mike_hearn

8 ms·

91.
by mike_hearn 1mo ago
HN has been fundamentally broken for a long time, there's nothing new or special about AI. It just joins a loooong list of topics where people abuse downvotes and flagging to punish people they disagree with. Ironically, the right fix
92.
by mike_hearn 1mo ago
It's cool that you're experimenting, but if all the apps that matter are installed to ~/.local then you're just removing the need to obtain root at all for most attacker priorities.
93.
by mike_hearn 1mo ago
Bubblewrap isn't a sandboxing architecture, so no. Go look at how Apple designed the macOS/iOS security system and you'll see that a Bubblewrap like tool is only. small portion of it.
94.
by mike_hearn 1mo ago
Bubblewrap is a less powerful version of sandbox-exec, but the macOS architecture is much larger than just that. In effect macOS runs everything under bubblewrap, in such a way that users don't notice but apps are meaningfully sandbo
95.
by mike_hearn 1mo ago
Sudo isn't security theater when used for what it was designed for. It's useless for constraining apps you run as your own user ID.
96.
by mike_hearn 1mo ago
"Someone" didn't find that, AI found it. So it's not clear what your point is about vibe coding. Would humans have noticed this problem, especially given that it's not remotely exploitable? (you have to plug in a ma
97.
by mike_hearn 1mo ago
There can be exploits in any security system but the architecture is sound. There's no equivalent of TCC on Linux (I mean one that really sticks), and no easy way to create one. The sandboxing isn't bad. It's obviously weaker
98.
by mike_hearn 1mo ago
Android is basically a different OS that happens to reuse parts of the Linux kernel.
99.
by mike_hearn 1mo ago
Linux isn't like macOS, it doesn't have any kind of proper desktop sandboxing architecture that really works. So this is kind of security theatre. If you run a malicious program it can do stuff like tamper with your PATH or exploi
100.
by mike_hearn 1mo ago
IMHO neither deep codebase familiarity nor communication skills are durable advantages. Arguably they already aren't. Claudish is a problem for Claude but I've seen no signs of equivalent problems with GPT 5.6. It communicates cle
101.
by mike_hearn 1mo ago
Indeed. It was a bad idea from day one.
102.
by mike_hearn 1mo ago
The problem is enforcement. The EU system doesn't work because it's not properly enforced. Spanish fishing fleets would regularly fish in British waters and Britain wasn't able to stop them, despite the rules. This is a gener
103.
by mike_hearn 1mo ago
They could but then nobody would lend them more euros. If you default in a situation of structural deficit where you can't print more money, then the only alternative is instant spending cuts to balance the budget.
104.
by mike_hearn 1mo ago
The whole point of leaving the Euro would have been so the government could continue to pay its civil servants and other bills by printing the money. It would also have used printed Drachma to buy Euros and use those to repay its debts. Rei
105.
by mike_hearn 1mo ago
Apple has much better backwards compatibility than Linux. The APIs haven't changed much since the Carbon->Cocoa transition 25 years ago, and SwiftUI (but that's optional). The impact of app sandboxing on developers was small -
106.
by mike_hearn 1mo ago
You don't get such prompts on macOS if the app uses the system file picker, which they nearly all do. You will get prompts for certain sub-directories of $HOME if the app directly opens them using POSIX or similar, so for example, anyt
107.
by mike_hearn 1mo ago
I haven't noticed GPT 5.6 having any obvious jargon.
108.
by mike_hearn 2mo ago
There are already robotics models that can fold shirts and similar just fine. Progress in VLA models is good, I don't think this would form the foundation of a business. Humanoid robots are going to be another ChatGPT, it's going
109.
by mike_hearn 2mo ago
Why would you need to see evidence that the economy is larger because of Brexit when what I said was it made no difference, larger or smaller? It only seems incredibly unlikely it did nothing because we were all subjected to industrial-scal
110.
by mike_hearn 2mo ago
Nobody claimed the 2016 vote lowered unemployment. It was on a steady downward trend that continued for years, uninterrupted by the vote. This wasn't what economists predicted: they claimed the "uncertainty" of a Leave vote w
111.
by mike_hearn 2mo ago
It's not fast. Look at 19:40 when he's starting new apps. You can see each newly launched app slowly paint individual regions of their windows. At 50:56 you see Photoshop slowly load in tiles of an image. That's a strong memo
112.
by mike_hearn 2mo ago
WinNT in that era was a microkernel that ran the GUI outside of kernel mode and it was just too slow and too much overhead (copying datastructures etc). Win95 GUI subsystem relied heavily on large shared memory segments and running things i
113.
by mike_hearn 2mo ago
AI is bigger than just LLMs. The real place model-hardwired chips will find value is in robotics. There you need very local, low latency inferencing with relatively stable models to handle motor control and navigation tasks. Higher level re
114.
by mike_hearn 2mo ago
The EU is a collectivist ideology first and foremost, a set of institutions second.
115.
by mike_hearn 2mo ago
The most honest reading of the data is that it was neither bad nor good; that it had no impact on anything whatsoever. Whether you read this as a win for the Leave or Remain factions is in the eye of the beholder.
116.
by mike_hearn 2mo ago
It's a bad idea to trust Wikipedia for anything that might have a political or ideological slant that would upset the left, which the non-impact of Brexit definitely did. For instance, there are biographical pages on Wikipedia for peop
117.
by mike_hearn 2mo ago
A depressingly true point.
118.
by mike_hearn 2mo ago
Amazon doesn't care about guys like Lectronz, they're far too small, and the EU Commission really doesn't care about Amazon. They're openly antagonistic to US tech firms. Occam's Razor applies here. These regulation
119.
by mike_hearn 2mo ago
They aren't the same. Views are persistent objects, not like local variables that exist only for the scope of an operation. CTEs are the closest equivalent but you can't factor out predicates that way.
120.
by mike_hearn 2mo ago
Some of it can be fixed by automation, but yes it's a problem. The NoSQL trend was partly I think a reaction against the complex feature sets and quirks of SQL databases. But then those features existed for good reasons, and just sayin

More ›