<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: ajross</title><link>https://news.ycombinator.com/user?id=ajross</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 16 Oct 2026 08:58:15 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=ajross" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by ajross in "Details Leak from Meeting Where Weiss's 'Handpicked' Editor Threatened CBS Staff"]]></title><description><![CDATA[
<p>Well, maybe, but the quote is from a middle manager, not "management".  I don't disagree with any of the analysis in general, but the deeper truth here is that Shayndi Raice was cross pressured: the desires of upper management and the desires of the workforce could not, on this subject, be reconciled.  You can't fix that with a better manager.<p>Now, you can get more specific and point out that in a situation where CBS corporate management wants CBS News journalists to report the "news" (which is a journalism product) in a way that the journalists don't, that management is almost certainly "wrong" as a matter of product management.<p>But the even more specific point is that CBS News isn't viewed as a journalism product by upper management anymore.  They were a token to be traded to get the Paramount merger to go through, and Weiss and her staff were brought on to make CBS News more palatable to the regulators, not the consumers.</p>
]]></description><pubDate>Wed, 14 Oct 2026 22:17:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=50096219</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50096219</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50096219</guid></item><item><title><![CDATA[New comment by ajross in "OpenAI engineer arrested in bugging of executive conference room"]]></title><description><![CDATA[
<p>Honestly I think you can rule out "political" already, no?  It's far easier to just bribe politicians for that kind of intelligence.  My point was that they weren't stealing models, they wanted decisionmaking intel.</p>
]]></description><pubDate>Tue, 13 Oct 2026 22:03:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=50079534</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50079534</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50079534</guid></item><item><title><![CDATA[New comment by ajross in "OpenAI engineer arrested in bugging of executive conference room"]]></title><description><![CDATA[
<p>Given that this is being described as an "executive conference room", it's more likely an attempt at insider trading than espionage.  Decisions made in those rooms at OpenAI move markets (c.f. DRAM) for sure.</p>
]]></description><pubDate>Tue, 13 Oct 2026 21:48:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=50079339</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50079339</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50079339</guid></item><item><title><![CDATA[New comment by ajross in "Apple's new 'Switch to Safari' campaign details why you should ditch Chrome"]]></title><description><![CDATA[
<p>No, it's definitely about control.  Allowing an arbitrary browser means allowing access to platform stuff from portable (gasp!) APIs.  And Apple doesn't want that.  They want an iOS app to be the primary face of everything important, and the other stuff to be an expensive port.<p>And the problem isn't abstract.  Safari lacks a <i>ton</i> of very useful API implementations.  Like, try programming a QMK keyboard on an iPhone: it's literally the only platform in the whole world unable to run the Via web app.</p>
]]></description><pubDate>Tue, 13 Oct 2026 19:51:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=50077635</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50077635</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50077635</guid></item><item><title><![CDATA[New comment by ajross in "Passkeys are a trap"]]></title><description><![CDATA[
<p>Right.  For clarity: the choices are "use a third party authentication mechanism (like passkeys)" or "roll your own".  And among vendors that continue to roll their own authentication, even the largest and most capable (like Amazon) don't try to do crypto like the upthread commenter was suggesting.  It's just not practical unless you control the hardware platform.  Passwords and telephone-2FA remain the rule.</p>
]]></description><pubDate>Mon, 12 Oct 2026 18:09:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=50060391</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50060391</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50060391</guid></item><item><title><![CDATA[New comment by ajross in "Passkeys are a trap"]]></title><description><![CDATA[
<p>> I guess I am envisioning the user agent doing all of this.<p>That's literally what a passkey is, that the linked article argues against.  It relies on the platform vendor of your device hardware to validate the full stack of software.  You can't just do it in a browser because anything that reads the browsers data (or attaches a debugger, or runs the browser in an instrumented VM, etc...) can exfiltrate the key.</p>
]]></description><pubDate>Mon, 12 Oct 2026 01:16:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=50050095</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50050095</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50050095</guid></item><item><title><![CDATA[New comment by ajross in "The gap in shared understanding of LLM capability is widening"]]></title><description><![CDATA[
<p>> But hey...on the flip side...a lot of people are rapidly building software (that nobody is using), and AI is solving mathematics problems (that nobody - including mathematicians - wanted it to solve)<p>That's not fair.  To first approximation, most of the progress in human condition of the last, like, forever is implementing solutions that people didn't see value in at the time of creation.  Woz built a toy that could barely run software at all.  The human genome project was panned as a boondoggle. Penicillin was a mistake.<p>The first fire pit probably looked like a dangerous stunt to the tribe faced with it, even.<p>Does that mean everything will come up roses?  No.  But LLMs only started talking to us for real like three years ago.  Let's not just <i>that</i> fast.</p>
]]></description><pubDate>Sun, 11 Oct 2026 23:07:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=50048999</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50048999</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50048999</guid></item><item><title><![CDATA[New comment by ajross in "Passkeys are a trap"]]></title><description><![CDATA[
<p>Because you or someone needs to publish "<digital_signature>" in a way that cannot be forged, stolen, MiTM'd, or otherwise compromised.  Basically the key generating that signature just becomes another password, far more difficult to use in practice, and sharing all the same disadvantages.<p>So no one implements it for site-local login.  Even the biggest sites like Amazon, for example, still use old-school passwords+2FA.<p>The way secure auth works for small sites is that a <i>third party</i>[1] authenticates you, who the website trusts more than mere users.  And that's where all the complexity comes up.  You need something secure stored on your known-secure device, a password alone won't do.<p>[1] In practice Google or Meta.  Occasionally Apple or Microsoft.  Everyone else is noise.</p>
]]></description><pubDate>Sun, 11 Oct 2026 22:39:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=50048698</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50048698</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50048698</guid></item><item><title><![CDATA[New comment by ajross in "What driving across Europe costs in tolls, vignettes, bridges and fuel"]]></title><description><![CDATA[
<p>The lesson here is that in situations where you have a clear public good that (almost) everyone needs and consumes, like roads and infrastructure, it's better for (almost) everyone if the government simply pays for it out of the general fund and doesn't try to nickle-and-dime the populace to tax "usage".<p>Sadly if you flip that around and talk about other public goods like "health care," (almost) everyone walks across the aisle of the same principles and starts arguing in the opposite direction.</p>
]]></description><pubDate>Sun, 11 Oct 2026 12:43:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=50042719</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50042719</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50042719</guid></item><item><title><![CDATA[New comment by ajross in "Trump administration is suspending Microsoft from a green card program"]]></title><description><![CDATA[
<p>> We have had the ability to recruit the top talent from around the world for generations.<p>Exactly.  This is the trap that's befallen Russia and India.  A future generation will look around at all the smart and enterprising children of their friends and neighbors doing world-beating research and engineering <i>somewhere else</i> and raising their children in a foreign land, never to return.<p>Cultural supremacy logic wraps back around like ouroboros.  The truth is that we're all better off working together, and has been for thousands of years.  The idea of "winners" is an illusion.</p>
]]></description><pubDate>Thu, 08 Oct 2026 16:19:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=50007757</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=50007757</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=50007757</guid></item><item><title><![CDATA[New comment by ajross in "How did Rosalind Franklin miss the helix in her iconic DNA image? She didn't"]]></title><description><![CDATA[
<p>> The questions is, why, there's clearly an obsession around it.<p><i>That</i> question is maybe kinda begged?  I mean, the actual question is "Who discovered the structure of DNA?"</p>
]]></description><pubDate>Wed, 07 Oct 2026 22:43:40 +0000</pubDate><link>https://news.ycombinator.com/item?id=49999773</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49999773</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49999773</guid></item><item><title><![CDATA[New comment by ajross in "How did Rosalind Franklin miss the helix in her iconic DNA image? She didn't"]]></title><description><![CDATA[
<p>Is genuine curiosity about scientific history inherently "retconning"?  Would you have said that if the dispute was between Watson and some other dude?<p>I mean, yes, there are people who push this attribution because of identity reasons.  Rejecting it <i>for the same reasons</i> is at least as bad, no?</p>
]]></description><pubDate>Wed, 07 Oct 2026 22:15:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=49999506</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49999506</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49999506</guid></item><item><title><![CDATA[New comment by ajross in "Hackers obtain counterfeit TLS certificates for Google and other large services"]]></title><description><![CDATA[
<p>> The issuing was detected almost immediacy thanks to CT<p>Which means that the risk to you or I or the general public is low.<p>But FWIW: it also tends to argue that this is the aftermath of a coordinated, targeted attack against a single high value target (or at most a small set of targets they could hit within the window).  The attacker knew they had a gun with only one bullet, and we're just hearing the muzzle report.</p>
]]></description><pubDate>Wed, 07 Oct 2026 12:48:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=49992032</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49992032</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49992032</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>With all respect, and like I said, that's just spin.  You're saying all the same stuff I did with different emphasis.<p>You can't get a license for GMS if you want to make money shipping devices that allow users to run unlicensed GMS.  You can make all the money you want shipping AOSP devices that don't/can't run GMS.  We both agree on that much, right?</p>
]]></description><pubDate>Tue, 06 Oct 2026 14:21:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49978947</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49978947</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49978947</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>> They are using their market power over Android to prevent OEMs from selling other mobile OSs.<p>That... is pretty spun, especially with regard to the Microsoft comparison upthread to which I responded.<p>They aren't trying to restrict "other mobile OSs", they're specifically saying GrapheneOS, and in general any AOSP-derived system which is designed to interoperate with the GMS frameworks.<p>Like, even AOSP alone would be fine, c.f. Fire or Harmony which never got this attention.  GrapheneOS is specifically in violation because it includes a feature to suck down and essentially "pirate" an unlicensed copy of the GMS suite, thus making the phone into the practical equivalent of a Pixel.<p><i>That</i> is what Google objects to, because they sell GMS as a product and aren't interested in their downstream OEMs "giving it away" for free by bundling a third party product that doesn't license it.<p>Basically GrapheneOS, as it exists right now, just can't be shipped as a commercial product.  There's no license for the magic stuff they claim to support.</p>
]]></description><pubDate>Tue, 06 Oct 2026 00:48:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=49972778</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49972778</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49972778</guid></item><item><title><![CDATA[New comment by ajross in "OpenAI "rogue" agent activities found on Wikimedia projects"]]></title><description><![CDATA[
<p>> Why jump to regulation when just simple law enforcement would suffice. All of these OpenAI "rogue agent" events have been illegal, but no DA is enforcing them.<p>Refusal on the part of the government to enforce laws that "would suffice" is clear evidence that the regulatory regime is, in fact, insufficient.<p>That's why we have regulatory authorities at all, if you think about it.  Local district attorneys <i>could</i> be handling a ton of cases about drug testing and environmental damage and air travel safety.  But they don't, because that stuff's hard and their job is to put burglars in jail.</p>
]]></description><pubDate>Mon, 05 Oct 2026 19:50:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=49969712</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49969712</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49969712</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>Again, even accepting all that, Android <i>remains more open to competition</i> within its own ecosystem than it's main (heh) competitor.  And being outraged in only one direction is a smell that tells me... we aren't talking about competition.</p>
]]></description><pubDate>Mon, 05 Oct 2026 18:23:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=49968514</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49968514</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49968514</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>That may well be true.  But the upthread point was that this was "anti-competitive", not "word-breaking".  And in an argument about competition, Android is and remains by far (!) the most accessible platform.  The restriction here is just that you can't get a license for Google's proprietary stuff if you also sell GrapheneOS, not even that you can't run GrapheneOS.</p>
]]></description><pubDate>Mon, 05 Oct 2026 17:17:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=49967664</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49967664</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49967664</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>> Big difference.<p>Not from the perspective of competition, as I see it.  Like, if you want to compete with Apple by using part of its platform for your own stuff, you can't at all.  But you can with Google, just not all of it and in all ways.<p>Point being: this is just another platform flame.  People with one kind of phone in their pocket are outraged at the maker of the other thing.</p>
]]></description><pubDate>Mon, 05 Oct 2026 17:15:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=49967622</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49967622</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49967622</guid></item><item><title><![CDATA[New comment by ajross in "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"]]></title><description><![CDATA[
<p>> The much more interesting recent news IMO is that Google is not allowing (non-Samsung) OEMs to sell devices with GrapheneOS:<p>To be That Guy, Apple is not allowing anyone anywhere to sell any devices with anything but MacOS/iOS.<p>> But this is really end-90s/begin-00s Microsoft levels of anti-competitiveness.<p>It's not even the most anti-competitive in the market of 2026!</p>
]]></description><pubDate>Mon, 05 Oct 2026 14:33:47 +0000</pubDate><link>https://news.ycombinator.com/item?id=49965430</link><dc:creator>ajross</dc:creator><comments>https://news.ycombinator.com/item?id=49965430</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49965430</guid></item></channel></rss>