uyzstvqs

That's no solution. If you can't trust and/or verify dependencies, and they are malicious, then you have bigger problems than what a sandbox will protect against. Even if it's sandboxed and your host machine is safe, you're presumably still going to use that malicious code in production.

But it doesn't give him anything. We're talking about an offline, private, decentralized, OS-agnostic mechanism here.

Zuck is no privacy advocate. But users care about privacy, and he most likely cares enough to take action because having to require online age verification will cost him users. If Facebook has to prompt to "upload selfie/ID" or "log in with your government ID app", many users will just choose to quit.

From last year:

> Messages sent to 4chan's press email went unreturned. One of the two dozen or so alleged moderators purportedly exposed in the hack wrote back using their 4chan email address to say that the site had released a "video statement." The user then pointed Reuters to an unrelated, explicit four-minute video montage. A request for further information was followed by a link to a different video with similar content.

https://www.reuters.com/technology/cybersecurity/notorious-i...

Europe and the US need to bring manufacturing of EVs, batteries, solar, and relevant components back locally. Use automation to make it more feasible. We need rooftop solar + regional SMRs for a cheap, stable energy supply.

To do so, we need to adapt regulation & deregulate. This needs to happen now. If we continue on like this, we'll decelerate back to the stone age.

The same way that I handle anyone who blindly trusts anything on the internet. Could be an LLM, TikTok or YouTube video, Wikipedia article, news article, whatever.

It usually involves some form of "well, no, hold on..."

I use LLMs as a coding assistant. I don't vibecode. The result is that I'm actually improving my skills much faster and better than before, while also working far more productive.

Residential prices:

100 Mbps down / 15-35 Mbps up, unlimited data, includes hardware rental: €29/month in Europe, $39/month in the US.

200 Mbps down / 15-35 Mbps up, unlimited data, includes hardware rental: €49/month in Europe, $69/month in the US.

400+ Mbps down / 20-40 Mbps up (QoS higher priority), unlimited data, includes hardware rental: €69/month in Europe, $109/month in the US.

A good high-speed fiber connection is obviously better quality and value; but if you don't have one, then Starlink is absolutely the most competitive option you're going to get.

For those interested:

https://translate.kagi.com/?from=en&to=Donald+Trump (Trump)

https://translate.kagi.com/?from=en&to=Kamala+Harris (Harris)

It's nothing new though. Forum spam has been around since the early internet. The only difference is that spammers use LLMs now, instead of $0.08 worth of "freelance writing".

Wired and wireless will always co-exist. Your casual consumer prefers wireless. Professional audio equipment for mixing and critical listening will never favor wireless over wired. For pros, $20-50 wired IEMs beat $250 Airpods every time.

The same applies to pro gamers. Latency and empty batteries are a big no-no.

Looks interesting. I was somewhat skeptical, but it appears to be a legitimate open protocol. You can use it to build a search engine for products across many smaller stores, and facilitate ordering from within your app, which appears to be what Google Shopping and the above website are both doing. Sort of a decentralized Amazon MFN.

It's also designed to be used by AI agents. This should enable any AI agent to discover products and purchase items from any UCP-enabled store, in a safe way.

Here's the spec: https://ucp.dev/latest/specification/overview/

Every Shopify store appears to already support it. Example: https://shop.spacex.com/.well-known/ucp

Grok 4.20 is currently in beta and ranking #4 on arena.ai for text generation, only beaten by Claude Opus 4.6 and Gemini 3.1 Pro. Grok 4.1 Thinking is in #9, still a top model. Grok Imagine is consistently in the top 10 for image and video generation, ranking #1 for Image-to-Video.

If you meant code generation, Grok has never really been a top model for that purpose. Claude remains the undefeated king there.

https://arena.ai/leaderboard

Or: http://xmrhfasfg5suueegrnc4gsgyi2tyclcy5oz7f5drnrodmdtob6t2i...

No, training and inference are two separate processes. Training data is never redistributed, only obtained and analyzed. What matters is what data is put into context during inference. This is controlled by the user.

AI/ML is complex, so as a simpler analogy: If I watch The Simpsons, and I create an amusing infographic of how often Homer says "D'oh!" over time, my infographic would be an original work. AI training follows the same principle.

For the same price, Walmart is selling the HP Omnibook 5. It has a better CPU, 16 GB RAM (double), and 1 TB SSD (double).

There's also another HP for $359 with 8 GB RAM & 1 TB SSD. For half the price of this MacBook Neo, it should offer comparable performance with double the storage.

From the link:

> For anyone wondering how this happened, a bit lower in the comments OP says that this key was UPLOADED TO GITHUB, I mean, that should really be the end of the thread. It sucks that this happened, sucks even more that you have a personal card on file, but the fact that Google is even saying ‘shared responsibility’ after you uploaded it to GH is crazy, it is your responsibility.

If kids are being persistent and the parent is indifferent to it, then online age verification won't be effective either. Children will just ask mom and dad to verify their Roblox and Discord accounts.

I've said it before, and I'll say it again: The standard should be that devices ask whether the user is a minor during setup, and make that available as an is_minor boolean to all apps and websites. Children's devices are almost always set up by parents, and the setting can be protected by a parental PIN code. This method is effective while being completely private and local.

Though I can't take credit for the idea. It was proposed by the European Democratic Party.[0]

[0] https://democrats.eu/wp-content/uploads/2025/12/Protecting-C...

I did some experimenting using different search engines and AIs. Here's the results:

Google and Brave linked to the official GitHub repo followed by the fake domain. DuckDuckGo and Bing linked to the fake domain first, followed by the official GitHub. Mojeek gave higher ranking to two third party articles, but linked to both the official GitHub and website without fakes. Qwant was the worst, as the official website was the second result amongst multiple fake websites and an unrelated GitHub repo.

Then there the AIs. ChatGPT, Google AI mode, Gemini, Grok, Perplexity, and Brave Search "Ask" all linked to the official website, and some added the GitHub repo as well. DuckDuckGo Search Assist linked to just the official GitHub. Google AI mode, Gemini and Grok also explicitly warned about the fake websites. Copilot got the official website and GitHub right, but linked to a presumably fake X account as well.

Conclusion: Google, Brave and Mojeek win in search. AI is very good and clearly beats search overall. Google AI mode, Gemini and Grok stand out in quality.

It depends on how the payment app works. Android provides a native Contactless Payments API which can be used by any wallet app. This is local to the device and works flawlessly on GrapheneOS as well. You can set your preferred wallet app for this feature under NFC settings.

Google Pay/Wallet is one of the wallet apps using this API. If you use Google Pay, you set it as your preferred wallet app, and Google will act as an intermediary between you and whatever payment method you've configured in Google Wallet. It's this Google Pay app that's broken.

Banking, payment and wallet apps that implement the Contactless Payments API work normally as they should. But, some banks have lazy developers, and just hyperlink you to add your card to Google Wallet instead.

Why? As long as you use a regular desktop distro, it's simple, pleasant and easy to use. This was already true 10+ years ago.

You're presenting a false dichotomy. I'd argue that installing and setting up GrapheneOS on a Pixel is as-much or less effort compared to setting up an iPhone. And it gives you full freedom and the best possible security while doing so. You can have everything at once.

If your relatives are significantly tech illiterate, I'd skip the smartphone entirely and go for a locked-down Linux desktop + feature phone. The most dangerous apps are big legitimate ones.

If you do go for a smartphone, my experience tells me that there's no difference between Android and iOS. The biggest sources for shady apps are the Google Play Store and Apple App Store. Shady stuff on the web can be easily defeated using an adblocking browser, which is essential for older relatives.

Can you start jailbreaking straight away, or does it require an internet connection and Amazon account first during setup?

It's not that simple. Cameras don't report 3D depth, but these AI models can and do pick up on pictorial depth cues. LiDAR is incredibly valuable for collecting training and validation data, but may also make only an insignificant difference in production inference.

> It burned through a mountain of tokens, but 10/10 - would generate tens of thousands of lines of useless code again.

This is the biggest bottleneck at this point. I'm looking forward to RAM production increasing, and getting to a point where every high-end PC (workstation & gaming) has a dedicated NPU next to the GPU. You'll be able to do this kind of stuff as much as you want, using any local model you want. Run a ralph loop continuously for 72 hours? No problem.

Electrek has a known anti-Tesla bias, and low factuality on reporting related to Tesla. This is not a reliable source.

Previously discussed: https://news.ycombinator.com/item?id=46823084

ISPs do care. They typically have a standard procedure where they will contact the customer if they receive structural complaints, indicating an actual botnet infection. It's also very typical to not receive a response to abuse complaints, even though they do log it.

Why? I don't want companies and governments to datamine and abuse my data at all. Be it in the US or EU, it's going to be no-way either-way.

Country-specific local job boards are best. Big tech companies (LinkedIn, Indeed, Glassdoor) are terrible for this purpose. Always apply directly on a potential employers' website, best through email if they accept that. Even printing your application and sending it by mail is a far better option than applying through LinkedIn or Indeed.