They could go ahead and make "fast electric bikes" and "slow electric bikes" or something as categories and that would make sense - but hinging the decision on whether your legs or your wrist is turning is illogical. I think it is actually morally charged - like you have to put in the work if you want the privilege.

On a publicly routed PC, I can call `listen` and an outside host can connect to me.

On a PC behind a NAT - if I don't set up port forwarding - I can call `listen` and nobody from outside can connect to me.

So one could say, going from publicy routed to behind a NAT means that only allowed incoming connections are possible. Or am I missing something and you can really, from the outside, open a connection to a PC on a residential network which is behind a simple NAT (TCP server listening on that PC)?

That you can't believe everything you see in the age of AI is a feature, not a bug. We are so used to photographs being hard facts that we'll have to go through a hard transition, but we'll be fine afterwards, just as we were before the invention of photography. Our norms will adapt. And photographs will become mere heresay and illustration, but that's OK.

I think here the same dynamic is at play as with music/videos and DRM. Our society is so used to doing it the old way - selling physical records - that when new technology comes along, which allows free copying, we can't go where the technology leads us (because we don't know how to feed the artists, and because the record industry has too much power), so we invent a mechanism to turn back the wheel and make music into a scarce good again. Similar here: we can't ban Photoshop and AI, but we invent a technology to try to turn back time and make photos "evidence" again.

Which I find sad actually. The idea of C++ as a superset of C is really powerful, especially when mixing C and C++. A while ago I had a C project (firmware for a microcontroller) and wanted to bake the version and the compilation time into the firmware. I didn't find a way to do this in plain C, but in C++ you can initialize a global struct and it gets statically linked into the output. This didn't even use constexpr, just preprocessor trickery. Then it was just a matter of renaming the c file to cpp and recompiling. I guess you could also do that with C, but there are things like RAII or constexpr or consuming a C++ library that you can't do without.

So, how do I know that GrapheneOS is not a honeypot for the really big fish?

At this point it seems if you really want to be safe, you have to add obscurity (in addition to conventional best practices). Like changing the pinout on your USB port so the exploit device can't connect.

Remember there is a difference between legal and legitimate. You don't have to do something just because it is the law (well, you could define "have to" to mean what the law says, but then it becomes pretty circular).

Historically, often behavior changes before the applicable laws change. Think about the acceptance of gay relationships, or the use of cannabis. If people don't sometimes break the law, society can't evolve. That doesn't mean the rule of law has to break down. I think the rule of law is very important and would uphold it in most cases, but there are certain cases where conscience might order one to break or circumvent a law.

Crucially, I think what is banned to offer accounts. Offering turnkey-hosting is probably banned in spirit, but the person offering the turnkey-hosting is not in violation, rather the person booking the turnkey hosting and offering the accounts on the instance to third parties is in violation.

I think the wording is originally against somebody like Amazon hosting e.g. database instances for other people to use, and then giving you an account in that database. It's still OK to rent a VM from them and use the package manager to install it.

In any way, it is really confusing, in a way a license should not be. And I don't really understand why someone builds a blog platform, which is not monetized, open sources it, but doesn't want other people to host it. If I open source my stuff, I want people to use it. If I want to share the code but don't want people to use it I'd just put it somewhere it with no license at all (all rights reserved).

For a DIY solution, protocol wise it doesn't seem too complicated, but electronically USB-C or HDMI is out of reach for most hobbyists. And I assume most USB-C interface chips you can get aren't programmable to the degree neccessary...

That the bank is aware of your identity is not neccessarily a flaw, but a boundary condition of the protocol. Assuming a trusted intermediary, how can we.... I think a solution here is not purely technical, but also social. How about establishing a trusted intermediary that can check your identity, but for sure does not do anything malicious with the information? Maybe there is a strong taboo against disclosing the information, like with the confidentiality of confession.

There is another flaw in the proposed scheme, how do you make sure that people don't just take the signature from another person? This one is pretty tricky to solve.

I have been thinking about similar "proof of attribute" protocols for a while, since they have interesting use cases outside of age verification. You could verify that a person on HN is really an Apple employee, without Apple being able to identify that user. Or on a dating site, you could verify that the user is a certain gender, in a certain age bracket, and the account is tied to a social media account in good standing (not a throwaway account), without having the link explicit somewhere (and thus leakable).

Another place where I think this would be neat would be in CAD. Imagine if you are trying to create a model of an existing workpiece or of a room, and your measurements don't exactly add up. It's really frustrating and you have to go back and measure again, and you usually end up idealizing the model and putting in rounder numbers to make it fit, but it is less true to reality. It would be cool if you could put in uncertainties for all lengths and angles, and it would run a solver to minimize the total error.

But first, that is not a technical nor a business problem, that sounds like a political problem. Prusa is literally the leading european name in the 3D-printing industry. Surely they can get an appointment with some government officials, who are concerned about manufacturing capabilities and future technologies - who pull some strings, and then every patent clerk will receive a memo to double check the relevant patents when someone tries to register them.

Second, Chinese patents have a different weight than EU/US patents. As he writes, they are a dime a dozen. Probably not worth caring about, unless they are targeting the Chinese market. And if they are, the best defense would probably to register some patents their themselves.

But I also have to say 700M weekly users could mean 100M daily or 70k a minute (low ball estimate with no returning users...) is a lot, but achievable at startup scale. I don't have out current numbers but we are several orders of magnitude smaller of course :-)

The big difference to home use is the amount of VRAM. Large VRAM GPUs such as H100 are gated being support contracts and cost 20k. Theoretically you could buy a Mac Pro with a ton of RAM as an individual if you wanted to run auch models yourself.

I wouldn't say that applies to everybody. I use C++ because it interfaces with the system libraries on every platform, because it has class-based inheritance (like Java and C#, unlike Rust and Zig) and because it compiles to native code without an external runtime. I don't care to much about allocations.

For me the biggest fumble is that C++ provides the async framework, but no actual async stdlib (file io and networking). It took a while for options to be available, and while eg Asio works nicely it is crazily over engineered in places.

It's about time we start seeing more physicality in our user interfaces!

We can make things look convincingly like glass, or metal, or even materials that don't exist in reality. One reason for flat design is because it was the lowest common denominator and easy for devs to implement. If Apple makes it easy to implement this liquid glass stuff - Rectangle().background(.glass) or something - then it's going to be really successful.

About "only Apple can achive that": It would be pretty simple for MS to do something like this in Windows. DirectComposition (or whatever it is called nowadays) could set the appropriate shader when drawing windows. You cannot do it as a normal user, because you can only pick from a select set of backdrop shaders (but if some hacker wants a challenge, you could inject the code into dwm.exe to do so :-)).

And if a site pulls something like that on me, then I just don't take their data. Joke is on them, soon if something is not visible to AI it will not 'exist', like it is now when you are delisted from Google.

It gets annoying when you have the right to scrape something - either because the owner of the data gave you the OK or because it is openly licensed. But then the webmaster can't be bothered to relax the rate limiter for you, and nobody can give you a nice API. Now people are putting their Open Educational Resources, their open source software, even their freaking essays about openness that they want the world to read behind Anubis. It makes me shake my head.

I understand perfectly it is annoying when badly written bots hammer your site. But maybe then HTTP and those bots are the problem. Maybe we should make it easier for site owners to push their content somewhere where we can scrape it easier?

A couple of years ago, I used the TransPort feature of Tor combined with an iptables rule to redirect certain applications over Tor, like a web browser. The goal was a poor man's VPN. Access some websites without your local network admin to know about it, and without the website to know who you are. Back then there was Java applets and Flash, and this worked to hide network requests from them, too, as opposed to other solutions. Later iptables removed the feature that allowed you to filter on PID and broke my workflow. I changed it to use a dedicated unix user for tor, but that broke at some point, too, and I just got a commercial VPN.

Tor discouraged my use case, and I guess if you are afraid of being tracked or recognized as a returning user, then you should stick to Tor browser. But everybody has their own use cases.