nozzlegear

Apple has abruptly withdrawn its lawsuit against NSO Group, citing increased risk that the legal battle might unintentionally reveal sensitive vulnerability data and difficulties in acquiring essential information from the spyware vendor.

In a court filing Friday, Apple said continuing the lawsuit now poses “too significant a risk” of exposing the anti-exploitation and threat intelligence efforts needed to fend off the very adversaries involved in the legal dispute.

“When it filed this lawsuit nearly three years ago, Apple recognized that it would involve sharing information with third parties. However, developments since then have reshaped the risk landscape associated with sharing such information,” the Cupertino device maker said.

I mean, iOS has never been open source so Apple has always practiced security through obscurity. It doesn't seem unreasonable that they'd be concerned about this. Idk, seems like a nothingburger but maybe I'm wrong.

I don't think the goal of passkeys was ever about making it easier to back them up or protecting you from websites that could ban you. I think (correct me if I'm wrong) the goal was always to make it nigh impossible for attackers to phish your credentials.

It should go without saying that, while you've never given your passwords over to the President of the Spanish National Lottery, there people who do get duped into doing exactly that all the time.

I think we have wildly different conclusions about what happened here. You see the machine as instructing Terrence Tao, as if it were Plato teaching Socrates about the theory of forms; I see Terrence Tao using the machine to teach himself, like an intelligent student uses a book. In this case, it's just a book that fools us into believing it can think and reason like we do, because it generates language in much the same way we do when we think and reason.

That's not clear at all. What's clear is that this is a very smart man who knows how to use this tool well.

Cry about it IMO. Anthropic reaps what they sow.

With Apple's Passwords app, you can create "groups" for passwords and passkeys and share them with people. Once shared, the passkey/password automatically fills as if it was that person's own.

I have a "Family" group in my Passwords app where I share passwords and passkeys with family members for exactly this purpose.

Don't think it's any more confusing than e.g. logging in with an email address and password, or logging in with email + code, etc. A website's auth is usually a black box that they don't explain, and the only reason people find passkeys confusing is because they've been conditioned to enter passwords instead.

Although that's more a failure of your workplace's security policy than of the Passkey itself. It makes sense that the passkey doesn't work if you can't access the place the passkey is stored.

* and with device attestation, they could be banned at any moment by any website with no recourse.*

Isn't this true of any authentication method? It doesn't seem unique to Passkeys.

If you use Safari, they're locked to all of the devices on your iCloud account, not to a single device.

1. Rhetorical?

2. Why would there be? Apple building a UI for people to accidentally fuck up their apps sounds like the exact kind of thing Apple would never do on iOS.

3. Users are already informed when an app wants to track them. Beyond that, having an app store data so that it carries across reinstalls and to all my other devices is what I would expect my apps to do. If I uninstall an app and reinstall it later, I want it to pick up where I left off, not with a blank slate.

It's misleading to claim that Apple has "let and helped Facebook, TikTok, Tinder etc. track users [...]" using the keychain API. The persistence you're talking about, which those companies exploit, is a side effect of how the API works, not an intentional surveillance feature. Furthermore, it's not some special API that those big companies made a deal with Apple to get access to – any iOS dev can use it.

It's a real flaw that they should've fixed a long time ago, but your conspiratorial framing makes it seem like Apple colluded with Facebook et al. to end run their own privacy protections, while ignoring the fact that Apple's App Tracking Transparency feature has cost Facebook billions.

If Apple's interests sometimes align with ours then great.

Altruism or not, I've found that their interests almost always align with mine when it comes to privacy.

Why do you think it's not SOTA?

Precisely. "Aw jeez, we finally built the T-1000, but all it wants to do is kill John Connor – just like we warned! Why did I give it live ammunition and unsupervised time machine access?"

Just because he's a professional bullshitter doesn't mean he shouldn't be called out every time he waffles.

Sturmabteilung: German, literally 'storm division.' A German Nazi paramilitary force formed in 1921, whose members were known in English as Brownshirts.

The ICE comparison is spot on, IMO.

kimi has been particularly shameless in copying codex 1:1, wow.

OpenAI's pigeons come home to roost

It's an open model, abliterated versions will appear on HF in the fullness of time.

Oh interesting, I had thought the F150 was one of the better ones but I obviously need to update my priors. Thanks for the link!

You're comparing EV charging prices to US fuel prices though, that's not a fair comparison. I live in the US and have an electric car, which I charge at home on my municipal's grid. The rate is a whopping 10.5¢ per kw/h.

I rode my bike to school as a kid in the US. Kids still ride their bikes to school and to the parks/pool, I see them riding by my house every day.

This weird jingoism serves no one.

Even big pickups get better mileage than 12mpg

Bizarre response. I apparently need to draw attention to the fact that I didn't claim to be in charge of Bun's codebase; I was merely pointing out the obvious conclusion, what would have happened before everyone collectively lost their minds and their focus to the AI craze.

Goomba fallacy

So, the whole brouhaha was so that Anthropic can write this blog post?

This was suspected from the start. The PR was always going to be merged, and Anthropic was going to have their success story. Any lip service paid to "well maybe we'll merge it and maybe we won't, I dunno yet" was just that: lip service.

Without AI, the migration would never have happened. People with stake in the code wouldn't have invested time in it, and would've taken the much more sane and logical route of improving their Zig codebase.

It's not a frontier LLM if it's not made in the Silicon Valley region of California, otherwise it's just a sparkling LLM.

There's no surgery when you're a company with a trillion dollar hammer and every problem looks like a big ass nail.