varenc

13 ms·

211.
by varenc 10mo ago
Details are scarce right now, but they say that via the UniFi mobile you'll authenticate yourself onto the captive portal and the travel router will use that. Guessing it'll clone your phone's MAC?
212.
by varenc 10mo ago
I'd totally believe they would have lobbied for it, but even absent lobbying I think policymakers would look at historical trends and conclude that deeper western economic times would ultimately benefit the West strategically as well.
213.
by varenc 10mo ago
Are the HEIC photos personal ones being created by an iPhone? There's a setting you can flip that'll make your iPhone just take JPGs. Which could make sense from you if you're not getting any benefit from HEIC. https:&#x2F
214.
by varenc 10mo ago
> Did big businesses in the West really think “investing” in China would lead to “freedom” and such? Isn’t that framing a bit naive? Yes I think. At least a lot of Western policymakers did buy a "change through trade/investment
215.
by varenc 10mo ago
Spotify is $12/month at most to get unlimited ad-free access to virtually all music. To get access to "all" TV content legally would be hundreds of dollars a month. And for many movies you must buy/rent each individually
216.
by varenc 10mo ago
yea when it's DoH or DoT I don't think you can re-route the DNS request inflight. (where the device thinks it's talking to 8.8.8.8 but it's not). You can block access to other resolvers though which usually works. Eventu
217.
by varenc 10mo ago
I've explored that! Couldn't figure it out but it certainly sounds possible. And even easier solution is just to block all DNS resolvers except your chosen one. When 8.8.8.8 doesn't work GDevices will fallback to the DHCP ass
218.
by varenc 10mo ago
Also the XSS exploit would have been dead in the water for any sites using CSP headers. Coinbase certainly uses CSP. With this in place an XSS vuln can't inject arbitrary JS.
219.
by varenc 10mo ago
This is a great example of why a Content-Security-Policy (CSP Header) should be considered mandatory for high risk sites. With it you can effectively tell the browser what JS is allowed to run, meaning that any JS injected via XSS won'
220.
by varenc 10mo ago
Besides what others have said, another dead simple option is to use Nextdns: https://nextdns.io Doesn't require running anything locally and supports various block rules and lists and allows you to enable full log retention
221.
by varenc 10mo ago
Is there any evidence this murder was related to the professor's work?
222.
by varenc 10mo ago
> seems like you would have a poor argument that you can’t collect and analyze images of a public space Absolutely agree... but the CA law is clear that tracking license plates get special treatment! It being public space doesn't ma
223.
by varenc 10mo ago
If you're in CA, I learned recently that any use of automatic license plate recognition here is regulated and has a bunch of rules. Technically just turning on the ALPR feature in your consumer level camera is illegal if you don't
224.
by varenc 10mo ago
Agreed. Though for reference, Apple's private relay has an architecture that makes it much more privacy preserving than most VPNs. Traffic is sent through two independent relays: Apple sees your IP but not the destination, while a 3rd
225.
by varenc 10mo ago
What is the economic value of all these AI chat logs? I can see it useful for developing advertising profile. But I wonder if it's also just sold as training data for people try to build their own models?
226.
by varenc 10mo ago
This analogy happens a lot, and it might be true, but it's not clear to me that they're comparable. The Industrial Revolution mostly ate mechanical labor and created more 'thinking' and knowledge worker jobs closer to th
227.
by varenc 10mo ago
If full AGI dreams are achieved and 80% of jobs disappear, leading to mass unemployment, then we need to do something to support the huge numbers of people that no longer have any income. Taxes to support a UBI program seem one solution. Or
228.
by varenc 10mo ago
If the VPN IP and the last ~4 hops in the traceroute just ignored ICMP pings, or just all inbound traffic, it sounds like that'd make your detection harder? I've found that this isn't even that uncommon. One of the example VP
229.
by varenc 10mo ago
Lots of people already have Apple TVs and the Tailscale integration is pretty good and can serve as an always online exit node. So no new hardware required. Could even remotely walk a non-techie through the process without too much effort.
230.
by varenc 10mo ago
You could vary the additional latency based on the location of the IP you're replying to? Or just hash the requesting IP and use that as a seed to generate that particular IP's random extra latency that always stays the same for t
231.
by varenc 10mo ago
Interesting to learn you can identify the real country/area of origin using probe latency. Though could this be simulated? Like what if the VPN IP just added 100ms-300ms of latency to all of its outgoing traffic? Ideally vary the laten
232.
by varenc 10mo ago
How did they get leak them? Just someone getting into your personal Claude Code logs? I'm surprised that if it was just that Google would even be aware they're leaked.
233.
by varenc 10mo ago
If I recall, the AIME answers are always 4 digits numbers. And most of the problems are of the type where if you have a candidate number it's reasonable to validate its correctness. So easy to brute force all 4 digit ints with code. tl
234.
by varenc 10mo ago
Dupe of https://news.ycombinator.com/item?id=46234788 paging @dang for merging
235.
by varenc 10mo ago
100% on the AIME (assuming its not in the training data) is pretty impressive. I got like 4/15 when I was in HS...
236.
by varenc 11mo ago
Link? couldn't find the IQ test in more projects. And super skeptical neal.fun is trying to trick people into $30/month subscriptions edit: I turned off my ad blocker and discovered the site is showing some ads. Guessing you click
237.
by varenc 11mo ago
Apple has gone a similar way with effectively killing kernel extensions for the same reasons. In theory all the kernel extensions use cases have been replaced with "System Extensions" but of course not the same.
238.
by varenc 11mo ago
> What’s the middle for taking cyanide ? 1g? 1kg? Cyanide has an LD50 (50% chance of death) in the 1-2 mg/kg range when taken orally. So middle for taking cyanide is probably 1.5mg/kg. 90mg for someone 60kg. Sadly the middle gr
239.
by varenc 11mo ago
Popular HN threads about anything AI related always attract stories highlighting AI failures. It's such a common pattern I want to analyze it and get numbers. (which might require AI...)
240.
by varenc 11mo ago
Isn't this already a problem in many situations? If you exercise your options when you quit, pay only a very small strike price, but acquire private shares with a much larger fair market value, in the US at least you'd owe the IRS

More ›