bstsb

it’s alright, they’re making fun of the “security risk” Anthropic’s CEO, not their darling Altman

haven’t been properly rickrolled in years, wasn’t expecting that!

oh come on, i bought my series 11 last week!

i'm going to miss out on all those amazing new features, like... an improved heart rate variability measurement

alternate link, as it seems the site is unresponsive:

https://web.mit.edu/people/dpolicar/writing/prose/text/think...

previous discussions:

https://news.ycombinator.com/item?id=47688678 (2026)

https://news.ycombinator.com/item?id=38420111 (2023)

https://news.ycombinator.com/item?id=24737993 (2020)

https://news.ycombinator.com/item?id=8152131 (2014)

my opinion on things like this (and the previous news about Mullvad) is that companies should be free to use their money for political reasons, and fund who they want, even if i vehemently oppose those views.

however, individual consumers are also free to stop supporting who they want - that’s why I switched to iVPN after my subscription ended

seems like a very similar idea to a site made by walzr, previously posted to HN. i’ll find the link somewhere

for me on chrome (stable), all that’s needed to install my own extensions is enable Developer Mode in chrome://extensions, then load an unpacked folder as an extension

this is wildly complex, way more so than a traditional ClickFix attack. it's fetching JS scripts from a Ethereum/Base contract and executing them - i've never seen something like this before

> Google search is on the way out. I don't know any of my peers who use it anymore.

bear in mind we're on Hacker News. Google's market share is still above 90% - in almost any other market this would be a ridiculous monopoly.

don’t know why you’re getting downvoted, they gave legacy users literal years to migrate

+1 on infisical. brilliant self-hosted offering, i love their CLI and it works well with CI pipelines

different people work in different ways. just because you hate it doesn't mean it won't be helpful for others.

also if you're buying used books, expect them to be used!

the page keeps 301ing to the home page for me - could be a region issue

https://archive.ph/JYC9B

then every casual user would switch instantly to Gemini, or the most convenient alternative

> The default applies only to version updates. Security updates still open immediately, so critical fixes are never delayed.

does this require a real vulnerability report, or CVE? if the package is compromised would they just be able to push a false "critical update" that bypasses this wait?

as far as i remember only the Pro tabs are paywalled (the ones created professionally)? the community tabs are all freely available on web, and carry little restrictions on mobile

people have been mistaking AI conversations with reality since the very first text-based models came into the public view with ChatGPT. i'm sure with each incremental improvement to outputs like this, though, more people will get convinced of its "humanity"

(see https://www.reddit.com/r/MyBoyfriendIsAI/)

can Vercel give any assurance that they won’t add a reliance on their closed-source cloud offering for the package? especially given their ownership of next-auth too

i really loved better-auth’s DX but the nature of their database adapters means it’s relatively easy to switch over to another provider/library

i think the point is that one actually burns disk space, while the other is just a nuisance for people on plans with limited data

i remember making my first HTML app when i was your age - my teacher let me use the computers after i finished my work, and i used JSFiddle to learn the fundamentals. if it weren't for the supportive adults around me i would never have got into the field of computing today!

good luck with making more projects :)

i think honestly it’s the opposite. it still confuses me why meta invested so much in their pointless experiments (think any of their AR ventures) when their main source of revenue was, and continues to be, their boring advertising on consumer apps

wow, this is actually a really impressive attack - a far cry from the obfuscated postinstall hooks seen a million times before.

the only real long-term solution to node-based attacks like this is to run any remote code in a container, or even a VM?

> […] the publisher posted a blank white page with the cryptic phrase, “This article has been withdrawn due to article violation.” Springer Nature is nevertheless still selling the empty PDF for $39.95.

completely unsurprised, given the state of online papers publishing. if you don’t have an subscription or aren’t an organisation member, the fees are insane

the actual base64 email itself is an HTML document, with a bunch of filler text about metal magnets!

> Hi there, A magnetic domain is a region within a magnetic material in which the magnetization is in a uniform direction. This means that the individual magnetic moments of the atoms are aligned with one another and they point in the same direction [...]

they sign off the email with a zero-width space set to "font-size: 0" for some reason

interesting - this looks quite promising. anything that reduces captchas or client blocks while using a VPN is welcome in my books.

i’m not sure what they mean about agents, however. would this mean a human generates legitimate traffic, and that goodwill can then be utilised by a browser agent? and will it be possible to host your own Moderator?

what does that even mean in this context??

> This conversation was initially just a phone call, but was so powerful that we decided to turn it into a blog and share the audio via YouTube

i can tell - it looks like the blog post doesn't really add anything over a direct transcript of the call itself. it's just a bland summary of the really interesting story Dalton told

> I'm amused that it made me accept the terms and conditions without any indication of who I am

as far as i’m aware, that’s fully binding and often an accepted practise - take Minecraft’s server software, where you must accept the EULA with a text flag before running

for the first time in a while on HN, i disagree with the characterisation as AI-generated. at most it was drafted with an LLM, but the final output is pretty human to me.

they used the wrong it’s/its, made But. its own one-word sentence, didn’t capitalise HTML, and used “okayy” in parenthesis. all of this isn’t to criticise the writer - i enjoyed it more seeing these little imperfections that make up a blog post

ironically that guide is AI-generated