Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Groxx
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
16 ms
·
361.
▲
by
Groxx
5mo ago
At least part of it is that we do attribute malice or lack of care (or madness) to people who repeatedly do it, and treat their output differently in the future. For some reason, some people repeatedly defend machines that constantly do t
362.
▲
by
Groxx
5mo ago
Everyone has failed to build this. They can only sell claims that they have built it to fools.
363.
▲
by
Groxx
5mo ago
Unless there's evidence that all of it was fact-checked, it's a waste of time to look harder. You can get any output you like, it doesn't mean it's correct.
364.
▲
by
Groxx
5mo ago
https://old.reddit.com/r/GithubCopilot/comments/1tbb5bj/gith... Seems to be on its way! I know of at least one person whose company is looking at a 20x increase, and afaict (from related looking around,
365.
▲
by
Groxx
5mo ago
There's good money to be made in prolonging the hype.
366.
▲
by
Groxx
5mo ago
Bug reports also go down when people lose faith that they will be fixed, because reporting them is often a substantial time commitment. You see it happen pretty regularly as trust in a group/company collapses.
367.
▲
by
Groxx
5mo ago
Every doctor's visit I've had, I have been able to make corrections to the record afterward, because there have been meaningful mistakes almost half the time. ALWAYS check your summaries immediately, and contact your doctor ASAP.
368.
▲
by
Groxx
5mo ago
Yep. It happened to me just recently. Diagnosed with Runner's Knee. AI summary said I was diagnosed with osteoporosis, and had hip pain and walking difficulty, though literally none of that was ever said or implied. CHECK YOUR TRANSCRI
369.
▲
by
Groxx
5mo ago
Literally all of them, for at least the past decade, afaik. Obviously it'll vary a lot outside those though, the field employs all kinds in all kinds of ways.
370.
▲
by
Groxx
5mo ago
Not generally / as many would hope, but that's partly because both WASM and WASI are not targeting being a full javascript-in-browser replacement - they're lower level, larger APIs are built on top, not defined by them. It&#x
371.
▲
by
Groxx
5mo ago
fwiw blocking access to anything except my notes folder (and denying internet, among other things) is my very first step when installing Obsidian. Flatseal makes that quite simple. Flatpak could of course be significantly better... but it&#
372.
▲
by
Groxx
5mo ago
Gotta hope that's just a PR attempt to try to save face. Though I wish companies would stop claiming it.
373.
▲
by
Groxx
5mo ago
I'm somewhat fond of including a UUID for that reason. As long as they can copy-paste it into Google, they can get results that are precisely the errors from your application, unlike "error 55324". The same works internall
374.
▲
by
Groxx
5mo ago
Confirmed: https://obsidian.md/help/plugin-security#Plugin+capabilities There is no sandboxing at all. Every plugin has full access to your computer.
375.
▲
by
Groxx
5mo ago
A majority have more access controls than obsidian plugins, yes. I think that's fairly safe to say, given that new system installs often have hundreds of processes already running. Sandboxing, at least in the sense of easily configura
376.
▲
by
Groxx
5mo ago
Agreed, but also they prominently feature that they support plugins. Currently it's the second paragraph on the home page: https://obsidian.md/ They're trying to get all the benefits while pushing the extremely-
377.
▲
by
Groxx
5mo ago
Krita: that is a decision by Krita(/GIMP) and not anything inherent in "plugins" or "python" - it could be a bubblewrap/firejail contained process, for example (other OSes have similar-ish options but there&#
378.
▲
by
Groxx
5mo ago
And tons won't be part of e.g. root, or dialout (to pick one I've had to deal with a lot lately), or many other more-privileged-than-default groups, yes. That's a permissions system working as intended. Besides. They said &qu
379.
▲
by
Groxx
5mo ago
To try to add some explanation here: the server doesn't send the fingerprint. The server sends the public key , your computer just shows a fingerprint because it's more human-friendly and sufficiently secure. If they forward the
380.
▲
by
Groxx
5mo ago
Only if you're one of today's 10,000: https://xkcd.com/1053/
381.
▲
by
Groxx
5mo ago
Thanks! I've been meaning to read up on taint systems, looks interesting :) I'm somewhat convinced that taint-influenced capabilities is a good future model to pursue. Computers are fast, I'm fairly confident that it chould b
382.
▲
by
Groxx
5mo ago
Because it's by far the dominant strategy for distributed trust-ranking systems out there, with decades of research around it. Might as well look at the forest when realizing that it'd be nice if trees existed. And I don't th
383.
▲
by
Groxx
5mo ago
Sideloading bypasses nothing at all except Google's thumbs-up, Android's permission system doesn't work that way.
384.
▲
by
Groxx
5mo ago
Not even slightly. Browser extensions are a trivial counter-example, as are all flatpacks, and anything restricted by user/group. That covers probably literally a majority of all software on your computer, because people have been volu
385.
▲
by
Groxx
5mo ago
Perhaps something where you can build a graph of who invited whom so you could prune entire sections that act maliciously. One might even consider it a to be a web of connections which are built on (or torn down by the loss of) trust. Sound
386.
▲
by
Groxx
5mo ago
For at least the vast majority, yes definitely. I'm fine with full bypasses existing (say a webgl thing, or web previews, custom VCS integration, there are tons of legitimate reasons to escape a sandbox), but they should be an abnormal
387.
▲
by
Groxx
5mo ago
"Hey users: don't do insecure things. Here's a button to do cool insecure things!" is not a plugin security model.
388.
▲
by
Groxx
5mo ago
Ehm. No? https://obsidian.md/help/plugin-security#Plugin+capabilities > Due to technical limitations, Obsidian cannot reliably restrict plugins to specific permissions or access levels. This means that plugins will
389.
▲
by
Groxx
5mo ago
If the first is still in progress and a second arrives, you can wait for it to finish (and then return whatever would be useful, e.g. you could replay the first request's response), or fail the second (409, 423, 429, there are a number
390.
▲
by
Groxx
5mo ago
Yeah, I can walk at a moderate pace literally all day with no problems and be fine the next. Plodding for a couple hours brings pain and a lot of general discomfort, and I'm very patient in general - I would love to take my time with s
More ›