Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dns_snek
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
25 ms
·
541.
▲
by
dns_snek
1y ago
Could be a lie ? When are we going to stop pretending?
542.
▲
by
dns_snek
1y ago
I'm assuming you delegate for most of your bugs? I only ask when I'm stumped and at that point it's very prone to generating false positives.
543.
▲
by
dns_snek
1y ago
> What are alternatives? People who aren't so boxed into the status quo (ideologically and financially) that they can't fathom anything being more important than technology, "productivity", and the almighty GDP. Peopl
544.
▲
by
dns_snek
1y ago
Are you implying that there are people who don't have ideology or that they're somehow capable of reasoning and acting independently of their ideology?
545.
▲
by
dns_snek
1y ago
Does this count? https://signal.org/blog/cellebrite-vulnerabilities/ > Given the number of opportunities present, we found that it’s possible to execute arbitrary code on a Cellebrite machine simply by includin
546.
▲
by
dns_snek
1y ago
Christian capitalist is an oxymoron.
547.
▲
by
dns_snek
1y ago
This is no different than when LLMs write code. In both scenarios they often turn into bullshit factories that are capable, willing, and happy to write pages and pages of intricate, convincing-sounding explanations for bugs that don't
548.
▲
by
dns_snek
1y ago
Is it that bad out there? Yeah, I don't think I could last in a job that tries to force these tools into my workflow.
549.
▲
by
dns_snek
1y ago
It's not that bad, my battery lasts around 36 hours. I take it off when I go to shower and by the time I remember to put it back on (~30min) it's usually back to 90%+.
550.
▲
by
dns_snek
1y ago
> Obviously you can add modules calling to C/C++ functionality to a scripting language runtime easily Yes, obviously, that's what NodeJS does. But you can't "just use the V8 runtime as-is if you're doing async IO
551.
▲
by
dns_snek
1y ago
> If you use async I/O you can just use the Chrome JavaScript runtime as-is. What do you mean? A JS runtime can't do anything useful on its own, it can't read files, it can't load dependencies because it doesn't
552.
▲
by
dns_snek
1y ago
Losing threads and moving to the async I/O model was the motivation behind Node in the first place. https://nodejs.org/en/about
553.
▲
by
dns_snek
1y ago
We're not discussing whether policies are good or bad, just where they happen to sit on the political spectrum. If you feel like something material is missing, add it, I can't read your mind.
554.
▲
by
dns_snek
1y ago
These are your personal preferences, not some "social contract". I'm completely fine with people interrupting me to correct something I said or to add an important detail I missed, and I tend to do the same. To see slightly d
555.
▲
by
dns_snek
1y ago
They call that the geometric racing line and it might minimize the amount of time that it takes you to navigate one specific corner but if the corner is a hard braking zone followed by a long straight, your exit speed will likely be lower w
556.
▲
by
dns_snek
1y ago
> Honestly seems like if you just stay on the latest-and-greatest you'll stay ahead of Cellebrite long enough. I don't know, even the latest and greatest is eventually cracked, or they can just hold your device in evidence unti
557.
▲
by
dns_snek
1y ago
> Again, maybe I'm just more optimistic, but I think that on longer time frames, the sober elder statesmen/women will prevail and realize that violence is not an appropriate response to bytes transiting the wire that they wish
558.
▲
by
dns_snek
1y ago
Yeah, technically your phone isn't even involved. The watch manages all the cryptographic keys independently and you can add cards through the Google Wallet app or website.
559.
▲
by
dns_snek
1y ago
> In the US, the Democrats as a party are center-left. The case of US Democrats is an example of how useless the 1-dimensional classification is. They can be very socially progressive which would seem to put them well into the "left
560.
▲
by
dns_snek
1y ago
> I'd hate to get all true scotsman but a true leftist would never preach for prohibition as a solution for vice. That's what happens when you squash a multi-dimensional space of political beliefs down into a single dimension o
561.
▲
by
dns_snek
1y ago
Google Pay also works with a Pixel watch connected to a GrapheneOS phone, FWIW.
562.
▲
by
dns_snek
1y ago
For iOS there's a slightly newer one released in July 2024 which indicated iPhone 15 support too: https://discuss.grapheneos.org/d/14344-cellebrite-premium-ju...
563.
▲
by
dns_snek
1y ago
Clearly it's harder but just how much harder is anyone's guess? Surely higher value targets would be more likely to use Graphene, so I would think that would make it just as important to invest resources into.
564.
▲
by
dns_snek
1y ago
All iPhones were vulnerable according to the last available iOS support matrix.
565.
▲
by
dns_snek
1y ago
Sorry, what I'm proposing here is far from binary but yes, I am gatekeeping the bare minimum. It has to be gatekept otherwise I'm afraid we'll enter a state of mass industry delusion where everyone thinks they're safe, &
566.
▲
by
dns_snek
1y ago
This isn't just "imperfect", it's so deeply flawed that the next minor "mutation" of supply chain attack tactics is guaranteed to wipe you out if you rely on it. It's just a matter of time, it could be tom
567.
▲
by
dns_snek
1y ago
I think this approach is harmful because it gives people a false sense of security and makes them complacent by making them feel like they're "doing something about it even if it's not perfect". It's like putting on
568.
▲
by
dns_snek
1y ago
This folk-wisdom scapegoating of post-install scripts needs to stop or people are going to get really hurt by the false sense of security it's creating. I can see the reasoning behind this, I really do, it sounds convincing but it&#x
569.
▲
by
dns_snek
1y ago
Both post-install scripts and curl|bash scripts are just scapegoats of supply chain security with similar faulty reasoning.
570.
▲
by
dns_snek
1y ago
> What's fascinating is that you just described every employee, ever Really, employees do work "without any sort of compensation"? Are you even listening to yourself? Stop projecting, if you don't want your arguments
More ›