wyldberry

Patiently waiting for the list of successful countries that don't control access to their resources via borders.

Hackers can start to learn what kinetic response is then.

"far more concerning".

Israel, not a peer adversary to the US. China is. So no, it is not more concerning.

This is really awesome, thank you for sharing!

I'm sure a solution exists that can take inspiration from the digital rights people, anti-cheat developers, cryptography, and other industries interested in provenance.

Of course, nothing will be fool-proof, but perhaps something strong enough that social media websites require the uploaded media to have this provenance attestation as well.

I wouldn't be opposed to similar outcomes as the Chinese baby milk scandal in the end.

It's the thing that allowed states to move out of colonialism post WW2. The American fleet is a fraction of what it used to be, and the populace appetite for a war glassing the Houthis where the US benefits very little is non-existent.

Could the US turn their might on any nation in the middle east and end their ability to wage war and affect this? Absolutely. Is it worth it in an election year? Not to this administration.

Nothing special, and an exceeding amount is above board. Everyone is playing the same game, using mostly the same tactics. Get wealthy people on board, use that to get policy makers on board while buying up advertising to target and sway people one way or the other.

All foreign powers will try to do the same thing, through the legal channels, and the not so legal channels. The current order enforced on the back of the US dollar is simply too powerful to not do that. Americans are broadly naive about this, so it's relatively easy to "shock" them into caring about it.

Ally doesn't mean you stop your intelligence services against them. It simply means there are things you agree about, currently, and agree to do. Everyone is always jockeying for power. No one stops trying to influence their allies.

It simply cannot until China can be as seafaring as the US Navy and guarantee trade flows. Without guaranteed trade over the ocean, you'll see a more traditional alignment of vassal states and colonialism based on technology, geography, and ability to project/protect power.

Dread it, run from it, multipolar world returns all the same.

When I first left offensive security consulting and joined an internal defensive team, a wise ex-agency person said to me "In product development, the first things to often get axed are security, and performance. They are invisible to the user, until they aren't, and rarely do failures in those areas end a company."

Granted this was prior to ransomware really blowing up, but even that itself is a different threat model that doesn't mean your product has to be good at security.

One of the features of a totalitarian government is the power to absolutely shape the populace. In China's case, their government planning sessions identify key technologies they think are the future and seek to be the best at, and execute on it. [0]Their tight control of their social media algorithms, combined with the ban on similar western tech in China allows them to minimize the brain rot in their upcoming generations. China is hungry, and America is full at the buffet going back for thirds.

Their manufacturing base allows for much more rapid iteration in related fields than our service based economy can. Combine this with increased military in these key fields they want to "dominate" in [1] spending and you'll see rapid expansion in scientific capability.

Of course there is corruption, world-wide IP theft, and other misaligned incentives there, but with a population 4:1 of the US, it was only a matter of time before the strategy paid off.

If they end up finding a fix for their birthrate problem, they will be the globally entrenched power for the next century, assuming they don't eat themselves politically.

[0]https://www.reuters.com/article/idUSKCN2AX0IW/ [1]https://media.defense.gov/2023/Oct/19/2003323409/-1/-1/1/202... - Page 168 for the TLDR,but the whole thing is a great read.

This makes sense because of the other aspects at play in the war, namely no one having clear air dominance, which allows artillery to shape the battlefield. In the shaped battlefield, the hunter-killer type drones have a target rich environment.

No questions, but as a security person, I found this to be aligned with the view of many of the people i consider to have a good pulse on the warfare side of security. You're certainly not alone in these thoughts and efforts to fix.

None of what i said is security by obscurity (which is also can be an effective tactic,but obviously not the only tactic).

There are only so many human hours and minds interested or allocated to exploitation and offensive security. If everyone used the same architecture for everything, the economies of scale on the offensive side (due to state funded actors) would blow everyone else out of the water.

From a software perspective, Windows has an incredible amount of skilled eyes on each patch release, but we still see new exploits. Same for Linux. Likely same for MacOS.

All i'm advocating for is that having separate hardware architectures is good because it raises the barrier to entry, even if it's only the next marginal step.

> worldwide small market share

It's a premium product. Iphone has the majority of US (and thus wealthy) customers. It's seen as premium in other wealthy nations as well. Second largest company in the world by market cap means that they clearly operate with more than enough customers who matter to get things done.

I used to be a hardcore linux everything person. Over time I stepped into the walled garden and found I enjoyed not having to constantly think about the interop of everything. It's different for everyone.

> Where am I going to run my servers and software development stack?

Right now you need a laptop. Rapidly approaching a future where devcontainers and remote dev servers will let you dev anywhere you want, where you just choose the interface of choice. You may want a laptop,

I may want to have multiple screens for analyzing data, modifying code, and doing other operationsy things.

The point overall is: Apple is good at shipping products that people want and iterating and improving them. That is undeniable. It does take time to iterate and improve, and Vision will probably get there because this pattern of product is in their DNA.

That wasn't the point. On a long enough timeline, the security of all systems drops to zero. If the entire world is running x86, then the threat model for attackers revolves around abusing x86. If things are homogeneous, it raises the bar and resourcing required to make attacks.

As always with security, everything is a tradeoff.

The expectation and capability of the first iPhone is a minuscule fraction of what's expected of the Vision Pro. The iPhone wasn't a new idea, there were other smart phones before it, but they hit it out of the park with the interface and understanding what customers would want, before they wanted it.

The entire computing environment has evolved dramatically since then, as have the expectations of the once scrappy underdog to the second largest company in the world. At some point, AR / VR will eventually become good enough, and it's good that they are investing in it. It forces Meta to innovate and become better as well.

I personally hope that it will get to the point that i can go anywhere and take my ideal workspace setup with me and lose little to no productivity.

Seems like the thousands of people who bought it care, myself included. My role has significant on-call responsibility. It's nice to be able to take it charged anywhere I could need it and know that for several hours it can handle anything I will throw at it, reliably.

From a security perspective, I prefer the separation from the x86 architecture if for no other reason than it imposes extra cost for exploit development.

it's also likely that lines is higher than normal because of how close to bare metal they have to be.

Russia -> Ukraine for a variety of reasons.

Russia produce(d) a significant amount of fertilizer which is required to keep much of the world's breadbaskets and farming functioning such as farmland in Brazil. Less fertilizer means less yield from land which has cascading affects into prices of various inputs. Lower yields of onions, tomatoes, etc will raise the prices of the product.

One of Ukraine's exports was wheat and sunflower products. The absence of wheat from a major producer puts the rest of the world in competition with your wheat products. In addition to bread products and much of the middle aisle of your grocery store, wheat products also go into animal feed. Higher inputs to your animal food costs.

Most "quality" beef is grain-finished in the US (this is not a debate about if grain finished makes better steak, its' just a reality in restaurant supply). If you have more expensive wheat inputs for your higher quality beef, prices go up.

Can't escape thermodynamics.

I empathize with this as I've been in the same boat, but all entities are not equal when performing triage.

For some groups they certainly are.

However at this point: every developed nation has a professional offensive security group that have varying degrees of potency. All are more resourced than 99.9% of organizations defending and enjoy legal autonomy in their country and allied countries for their work.

If you're getting salaried comfortably, and you have near infinite resources, a two year timeline is trivial. As an American, I always like to point to things we know our own services have done first[0].

Each actor group have their own motivations and tactics[1]. As someone who spent a lot of time dealing with a few state actors, you learn your adversaries tricks of the trade and they are patient for the long-con because they can afford to be.

[0] - https://www.npr.org/2020/03/05/812499752/uncovering-the-cias... [1] - https://learn.microsoft.com/en-us/microsoft-365/security/def...

I love that i get downvoted on this immediately like I haven't worked IR cases from CN threat actors that did just this.

Plus China does not care about obfuscation. They smash and grab and then deny, deny, deny + counter accuse.

If you really step back and think about it, this type of behavior is perfectly aligned with any number of well resourced criminal groups and state actors. Two years of contributing in less visible software with the goal of gaining trust and then slowly pushing your broken fix in.

To me that's way more plausible than losing control of your account and the person who compromised it then having someone over a long time insert the backdoor that took a long time to develop and then obfuscate it.

Likely someone at GH is talking to some government agencies right now about the behavior of the private repos of that user and their associated users.

One of the main reasons I try to stay remote is the spring to fall farmer's markets in the area I live. Getting Ostrich each week is awesome. Especially in the time of year I'm often finishing the last bit of shedding the extra winter weight gained. It's a drop in replacement for other red meat for many of my meals with less fat to keep the calories lower. It takes to taco seasonins really well.

Certainly, but in every aspect of life, bad people try to take advantage through a variety of tactics. Checking inward for responsibility, accountability, and improvement first is a fine tactic, especially in leadership. Over time, and likely through experience, you'll learn how to sniff out the bad actors.

This is of course, harder to achieve when you have significant emotional investment in the conflict at hand. Detaching and analyzing yourself, and the situation can be a super power here.

Nothing we need done requires .... intimidating citizens.

Until you need SWAT to kick in a door with actual murderers on the other end. Really until you need violence to contain violence.

Then you get into the real questions: in their day-to-day interactions such as issuing citations are they intimidating citizens with behavior or their appearance? I've known several Military folks who later became police (and had significantly better escalation of force training from the military) who looked fierce but were big softies most days. No better friend, but no worse enemy and all.

The ability for hacker news commenters to grossly over-simplify and misrepresent things like this is unparalleled. Just like it takes all folks to make a village, it also takes those folks to do some missions that police forces have. The problem is when the culture of a police force is all of one type. There, however, is value in having people appear strong to those who would take advantage if weakness is detected. Today's punisher skull is yesteryear's ceremonial armor and masks.