lxgr

32 ms·

721.
by lxgr 6mo ago
I think the bigger problem is that humans are capable of agent use, so the premise "keep humans but not agents out" seems nonsensical.
722.
by lxgr 6mo ago
How would this even theoretically work? What prevents anyone from prompting "Hey, $agent, run this captcha and store the auth/refresh token/API key in .env for your later reuse" and then just reading the contents of .env
723.
by lxgr 6mo ago
But it does? > Rosetta 2 requires almost the entire OS to have Intel support. The implication here being that (almost) the entire OS having Intel support is not trivial.
724.
by lxgr 6mo ago
Same here. Would be very sad to lose Wine capabilities as well, and presumably these have minimal macOS dependencies.
725.
by lxgr 6mo ago
In a pinch, Claude is also quite good at ASCII art in my experience!
726.
by lxgr 6mo ago
> You expect me to believe MKBHD keeps a Visa card with $10,000 ready to go as his Express Transit card? Why wouldn't he? $10k is not a particularly high credit limit in the US, all things considered, and roughly every other card is
727.
by lxgr 6mo ago
> curiosity is a luxury. It is indeed. Curiosity, for me, very often stems out of a particular kind of idleness and boredom, paired with a tricky question I can't find an immediate answer to. And I can definitely still be bored that
728.
by lxgr 6mo ago
Speak for yourself. Looking at my LLM chat history, about 90% of my questions are focused on understanding systems better, not having it solve a concrete problem for me. Do you never click through to the sources or experimentally test the i
729.
by lxgr 6mo ago
> AI killed curiosity. Only if you let yours be killed. There will always be a demand for high-value signal, even though it might not be as easy to find anymore. But then again, has it ever been? > Our ability to keep digging into thi
730.
by lxgr 6mo ago
If you're a random person on the Internet, I can indeed not do much with that information. But if you're a security research lab that a competing lab can ballpark the funding of and the amount of projects they're working on (
731.
by lxgr 6mo ago
What do you mean by “the drive is still unencrypted”? If your threat scenario includes somebody performing a DRAM freezing attack or similar, these are orders of magnitude harder to pull off successfully than to compel or bypass a biometric
732.
by lxgr 6mo ago
Not sure if that's a great example. If there's a catastrophic vulnerability in a widely used tool, I'd sure like to know about it even if the patch is taking some time! The problem with this is that the credible information &
733.
by lxgr 6mo ago
> that may or may not be redirected to a file This is usually knowable. It's a different question whether cat should be doing that, though – it's an extremely low level tool. What's wrong with `less`? (Other than the fact
734.
by lxgr 7mo ago
In theory! Theoretically it’s not needed to be down at any point today :)
735.
by lxgr 7mo ago
Because that would take a minimum amount of effort, nuance, and reasoning, and the result would probably generate less interactions compared to a cheap shot based on vibes.
736.
by lxgr 7mo ago
Maybe I’m in a very atypical corner of Bluesky, but I can’t say I’ve seen more than average anti-AI sentiment. Also worth considering that there is a lot of anti-AI sentiment outside of our bubble! Maybe not a majority, but the minority i
737.
by lxgr 7mo ago
To both you and GP: Consider that you're not just stuck in HN, you are part of HN :)
738.
by lxgr 7mo ago
Both can be true at the same time. I currently wouldn't waste my time with open models for almost all use cases, but they're crucial from a data privacy and competitive perspective, and I can't wait for them to catch up enoug
739.
by lxgr 7mo ago
Oh damn, I missed that, thank you. I could see how it was a very expensive thing to maintain for an effectively Pixel-only feature. Still, I think this was one of the most ambitious and user-beneficial implementations of trusted computing I
740.
by lxgr 7mo ago
They’re not really cryptographic keys in that sense usually; I’d say “bearer token” is more accurate.
741.
by lxgr 7mo ago
Android actually supports secure transaction confirmation on Pixel devices using a secure second OS that can temporarily take control of the screen and volume button as secure input and output! https://android-developers.googlebl
742.
by lxgr 7mo ago
That's still an improvement. In sophisticated attacks, attackers might well store stolen credentials and use them at a later, more opportune time. Of course a real secure attention sequence would be preferable, such as e.g. requiring a
743.
by lxgr 7mo ago
On macOS, you can now also move them into your Secure Enclave without any third party software! Previously discussed here: https://news.ycombinator.com/item?id=46025721
744.
by lxgr 7mo ago
Just because people regularly bring up a non sequitur doesn't mean there actually is a problem. "I have a device acting as both a NAT and a stateful firewall, why are you making me switch to IPv6 and in the process drop both the N
745.
by lxgr 7mo ago
Of course there's an incredibly long tail here, but in the big picture, "nobody except some people maintaining a few legacy systems ever need to learn to work with this protocol anymore" is practically the same thing.
746.
by lxgr 7mo ago
Woah, MAP-E allows static v4 (and presumably inbound connections)? That seems neat and much better than DS-Lite!
747.
by lxgr 7mo ago
That’s DNS64, which is pretty annoying in practice. (For one thing, you can’t use your own DNS server anymore, but more importantly, anything using v4 literals will 100% break.) What’s nicer is 464XLAT, or more generally NAT64 prefix announ
748.
by lxgr 7mo ago
> it's hard to remember addresses We desperately need a standardized protocol to look up addresses via names. Something hierarchical, maybe. > with v6 you can't rely on NAT as an ersatz firewall Why would you not just use a
749.
by lxgr 7mo ago
That sounds more like broken support then. Not having any support at all (i.e. A records or v4 literals only) should just send you to whatever v4 transition technology your ISP offers, no?
750.
by lxgr 7mo ago
There are also still Telex and X.25 networks around there, not to forget the whole public telephone network! But at some point, getting a native connection to all of these started becoming increasingly rare, and now these are largely emulat

More ›