madeofpalk

What would be a security measure that should only be selectively enforced?

What would a solution to this look like?

What would it take to not fear installing software? This isn't a npm problem, its a computing problem in general. Spaces like this are generally pretty against any sort of restrictions or limitations being put on computers under the name of safety (see Manifest v3)

This is Hacker News. Computers are knowable, tractable things. It is trivial to know if a process is making network requests.

Test it! Does it make network requests? Unplug the internet and see if it still works!

Both!

Valve is a company built on getting children addicted to gambling.

> After his own departure, Mr. Tan improperly retained or obtained an internal Apple managers’ document marked “Need to Know” that describes security procedures for employee departures. Messages left on Apple-issued work devices show that Mr. Tan and his OpenAI colleagues have been sharing this document with new hires before they give notice to Apple of their departures, previewing Apple’s security protocols.

https://www.documentcloud.org/documents/28453229-apple-v-ope...

Lawsuits like this tend to be surprisingly easy to read, partly because they intend for the public/journalists to read them.

I mean, conceptually ActivityPub is quite similar to RSS. You might be able to call it Less Simple Syndication.

What makes up the ATProto is more than one type of server. Compared to ActivityPub where you just run a single Mastodon instance and you're set.

If the thing you want to own is your identity and data, you can fairly easy run a PDS yourself. If the thing you care about is different moderation decisions, you can run your own labeller (moderation system) or subscribe to another someone else has made.

> I can easily install an ActivityPub server, with Glitch.

Can you? The same Glitch that shut down last year? https://blog.glitch.com/post/goodbye-glitch

Regardless, ActivityPub and ATProto have different designs and goals. Your question is akin to comparing a helicopter and an airplane.

There's no such thing as a "ATProto server". How complicated it is, and the trade-offs it made are valid criticisms of it. It all depends on what exactly your goal is as a participant of a distributed social network.

For various definitions of "strong". People (ab)use pointers to hack in nil support, and the type system can't perform nil checks for you, so you still end up with runtime errors if you're not careful enough.

In fact, I would say it's probably too low! Like, how is prescription glasses to correct vision not an assistive device for a disability, like poor eyesight?

Honestly, what's the difference between a wheelchair and prescription glasses? Both are medical devices prescribed be a healthcare professional to assist with a physical impairment.

I like TypeScript. It catches bugs in programs that Go doesn’t.

I'm sceptical of Hacker New's fascination with all managers being worthless, but I don't follow your logic here.

Why is "lets have more people who do things" a move away from multidisplinary teams? Unless you count being a middle manager a valuable discipline in game making?

It seems like you're agreeing with the article then? Seems new Xbox boss is cutting a lot of this fat and trying to undo these strategic missteps.

> The one-way pattern is actually how Google uses it internally too, syncing outward from their monorepo to GitHub

Do they not support contributions on the public repos back into the internal monorepo?

Ignoring the sitting in front of the TV thing, I think if you sampled 2 steam players at random, they would look nothing like any other 100 random steam players.

Except, where every different model and version is like a different person where you need to learn their idiosyncrasies of how they work every other month.

It's a very very bizarre way to use a computer.

Personally, I just don't. I'll use and prompt the LLMs the way that feels natural to me and move on with my life. Maybe I don't always get completely optimal results from them, but im also not spending half my day pleading with the computer to do a task.

> The problem is it's going to be intentionally limited in the service it gives and its ability to make decisions.

Apart from the Facebook AI customer support which would just blindly send MFA reset emails to wherever you asked.

Yeah, that's usually how contracts work.

You decide whether you have followed it or not. The other party will decide if they agree. If in dispute, you go to a judge and they decide also.

No, this isn't the claim.

EU wants Apple to open 'Siri AI', with access to a personal context, open to other model/AI providers.

Apple says "We can't do this in a privacy preserving way".

You can definitely question what their true motivations are, but it seems pretty plausible that there is a moral case for this system to not be opened up to other providers who may do a worse job at privacy than Apple (especially when you are Apple and you trust yourself).

I think there is a place in these sorts of ecosystems for privileged players. If you buy an iPhone you implicitly must trust Apple to some degree.

As with many other things, AI exacerbates this problem. It’s so easy for many more of things things to happen unattended and in greater volume, and the AIs themselves can be tricked into doing these things, not helped by their patten of “prompt the user to approve 30 different inscrutable pythons and bash scripts”.

> In about 22 years of writing ruby code, I have never ran into a situation once where I would have caught a bug through types

You must be the world's greatest programmer with perfect memory. Every nil pointer exception is a bug a (good) type checker could have caught. You've never had a NameError or NoMethodError in Ruby?

There's loads of AI features out there that are powered by a model provider, yet are not branded by them. Why would this be different?

Is Siri any more or less than “just” an agentic harness such as OpenClaw? How much of what that harness does is up to the LLM or the harness itself?

In my mind the Gemini LLM defines the bounds of capability and capacity, but any actual functionality or usefulness (or lack of) comes from Apple’s Siri harness.

I do other things on my computer apart from bash.

No. Percentages allow them to hide in the law of averages. Go tell those twenty thousand people that it's banal that Meta fucked up like this.

If it helps to prevent “terror” on a flight, then yes.

Similarly, I worked on in-flight user-facing software, and we were allowed to use a “plane pointing downwards” icon to denote arrival time, because the connotations to crash were too strong.

No one believed that the icon would make the plane crash, but it’s about creating an environment that makes people feel as safe and comfortable as possible. You don’t want people freaking out when they’re locked in a small metal tube in the sky.

Right - but those constraints are inherent to the medium. Like basically unconstrained screen sizes from large desktops to mobile, with the user free to resize anywhere in between (and can't be constrained in the way that 'real' apps often are). Input methods of both fine mouse control, and course touch.