HN user
no news is good news
I mean, nothing new there. (Mal/Ad/Spy)ware just has been more prevalent in the browser and on mobile apps the last ~15yrs instead of being installed via modified windows installers.
excellent use of agentic AI
you run claude code unsanboxed on your machine and give it privileged access?
https://www.pewresearch.org/politics/2023/09/19/money-power-...
seems like a lot more people believe that than the population you are describing
I don't think it says it is a target, just that they will have that capacity.
water filtration seems like the easy part
- ... and now we give you another FBS every so-many years, and only those things that are different from the previous scan are investigated.
The diff can be meaningless as well. All sorts of benign things develop with age.
The resolution is the problem. You can't do the type of cytology and histology needed to understand all disease with just scans.
But hey, I didn’t code a Webserver so far - so what do I know
If you limit the scope, its worth doing and might not take as much effort as you might think. You could possibly find some enjoyment and learn a few things doing so.
I'd question the added value of manual PR reviews at this point.
Yeah, why not reduce the team size to zero while you are at it?
These generalizations about software engineering have never been useful, IMO. Context is everything, there is no flow chart for building a perfect software process.
Although, I'd say you are absolutely delusional if you think we are universally beyond the point where manual review of pull requests is required.
It's tough to imagine what might possibly derail this.
Public utilities?
Back then, they did not automatically restrict those keys to only Firebase-related APIs.
If that is the case, why is this also in the 2022 link?
The part about scoping links to the restrictions documentation.
"Understand API keys
API keys for Firebase services are not secret
Firebase uses API keys only to identify your app's Firebase project to Firebase services, and not to control access to database or Cloud Storage data, which is done using Firebase Security Rules. For this reason, you do not need to treat API keys for Firebase services as secrets, and you can safely embed them in client code. Learn more about API keys for Firebase.
Set up API key scoping
As an additional deterrent against an attacker attempting to use your API key to spoof requests, you can create API keys scoped to your app clients.
Keep FCM server keys secret
Unlike API keys for Firebase services, FCM server keys (used by the legacy FCM HTTP API) are sensitive and must be kept secret.
Keep service account keys secret
Also unlike API keys for Firebase services, service account private keys (used by the Admin SDK) are sensitive and must be kept secret. "
Once upon a time Google maps loads were nearly free, and there was no way to restrict that key.
If one ignores 70% of the documentation, it makes for a demonizing blog post about it, sure.
" API keys for Firebase services are not secret
API keys for Firebase services only identify your Firebase project and app to those services. Authorization is handled through Google Cloud IAM permissions, Firebase Security Rules, and Firebase App Check.
All Firebase-provisioned API keys are automatically restricted to Firebase-related APIs. If your app's setup follows the guidelines in this page, then API keys restricted to Firebase services do not need to be treated as secrets, and it's safe to include them in your code or configuration files. Set up API key restrictions
If you use API keys for other Google services, make sure that you apply API key restrictions to scope your API keys to your app clients and the APIs you use.
Use your Firebase-provisioned API keys only for Firebase-related APIs. If your app uses any other APIs (for example, the Places API for Maps or the Gemini Developer API), use a separate API key and restrict it to the applicable API."
https://firebase.google.com/support/guides/security-checklis...
People hate cops until they need one
that doesn't seem to be the case always, given the data on crime reporting:
"Patterns in police reporting for property crime during 2020–2023 were similar to those for violent crime. A quarter (25%) of all property victimizations in urban areas were reported to police, which was lower than the percentages in suburban (33%) and rural (36%) areas (figure 2). Similar to overall property victimization, a lower percentage of other theft victimizations were reported to police in urban areas (20%) compared to suburban (28%) and rural (31%) areas."
https://bjs.ojp.gov/library/publications/reporting-police-ty...
"For violent crimes, in 1997, 7% of victims stated that “Police wouldn’t help” as the reason they did not call the police. This more than doubled to 16% by 2021. For property crimes, the corresponding rates were 12% in 1997 and 18% in 2021"
https://datacollaborativeforjustice.org/wp-content/uploads/2...
we are quickly spiraling into the dystopia where privacy is gone
we are essentially already in that dystopia.
it is now more of a question of how bad it gets, and if the population will ever stand against it in any meaningful fashion.
is this meant to be ironic?
Tesla Cybertruck (which is a Model Y with paneling literally glued on top)
Doesn't seem true?
For some numbers:
The Artemis program has an estimated cost of 93B since 2012 [0].
As a comparison:
"Between 2020 and 2024, $771 billion in Pentagon contracts went to just five firms: Lockheed Martin ($313 billion), RTX (formerly Raytheon, $145 billion), Boeing ($115 billion), General Dynamics ($116 billion), and Northrop Grumman ($81 billion). In comparison, the total diplomacy, development, and humanitarian aid budget, excluding military aid, was $356 billion."[1]
0. https://en.wikipedia.org/wiki/Artemis_program#cite_note-NASA...
1. https://costsofwar.watson.brown.edu/costs/economic/us-federa...
probably because many of those tools were around for 20ish years before 2005
yes, and the answer is every so often
bullshitter
why is lying at the edge of committing fraud so respected?
I could cry with joy because I could finally understand emotionally why people like the Christmas season.
SSRIs are known to induce a
https://en.wikipedia.org/wiki/Mixed_affective_state
I seriously messed up my life early on by not being able to recognize the difference between being happy and manic.
One of those manic symptoms was often feeling like crying out of joy, and another was feeling way more cognitively capable that I was.
However, it is a decent news aggregator.
She also says
" There is little benefit in continuing experiments designed to offer proof, since there is little more to be offered to anyone who does not accept the current collection of data. "
Which is an insane thing to say and reveals her motivated reasoning.
That says 2019, but it was published in 1995:
https://ics.uci.edu/~jutts/air.pdf
This goes into way more detail and covers Utts's work.
different source that loads without javascript https://www.theguardian.com/science/2024/oct/12/oceanographe...
(lacking details on the bottle itself)
https://acedino.medium.com/regional-variation-in-rudolph-the...
a (original?) version is from 1975 on john denver's https://en.wikipedia.org/wiki/Rocky_Mountain_Christmas
you took amphetamine and weren't depressed suddenly? in my experience, that lasts a bit, but give it another decade or so. it tends to bite in other ways.