Sophira

Be careful - this may be a case where they say they're going to do one thing (collect data from US citizens), but walk that part of it back after people protest - while those very same people overlook the fact that they're still going to be getting every immigrant to submit to the scans.

...I mean "yt-dlp", of course. Phone autocorrected >_<

Yes, lots. To name an example, yt-dip uses it on all platforms, including Windows, which means that any video downloader front-end that uses it also uses FFmpeg.

Yep, services like AOL, CompuServe, Prodigy and so on, would absolutely be separate. As it was, each of these services basically had to allow access to the greater Internet.

Why do you feel this was generated by AI?

> given how cloning a remote repo only gives you a partial copy of the remote history

You may be thinking of the optional -depth switch, which allows you to create shallow clones that don't have the full history. If you don't include that, you'll get the full history when cloning.

I completely agree with you - I think that automatic downloading of dependencies when building is a bad idea.

However, for the sake of devil's advocacy, I do also want to point out that the first thing a lot of people used to do after downloading and extracting a source tarball was to run "./configure" without even looking at what it is they were executing - even people who (rightly) hate the "curl | bash" combo. You could be running anything.

Being able to verify what it is you're running is vitally important, but in the end it only makes a difference if people take the time to do so. (And running "./configure --help" doesn't count.)

The article itself is a nice look at the state of editors and IDEs compared to those of yesteryear... but the site itself restyles my scroll bar to be thinner and less usable, which kind of spoils the experience.

I hate it when sites do this. I don't want my window decorations to be restyled in the name of aesthetics. I need them to be usable.

Secure Boot is not something that should be part of a consumer computer at all, in my opinion. Enterprises might have some use for it, but for a consumer who wants to be able to do anything they want with their computer, it doesn't make sense.

I don't believe there's any mode you can use that would make it truly end-to-end encryption. I may be incorrect, but I don't recall seeing anything like that.

While I understand (and agree with) the general sentiment of what you're saying, you are not correct in saying that this is end-to-end encryption, and HTTPS itself does not guarantee that end-to-end encryption is in use.

In this case, there's an explicit middle point - chatgpt.com resolves to a CloudFlare server, so CloudFlare is actually one of the ends here. It likely acts as a reverse proxy, meaning that it will forward your requests to a different, OpenAI-owned server. This might be over a new HTTPS connection, or it might be over an unencrypted HTTP connection.

It really is super important to emphasize this point. End-to-end encryption is not simply that your data is encrypted between you and the ultimate endpoint. It's that it can't be decrypted along the way - and decrypting your HTTPS requests is something that CloudFlare needs to do in order to work.

(To be clear, I'm not accusing CloudFlare of anything shady here. I'm just saying that people have forgotten what end-to-end encryption really means.)

It looks like the headline may have changed as well since the HN submission, assuming that the title here was the original headline. Now the headline seems to be "Suspect in Palisades fire allegedly used ChatGPT to generate images of burning forests and cities".

While I don't disagree that Google are going to be targetting GrapheneOS and other OSes, the decree you're referring to only applies to "certified Android devices" - devices which run a Google-vetted version of Android and that come with Google Play pre-installed. OSes like GrapheneOS are not currently affected by this, as any device running it is not a "certified Android device" by definition.

This is not a reason to sit idly back, of course. GrapheneOS is in danger, as you say - it's just not necessarily from this particular decree.

Does Ars Technica regularly publish things like this? It's the first time I've seen a non-tech-related article from them.

(I'm not complaining, mind you - I did find it very interesting to read. It just doesn't strike me as typical AT content, or at least not the kind that people typically share for it. Thank you to OP for doing so!)

There used to be an unwritten rule in fansubbing that you should only fansub anime that didn't have a licensed release - but of course that was during the time when barely any anime got licensed.

Still, though, I wonder if that mindset is still going to be around.

At leaat one country also celebrate the opposite - Guy Fawkes' Night in the UK is a celebration of the thwarting of an attempt to overthrow the government.

(I do agree with your position; I just wanted to throw that out there.)

Until management realises they can skip the checks and come out $20 on top each time, with no complaints from advertisers.

This article makes it seem like the whole thing is over and nothing came of it, but The People's Letters have a X account that they're doing updates on[0], and the new location opens on October 1st (this Wednesday)[1].

I'm not entirely sure why the article didn't talk about this.

[0] https://x.com/PeoplesLetters

[1] https://x.com/PeoplesLetters/status/1971482419502198960

Genuine question: Why do you feel optional TLS is better?

This looks like an attempt to reinvent HTTP and HTML, but I'm not entirely certain that I grok why it's useful. It feels like a developer-centric approach.

I'm reminded of another project called Gemini[0], which aims to solve a similar problem in a different way. The Gemini protocol is very, very simple to implement (with the exception that it uses mandatory modern encryption like Gurted does, so you need encryption libraries), and it's intentionally difficult to extend, in an effort to make it a simpler and more efficient alternative to the Web that is resistant to takeover by corporate desires, in a way that I'm not sure Gurted achieves.

[0] https://geminiprotocol.net/

It feels to me like a lot of people who don't like codes of conduct have similar views.

It also establishes that the project is a meritocracy, which is not necessarily something that every project wants. (And from a personal point of view, many meritocracies seem pretty toxic to me.)

A lot of these arguments also apply to newsgroups (Usenet), however. It has the same features of being able to use whatever client you want, and can be archived.

Archives can be searched fairly easily, although admittedly most will be incomplete (hence Deja and Google Groups back in the day).

Some newsgroups are still active, but not many. Why? What went wrong?

https://www.rightreading.com/blog/language/translation/googl... is an interesting blog post from the time (October 2007) which compares Babelfish (by that point owned by Yahoo!) and Google Translate.

> I was surprised by how many people seemed to think there's no legitimate reason to ever want to do so.

Sounds like it's as legitimate as running the sync command - ie. ideally you should never need to do it, but in practice you sometimes do.

AFWall+ on Android is an example of this - even if an app is blocked, as long as it has Internet permission it can still make DNS requests, allowing for two-way communication despite the firewall.

You might find https://findyoutubevideo.thetechrobo.ca/ to be helpful! It was posted before on HN here: https://news.ycombinator.com/item?id=38228481

> (mostly, I've never had a download NOT work, on the rare occasion I grab one)

A lot of the reason for that is because yt-dlp explicitly makes it easy for you to update it, so I would imagine that many frontends will do so automatically - something which is becoming more necessary as time goes on, as YouTube and yt-dip play cat and mouse with each other.

Unfortunately, lately, yt-dip has had to disable by default the downloading of certain formats that it was formerly able to access by pretending to be the YouTube iOS client, because they were erroring too often. There are alternatives, of course, but those ones were pretty good.

A lot of what you see in yt-dlp is because of the immense amount of work that the developers put in in order to keep it working. Despite that it now allows for downloading from many more sites than it originally was developed for, they're still not going to give up YouTube support (as long as it still allows DRM-free versions) without a fight.

Once YouTube moves to completely DRM'd videos, however, that may have to be when yt-dlp retires support for YouTube, because yt-dlp very deliberately does not bypass DRM. I'd imagine the name would change at that point.

And VPN providers who ask you to install a CA root cert. (I don't think PureVPN does this from a casual search, but there are VPN providers that do.)

Perl and CPAN are still a thing, much as people would like to think otherwise.