HNHacker News
TopNewBestAskShowJobs

abalone

12,932 karma · joined July 31, 2011

submissionscomments
abalone··on Private Cloud Compute Security Guide
PCC is fundamentally more secure than merely encrypting at rest and auditing access. That still has a variety of attack vectors such as a software bug that leaks data.

Apple is unable to access the data even if subpoenaed, for example, and this is provable via binary audits and client verification that they are communicating with an auditable node.

abalone··on Gross Apple Marketing
He had my attention until he posted that mind-numbingly generic Ubuntu ad. Most people would tune that out in seconds.

I’m kind of glad Apple is putting a touch more flavor in their ads.

abalone··on Google must open Android for third-party stores, rules Epic judge
I'm not trying to be provocative or a downvote magnet here but does anyone actually have a concrete response to the concerns Frederighi raised about sideloading and privacy / phishing protections three years ago?[1]

Isn't it like very, very obvious that while you and I and everyone else on HN appreciate the power of sideloading, average users are more easily tricked into bypassing the protections of well-run app stores?

[1] https://youtu.be/f0Gum8UkyoI

abalone··on Hezbollah hand-held radios detonate across Lebanon, sources say
According to the LA Times these devices are “not usually used by fighters, but by ambulance and civil defense crews and administrators affiliated with Hezbollah. The devices are unrestricted and can be sold to anyone, and as such are used by other organizations in areas of poor signal.” [1]

There is no question if an enemy set off hundreds of bombs in American ambulances we would recognize it as a mass terrorist attack.

[1] https://www.latimes.com/world-nation/story/2024-09-18/second...

abalone··on Hezbollah pager explosions kill several people in Lebanon
See my source which is based on reporting from inside Israel and the IDF.[1]

[1] https://www.972mag.com/lavender-ai-israeli-army-gaza/

abalone··on Hezbollah pager explosions kill several people in Lebanon
You are simply incorrect. “Rate” is a ratio, not an absolute number.

But to your point, Israel’s ratio in Gaza was as high as 100 civilians to 1 soldier in the shopping mall (or more accurately, refugee family shelters).

abalone··on Hezbollah pager explosions kill several people in Lebanon
Yes. If China detonated several thousand bombs in Idaho civilian locations on the premise they were targeting militias, some of whom fought in Syria and/or against Chinese oppression of the Uyghurs, this would absolutely be an act of mass terrorism.
abalone··on Hezbollah pager explosions kill several people in Lebanon
They detonated the bombs in supermarkets and homes. It is 100% an accurate description of what happened.

If an enemy targeted members of American political parties that have sponsored terrorism and brutal dictatorships, detonating thousands of bombs in supermarkets and homes maiming nearby civilians and killing children, would you also call this “objectively a good thing?”

abalone··on Hezbollah pager explosions kill several people in Lebanon
> no bystanders hurt

This is incorrect. There are reports of maimed civilians and a murdered child.

There is no comprehensive information yet on the ratio of civilians to militants maimed by this attack, and any claims otherwise are propaganda.

abalone··on Hezbollah pager explosions kill several people in Lebanon
There is no question that an enemy setting off thousands of small bombs in American supermarkets and homes, maiming unknown numbers of bystanders and killing children, would be designated an act of mass terrorism.

Anyone who claimed such mass terrorism is acceptable because it is not as bad as obliterating cities would be condemned as an apologist for terrorism.

abalone··on Hezbollah pager explosions kill several people in Lebanon
There is no comprehensive information yet on the ratio of civilians to militants maimed by this attack, and any claims otherwise are propaganda.

If an enemy had exploded small remote controlled bombs in American supermarkets and homes targeting members of the American political parties, the sponsors of terrorism and oppressive dictatorships in many foreign countries, there is no question we would characterize it as a terrorist attack.

abalone··on Hezbollah pager explosions kill several people in Lebanon
Many people fail to see this because they have an intact moral core. Conducting a military operation that has a fully predictable rate of civilian casualties is morally equivalent to targeting those civilians.

Israel has utilized a rate of expected civilian to militant casualties in Gaza at the rate of 100:1 [1].

[1] https://www.972mag.com/lavender-ai-israeli-army-gaza/

abalone··on Hezbollah pager explosions kill several people in Lebanon
> Some of the initial footage shows such a device going off while innocent bystanders remain unharmed.

This is anecdotal and misleading. There are reports of civilians maimed including the murder of a child. This is entirely plausible due to the indiscriminate nature of these bombs with respect to immediate bystanders.

If an enemy had set off thousands of small bombs in American supermarkets and homes, maiming thousands of whoever was nearby and killing children, we would undoubtedly call it a mass terrorist attack.

abalone··on Hezbollah pager explosions kill several people in Lebanon
There is no comprehensive information yet on the ratio of civilians to militants maimed by this attack, and any claims otherwise are propaganda. If an enemy had exploded small remote controlled bombs in American supermarkets and homes there is no question we would characterize it as a terrorist attack.
abalone··on Transmission of Mental Disorders in Adolescent Peer Networks
Correlation over causation. The study actually notes,

“One plausible mechanism is the normalization of mental disorders through increased awareness and receptivity to diagnosis and treatment when having individuals with diagnosis in the same peer network.”

Thus the study uses “transmission” in a specific technical sense of greater likely of diagnosis, not literally that you can catch a mental disorder from a peer where none existed before.

abalone··on Should I use JWTs for authentication tokens?
I see a flaw in the argument. He shifted from saying you'd use a 5 minute access token timeout to querying the DB on every request. There can actually be a big difference between those two scenarios. Some web APIs can be bursty. Even caching credentials for 5 minutes could take significant load off the DB.
abalone··on Wiley shuts 19 scholarly journals amid AI paper mill problems
WSJ source: https://www.wsj.com/science/academic-studies-research-paper-...

The muckraking blog For Better Science has been sounding the alarm on this for years. Here's a great investigation into the "paper mill industry"[1]

[1] https://forbetterscience.com/2021/05/26/the-chinese-paper-mi...

abalone··on Wiley shuts down 19 science journals and retracts 11,000 gobbledygook papers
The muckraking blog For Better Science has been sounding the alarm on this for years. Here's a great investigation into a "paper mill industry"[1] which apparently this researcher also traced some of the fraudulent papers to. It gets into some of the economic forces that drive it.

P.S. scanned 130 million papers! WTF!

[1] https://forbetterscience.com/2021/05/26/the-chinese-paper-mi...

abalone··on Git cheat sheet [pdf]
This is great, especially the little diagrams which help illustrate rebasing vs merging, one of the tricker parts of the git learning curve.

Having said that I think it could more clearly state the author's typical preferred practice for updating a branch and integrating it with main when you're done. There's a few techniques listed for diverged branches, but then fast-forward merge is in its own box and it's not super clear how you might use working-branch rebasing with it to eliminate divergences in the first place (even though it's hinted at under "pull changes").

I wonder if it would be clearer to say something like "combining branches: rebase your branch and do a (FF) merge, optionally with squashing," or however they like to do it.

abalone··on Apple and Google deliver support for unwanted tracking alerts in iOS and Android
> As of today, we have zero known instances of abuse

Emphasis on known. The whole point of stalking is to hide the device and not get caught. How would a typical victim even discover it? Or even if they figured out they were stalked, that it was with a Tile device and thus report it?

ID scanning is easy to defeat. This is just ripe for abuse and it's good that Apple/Google took measures to block stalking, even at the expense of anti theft use cases.

abalone··on Apple to unveil AI-enabled Safari alongside new operating systems
I think “intelligent search” is going to build on Siri and Spotlight, adding LLM for things like summaries and suggestions.

This should bring a 10x magnitude of improvement and justify hardware upgrades to satiate the RAM and coprocessor thirst of LLMs.

Spotlight does pretty extensive if “traditional” index-based search of your local personal data, along with certain privacy-preserving web queries. You can imagine what on-device LLM-powered summaries would bring to this type of search and suggested actions.

abalone··on Apple to unveil AI-enabled Safari alongside new operating systems
Unlikely; this will likely be focused on on-device search of your personal or other local data and relevant context from the web. This has always been Apple's focus, and the opportunity to 10X this with LLMs is profound. Access to your private data has always been the key to making a breakthrough intelligent agent and Apple is better positioned to make headway here than anyone else (except maybe Google Pixel but the marketshare is tiny).

There is really no need for Apple to step into web search when (1) they don't inherently have a value-add beyond making your searches more private, which they already can do, and (2) from a revenue standpoint they already tax Google billions a year for preferred placement.

abalone··on Apple to unveil AI-enabled Safari alongside new operating systems
Siri isn't that slow for me generally, but the responses are relatively primitive compared to GPT. Very likely Siri is lagging GPT based agents due to the high processing cost of LLM queries.

Startups can launch with today's GPT agents because their utilization is relatively tiny. Siri operates at planet scale, plus Apple is committed to on-device privacy, so they need to develop highly optimized on-device models.

No doubt this is going to drive a major hardware upgrade cycle for Apple.

abalone··on DuckDuckGo Privacy Pro
> And we have a strict no-logging policy; we don’t log or store data that can connect you to your online activity, or to any other DuckDuckGo services, such as search.

These days the bar for privacy should be higher than "we don't log your activity, trust us." We should aim higher than VPNs.

I've been enjoying iCloud Private Relay. Basically it's a type of onion routing. From a privacy perspective, it narrows your leap of faith to "trust that the system is architected the way we say it is and there's no out-of-band collusion among the relays." With that, the entry node (Apple) shouldn't be able to see your destination and the exit node (Apple partner) shouldn't be able to see your IP.

Fun fact: it breaks Google search for me and forced me to switch to DDG! I got a captcha almost all the time. In a way, I see that as a positive sign that it's really working to protect privacy.

abalone··on Anatomy of a credit card rewards program
But if the tax is refunded to rewards recipients then it does not result in net higher prices for them.

Granted, some slice of it is kept by the issuers, but it turns out issuers mostly make money on interest not interchange.[1]

[1] https://www.valuepenguin.com/how-do-credit-card-companies-ma...

abalone··on Prostate cancer cases worldwide likely to double by 2040, analysis finds
If it doesn't escape the prostate, a tumor could potentially impinge on the urethra causing urinary difficulty. There is a benign version of this called BPH and it may be treatable by medications like Flowmax.

But it's not like we can always know it will stay slow growing forever. Some cancers can suddenly become aggressive and metastasize, so careful monitoring is important.

abalone··on Prostate cancer cases worldwide likely to double by 2040, analysis finds
It kills libido and can sap energy levels to where it makes it hard to do many things in the day. It’s not necessarily permanent if you just do a short course. Testosterone can recover. But if it metastasizes you could be looking at long term therapy.
abalone··on Prostate cancer cases worldwide likely to double by 2040, analysis finds
That’s for all surgeries as a whole, not prostate cancer treatments.
abalone··on Prostate cancer cases worldwide likely to double by 2040, analysis finds
It’s fine. I did 3 or 4 over the years. They stick a probe up your butt a little, with some numbing gel, which is uncomfortable but fine. There are a few pricks of local anesthesia and then you feel nothing or extremely little, apart from the pressure of the probe. You hear some clicks as they shoot needles in to take samples, but it doesn’t hurt. It takes like 15 minutes. You take an antibiotic and do an enema beforehand to ward off infection.

The worst part for me was you have bloody semen for weeks after. I thought that was so gross. But it’s harmless and resolves completely.

abalone··on Prostate cancer cases worldwide likely to double by 2040, analysis finds
Sure but we should still listen to specialists. They aren’t always right but they are wrong less often than the rest of us.

As for “doing something” actually there has been a consistent trend in the prostate cancer fields towards doing less. As the years go by they get better quality data from long term studies supporting “watchful waiting” for many lower grade cancers. I even had a more aggressive one and they let me go several years before surgery, just to maximize quality of life. That’s all due to new data. Data that definitely one needs specialist skills to interpret.

← PreviousPage 3 of 34Next →