n8m8

> Unfortunately, in the world of software there are bad actors that bundle malware with their apps. Even so, Homebrew Cask has long decided it will not be an active gatekeeper (macOS already has one) and users are expected to know about the software they are installing. This means we will not always remove casks that link to these apps, in part because there is no clear line between useful app, potentially unwanted program, and the different shades of malware—what is useful to one user may be seen as malicious by another.

---

So there might be pull requests, but Brew's official stance is that they do not actively moderate casks for malware. I guess there's something built into the MacOS packaging step that help mitigate the risk, but I don't know much about it outside playing w/ app development in XCode.

> Unfortunately, in the world of software there are bad actors that bundle malware with their apps. Even so, Homebrew Cask has long decided it will not be an active gatekeeper (macOS already has one) and users are expected to know about the software they are installing. This means we will not always remove casks that link to these apps, in part because there is no clear line between useful app, potentially unwanted program, and the different shades of malware—what is useful to one user may be seen as malicious by another.

That said, I think rg is pretty well known to linux daily-drivers and they just wanted to share something quickly for powerusers who want to check their workspaces quickly. Probably better to just instruct n00bs to use grep than install a whole cli tool for searching

Come to think of it, I wonder if a 2-phase attack could be planned by an attacker in the future: Inject malware into a package, flood guidance with instructions to install another popular tool that you also recently compromised... lol

- Cute winter boots (ICE officers)

- Gardening (420)

- pdf/pdf file (pedophile)

- :watermelon-emoji: (Palestine)

- neurospicy (neurodivergent)

- bird website (X)

- LA Music festival tour (protests)

Not sure if I see more of the 'algospeak' because the problem is real, because I've interacted with algospeak content before and it's just giving me more of it, or if creators don't really need to do it anymore but just still do.

1. Printed ads, newspapers, billboards, magazines -- You can explain your product and show a picture of what it looks like to demonstrate the value to customers

2. Television ads, black and white -- We can demonstrate the value to customers so well!

3. Wait a minute, if we put music in the TV ads, the songs get stuck in peoples' heads, this is good for our brand

4. Color TV Ads -- We have all the previous benefits but can get more attention with color!

5. We can target regional TV ads in different parts of the country!

6. Oh, we can target any ad based on demographics on social media? This will be effective

7. Ok, now we want to keep targeting ads, but we're gonna A/B test multiple versions of the ads in real time to maximize effectiveness

8. Ok, I need to maximize effectiveness of this ad, let me generate an AI mockup of the product I'm selling to create an illusion of the lifestyle my brand represents

My point is, marketing has been optimized over time and will continue to optimize for profit in the future, and the result has been a divergence in the actual goal of marketing: We've gone from "Demonstrate the value of our product" to "Create an illusion of our lifestyle".

The game presents 20 random scenarios from different manipulation tactic categories (DARVO, gaslighting, strawman arguments, etc.). No matter which response you choose - logical, emotional, gray rock, or boundary-setting - your stress level increases and the manipulator escalates predictably.

Coded in vanilla JS as a single HTML file with Claude Code and elbow grease. Hosted on S3/CloudFront. Has sounds, basic animations, and gives you a breakdown of how you answered. Also links to DV resources across multiple English-speaking countries.

Huge thanks to r/NarcissisticSpouses, r/WebGames, and r/LivingWithNarcissists for the first round of feedback that helped shape this.

Sometimes the winning move really is not to play.

> laughs in Capitalism

edit: Meant to say, you're right though, this feels like a minor psychological improvement, and it sounds like it targets some behaviors that might not have flagged before

In my experience, smart leaders tend to rely on data and hard numbers over qualitative and anecdotal evidence, and this paper explores this exception.

I'm disappointed they didn't address the paper about GPT integrating with ChatbotArena that was shared here on HN a couple days ago.

Dedicated 2FA on a hardware device seems pretty resilient, I hope more banks incorporate it instead of SMS 2FA. Hosting vaultwarden also seems pretty good because it’s unlikely for you to be targeted, but requires selfhost maintenance.

Edit: I think figure 3 in this study is what I'm looking for. They define the inconsistency I described as "spectral pivoting".

> This discrepancy is because the Mermin-Wagner-Hohenberg theorem holds in the thermodynamic limit, while these simulations are for finite lattices

I think thermodynamic limit here means, it needs to be way too hot?

https://arxiv.org/html/2403.09078v1