mike_hearn

6 ms·

61.
by mike_hearn 1mo ago
Right, it's meant for portable desktop apps. You have to compile iOS apps on a Mac anyway so I'm not sure there'd be any demand for Conveyor's cross-building support for iOS apps.
62.
by mike_hearn 1mo ago
Feel free to not engage, but for anyone reading the Nepal flash flood was caused by bedrock giving way, which isn't climate related. https://www.theweek.in/news/world/2026/08/28/new-satellite-i.
63.
by mike_hearn 1mo ago
Peer reviews don't appear in Google Scholar. The involvement of governments is when they force the public to pay for the studies via tax funded grants, without caring about the quality.
64.
by mike_hearn 1mo ago
You're right that we don't need a universal definition of hamburger. That's because the government stays out of it, so private individuals can use things like Google Maps reviews to police a common sense definition of hamburg
65.
by mike_hearn 1mo ago
Replicability isn't enough to be scientific. Many studies have invalid methodologies, so replicating them by following the same method just propagates wrongness and makes the problems worse. And if you don't follow the same method
66.
by mike_hearn 1mo ago
Disagree, those two fields are extremely unreliable. It takes a lot of things happening simultaneously to be scientific. Yes, those two do make testable predictions, sort of. But that isn't enough. Modern (computational) epidemiology i
67.
by mike_hearn 1mo ago
You can ship a fully signed and self-updating macOS app from Linux (or Windows) using my product Conveyor: https://hydraulic.dev/ It has built in support for Electron, JVM, Flutter and even native apps (although of course t
68.
by mike_hearn 1mo ago
It's more that Darwin does. A fat binary is just two independent Mach-O binaries concatenated with a small header.
69.
by mike_hearn 1mo ago
Only if the study matches its pre-registration and someone is checking that. Which it turns out, they often don't. https://www.compare-trials.org/
70.
by mike_hearn 1mo ago
They might not care even then. Journalism is an interesting case study. Their revenues went into sharp decline around the start of the century, dropping by more than 50% in some cases. Concurrently polls showed trust in journalism was plumm
71.
by mike_hearn 1mo ago
You'd think so. I used to believe this too. Surely you try and build on a result which creates an implicit replication study, then your experiments don't work and the problem is discovered pretty quick. Hence, self correction. It
72.
by mike_hearn 1mo ago
In this case even emailing the author didn't work. The data was obtained via some roundabout method. But it's not the real reason IMHO. You could use LLMs to write takedowns like this one. I gave ChatGPT the paper PDF and some neu
73.
by mike_hearn 1mo ago
Replication is overrated. There's no point in doing more of it. You'd just replicate a ton of bad science: https://blog.plan99.net/replication-studies-cant-fix-science... N.B. nobody needed to replicate this study
74.
by mike_hearn 1mo ago
Fraud law doesn't need to be stretched, academic fraud is covered and criminally prosecutable in the USA for decades. It has to be because they're using these results to apply for grants paid from tax monies. Occasionally someone
75.
by mike_hearn 1mo ago
They wouldn't dread being included there, not at all. The institutions don't care about fraud and reflexively defend it, ignore it or shoot the messenger. Look at the Arday nonsense. People are still discovering new lies he was
76.
by mike_hearn 1mo ago
Science isn't self correcting. This is a harmful meme that we need to collectively put in the trash can, as it's constantly used by academics to evade accountability. The core problem is people conflating science with Science™. Th
77.
by mike_hearn 1mo ago
Now I'm curious, how do TDX enclaves get secure time and prevent rollback attacks on the VM? NTPS? Where's the secure counter you'd need to stop the disk image being rolled back? A lot of the attacks I discovered on SGX (the
78.
by mike_hearn 1mo ago
Correct! I think we need a naming convention that lets us quickly understand if we're talking to a human or a machine. The R. prefix (meaning Robot) is unobtrusive and familiar to anyone who has encountered Asimov's stories. It wi
79.
by mike_hearn 1mo ago
Yes! We'll see how it goes, but the product in question (Conveyor) is a downloadable tool that's got deliberately unobfuscated bytecode in it, with lots of detailed logging. AI is perfectly capable of reverse engineering it and in
80.
by mike_hearn 1mo ago
I visited it and read it. It's useful to know what the actual feature set is out of the box.
81.
by mike_hearn 1mo ago
Computer use gets a video of the browser screen with a timeline scrubber.
82.
by mike_hearn 1mo ago
It's already here. My company received an AI generated bug report the other day, and my AI employee ("R. Axiom") noticed, analyzed it, prepared a fix, tested it and replied to it. I wasn't involved, although I will revie
83.
by mike_hearn 1mo ago
Ah, neat. I did something like Caution a few years ago but for Intel SGX, called Conclave. It made it much easier to deploy apps to enclaves, get remote attestations and communicate with them securely. Unfortunately it's a difficult sp
84.
by mike_hearn 1mo ago
Windows has a brokered sandbox architecture too these days, but it's very new and nobody uses it.
85.
by mike_hearn 1mo ago
The main thing Linux lacks is any notion of app identity more sophisticated than a file path. On Darwin-based systems you can take a binary from anywhere. Downloaded into $HOME, found in /Applications, on a USB stick, network drive, ap
86.
by mike_hearn 1mo ago
I need to write a proper introduction to macOS security because this thread has lots of incorrect assumptions about it! macOS doesn't determine once whether Word can read all your documents. That's the sort of policy that applies
87.
by mike_hearn 1mo ago
Homebrew isn't standard package management on macOS. It's an aftermarket mod that Apple didn't have any design input to at all, and which largely imports the laissez-faire Linux approach to packaging to an OS that has a total
88.
by mike_hearn 1mo ago
It respins UNIX security in favour of a mix of SELinux and a (mis-)use of UNIX user/group identities to contain apps instead of users. Linux distros sort of do that too but only for system services, whereas Android does it for user vis
89.
by mike_hearn 1mo ago
This isn't the case at all. Please learn about Apple's security architecture before making sweeping claims like this, it is very deep and has nothing to do with user namespace sandboxes. Windows also has a sandboxing architecture,
90.
by mike_hearn 1mo ago
No. We're talking about USB device names being parsed as Lua due to some window title injection issue in Hyprland.

More ›