ghughes

FWIW, I’m an existing customer (of the app) and this has significantly damaged my perception of Rewind as a company. You should stop talking about it until you have a credible answer to this question.

Okay, it's kinda cute, but it's not good.

I think OP meant clock speeds don’t matter, relative performance does.

Rewriting would introduce new bugs; it would take a large number of engineering hours away from delivering shiny new things; and a formally correct version would probably be less power-efficient.

It won't happen because these targeted attacks don't affect the bottom line whatsoever. Nobody is switching to Android just because a journalist or NGO employee occasionally gets pwned.

Then they'll exploit the webview followed by the sandbox. [1]

As of iOS 14, incoming messages are parsed in a tight sandbox [2]. It'll be interesting to hear how this attack got around that.

[1] https://en.wikipedia.org/wiki/JailbreakMe

[2] https://googleprojectzero.blogspot.com/2021/01/a-look-at-ime...

Not directly, but now you can exploit vulnerabilities in other parts of the OS.

Because the author is ChatGPT.

That’s not how it works at all

The problem here is that Cruise launched prematurely, not that automated driving is intractable.

Notably:

Successful room temperature ambient-pressure magnetic levitation of LK-99 - https://news.ycombinator.com/item?id=36994214

Andrew McCalip demonstrates synthesis of LK99 - https://news.ycombinator.com/item?id=36997821

They could easily get to the top of the SERP for "X".

BA is just as bad. The legacy European flag carriers are now all basically Ryanair with a veneer of prestige but the same number of fucks given about customer service excellence.

But given the rumored architecture (MoE) it would make complete sense for them to dynamically scale down the number of models used in the mixture during periods of peak load.

You could evade Apple by allowing users to register their API key on your website, not in your app.

They get to print something along the lines of "we tried to protect the children and those irresponsible American tech giants stopped us" in the Daily Mail.

> companies should only implement end-to-end encryption if they can simultaneously prevent abhorrent child sexual abuse on their platforms

And houses with walls should be banned unless the builder can guarantee no children will be harmed inside.

I think the GP meant the value added by Superblocks?

> I imagine it's already happening.

Not quite, that I know of, but some of us are working on it :)

I have a feeling that while the glorious future you describe can probably be realized using LLMs as a foundational technology, the software engineering effort needed to get there is on par with other AI moonshot projects e.g. autonomous vehicles.

If you or others reading this are interested in this topic, see this post for some interesting discussion and links to projects in development (and in the comments there's a link to a Discord server that was set up for further discussion): https://news.ycombinator.com/item?id=36422730

Cool project! I'm working in the same space (a ChatGPT plugin that can edit files within a shared VS Code workspace) and have built something similar to your "repo map" concept, except slightly lower-level: what you might call a "file map" generated by selectively collapsing AST nodes to fit within the available token budget. If ctags isn't cutting it for you, have a look at tree-sitter [1]. It can generate ASTs for most languages and has a nice API.

[1] https://tree-sitter.github.io/tree-sitter/

A phone number is fine for 99% of users.

They recommend that users with higher-than-average security requirements set a PIN, which removes phone number attacks from the threat model, but you're still dependent on the security of SGX.

Users with extreme security requirements can set a 42 character alphanumeric PIN, thus also excluding SGX from the picture, but at that point you're getting owned no matter what you do.

But you can't, because TLS.

But this is irrelevant if you use a password manager.

The point is to make it harder to export your credentials to another platform. An iOS refugee with a keychain full of passkeys will have to do a password reset for every account, instead of a relatively simple export/import into a third-party password manager.

Ah, the rare Reverse Betteridge.

> Nowadays people just accept whatever I say as the best way.

If you don't have management aspirations, this is a very clear signal that you should leave. Growth is almost impossible in this position.

"Introducing Envoy Gateway" is kinda misleading, as it appears no code has been written yet.

Emissary-ingress and Contour are mentioned, but not a word is said about how this will be different and why they're starting from scratch.

Google has Inactive Account Manager [1] and Apple has Legacy Contacts [2]. You could take a photo of the password and store it on an account created for this purpose.

[1] https://support.google.com/accounts/answer/3036546

[2] https://support.apple.com/en-us/HT212360

I have a fun one. The front door to my house had an automatic door opener, paired with a single-button remote control to unlock and open the door. The remote control was annoying to carry and use. (This was before IoT became a thing.)

I pried open the remote, soldered on an extra circuit bypassing the push switch, and hooked it up to an Arduino. When a packet is sent over serial, the Arduino simulates a button push:

    const int basePin = 2;

    void triggerRemote() {
        digitalWrite(basePin, HIGH);
        delay(2000);
        digitalWrite(basePin, LOW);
    }

    void setup() {
        pinMode(basePin, OUTPUT);
        Serial.begin(9600);
    }

    void loop() {
        if (Serial.available() > 0) {
            Serial.read();
            triggerRemote();
        }
    }

This was paired with a tiny web server to do the serial write:

    #!/opt/bin/python2.6

    PORT = 5525

    import BaseHTTPServer, SocketServer

    class LoccaHTTPRequestHandler(BaseHTTPServer.BaseHTTPRequestHandler):
        server_version = "LoccaServer/1.0"
        def do_GET(self):
            if self.path.startswith("/trigger"):
                serial.write('A')
                self.send_response(200)
            else:
                self.send_error(404)

    serial = open("/dev/ttyACM0", 'wb', 0)

    httpd = SocketServer.TCPServer(("", PORT), LoccaHTTPRequestHandler, False)
    httpd.allow_reuse_address = True
    httpd.server_bind()
    httpd.server_activate()
    httpd.serve_forever()

Finally I threw together an iPhone app with the most basic UI imaginable: a static full-screen photo of the remote; tap once, it fires off a HTTP request, and the door swings open:

    - (IBAction)triggerRemote:(id)sender {
        NSURL *url = [NSURL URLWithString:@"http://10.0.8.48:5525/trigger"];
        NSURLRequest *request = [NSURLRequest requestWithURL:url];
        [NSURLConnection connectionWithRequest:request delegate:nil];
    }

That's basically all of the code. Considering how much of a janky hack this is, it worked great.

Ancient write-up with some photos: https://web.archive.org/web/20120103180640/http://ghughes.co...

Has anyone else been rate limited for all of stackoverflow.com after seeing the filters? I assume that's not part of the joke

Recently I've noticed that the GitHub and Stack Overflow scraper clones will often be the only result for this kind of query. It looks like the blackhats have found a way to rank higher then the content they're cloning. I suspect this has the side effect of tricking Google's anti-spam system into punishing the canonical domains and URLs, because it thinks they're copies of higher ranked content.