tedmiston

"Apple Pi"

- 2.03 lb on the old 12" books

- 2.7 lb on the 13" neo and 13.6" air

does that 2/3 lb difference really matter in a ~10–15 lb backpack?

no commission

> A18 Pro chip (2 performance cores + 4 efficiency cores) whereas the macbook air has the M5 chip

i don't see the m5 air on geekbench yet, but here are some related numbers for context (sorted by multi ascending):

    | device                      | cpu                                             | single core score | multi core score |
    |:----------------------------|:------------------------------------------------|------------------:|-----------------:|
    | iPhone 16 Pro Max           | Apple A18 Pro                                   |              3428 |             8531 |
    | iPhone 16 Pro               | Apple A18 Pro                                   |              3445 |             8624 |
    | MacBook Air (15-inch, 2025) | Apple M4 @ 4.4 GHz (10 CPU cores, 10 GPU cores) |              3708 |            14698 |
    | MacBook Air (13-inch, 2025) | Apple M4 @ 4.4 GHz (10 CPU cores, 8 GPU cores)  |              3696 |            14729 |
    | MacBook Air (13-inch, 2025) | Apple M4 @ 4.4 GHz (10 CPU cores, 10 GPU cores) |              3696 |            14729 |
    | MacBook Pro (14-inch, 2025) | Apple M5 @ 4.6 GHz (10 CPU cores, 10 GPU cores) |              4228 |            17464 |

https://browser.geekbench.com/ios-benchmarks

https://browser.geekbench.com/mac-benchmarks

i do not have children to provide a meningful reply to the points raised, though i hope others do.

likes and comments aren't social?

i think most users need more screen blocking control than they get out of the box on iOS. tools like one sec [1] have been invaluable for me.

[1]: https://one-sec.app/

reddit having tons of niche subreddits and the ability to sort them by best all time is one of my favorite ways to filter for higher-quality content. (i don't use the main feed much.)

The only truly secure computer is an air gapped computer.

> The question I suppose is whether an LLM can detect, perhaps by the question itself, if they are dealing with someone (I hate to say it) "stable".

GPT-5 made a major advance on mental health guardrails in sensitive conversations.

https://www.theverge.com/news/718407/openai-chatgpt-mental-h...

https://openai.com/index/strengthening-chatgpt-responses-in-...

it's also very easy to rewrite commit history in a few seconds.

each deployment is a separate "atomic change". so if a one-file commit downstream affects 2 databases, 3 websites and 4 APIs (madeup numbers), then that is actually 9 different independent atomic changes.

Art imitates life imitates ...

CCPA/CPRA provide opt out of data sharing for (ad) sales to third-party companies, but those were passed before the gAI boom. I imagine an analogue is already in motion for AI training opt-out in CA, but those two don't address model training.

But ~782 million ChatGPT users vs a few million pairs of glasses.

They are essentially choosing the philosophy of optimizing for speed in every dimension.

The tools selected are faster than their more mainstream counterparts — but since it's a static site anyway, the pre-build side of the toolchain is more about "nice dev ux" and the post-build is more about "really fast to load and read".

    Location: Cincinnati, OH (Remote U.S.)
    Remote: Yes
    Willing to relocate: No
    Technologies: Generalist SWE but lately Backend, Data Engineering & DevOps.  Python, web apps & APIs (FastAPI / Starlette, Flask, Django / DRF, etc), workflows (Airflow) & automation, Platform Engineering & Cloud Engineering, AWS, GCP, Docker, Bash, Terraform, containers, infrastructure, CI/CD (especially GitHub Actions), architecture (software architecture, cloud architecture, data architecture).
    Résumé/CV: https://www.linkedin.com/in/tedmiston/
    Email: tedmiston+hn@gmail.com

Summary:

- I'm a principal software engineer (generalist recently focused on backend + DevOps) with 10+ YoE in software engineering roles professionally and experience from frontend to backend to shells, sysadmin, cloud, platform engineering, DevOps, CI/CD, security, etc etc

- I'm reentering the tech world after a sabbatical gap year and excited to find something that's a great fit

- I'm in the top 3% all-time on Stack Overflow having helped over 8 million software developers [1]

Please mention HN in the note if adding me on LinkedIn.

[1]: https://stackoverflow.com/users/149428/taylor-d-edmiston

    Location: Cincinnati, OH (Remote U.S.)
    Remote: Yes
    Willing to relocate: No
    Technologies: Generalist SWE but lately Backend, Data Engineering & DevOps.  Python, web apps & APIs (FastAPI / Starlette, Flask, Django / DRF, etc), workflows (Airflow) & automation, Platform Engineering & Cloud Engineering, AWS, GCP, Docker, Bash, Terraform, containers, infrastructure, CI/CD (especially GitHub Actions), architecture (software architecture, cloud architecture, data architecture).
    Résumé/CV: https://www.linkedin.com/in/tedmiston/
    Email: tedmiston+hn@gmail.com

Summary:

- I'm a principal software engineer (generalist recently focused on backend + DevOps) with 10+ YoE in software engineering roles professionally and experience from frontend to backend to shells, sysadmin, cloud, platform engineering, DevOps, CI/CD, security, etc etc

- I'm reentering the tech world after a gap year and excited to find something that's a great fit

- I'm in the top 3% all-time on Stack Overflow having helped over 8 million software developers [1]

If adding me on LinkedIn, please mention "HN" in the note or message, so I see it!

[1]: https://stackoverflow.com/users/149428/taylor-d-edmiston

Mostly that FF has ~36k extensions (January 2024) [1] and Chrome has ~112k (June 2024) [2].

[No doubt, total count of extensions isn't the most important number and there's a long tail in both counts of very small user bases, but this paints the ~3x picture in a broad stroke.]

Of course, since FF migrated to WebExtensions in 2017, theoretically most Chrome extensions can be ported to FF with minimal changes [3] — practically speaking though, not all of the big ones actually have, or the FF equivalents to some of the most useful Chrome extensions are far less polished.

And also, if you're developing front end web apps for normal end users, most are still on Chrome... over the years, I've experienced an unfortunate number of sites that should work across Chrome/FF/Safari actually break because of things like the developers not even testing in browsers besides Chrome given its dominance. I'm not encouraging that by any means, but the reality is that it still happens.

[1]: https://en.wikipedia.org/wiki/Add-on_(Mozilla)

[2]: https://github.com/DebugBear/chrome-extension-list

[3]: https://extensionworkshop.com/documentation/develop/porting-...

Yeah, this is a much more accurate title than Security Clearances at the Speed of Startups.

I think you need to email dang <hn@ycombinator.com> to see if he'll agree to update.

> Nope, me too. The whole Repo network thing is not User facing at all.

There are some user-facing parts: You can find the fork network and some related bits under repo insights. (The UX is not great.)

https://github.com/apache/airflow/forks?include=active&page=...

Apple Intelligence is the name of that "AI App Store" platform [1].

Many comments in this thread are conflating Apple's own models and the name "Apple Intelligence" when the latter is the overarching platform.

[1]: https://en.wikipedia.org/wiki/Apple_Intelligence

At the bottom of the article, they allude to a future "AI App Store":

> Eventually, Apple aims to make money from AI by striking revenue-sharing agreements whereby it gets a cut from AI partners that monetize results in chatbots on Apple platforms, according to the people. The company believes that AI could chip away at the billions of dollars it gets from its Google search deal because users will favor chatbots and other tools over search engines. Apple will need to craft new arrangements that make up for the shortfall.

Per Apple's site [1], it's just the language setting:

"* Apple Intelligence will be available in beta on iPhone 15 Pro, iPhone 15 Pro Max, and iPad and Mac with M1 and later, with Siri and device language set to U.S. English, as part of iOS 18, iPadOS 18, and macOS Sequoia this fall."

[1]: https://www.apple.com/apple-intelligence/

It would be cool if someone made a similar minimal open source desktop UI that could run on the data export from Google Takeout [or whatever the future export mechanism turns out to be].

    Location: Cincinnati, OH (Remote U.S.)
    Remote: Yes
    Willing to relocate: No
    Technologies: Generalist SWE but lately Backend, Data Engineering & DevOps.  Python, web apps & APIs (FastAPI / Starlette, Flask, Django / DRF, etc), workflows (Airflow) & automation, Platform Engineering & Cloud Engineering, AWS, GCP, Docker, Bash, Terraform, containers, infrastructure, CI/CD (especially GitHub Actions), architecture (software architecture, cloud architecture, data architecture).
    Résumé/CV: https://www.linkedin.com/in/tedmiston/
    Email: tedmiston+hn@gmail.com

Summary:

- I'm a staff+ generalist software engineer (most recently principal and focused on backend and DevOps) with ~10 YoE in software engineering roles professionally (~20 years since I started programming) with experience from frontend to backend to shells, sysadmin, cloud, platform engineering, DevOps, CI/CD, security, etc etc etc

- I'm reentering the tech world off of a gap year and excited to find something new that's a great fit and technically interesting

- I'm in the top 3% all-time on Stack Overflow having helped over 8 million software developers [1]

If adding me on LinkedIn, please mention "HN" in the note or message, so I see it!

[1]: https://stackoverflow.com/users/149428/taylor-d-edmiston

Something like ArchiveBox or SingleFile are in the same ballpark of tools, but SingleFile at least seems to eschew Safari Webarchive as a format. ArchiveBox may support Safari webarchives, but for some reason they omit it in their docs.

https://github.com/gildas-lormeau/SingleFile?tab=readme-ov-f...

https://archivebox.io/#output-formats

I initially glossed over this believing it may be something trivial, but it really is a deeper XSS concern.

It feels weird me to dismiss as wontfix a security issue that gives the archived page far greater access to browser data than it has loaded at its original URL.

> Last updated at Tue, 16 Jan 2024 16:26:37 GMT

> tldr: For now, don't open .webarchive files, and check the Metasploit module, Apple Safari .webarchive File Format UXSS

> Safari's webarchive format saves all the resources in a web page - images, scripts, stylesheets - into a single file. A flaw exists in the security model behind webarchives that allows us to execute script in the context of any domain (a Universal Cross-site Scripting bug). In order to exploit this vulnerability, an attacker must somehow deliver the webarchive file to the victim and have the victim manually open it ^1 (e.g. through email or a forced download), after ignoring a potential "this content was downloaded from a webpage" warning message ^2.

Just look at the number of (relatively trivial) attack vectors identified by the author in this post:

> Attack Vector #1: Steal the user's cookies.

> Attack Vector #2: Steal CSRF tokens.

> Attack Vector #3: Steal local files.

> Attack Vector #4: Steal saved form passwords.

> Attack Vector #5: Store poisoned javascript in the user's cache.

https://www.rapid7.com/blog/post/2013/04/25/abusing-safaris-...

> Internet Archive/ArchiveTeam also worked on that particular problem for a very long time, and are mostly successful as far as I can tell.

One category that the archivers do poorly with is news articles where a pop-up renders on page load which then requires client-side JS execution to dismiss the pop-up.

Sometimes it is easily circumvented by manual DOM manipulation, but that's hardly a bulletproof solution. And it feels automateable.