Hacker Newsnew | past | comments | ask | show | jobs | submit | JoshTriplett's commentslogin

If you have a device you don't trust, don't allow it on your network, or have an isolated network for such devices. Meanwhile, devices are right to not allow MITMing their traffic and to treat that as a security hole, even if a very tiny fraction of their users might want to MITM it to try to do adblocking on a device they don't trust or fully control, rather than to exploit the device and turn it into a botnet.

Along similar lines, a security hole you can use for jailbreaking is also a security hole that could potentially be exploited by malware. As cute as things like "visit this webpage and it'll jailbreak your iPhone" were, it's good that that doesn't work anymore, because that is also a malware vector.

I'd like to see more devices being sold that give the user control, like the newly announced GrapheneOS phones for instance. I look forward to seeing how those are received.


Network segmentation does nothing for the types of attacks these devices perform (e.g. content recognition for upload to their tracking servers, tracking how you navigate their UI, ad delivery). I'm not worried about them spreading worms on my network. The problem is their propensity to exfiltrate data or relay propaganda. The solution to that is a legal one, or barring that, traffic filtering.

That was my motivation for the "or" (don't allow it on your network, or put it on an isolated network); it depends on your threat model and what the device could do. Some devices (like "smart" TVs) shouldn't have network access at all.

> How’s ACPI and real suspend

On a current ThinkPad? Essentially perfect. Zero problems suspending and resuming, no matter what's going on, including weird cases like suspending while docked and resuming while undocked or vice versa.


Do current thinkpads still have real suspend? I thought it was discontinued by intel. And if they do, how do you enable it? I haven’t seen anything in the bios of my p14s g6

Sadly, this is what I thought. Nobody wants to open their backpack to find a warm helicopter

> X13 is probably the best equivalent in Lenovo's line.

I think the X1 Carbon line is the best direct competitor.


Not in terms of heat management it’s not.

> and I consider the volume and type of ads an important signal for a website’s trustworthiness

You can get the former from the number showing up in the uBlock Origin icon.


> Text sucks in oled displays.

Not anymore, as long as you make sure that any RGB antialiasing is turned off. Linux defaluts to disabling this and doing only grayscale antialiasing, so it looks great on an OLED out of the box. Windows can be configured to do this.


I have no idea what you mean by "Linux defaults to" ... what possible Linux-wide global could there be for antialiasing? Apps are free to turn on different kinds of antialiasing for text rendering all by themselves.

Default configurations in font rendering on typical distributions.

Low-res is low-res. Curves on SVGs and vector graphics look terrible.

As a kid, I had the original Pokemon Blue for the GBC. Played it, enjoyed it, found it novel, beat it. Went to an event, got an authentic Mew (certificate is still around somewhere).

Not long after, I was gifted Pokemon Silver. Played a bit of it. Didn't find it novel anymore. Very rapidly had this feeling of "I see where this is going and I want off this ride". Gave up on Pokemon, and haven't regretted it even slightly.

I know there have been many innovations in the mechanics since (e.g. double battles), and I realize the game has a very large amount of strategy. But it also felt like the same kind of feeling I get from games like MtG ("expensive cardboard"); that also has a lot of depth and strategy and new mechanics, but the "collection" aspect feels painful in an "I can see the Skinner box" way, in ways many other games don't.

I had a similar feeling a few years later, when I played Wind Waker for the first time. That was one of the first games I intentionally decided not to 100%: specifically, I left out the picture gallery, which gave me the same "collectathon" feeling.


From what I can tell the staying power seems to be in:

1) New players. More of ‘em born every year! And,

2) Competitive play, which is a huge thing (I hate playing most games with randos online, personally, but lots of people love it). Like with any multiplayer game (call of duty, say) you need the latest entry or you’ll be looking at a ghost town in the multiplayer lobbies. Plus you get to experience the meta evolving, so it’s more dynamic than playing on an older one. They’ve got this whole graded ranking and matching system and a bunch of leaderboard stuff going on.

I only know about the latter because I know a guy who usually spends at least a little time way up near the top of the rankings each time a new one of these comes out. Seems like a pretty large scene.


I think it also attracts many different kinds of players (with overlap between them). Some of the same MtG "player personality archetypes" apply to Pokemon: https://mtg.fandom.com/wiki/Player_type : hyper-competitive players, players who like swinging with the biggest baddest coolest Pokemon they can get, and combo players who like figuring out just the right combination of mechanics if you bring in some move from six games ago plus an item from three games ago plus a new Pokemon that just made the combo possible. Also throw in aspects like grinding for shinies or EVs.

Different appreciations for asethetics apply as well: people who get really into the lore, people who really enjoy specific Pokemon (look at Yellow, or the Let's Go games), people who just want "whatever has the best stats".

And each new game tends to take all of those archetypes into account when creating new content.


That's a service that doesn't want your business. If you care, message them about it

I've never once run into a service with such a restriction, but I can imagine someone being that short-sighted. I have seen services that only support "log in with Google or Facebook", which is comparably terrible.


Discogs will not let me login with my own domain (of 30 years) and required one of the big providers. It kept complaining about "risky domain". But that is the only incident I can think of.

Discogs

Who? Never heard of them, and it sounds like there's a good reason for that.


It is a top 1000 web site according to Alexa rankings. It would take you about 5 seconds to Google about it. Probably less time than it took you to write your post.


I've run into services that will flag specific tlds as invalid.

I have heard of that, yeah. It's still busted, but marginally more understandable if they're dealing with a lot of scams. For instance, `.xyz` and some others have bad reputations. I've never seen something that'll reject an arbitrary self-owned `.org`, by way of example.

"Assume good faith" does not mean "extend an unlimited amount of good faith to demonstrably bad-faith actors".

> LLM, by definition, can't be AGI.

False, and you've given no argument to the contrary. There's certainly no definition that precludes it. It isn't, currently; there's no reason it can't be, any more than there's reason that Conway's Game of Life can't be, given sufficiently interesting data to process. Any Turing-complete system could simulate AGI. It might not be the most efficient mechanism for doing so, but that's not the question at hand.


The whole point of requiring individual insurance is precisely that insurance will be too expensive for people who are demonstrably high risk in that role, and less expensive for people who are low risk.

Some of the additional expense would be due to an individual risk profile, and some of the expense would be due to lack of bargaining power. The expense due to individual risk profile is a feature. The expense due to lack of bargaining power is not.

Police have unions.

There are thousands of cops if not a million outright. I don't think this will be a problem.

I don’t know if you’re familiar with how bargaining works, but you only get the price break if you can come in as a large unified group. Having millions of individuals doesn’t result in a price break. Eg There are millions of private individuals buying health insurance in the US, but they have no bargaining power unless they purchase as a unified block. Individual health insurance policies are notoriously expensive.

Good thing that police unions are notorious for being weak and ineffective, then!

Bargaining power can also come from the availability of competition. I don't collectively bargain to buy bread, but it's still competitively priced.

Then the department can pay for each officer's insurance.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: