything else that is wrong here...
Or maybe fully AI-generated. There's many factual errors in the article too.
DigitalOcean lost some of my files in their object storage too: https://status.digitalocean.com/incidents/tmnyhddpkyvf
Using a commercial provider is not a guarantee.
Not sure why very nice people on the internet are apologizing for laws that prohibit ripping off other people's work. These laws are very important.
Remind me, who at Meta and other AI companies went to jail for ripping off millions of books for AI training?
Yes exactly, Wayback Machine can use the warc files despite them being blocked for direct download.
Doesn't the Google Photos app do that?
There's no such thing as "update the original video" on YouTube.
Unless you're like, Linus Tech Tips size and contact your YouTube "account manager"; and there's probably limits to what you can use that power for.
Are you sure you got a serverLock and not a clientLock?
Good luck finding a website where people are not happy about this shooting in the comments.
Was it there before the hack?
What?? It had much better anti-stalking features at launch than its competitors like Tile.
You also have to pull the emergency backup out of the safe when signing up for a new thing. It's highly inconvenient.
A friend said "getting out of vegas would mean losing half the point of going to bh/defcon (which is getting your company to pay for you to go to vegas)"