HN user

oxguy3

1,185 karma

Software developer. Cincinnati native. Soccer and anime nerd. He/him. https://schiff.io

[ my public key: https://keybase.io/oxguy3; my proof: https://keybase.io/oxguy3/sigs/8-MlfONnT8psoTY469n4UCOvkLS3idiLSmh03cZkVCY ]

Posts5
Comments248
View on HN

I mean, doesn't everybody just google the thing they want and click the first result? I don't think I've heard of people just guessing "<some brand name>.com" since back in the days before the browser address bar doubled as a search bar.

"Discoverable", I agree with you on; that should have been "public". And there probably should have been an "are you sure?" pop-up the first time you do this, explaining in a little bit more depth.

But "web searches" seems like a pretty straightforward term. Even if you think it means ChatGPT's built-in search, that would still imply that other ChatGPT users could find it. "Allow", I feel, is a pretty strong word that implies someone else is getting access (because why would I need to give myself permission for something?).

How we rooted Copilot 12 months ago

It's wild how easy this was. I feel like we're really in the wild west era of security with these AI tools -- reminds me of early Web 2.0 days, like when "samy is my hero" hit and Myspace didn't even have a security team. I anticipate many high-profile incidents before they figure out how to tame this beast.

Thiings 1 year ago

So many of them look weird. The aesthetic seems to be soft, clay-like icons but then there will be lots of weirdly detailed or sharp parts.

And there's so many weird specific design choices that a human artist would not make. Why is the subway tunnel curved on one side and squared on the other side? Why does the nature journal have two different bookmarks (one of which awkwardly covers the E in NATURE)? Why would a wall outlet have one plug with a ground prong and one without? Why does the Golden Gate Bridge look like an M.C. Escher piece? Why does the bingo ball look more like a pool ball?

Also a lot of items that are very clearly a specific brand, even though the description is generic. The "smart thermostat" is a Nest. The "soccer shoe" is made by Adidas. The "smart speaker" is an Amazon Echo Dot. The "wireless earbuds" are AirPods (and for some reason there's three of them).

And then there's the blatant AI goofs; the logo and text being distorted on the HP 11c calculator, the VCR having an EPICT button and a REE jack, the TARDIS reading "POLIC BOX", the egg timer reading "30 10 10 10 15", the playing cards having two aces of clubs (one of which is red).

I like this handmade/clay aesthetic, but it completely falls apart when it's obvious a human hasn't touched it. If I want handmade icons, I'll pay an artist for them; if I want AI slop, I can generate it myself.

I'm sure they could, but to what end? It'd be a bunch of work to find them all, and they could never really be sure they didn't miss one. Meanwhile the cost of just serving that old logo forever is basically nothing.

I was recently editing the Wikipedia page for Google Bookmarks (2005-2021). I wanted to add a logo to the page, but I was having a lot of trouble finding a high-quality copy of the logo anywhere. Eventually I figured out that Google's old URL scheme for product logos was very guessable, and they had never taken it down: https://www.google.com/intl/en-US/images/logos/bookmarks_log...

They'll probably never stop serving those old URLs because who KNOWS where they might still be in use. One of surely a million examples of weird little legacy things Google is stuck with.

Google Reader used Google accounts for authentication, so an exploit in Reader could potentially be compromising to your entire Google account. This very article gives an example of that; Looker Studio was used to reveal the name on any account, even though most accounts have likely never used Looker Studio.

Google could mitigate this by not having universally shared accounts across all services, but they're not going to do that because most users would find that inconvenient.

One time at my old job I was trying to load the printer, and I said something like "Oh shoot, these are oversized sheets; I need the 8.5x11."

My coworker looked at me like I was crazy. "The what?"

"The normal printer paper, the 8.5 by 11 inch paper"

"Why do you know the exact size of printer paper??"

I did not know how to respond to this question.

I have no issue with Apple inventing a new, superior connector; I applaud them for it. My issue is with them making it a closed proprietary standard with authentication chips to lock out unapproved third-party vendors. They could have just invented Lightning and made it an open standard. We might not have even needed USB-C then; the industry could have just iterated upon Lightning.

The source code has zero business value to Google at this point – they have another smartwatch OS and there's never gonna be a business case for a company of Google's scale to revive a niche product like this. Releasing means getting free PR on Hacker News and a free morale boost for employees who care about this kind of thing.

From the essay: "Consumers have emphatically rejected brands that ventured too far into wokeness. The Bud Light brand may have been permanently damaged by it."

What Bud Light did was hire an influencer to promote their product in an Instagram video (and then of course they later backtracked). The only thing "woke" about the video was that the influencer was a trans woman.

If Paul Graham would like to elaborate on this passage meant I welcome it, but my read was that supporting a trans woman falls under his definition of "wokeness".

Here's what their server stack looks like: https://meta.wikimedia.org/wiki/Wikimedia_servers

Lot of replication and caching in there. For every cache there has to be a solution for how we're gonna make sure India doesn't receive the cached version, or receives a different cached version than the rest of the world. You also need to be sure that none of your changes are going to cause any significant reliability or performance issues. If you wanted to block India from accessing the entire site you could just cut them off at the top of the diagram, but blocking just one article means you have to get a lot more in the weeds.

Could they have hacked something together in 36 hours? Maybe. But the risk of causing larger reliability issues, or of having the forbidden article still partially accessible in India, would not be worth it.

The problem with unbounded page width is that the content often didn't work well that wide. I use a 1440p monitor and on the old theme, paragraphs were often a bit too wide to read comfortably. As a Wikipedia editor, it was also very often a challenge when writing articles – it's difficult to make your placement of images and tables and so forth look decent on viewports anywhere from ~400px to >2000px wide.

All that said, the new theme does allow you to return to wide mode -- on any page on the site, there's an Appearance options panel in the rightmost column where you can switch from Standard to Wide.

Wikipedia doesn't currently have the technical ability to block a single article on a country basis. They had 36 hours to comply with this order and so took what action they could. The goal is to win the long-term appeal battle and avoid the entire site getting blocked permanently, but if they didn't comply with the short-term legal requirements, that path becomes much harder. Lose a battle but win the war.

It's a valid HTML tag indicating that its contents are not HTML but instead SVG. The contents of a <script> tag are also not HTML, but we still consider <script> to be an HTML tag.

There is some overlap with that case, but also some major differences. Psystar was distributing computers with a modified version of Mac OS X preinstalled, whereas Yuzu is not modifying or distributing any Nintendo-copyrighted materials. However, Psystar was also charged with violating DMCA section 1201(a), the section dealing with creating copyright circumvention devices, and Yuzu could potentially be found in violation of that.

However, Yuzu requires that you bring your own decryption keys obtained from your own Switch device; it cannot circumvent copy protections without that. The only circumvention code included in Yuzu is basically just standard 128-bit XTS-AES decryption code; it seems like a ruling that makes that code illegal to distribute would be a bad idea.

Psystar order granting permanent injunction: http://www.groklaw.net/pdf2/Psystar-242.pdf

DMCA 1201(a): https://www.law.cornell.edu/uscode/text/17/1201

Yuzu's crypto code: https://github.com/yuzu-emu/yuzu/tree/master/src/core/crypto