laggyluke

Because it didn't land on someone's head?

How about incorporating postprocessing into the update procedure instead of preprocessing?

> It's probably reasonable that radio hardware can't trivially be reprogrammed to exceed regulated power limits.

https://github.com/meshtastic/firmware/blob/develop/src/mesh...

The true limits are imposed by the hardware, not the software, as it should be!

You have a point.

Being able to reprogram a pacemaker isn't enough!

We should require that any devices that our lives depends on, especially devices that go inside our bodies, to be open source: not just reprogrammable, but with source code available for inspection and modification.

I've been working in this industry for too long in order to trust a closed source pacemaker to be bug-free.

> The studio didn't spend this money for the heck of it, they spent this money with the hope of recouping their investment.

I wonder if the world would be a better place if we had fewer financial incentives to do things, in general?

> But why would a studio spend hundreds of millions making a blockbuster movie?

Under this hypothetical scenario, I believe there wouldn't be a "studio" in the first place. There could be a group of people who want to express themselves, get famous or do something just for fun, without any direct financial gain. Sure, they wouldn't be able to pull off Avatar 2, but our expectations as consumers would also be different.

This is hair-splitting, because it's technically not a part of _system prompt_, but Claude Code can and does run `git log` even without being explicitly instructed to do so, today.

Unless you're running the LLM yourself (locally), private benchmarks are also trust-based, aren't they?

If you're asking an LLM about a particular text, even if it's a well-known text, you might get significantly better results if you provide said text as part of your prompt (context) instead of asking a model to "recall it from memory".

So something like this: "Here's a PDF file containing Being and Time. Please explain the significance of anxiety (Angst) in the uncovering of Being."

I think older and low power devices would actually be easier to port: they capture the audio request, send it to the server, receive an audio response from the server and play it. No local "intelligence" at all.

So you could probably replace the whole backend while keeping things compatible as long as you maintain that simple API.

You might be interested in this:

https://github.com/kelseyhightower/kubernetes-the-hard-way

It probably won't answer the "why" (although any LLM can answer that nowadays), but it will definitely answer the "how".

> Useful stacktraces is one of the reasons why I use Go

I'm not sure if this is sarcasm or not.

Recently I just started asking ChatGPT.

It does a very good job guiding me in areas where I'm less familiar.

That's assuming we're talking about technical problems. For non-technical problems I'd reach out to friends (or even better - a therapist). But asking on HN and/or Reddit might be a good idea too, depending on the context.

Why not both?

Sure, it'll lead to arms race like you describe on one side, but let's say 99% of the apps won't even engage in that arms race if the fake data is generic enough to cause a high number of false positives (blocking someone who's not actually faking the data).

Then, we can focus on the remaining 1% of worst offenders to actually enforce the policy.

Ideally OS should give you a way to feed such evil apps some fake / spoofed data.

I believe a rooted Android used to allow something like that, not sure if that still works nowadays.

Yubikey is actually pretty "phishable", at least in the OTP mode. It will happily put the token into a phishing website (or literally anywhere else) as soon as you touch it.

It's also good to know that Yubikey's OTP tokens don't expire based on time, but based on a hidden counter that gets incremented with every issued token.

So if you've accidentally touched your Yubikey and leaked the token publicly, you just have to log out and then log back in using your Yubikey - that action will invalidate all tokens issued before this point.

> And whatever happened to Apple who refused to work with FBI on the San Bernardino shooter but here is only happy to comply in a much less interesting case?

Nothing. It's just a matter of technical means. They had no means of unlocking that phone without potentially compromising all the rest of the phones they've made before that point. But Apple account / emails are "in the cloud", so Apple has full access to it.

> "web of trust."

"Web of trust" is a pretty specific term that doesn't apply to TLS/SSL: https://en.wikipedia.org/wiki/Web_of_trust

Did you mean to say "public key infrastructure" (PKI)?

> most people don't bother to re-evaluate that default assumption that "the windows browser is bad"

That's one way to look at it.

Another way is to say that Microsoft has lost customer's trust and now has to work extra hard to earn it back.

IMO they've learned their lesson, at least for now, but it would also be great if others could learn from Microsoft's mistake too.

> This change had a significant impact on the module ecosystem, making some popular modules unusable until maintainers adjusted the code to work with isolatedModules.

Does this mean Deno introduced a breaking change in a minor version (1.5.0)?

A year ago I had very similar concerns, but now I'm a happy user of a 16" Macbook Pro. Yes, the silly touchbar is still there, but with a hardware Escape key I can tolerate it. Is there anything else lacking for you from a 16" model?

> Duct tape on top of abstractions on top of duct tape in order to make a document platform behave like an application platform. Isn't it time to just replace web browsers with something that doesn't suck?

Be careful what you wish for. You just described native mobile apps.

> Once covid19 goes away (if ever), and a new virus appears, NO ONE will have that app turned on, and by then, the new virus will have spread just like covid19.

Devil's advocate: so why not just keep the app running forever in the background?

If there's no virus to report - that's fine.

But the moment a new outbreak starts, the data is already there, you just have to report that you're sick.

Is your cron, by any chance, configured to run on every first day of month at midnight?

But if the comment was, say, digitally signed, on the other hand... ;)

What would you do instead?

Hopefully efforts like this will make further ossification harder:

https://www.ietf.org/mail-archive/web/tls/current/msg26385.h...

> Is that hurting anyone?

It's actually hurting me: I'd like to be able to sign into YouTube on an untrusted device without signing into Gmail at the same time.

I doubt they're going to use fans if they are pumping the air out of the thing.

What problem would it solve?

If you're not trusting your phone, is there a different kind of computing device that you trust?