nixgeek

This feels like countering insinuations on the Internet with insinuations on the Internet.

Cellebrite doesn't publicly publish the latest support matrix so we have no real idea what progress if any they've made against recent iPhones and iOS versions, nor any real detail on how something like Lockdown Mode influences outcomes for their software.

Nor does this show anything about Pixel 9 or Pixel 10 and the newest variants of Android OS (which for Pixel 10 makes sense given (2024), but for Pixel 9 does it?).

What we do know as both companies disclose this is that Apple implements particularly with Advanced Data Protection enabled significantly more E2EE than Google, and both companies invest significantly through i.e. Apple's SEAR into the security of their hardware, software and platforms.

That GrapheneOS exists is great but I don't think this post helps much.

You seem to spend most of your time on HN saying the cattle are meeting the butcher, or saying fsck responsible disclosure, or other hot takes.

I think Microsoft has also been working on this and protected resources using Conditional Access can enforce a requirement for DBT?

https://learn.microsoft.com/en-us/entra/msal/javascript/brow...

Isn’t AWS always quite expensive? Look at their margins and the amount of cash it throws off, versus the consumer/retail business which runs a ton more revenue but no profit.

If you’re applying the same pricing structure to Kiro as to all AWS products then, yeah, it’s not particularly hobbyist accessible?

Excluding training two of their biggest costs will be payroll and inferencing for all the free users.

It’s therefore interesting that they claimed it was close: this supports the theory inferencing from paid users is a (big) money maker if it’s close to covering all the free usage and their payroll costs?

A ton of EMR systems are cloud-hosted these days. There’s already patient data for probably a billion humans in the various hyperscalers.

Totally understand that approaches vary but beyond EMR there’s work to augment radiologists with computer vision to better diagnose, all sorts of cloudy things.

It’s here. It’s growing. Perhaps in your jurisdiction it’s prohibited? If so I wonder for how long.

Most new drives are sold into consumer/end user retail around $20/TB and only seem to dip a little during sales (with most sellers also quantity limiting any sales, also). Getting to $10/TB is possible but typically involves buying manufacturer recertified, and may involve going smaller (14-16TB drives) than you might prefer.

I managed to find 64x Seagate Exos 20TB for $13/TB new about 2 years ago, on NewEgg of all places, but I’ve never seen that deal repeat. :(

All the new 30TB+ HDDs using HAMR technology from Seagate and WD still feel like expensive unobtainium.

Did anyone reserve? If yes what’s your preorder position number?

Why? It looks like a complete unknown and your comment history is just shilling it without any suggestion of why it is better?

Where do you see people leaving heading towards? What’s your emigration destination? It seems like most countries have their challenges and I’m curious where people who have inevitably done more research than me are landing, literally!

Using the new U.S.-located 14A fabs coming online soon, all bumblebees will soon be government surveillance drones.

So you approached “Who is Jeff?” by driving by his blog, searching across thousands of old and new posts, seeking out things you find triggering, and then went to HN to say you found this? That’s one way to spend Saturday, I guess!

Bringing siblings to U.S. as a citizen is currently about a 15-17 year backlog for most countries (fourth preference), so yeah, there’s often some or a lot of waiting in these processes.

Well, your obvious choices for datacenter cooling are in some climates evaporative /or/ using a heck of a lot more energy and a closed loop system. Pick your “problem”.

Water usage can also be optimized and is becoming part of the sustainability conversation at most of the hyperscalers with multi-gigawatt energy footprints:

https://sustainability.aboutamazon.com/natural-resources/wat...

It only enforces a restrictive covenant for 10 years. Buy land in 2026, build a few homes, repurpose to a datacenter campus in 2036. Looks like that would be entirely legal from reading the bill.

If they were concerned about future redevelopment they should have put a 50-100 year restrictive covenant in the bill, not only 10 years.

I think the question is are the Armed Forces served better by having this expertise available (on a commissioned part-time basis, with modified basic requirements) or by maintaining a bar that the person has to go through OCS and pass APFT?

You probably can’t have both — not they couldn’t pass APFT (with varying degrees of fitness program required) but more likely they cannot commit the time required to do OCS and APFT, and if forced to choose will simply not participate.

It’ll stick in some people’s craw that this is dual standards, however you can’t please all the people all the time — someone concluded the compromise was worth it to obtain access to technology experience.

They’ll be shipping the drone swarm strategy against Iran from safely under a mountain in CONUS.

I think Tupperware was rebranded to Twine sometime about 6-7 years ago.

Adding an extra “e” for each doesn’t create much extra mystery requiring stylometry to unmask you.

More seriously, why is this essential?

Increasing amounts of traffic are flowing through Google VPN if you’re on a Pixel, and on Apple, there is iCloud Private Relay. I’d have thought the address-neighbors issue would be especially likely to catch out these situations?

Overly simplistic solutions like this absolutely will actively cost you real customers and real revenue.

Yep. Because they offer highly competitive pricing and most items are delivered next day. Both are big factors for me in choosing where to spend dollars and Amazon continues to be the market leader at each.

If your threat model needs to include “I’m (going to be) a target of major nation-state intelligence community agencies” then it’s safest to assume none of this is going to prevent them getting your data?

James Mickens covered this at Monitorama 2014 in a humorous way. https://vimeo.com/95066828 (16:30)

Bus factor being “1” means nothing works if you’re hit by a bus.

It’s not mockery though? It’s certainly true 99% of even the technically literate don’t use GnuPG (many because, like me, they cannot stand the GnuPG user experience).

Filippo nailed it with this piece: https://words.filippo.io/giving-up-on-long-term-pgp/

Apple’s stance is not all E2EE is off by default… Instead there are a set of things which are E2EE when you are using Standard Data Protection and a wider set of things become E2EE when you opt-in to Advanced Data Protection.

This is all clearly documented here: https://support.apple.com/en-us/102651

What’s changing is the UK government is apparently serving a Technical Capability Notice compelling Apple to provide access to their customers data, and the only reasonable way for Apple to comply is to remove ADP as an option in the United Kingdom.

I imagine you don’t need to do steroids to look like that photo. There’s likely no shortcut here, Bezos put in a lot of work. Kudos.

That said, Bezos likely has a support cast that maximizes his time investment - think doctors and the ability to test any of his levels whenever, instead of maybe a subset of them once a year during an annual physical? Think dietician's coordinating with chefs to avoid (most of) the need to supplement artificially, and 1:1 personal trainers every training day, plus on-demand access to experts in strength, conditioning and recovery.

Oh and let’s not forget the luxury of time to spend 90 minutes most days of the week with his trainer.

Bezos isn’t unique in transformation terms, movie stars also get ripped to play roles with often only a few months to prepare their physique before a shoot begins.

Likely yes although I’m not sure if the administration has fully got rid of De Minimis or figured out how to reduce from $800 USD.

With UPS the added kicker is UPS charges a $70 processing fee themselves for processing something through Customs for you, paying the tariff for you so the package isn’t delayed and then enabling you to pay them back in advance of delivery on ups.com or the driver will ask for payment at the door when delivering your goods.

Not really, with an SSH CA you’re trusting the CA and not installing individual keys into authorized_keys files.

Anything signed by the SSH CA will work for logins.

To deal with the “untrust” issue it’s normal for operations with an SSH CA to rely on (very) short-lived certificates, meaning often issued and valid for < 24 hours (it’s configurable, I’ve seen this be as short as 30 minutes).

Smallstep wrote a summary here which is pretty good —

https://smallstep.com/blog/use-ssh-certificates/

They have tons of great documentation — https://tailscale.com/blog/how-tailscale-works