bayesnet

This is the kind of assertion without evidence that just muddies the waters. “All kinds” of people is so vague as to be an almost entirely vacuous category and “routine” means almost nothing without an actual quantification of how prevalent and frequent the problem is.

It’s undeniable that the proverbial guns for hire make it easy (if not cheap) to target basically anyone — but just because the vibes are bad doesn’t mean we can just say “it’s common knowledge that …”

The fact is mitigations are costly in terms of convenience and ease of use. Helping people make informed choices about whether to enable mitigations and bear that cost requires more than platitudes imo

What really drives me nuts is smart TVs with 100mbps Ethernet connections. When I bought a tv we looked in vain for gigabit Ethernet.

That’s bonkers. I’m on the east coast (not nyc) and a quarter pounder medium meal is $10.49. Meanwhile Five Guys is $20.29 for a regular meal.

Mac prices on eBay are sort of bizarre. Back when I was looking (when you could still purchase a new one in a reasonable timeframe) many of the higher end listings cost as much or more (!) then just getting them from Apple. I ended up buying an Apple certified refurbished Mac Studio for less than the comparable eBay listing.

Not sure who’s buying these or if it’s just people dreaming about finding a rube.

I'm beating a dead horse here but the challenge is a11y. Chromium wrappers get a11y for free; bespoke UI frameworks must implement accesskit (or something) which is a lot of work and something that (imo sadly) many small teams decide is not worth the investment.

I took a look at gpui-component a while ago when assessing GPUI for a project I was working on. IANAL but was dissuaded because it's almost certainly not compliant with the Zed license--gpui-component "borrows" gpui code patterns lifted straight from the main zed repo, which therefore must be AGPL/GPL (unlike the gpui-only which is Apache IIRC). Caveat emptor (caveat user?).

The existence of a soundness bug in the typechecker doesn’t refute the value of soundness as a language design contract.

If anything it’s the opposite: issues demonstrated by cve-rs are _language bugs_ and are _fixable_ in principle. “Safe Rust should be memory-safe” is a well-defined, falsifiable contract that the compiler can be measured against. Meanwhile memory unsafety is a feature of the semantics of C++ and so it would be absurd to file a bug against gcc complaining that it compiled your faulty code.

What’s wrong with printers? Imagine designing a laser that bounces off of mirror spinning at 20k+ rpm while coordinating with a paper feeder. Sounds pretty cool to me

I don't think it's something special about my workflow and more the application area--I'm writing a lot of Lean lately and particularly knotty proofs can take quite a lot of time. Long thinking intervals are more of a bug than a feature IMO: Even if Claude can one-shot the proof in 40-60 minutes I'd rather have a partial proof in 15 and fill in the gaps myself.

I used Gemini CLI for a while because it was free to me. The primary reason I stopped was because it wasn't very good, but their "thinking summaries" didn't help matters. They were model generated and just said things to the effect of "I'm thinking very hard about how to solve this problem" and "I'm laser-focused on the user objective". So I feel you: small things like this make a big difference to usability.

This is a CC harness thing than a model thing but the "new" thinking messages ('hmm...', 'this one needs a moment...') are extraordinarily irritating. They're both entirely uninformative and strictly worse than a spinner. On my workflows CC often spends up to an hour thinking (which is fine if the result is good) and seeing these messages does not build confidence.

Is there any word on whether these vulnerabilities were exploitable on devices with MIE[0]?

[0]: https://security.apple.com/blog/memory-integrity-enforcement...

I know this is grumpy but this I’ve never liked this answer. It is a perfect encapsulation of the elitism in the SO community—if you’re new, your questions are closed and your answers are edited and downvoted. Meanwhile this is tolerated only because it’s posted by a member with high rep and username recognition.

Small businesses accounts were/are also subject to ring fencing, and my recollection is that large banks sought to recover the costs of ringfencing rules via charges on large clients.

Come to think of it this was all also at the time of very low rates which was more likely to be the issue.

This is arguable for HSBC (in the UK at least). Ringfencing laws post 2008 have made customer deposits in the UK very difficult to invest profitably, to the point where (at least last time I cared about this) they were charging commercial customers to have UK domiciled accounts.

It’s kind of sad IMO. Bartosz has made a ton of these super interesting and meticulously designed explainers. Something thrown together with AI is much more likely to be made by someone who doesn’t know what they’re talking about, and I’m worried that the sheer volume will crowd out actually quality content like this.

> I have no idea what the mov rcx, rsp instruction is for. The rcx register is not read anywhere after that.

Anyone have any ideas? I’m surprised that the compiler emits a “useless” instruction at -o3.

Ok I just had to look this up. There’s a kernel of truth but I didn’t find evidence of genital mutilation: “Sometimes the boys were whipped or violently bumped on the boundary stones to make them remember”( “Beating the bounds”: https://en.wikipedia.org/wiki/Beating_the_bounds?wprov=sfti1 )

Genuinely curious—what parts of Windows 11 do you like? I can’t find a single redeeming quality compared to W10, but admittedly I daily drive arch + macOS and only occasionally use my windows machine.

IMHO this is both unnecessarily pedantic and not really quite right. Let’s say we accept the premise that “everything is a value” means reduction is impossible. But a value is just the result of reducing a term until it is irreducible (a normal form). So if there is no reduction there can’t really be values either—there is just “prose” (syntax) and you might as well read a book.

It should actually be “Layer 3: Paid, ad-free, asbestos free, subscription-based search”. Come on. I don’t think it’s productive to make decisive and conspiratorial declarations on the future of Kagi search because they didn’t use the magic words you like. [ And since I know freediver is active here I want to state plainly that I would cancel immediately if there is so much as a hint of an ad in the Kagi results ;) ]

edit: h/t to https://xkcd.com/641

This is exactly how eBay bidding works now. Sniping still works because your satisfaction with the outcome of an auction isn’t just determined by “I got the item below my price ceiling” but by _how much_ below my price ceiling I got the item.

Early bids make you commit to matching other bidders’ exploratory bids. You lose out on the (naive) dream of a “great deal”. Sniping (without paid-for bot assistance) is a costless way of not revealing your ceiling until the last moment (and it commits you to actually sticking to your ceiling because there isn’t time to rebid later).

If everyone bid rationally, this wouldn’t matter, but it’s very easy to convince yourself that you can stomach bidding just a little more than your ceiling just to win the item. This cuts two ways: last-minute bids prevent this behavior from others while also stopping it in yourself.

But this is literally the point of MCF: third-party logistics for selling off-Amazon. All these brands chose not to sell on Amazon for one reason or another and yet, without explicit opt-in, were being surfaced on a marketplace they didn’t want to be on. If I send a video through gmail that doesn’t mean I want it on YouTube.

I haven’t tried this out yet but my gripe with pandoc is that it produces latex (and typst) that no human would ever write. It looks messy and is annoying to share with coauthors.

This is not to say that pandoc isn’t a fantastic tool.

I recently had a baby. My wife and I are not on socials but wanted to share pics with close friends and family, so we created an iCloud shared album. We only realized that these shared albums had likes and comments once someone asked us if we had seen that my grandmother had left a comment.

I think the shared album is almost the perfect form of social media. We invited about 20 people who we all know well. This “community” has a singular and shared purpose of being interested in our baby. Content is presented in chronological order. There are no ads, no other content, not even suggested posts or “you may also like…”. If you want to see more you just swipe to the next picture and perhaps read what other people you know have to say about the funny face our child is making.

The author observes that social media creates bubbles and that people are tired of socializing. In some ways the shared album is the ultimate bubble and provides only a very limited way for our community to socialize. Nonetheless many of our friends, also twenty-somethings, have told us how lovely it is to interact with us and each other on such a limited platform.

I think—well, maybe I hope—that the future of social media is “hyperlocal” like this. It will not be as easy to meet people and find new perspectives, sure, but it will let the internet serve its purpose of connecting people who are physically far away but still very much in each others thoughts.

I wasn’t aware of the efail disclosure timeline. Apparently Koch responds to the report by noting that GPG prints an error when MDC is stripped, which has eerie parallels to the justification behind the recent gpg.fail WONTFIX response (see https://news.ycombinator.com/item?id=46403200)

Thank goodness it’s real JavaScript and not that knockoff js unscrupulous vendors are using to cut costs

Thank you for writing one of my favorite blog posts of all time! I am curious: What is your favorite thing you’ve written?

I have an Equinox EV which, as I understand it, just runs Android and has no CarPlay or AAuto support. I thought that I would miss CarPlay but I don’t at all from a UX point of view.

What I do miss is the carefree feeling that I can drive somewhere without my car telling GM and Google about it. It is extraordinarily creepy that they know when I’ve had a bad morning and need a McMuffin or whatever. I use a burner Google account but given that the GM account must be associated with my actual identity I don’t think it does much.

> making the timing of the next run independent of the last via the memoryless property of the exponential distribution

Nit: you’re not relying on the memoryless property here but just plain old independent sampling. You’re right that memorylessness means that the elapsed time since the last job provides no information on when the job fires next, but this is orthogonal to the independence of the sleep intervals.