<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: johnfernow</title><link>https://news.ycombinator.com/user?id=johnfernow</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 28 Apr 2026 22:16:52 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=johnfernow" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by johnfernow in "For all that's holy, can you just leverage the web, please?"]]></title><description><![CDATA[
<p>The Prompt API [0] works in Edge, though it uses the Phi-4-mini model instead of Gemini Nano. [1]<p>Currently it doesn't work in Brave (at least on my machine), and I can't find anything online suggesting whether they plan on supporting the Prompt API. You can go to brave://flags/ and it shows "Prompt API for Gemini Nano" and "Prompt API for Gemini Nano with Multimodal Input", but it doesn't seem to actually work.<p>0. <a href="https://chromestatus.com/feature/5134603979063296" rel="nofollow">https://chromestatus.com/feature/5134603979063296</a><p>1. <a href="https://learn.microsoft.com/en-us/microsoft-edge/web-platform/prompt-api" rel="nofollow">https://learn.microsoft.com/en-us/microsoft-edge/web-platfor...</a></p>
]]></description><pubDate>Wed, 03 Sep 2025 17:10:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=45118199</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=45118199</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45118199</guid></item><item><title><![CDATA[New comment by johnfernow in "Memory safety is table stakes"]]></title><description><![CDATA[
<p>The Java language specification is open and there are multiple implementations. OpenJDK is the official open-source reference implementation, and many of the alternative implementations pull from upstream, but OpenJ9 is a different JVM implementation (though does currently use OpenJDK's class libraries to form a complete JDK.)<p>Before Microsoft opened-up C#, Mono was a completely independent alternative implementation.<p>Python has CPython (reference open source implementation), but also PyPy, MicroPython and several others.</p>
]]></description><pubDate>Thu, 26 Jun 2025 21:48:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=44391827</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=44391827</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44391827</guid></item><item><title><![CDATA[New comment by johnfernow in "macOS Tahoe brings a new disk image format"]]></title><description><![CDATA[
<p>exFAT is widely used but it not being journaled has led to so many thousands (if not more) people losing tons of data, many of which wouldn't have lost so much data had they used a journaled filesystem (or even one with redundant file tables.)<p>If you need to connect a portable drive to machines of different OS's, there is no safe filesystem that supports read and write on both Windows and MacOS.<p>Alternatively, cloud storage works until the files are larger than the space you have left on Drive/Dropbox/OneDrive/etc., and local network sharing (on certain networks at least) is more complicated than what the average user is willing to put up with. In practice, many use USB flash drives or external HDDs/SSDs with exFAT. Yeah, people should have more than one backup, but we know in the real world that's not what many do. That requires them spending more time (e.g. configuring local network sharing or setting up an old machine lying around to be a NAS) or money (more on cloud storage.) In practice, having a cross-platform, journaled filesystem would lead to a lot less data loss.<p>Aside from exFAT, the only alternative with native cross-platform R/W capability is FAT32, but while it has a redundant file allocation table (unlike exFAT), it has a max file size of 4GB, which limits its usefulness for many workflows.</p>
]]></description><pubDate>Thu, 12 Jun 2025 21:12:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=44263251</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=44263251</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=44263251</guid></item><item><title><![CDATA[New comment by johnfernow in "Malware found on NPM infecting local package with reverse shell"]]></title><description><![CDATA[
<p>I agree with you. To be fair though, the concept likely seemed more reasonable in 1999. Hardware, browsers, and websites (and their front- and back-end services) were all less complex back then. Also less bloat. Not that things were more secure, but a popular tool may have had more meaningful review.<p>At times, complexity is worth the trade-offs. Modern C++ compilers are more complex than ones in the 80s and 90s, but the assembly code they generate runs much faster. Rust is complex but provides massive security benefits while maintaining great performance.<p>At times though, stuff is just bloated or poorly designed.<p>But it's not always clear how to intelligently design a project. If you add too many features to a single large project, it becomes unwieldy to maintain that large project, and the harder it is to audit this critical piece of infrastructure. Yet, if you don't add enough features, people will use packages from random devs, risking their own security, while harming the maintainability of their own project.<p>I don't know how we solve that problem. Alternatively, you could ask devs to reinvent the wheel and write a lot more code on their own (which they probably won't, either because they don't want to, or because the employer requires a solution on too short of a timeline to do so), but that could also jeopardize security. Many if not most web devs have to deal with authentication and encryption, both of which (the overwhelming majority) very much should <i>not</i> do on their own. Good luck asking a junior dev to correctly implement AES-256 encryption (or something equivalent or better) on their own without using existing libraries.<p>The answer is almost certainly some kind of mix, but it's not clear what exactly that should look like.</p>
]]></description><pubDate>Thu, 27 Mar 2025 05:43:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=43490669</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43490669</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43490669</guid></item><item><title><![CDATA[New comment by johnfernow in "Google will develop Android OS behind closed doors starting next week"]]></title><description><![CDATA[
<p>I agree with you: they'd rather not. If Google's Android became closed source to the public, but Google gave Samsung and other OEMs the right to modify it (including a hard fork later on if they desired), then I agree with you that they'd almost certainly continue with Google's Android — they'd lose nothing and eliminate future competitors.<p>My comment was in part addressing the higher up comments in the thread stating OEMs couldn't do a hard fork. My thoughts are that they have the marketshare that if Google's terms were bad enough, they could. They'd love to take some of the Play Store revenue, but currently dropping the Play Store would tank hardware sales as competitors would keep it. But if Google's terms were to get bad enough that multiple OEMs wanted to hard fork, that calculation could change. I don't foresee Google ever putting forth that bad of terms though, in part <i>because</i> of the option to hard fork.</p>
]]></description><pubDate>Thu, 27 Mar 2025 02:29:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=43489834</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43489834</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43489834</guid></item><item><title><![CDATA[New comment by johnfernow in "Google will develop Android OS behind closed doors starting next week"]]></title><description><![CDATA[
<p>Right, but if Google's Android becomes closed source and a well-funded FOSS fork becomes available, that changes the situation. If Samsung, Xiaomi, Motorola, HONOR, OPPO, etc. all agree to use a new FOSS fork as their base, well Google's new closed-source Android becomes irrelevant. Samsung alone is large enough to be able to maintain a fork of Android, and a large enough percentage of the smartphone market that whatever OS it's running will be supported by banking apps.</p>
]]></description><pubDate>Wed, 26 Mar 2025 21:09:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=43487340</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43487340</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43487340</guid></item><item><title><![CDATA[New comment by johnfernow in "French scientist denied entry into the U.S., French government says"]]></title><description><![CDATA[
<p>Some fair points. Courts have ruled Congress can make laws concerning foreign residents that would be unconstitutional if applied to domestic residents and citizens. They generally can't deny someone their Constitutional rights once already inside the US though. But since deportation isn't a criminal conviction (and rejection at the border especially isn't), it's conceivable that they could deny someone entry for a variety of reasons.<p>So perhaps not a violation of the Constitution. Though if the scientist's claims that he was denied entry because he expressed a personal opinion on the Trump administration's research policy, then it certainly violates the spirit of the First Amendment, and much of what the government claims it stands for. Is it legal? Perhaps. Will it cause long-standing damage to US soft-power and the ability of US organizations to recruit world-class scientists? Quite possibly.</p>
]]></description><pubDate>Thu, 20 Mar 2025 20:49:22 +0000</pubDate><link>https://news.ycombinator.com/item?id=43428768</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43428768</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43428768</guid></item><item><title><![CDATA[New comment by johnfernow in "French scientist denied entry into the U.S., French government says"]]></title><description><![CDATA[
<p>> First Amendment protections are only available for U.S. citizens and to a lesser extent to permanent residents<p>Nowhere in the First Amendment, or anywhere in the Bill of Rights (or later amendments), does it state, or even imply, that the First Amendment is only applicable to US citizens and permanent residents. SCOTUS has repeatedly interpreted the First Amendment's protections as extending beyond just citizens and permanent residents in matters of freedom of speech and religion. While some rights, such as voting, are restricted to citizens, the First Amendment's protections apply to anyone within the U.S. jurisdiction, regardless of citizenship status.<p>The amendment is short and clear: "Amendment I: Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances."<p>Even if one argued "the people" refers only to U.S. Citizens (on what basis, who knows), that would only restrict assembly and petitions. The first part is unambiguously comprehensive and clear: "Congress shall make <i>no law</i>... abridging the freedom of speech, or of the press" (emphasis added by me.)</p>
]]></description><pubDate>Thu, 20 Mar 2025 18:35:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=43427163</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43427163</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43427163</guid></item><item><title><![CDATA[New comment by johnfernow in "Introducing command And commandfor In HTML"]]></title><description><![CDATA[
<p>Having a browser written entirely (or mostly) in a memory safe language.<p>LadyBird is now using some Swift, but most of the code is still C++. The browser, while extremely impressive (and I’m very thankful it exists), has a ways to go before it’s a true replacement for Chromium/Blink, Firefox/Gecko or Safari/WebKit, and rewriting all the existing code in Swift would be a massive undertaking.<p>Chromium and Firefox also use some Rust, but re-writing those browsers entirely in it would be an even larger undertaking.<p>In contrast, a simpler browser spec would make it far easier to create a brand new browser in a memory safe language. Not only would this massively improve security on all operating systems as the browser is a huge vector for exploits, it’d also allow for the creation of new, more secure operating systems. Currently, arguably the biggest blocker for using something like RedoxOS (an OS written in Rust) is that it doesn’t have a web browser that can actually work for a lot of the web. But if the web browser spec were simpler, it’d be much easier to create one and then use that OS.<p>Obviously we can’t go back in time and make a simpler web-spec, and removing features is a terrible idea as it’d break existing websites. I do think, though, that it’s fair to think very hard before adding new features. I think a complete feature freeze would be overkill — some new features could legitimately make web development simpler and cleaner for many webdevs. I do think there needs to be some thought as to what the end-goal for web browsers is. Is there one? Or will we forever continue to add new features at the current pace? If so, the hopes of building a new, more secure browser are dim. And personally I’d prefer a more secure browser to one with more features.<p>As a comparison, C++ has been adding plenty of new features, but nearly no devs are aware of the full feature set, and despite the goal of making things simpler, I think many devs are as lost as ever with it, as they still have to interface with code written in old and different manners. On the web dev side, some JS and CSS features do legitimately simplify development and make things easier, but I think it’s fair to say that’s not the case for all new features added.</p>
]]></description><pubDate>Sat, 08 Mar 2025 19:00:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=43302547</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43302547</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43302547</guid></item><item><title><![CDATA[New comment by johnfernow in "We're Charging Our Cars Wrong"]]></title><description><![CDATA[
<p>Gas car ≠ EV charged by fossil fuels.<p>As of 2018, 94% of the US population lived in an area where charging an EV would emit less than a >50mpg car. In terms of electricity grid regions, an EV has lower emissions than a 50 mpg gasoline vehicle in 85% of them. [1] Yes, most of the US is still powered by fossil fuels, but ICE tailpipe emissions are very different than power plant emissions.<p>As for why switching to EVs is preferred to sticking with gas cars, aside from climate change, tailpipe emissions from ICE vehicles cause ∼200,000 early deaths to occur in the U.S. each year [2] (old data, but average MPG of vehicles in the US has barely changed, though particulate matter is better filtered, though there are more vehicles and annual vehicle miles traveled in the US has increased. Hard to pin an exact number without newer research, but without any doubt many thousands are dying from the pollution.)<p>As far as climate change goes, over a quarter comes from transportation in the US [3]. EVs alone won't take that to single numbers, but halving transportation emissions would still be significant progress.<p>As far as<p>> The light is weak for many months of the year, and wind power is apparently way too expensive if they remove the subsidies (weird!)<p>Globally, fossil fuel subsidies were $7 trillion or 7.1 percent of global GDP in 2022 [4]. 70% of energy subsidies go towards fossil fuels (admittedly not the case in the US though.) [5] But subsidies aside, solar and wind is very price competitive with gas (and often far cheaper than coal) [6].<p>There's also $24.662 trillion in externalities for energy and transport (equivalent to 28.7% of global GDP) [7]. So sticking with ICE cars and fossil fuels is unlikely to be a smart decision from a financial perspective.<p>1. <a href="https://www.ucsusa.org/sites/default/files/2020-05/evs-cleaner-than-gasoline.pdf" rel="nofollow">https://www.ucsusa.org/sites/default/files/2020-05/evs-clean...</a><p>2. <a href="https://www.sciencedirect.com/science/article/abs/pii/S1352231013004548" rel="nofollow">https://www.sciencedirect.com/science/article/abs/pii/S13522...</a><p>3. <a href="https://www.epa.gov/greenvehicles/fast-facts-transportation-greenhouse-gas-emissions" rel="nofollow">https://www.epa.gov/greenvehicles/fast-facts-transportation-...</a><p>4. <a href="https://www.imf.org/en/Topics/climate-change/energy-subsidies" rel="nofollow">https://www.imf.org/en/Topics/climate-change/energy-subsidie...</a><p>5. <a href="https://climate.mit.edu/ask-mit/how-much-do-government-subsidies-affect-price-fossil-fuel-energy-how-about-renewable-energy" rel="nofollow">https://climate.mit.edu/ask-mit/how-much-do-government-subsi...</a><p>6. <a href="https://en.wikipedia.org/wiki/Cost_of_electricity_by_source" rel="nofollow">https://en.wikipedia.org/wiki/Cost_of_electricity_by_source</a><p>7. <a href="https://www.sciencedirect.com/science/article/pii/S2214629620304606" rel="nofollow">https://www.sciencedirect.com/science/article/pii/S221462962...</a></p>
]]></description><pubDate>Wed, 05 Mar 2025 08:44:11 +0000</pubDate><link>https://news.ycombinator.com/item?id=43264353</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43264353</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43264353</guid></item><item><title><![CDATA[New comment by johnfernow in "EA Open Sources Command and Conquer: Red Alert"]]></title><description><![CDATA[
<p>It may have been at one point, but since then it has been decompiled and ported to many platforms:<p>- PS Vita<p>- Emscripten<p>- Nintendo Switch<p>- webOS TV<p>- Android (WIP)<p>- Nintendo Wii<p>- Nintendo 3DS<p>- Nintendo DS<p>- Nintendo Wii U<p>- PlayStation 2<p>- Sega Dreamcast<p>- MorphOS<p>- AmigaOS 4<p><a href="https://github.com/k4zmu2a/SpaceCadetPinball">https://github.com/k4zmu2a/SpaceCadetPinball</a></p>
]]></description><pubDate>Thu, 27 Feb 2025 20:42:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=43198288</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43198288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43198288</guid></item><item><title><![CDATA[New comment by johnfernow in "If it is worth keeping, save it in Markdown"]]></title><description><![CDATA[
<p>There is no comparable alternative to the Internet Archive though. They've gotten involved in several lawsuits and their future is far from guaranteed. They're an incredibly important organization, but I think it's too important of a project to be limited to one organization, or even one country or region of the earth. A solar flare could destroy a lot of history.<p>I don't know that the economics of having multiple Internet Archive-like organizations is currently feasible (I imagine getting funding for one of them is hard enough), but even a partial offline mirror hosted someplace else would be nice. Maybe to save space they could take the oldest version of a page, the newest, and the midmost version timewise, discarding all other versions. They could also heavily compress images, video and audio to save storage space (would increase processing costs, but if willing to throw out quality, could compress quickly and still save a bunch of space. E.g. downscale all videos to 480p and use veryfast preset and CRF 28 with ffmpeg. Even 240p is a lot better than nothing. A pixelated form of history is better than no history.)</p>
]]></description><pubDate>Wed, 26 Feb 2025 03:45:06 +0000</pubDate><link>https://news.ycombinator.com/item?id=43180370</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=43180370</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=43180370</guid></item><item><title><![CDATA[New comment by johnfernow in "Autodesk deletes old forum posts suddenly"]]></title><description><![CDATA[
<p>Right, archive.org is very useful if you have a URL, but if you're searching for a question that was answered in a forum, and that forum post no longer exists and no longer shows up in search results, then it's effectively undiscoverable as far as I'm aware.<p>It amazes me how companies will have free volunteers help people to use their (often expensive) paid subscription products, and then delete all that info those volunteers wrote up. Don't they want people to use their products?! They're less likely to renew their subscription if they struggle or are unable to use the product for their particular use case.<p>Unaffiliated forums not ran by the company are better in that the company can't decide to just delete all old posts one day (and while the owner could, certain types of unaffiliated forums are usually a bit easier to clone and republish.) The downside is you don't get assistance from people who work for that company, but often you rarely get that in official forums. The usual reason to use official forums is just that they have significantly more users asking and answering questions than unofficial ones.</p>
]]></description><pubDate>Thu, 02 Jan 2025 07:28:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=42572497</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42572497</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42572497</guid></item><item><title><![CDATA[New comment by johnfernow in "Autodesk deletes old forum posts suddenly"]]></title><description><![CDATA[
<p>Sure, but you can't search for the forum pages on archive.org as far as I'm aware (or at least as easily as searching on Autodesk's website or Google/Bing/etc.) For the time being, old forum posts will likely still show up in search engine search results, and you can take those URLs and look them up on archive.org.<p>Eventually though they'll likely no longer show up whenever the search engine's crawlers revisit and it's a redirect, in which case the pages are undiscoverable.</p>
]]></description><pubDate>Thu, 02 Jan 2025 07:23:37 +0000</pubDate><link>https://news.ycombinator.com/item?id=42572472</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42572472</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42572472</guid></item><item><title><![CDATA[New comment by johnfernow in "South Korean president declares martial law, parliament votes to lift it"]]></title><description><![CDATA[
<p>BBC reports "The South Korean military says it will maintain martial law until it is lifted by President Yoon Suk Yeol, despite the nation's parliament voting to block its enforcement, according to the country's national broadcaster." [1]<p>They previously wrote that "The National Assembly speaker has just said that South Korean troops are leaving the parliament building, the Yonhap news agency reports."<p>So I'm not sure if the military isn't unified in what to do, or if certain troops are just not enforcing the President's near certainly unconstitutional order. The Constitution gives the President many powers under martial law ("Under extraordinary martial law, special measures may be taken with respect to the necessity for warrants, freedom of speech, the press, assembly and association, or the powers of the Executive and the Judiciary as prescribed by law"), but it appears to give the President no powers over the National Assembly, so the "All political activities, including the activities of the National Assembly... are prohibited" part of his martial law declaration appears to be blatantly unconstitutional.<p>According to the constitution, "When the National Assembly requests the lifting of martial law with the concurrent vote of a majority of the total members of the National Assembly, the President shall comply." [2]<p>Some are saying the constitution doesn't give a timeframe for when the President has to comply, but if he doesn't soon, it definitely appears to be a self-coup. [3]<p>1. <a href="https://www.bbc.com/news/live/cn38321180et" rel="nofollow">https://www.bbc.com/news/live/cn38321180et</a><p>2. <a href="https://www.constituteproject.org/constitution/Republic_of_Korea_1987.pdf" rel="nofollow">https://www.constituteproject.org/constitution/Republic_of_K...</a><p>3. <a href="https://en.wikipedia.org/wiki/Self-coup" rel="nofollow">https://en.wikipedia.org/wiki/Self-coup</a></p>
]]></description><pubDate>Tue, 03 Dec 2024 17:49:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=42308941</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42308941</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42308941</guid></item><item><title><![CDATA[New comment by johnfernow in "Humans have caused 1.5 °C of long-term global warming according to new estimates"]]></title><description><![CDATA[
<p>Subsidies for oil, coal and natural gas currently cost us about 7.1% of global GDP. [1]<p>I imagine if we were willing to spend 2 to 5% of global GDP on fighting climate change, we'd also be cutting those subsidies. So in that scenario we'd be reducing government deficits and reducing the rate at which we print money, not increasing it.<p>1. <a href="https://www.imf.org/en/Blogs/Articles/2023/08/24/fossil-fuel-subsidies-surged-to-record-7-trillion" rel="nofollow">https://www.imf.org/en/Blogs/Articles/2023/08/24/fossil-fuel...</a></p>
]]></description><pubDate>Sun, 17 Nov 2024 22:19:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=42167873</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42167873</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42167873</guid></item><item><title><![CDATA[New comment by johnfernow in "Humans have caused 1.5 °C of long-term global warming according to new estimates"]]></title><description><![CDATA[
<p>What you're saying is correct, but I can't think of many scenarios where it's relevant to human actions in the present, with the exception of freight ships' sulfur emissions. [1]<p>For the most part, burning fossil fuels is leading to both air pollution and GHG emissions. Sometimes you can in theory choose an option that leads to less global warming than the status quo but is worse for human health (e.g. burning biomass for energy instead of natural gas, or using diesel instead of gasoline engines), but usually there's an another option where you can reduce both undesirable outcomes (wind, solar, hydro or nuclear energy, electric vehicles, etc.)<p>Even from an economic standpoint I can't think of too many scenarios where clean energy isn't the better option long-term. An EV will have a higher up-front cost but definitely will be cheaper than a diesel vehicle across it's lifetime, and most areas I imagine solar or wind would be cheaper than biomass. Freight ships are the only thing in 2024 where I think we don't have an option that's better in both regards and cheaper -- there we do have to choose between more global warming or more particulate matter harmful for human health. But I think that's the exception more than the rule for human activities.<p>1. <a href="https://www.scientificamerican.com/article/cleaned-up-shipping-emissions-have-revealed-additional-global-warming/" rel="nofollow">https://www.scientificamerican.com/article/cleaned-up-shippi...</a></p>
]]></description><pubDate>Sun, 17 Nov 2024 20:27:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=42166919</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42166919</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42166919</guid></item><item><title><![CDATA[New comment by johnfernow in "Humans have caused 1.5 °C of long-term global warming according to new estimates"]]></title><description><![CDATA[
<p>Right, fossil fuels cause around 8 million deaths a year from air pollution [1], so regardless of climate change it'd be worth making a dent in those numbers.<p>And no, air pollution isn't just a problem in places like India and China, it kills over 100,000 Americans a year and costs society $886 billion. [2]<p>The evidence of anthropogenic global warming existing is extraordinarily strong [3] [4], but you're right, even if somehow 97% of climate scientists with studies published on the matter from 1991 to 2011 and 99% of them from 2012 to 2020 were wrong (in addition to NASA, The European Space Agency, NOAA, the World Meteorological Organization, and the national academy of science (or equivalent organization) of basically every country that has one), it'd still be worth avoiding millions of deaths a year and having established independent energy security.<p>1. <a href="https://www.bmj.com/content/383/bmj-2023-077784" rel="nofollow">https://www.bmj.com/content/383/bmj-2023-077784</a><p>2. <a href="https://www.pnas.org/doi/10.1073/pnas.1816102116" rel="nofollow">https://www.pnas.org/doi/10.1073/pnas.1816102116</a><p>3. <a href="https://dx.doi.org/10.1088/1748-9326/8/2/024024" rel="nofollow">https://dx.doi.org/10.1088/1748-9326/8/2/024024</a><p>4. <a href="https://doi.org/10.1088%2F1748-9326%2Fac2966" rel="nofollow">https://doi.org/10.1088%2F1748-9326%2Fac2966</a></p>
]]></description><pubDate>Sun, 17 Nov 2024 19:50:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=42166577</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42166577</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42166577</guid></item><item><title><![CDATA[New comment by johnfernow in "New Apple security feature reboots iPhones after 3 days, researchers confirm"]]></title><description><![CDATA[
<p>Unfortunately not. Looks like you can set the time (or choose sunrise or sunset), and then you can set it to repeat daily, weekly, or monthly. No option based on inactivity.<p>However, you can set it to shutdown or reboot if it receives an email that contains a specific string in the subject line. So you could have a computer that sends it a shutdown email. You could base it off of inactivity of that computer, or you could have it listen for a cancel-shutdown email, which could be sent by the iPhone when it connects to WiFi (assuming you don't live someplace like a university campus where you're always connected to WiFi even when you leave home.) If the computer doesn't receive the cancel-shutdown email within the set period of time, the computer would send the shutdown/reboot email to the iPhone.<p>However, like another commenter pointed out [1], the action doesn't even seem to work currently as of iOS 18.0.1. If you set it to "Run Immediately" with "Notify When Run" to off, it just doesn't run. If you turn "Notify When Run" on, the action runs, but still requires you to confirm it manually with a tap, which defeats the purpose of the automation. Who knows, maybe a future update will fix it.<p>1. <a href="https://news.ycombinator.com/item?id=42144044">https://news.ycombinator.com/item?id=42144044</a></p>
]]></description><pubDate>Fri, 15 Nov 2024 07:37:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=42144691</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=42144691</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42144691</guid></item><item><title><![CDATA[New comment by johnfernow in "Vulnerabilities of Realtek SD card reader driver"]]></title><description><![CDATA[
<p>"The following OEMs equip some of their laptop series with SD card readers manufactured by Realtek:<p>- Dell<p>- HP<p>- Lenovo<p>- MSI<p>The list may be incomplete. Basically, if your laptop or desktop has a card reader managed by RtsPer.sys, make sure that the driver is up to date."<p>...<p>"The version of RtsPer.sys that is free from all these vulnerabilities is 10.0.26100.21374 or higher."<p>The article goes into depth and shows proof of concept for the following:<p>- CVE-2022-25477: leaking driver logs<p>- CVE-2022-25478: accessing PCI config space<p>- CVE-2022-25479: leaking kernel pool and stack<p>- CVE-2022-25480: writing beyond IRP::SystemBuffer<p>- CVE-2024-40432: writing beyond IRP::SystemBuffer<p>- CVE-2024-40431: writing to arbitrary kernel address</p>
]]></description><pubDate>Sat, 26 Oct 2024 19:35:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=41957134</link><dc:creator>johnfernow</dc:creator><comments>https://news.ycombinator.com/item?id=41957134</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=41957134</guid></item></channel></rss>