Hacker Newsnew | past | comments | ask | show | jobs | submit | bestcommentslogin
Most-upvoted comments of the last 48 hours. You can change the number of hours like this: bestcomments?h=24.

New policy boils down to "AI or not, it's still your code and you're responsible for it". I can get on board with that.

It's ironic how AI companies are re-inventing their own form of privately enforced copyright, lobby the government to ban foreign competitors that don't respect it etc., all while spending the last 5 years fighting tooth and nail against the copyright of the training material they're using.

If you can take any book and turn it into a model, because it's "transformative enough", and "AI learns just like a person does", then surely a model distilling another model is transformative and fair use.

They tied themselves into knots fighting the letter of the law, and now, when they need the spirit of the law - that each creator deserves protection for their work - now we devolve to the law of the jungle. Maybe we'll even see LLM book curses, the way medieval scribes damned book thieves to blindness and worms.


Excellent. From now on all kids will become linux natives. The decade of the linux desktop is coming!

> Personally, I think putting an interoperability protocol implementation behind a copyleft license is a little unfortunate!

Huh, haven't thought of it. Just relicensed ancs4linux to MIT.


Anthropic already banned xAI for very similar ToS violations earlier this year: https://x.com/kyliebytes/status/2009686466746822731?s=46

So this is OpenAI following suit after Musk admitted to distilling their models.

This was bound to happen once Cursor decided to sell itself to a competing model provider.

It'll be interesting to see if Anthropic applies their ban to Cursor, or if that datacenter deal they signed with Musk changes anything.


I think there are two opposite causes here: either an overly-aligned or completely unaligned mental model.

For developers, bug-blindness tends to be because their mental model is so close to the system's model that both have the same blind spots, and the developer can't effectively think outside the system (the classic "QA walks into a bar, orders 0 beers, orders -1 beers, orders 0.999 beers" vs "customer walks into a bar, asks where the bathroom is, bar immediately bursts into flames").

On the other hand, a common way for regular people to interact with a system is they just... don't have a model. None at all. Like, they click a thing and see what it does, and if it doesn't do what they expect they shrug and click something else. The horror of seeing a non-software person using a software system is realising that they usually cannot tell the difference between expected and unexpected behaviour, because they don't really form expectations in the first place. The computer is more genie than machine.

You can see this in the article: "Google Docs added some kind of delay such that the typing you do into the title box right after you open the doc gets overwritten". That's a developer forming a model of the system. The lay alternative is to simply learn that sometimes when you type in a box, the text appears. Other times, it doesn't. If it doesn't, you try again.

You don't need to understand the system if you abandon the assumption that the system was designed to be understood. And, in practice, the widespread plagues of shitty engineering, anti-features, and lack of respect for the user often combine to make that model the more information-theoretically optimal one.

In that sense, the very thing that makes us miserable is our perverse need to treat Google Docs as an engineered product rather than a cross between a djinn and a symbiotic fungus.


A few days ago someone found they were flowing USB descriptors straight into the shell.

https://github.com/omacom/omarchy/commit/9285b19d6a72eba3df8...

Don't use vibecoded distros. It doesn't matter whether they fix this or that, or whether you care about a particular vuln. This is not sensible. It's why you switched away from Windows in the first place, remember?


> People increasingly behave like addicts because addiction is the business model.

I sense my internet addiction got a lot worse in recent years. I don’t use social media, but I consume news, blogs and newsletters - and comment threads - voraciously.

I think the addiction began as soon as I started to work at a desk behind a computer which had internet access - 20+ years ago. Like putting an alcoholic to work behind a bar and thinking he’d restrain himself.

It seems to have worsened in recent years. I’d like out, but the dealers are on every corner.


  > because apparently what we have to offer is worth spending a ton of cycles to calculate the Anubis challenge.
This statement holds the core misapprehension behind Anubis. It’s not a ton of cycles. There is no difficulty setting that would be inconvenient for bots but usable for humans on mobile devices.

I noticed the other day that lists.ffmpeg.org had moved to Anubis difficulty level 6, which takes ~180sec for my iPhone 17 to solve at ~100KH/s, making the site unusable. So I spent ~10 minutes vibe coding a safari extension with a native bridge to an optimized C kernel using ARM SHA256H* instructions that can do 200+ MH/s on the same device. This solves Anubis difficulty level 6 in a handful of milliseconds.

Given the numbers and capabilities involved (a single $5K ASIC miner yields 200TH/s, a million times more hash rate than my optimized kernel running on an iPhone), I don’t see how proof of work could possibly be a sustainable strategy to keep bots out without ruining human user experience. It’s an arms race that can’t be won.

Edit: I encourage you to try this yourself. Here's a sample prompt that ought to one-shot the task:

  > Build an iOS Safari Web Extension that accelerates Anubis proof-of-work using a native C ARM64 SHA-256 kernel. Precompute the invariant 128-byte challenge prefix, search fixed-width decimal nonces with ARM SHA-2 intrinsics and two worker threads, and target difficulty-6 solves under one second. Relay challenges from a Safari content script through the background service worker to native code, then submit the valid nonce/hash through Anubis’s normal pass-challenge endpoint. Include a deterministic benchmark app, correctness tests against CryptoKit, bounded execution, and fallback to Anubis’s stock solver.

A good thing about the "you're the author regardless of the tool you used to produce the code" policy is that if a developer repeatedly submits poor quality AI generated code, one does not blame the model or the agent, one bans/terminates the developer.

> The No campaign fears losing control over Iceland's prized fishing grounds under the EU's Common Fisheries Policy and has vowed never to share the country's waters with anyone. Brussels has indicated Iceland could earn some kind of exemption, but it is considered potentially the biggest obstacle to any agreement.

As noted in the article, Iceland's fishing industry makes up something like 40% of their exports. Which is the only way a tiny island nation can afford essential imports. On top of that, Icelandic fishing is apparently carefully regulated to prevent overfishing, with the result that it is supposedly one of the few truly profitable fisheries in the world.

So maintaining control over their own fisheries may be a survival-level issue for Iceland.

On the other hand, they have a tiny population, no ability to defend themselves, and membership in the fraying NATO military alliance. So I can see why they're debating this issue. Aligning themselves more tightly with Europe doesn't fix their problems, but I can also see not wanting to go it alone.


Did it reduce catalytic converter theft?

> In several cases, the DHS has withdrawn a 1509 summons after it was challenged in court and before a judge could rule on its legality. That may be a deliberate strategy to avoid having a judge rule on the legality of the summons.

They have a toy, they’re increasingly abusing it, then trying to dodge from it being taken away.

The thing is nobody has to comply with 1509 summons, DHS has to go to court to enforce it. A lot of the fault is on a company that complies without just ignoring it.


It's shocking how many comments here didn't bother to read the article. At all.

They're not talking about putting the TV online. The TV is completely offline.

They're talking about plugging the TV into a PC or laptop via HDMI or Displayport (like if you're running an HTPC), which then triggers a companion app update on the PC via Windows Update. This was a news item a few weeks ago with their monitors. They then also discuss a hardware blocker for HDMI or DP to prevent this.

Again, this has nothing to do about the TV's smart apps.


I love HN. Read an article that raises a reasonable point about a project’s license, and that project’s author shows up to announce they were convinced and changed the license accordingly. Repo was updated 5 minutes ago.

It’s things like this that give me hope for the world.


Lawyer here - As i explained last time we had a variant of this thread (see comment history if you are interested), this is a very complicated area that people try to make very simple.

It doesn't have to be complicated, mind you, but right now the way the law is written is basically:

1. Transmitting sports betting info between states is a federal crime unless it's legal in both states (18 U.S.C. § 1084(a))

2. The CEA regulations ban contracts that are illegal under state law (17 CFR 40.11)

3. Other forms of gambling/betting/contracts that are not sports are generally a-ok.

4. This is not a case of first impression, it's just getting relitigated because Kalshi doesn't want to follow the actual law. This has actually been pretty settled law for a long time, with new flareups maybe once a decade. Kalshi is just hoping to be treated like Uber was.

The third circuit's decision is pretty clearly "out there" in terms of existing caselaw.

However, this will end up at SCOTUS, and everything until then just doesn't matter. That will be a coin flip even though it shouldn't be


I may be missing something, but this is exactly what I want as a default. I want the session links there. I see PRs from my coworkers with session links.

I still get to control whether other people can see the session, but I don’t lose it.

I don’t get the “unprofessional” argument. This is attribution. Attribution is professional. If you don’t want it, you turn it off or rewrite the commit messages. If you are having Claude write the commit messages FOR YOU and you are NOT READING THEM then that’s what’s unprofessional. I am honestly kind of shocked and disappointed by how upset people are by this.


The European Commission has far too much power, and answers far too little to the populace. In reality, they want to be dictators.

If you don't know, the unfortunate way thf EU is structured, the Parliament cannot initiate legislation. They can only vote on whatever the Commission puts in front of them.

If the Parliament votes "wrong", the Commission just repackages the idea in a new bill, pulls a couple of dirty tricks, and tried again. They only have to succeed once. See ChatControl for a prime example.

So the EU will eventually require backdoors in encryption. It's only a question of how many tries it takes...


> [...] Let's maybe add a helmet? It could improve riding theme, but may obscure head. Maybe a small cycling cap or helmet? The user didn't ask; can add red helmet? Might be cute. But pelican with big beak; a helmet might obscure. Better maybe no.

> Maybe add sunglasses? no.

> Maybe add water? no.

https://tools.simonwillison.net/markdown-svg-renderer#url=ht...


I had a role, we got a new CTO. This man could not stop wiggling things. Almost from day one. Not just small things but larger things too (let's migrate to a new issue tracker/wiki thing (back when Redmine was popular)). Flipping staff to new focus (eg: moved a help-desk staff to top NetAdmin, replacing Cisco Certified guy, which caused some havoc during an audit). What a mess, just had to put his fingerprint on everything!

Another time we got bought, merged into a new company, their CTO was our new CTO. In one of the initial meetings said "things won't change much" and, naturally, we didn't believe. She moved slow on all the things, methodical. Spent some time with each component team. It was months before we started making changes to better mesh with the new company. Very little chaos. Still admire that management style.


> DbOptions::durable()

> Appended to the WAL without a per-write sync

So… it’s not durable? Durable doesn’t mean “survives a process restart”, it means “durably saved to persistent storage”. For example, this “durable” mode wouldn’t survive power loss.


I think both the OpenAI and METR discussions, while interesting, miss the more important context: what were the humans doing in all this? This was a structural failure of a human organization, but the analysis focuses almost exclusively on the agency of machines, not the institutional systems that failed to police them. The humans and their own agency/involvement is essentially omitted from the story and subsequent reporting. I suspect the omission is actually a result of company/industry myopia to human factors analysis, but it dovetails amazingly well with the marketing narrative.

Texas

> In 2023, the Texas Legislature unanimously passed a law raising auto insurance costs for Texans by $1 to combat rampant catalytic converter theft.

> The Motor Vehicle Crime Prevention Authority, led by a board mostly appointed by Gov. Greg Abbott, has turned the $1 fee hike into at least 3,200 Flock cameras.

More coming. Meanwhile, secure your EV!!! Batteries will be next!!!


Feeling like my Pixel 9 Pro was the best timed hardware buy I've made in recent years.

The 10 dropped the physical SIM slot and Google started with their device tree shenanigans that year, with little to no improvements in exchange.

I've got 16GB of RAM and 512GB in an ecosystem that shows every sign of regressing in capacities due to component price inflation.

Very interested to see what Motorola does next year, however.


From my point of view; I share Debian's perspective:

https://lwn.net/Articles/1091231/

Which is actually why I DON'T like the session amended. Ultimately it is an ad placed into the Git log, and noise at that. Regardless of if it exists or not, the professional responsibility for what is contained in that PR/commit falls to the feet of the developer contributing it.

Microsoft previously did this with Copilot, which was correctly met with a very negative response. I don't see why an ad by Anthropic is better than an ad from Microsoft.


I've spent the last few days adding traps to one of my websites, ironically using LLMs of course, and I've been having quite a lot of fun doing it.

Instead of the proof-of-work system of Anubis, I've gone down the iocaine route but implemented it in my application itself, as it's built in Elixir and causing problems for scrapers is really fun when it takes almost no server resources.

Currently I trick bad scrapers into a fake infinite black hole path with the promise of tasty data, then serve images to them one byte at a time over 15 minutes (after sending the header quickly), bloat the responses to cost them tokens, and randomly return AI generated images of sexy toasters. I have an admin dashboard with a little leaderboard for which ones get the most stuffed, and it keeps my heart warm on these wet autumn evenings.


Just took a train ride from Vienna to Budapest for a few days, and couldn’t help but notice how very, very dry everything is .. as an Australian living in Europe for a few decades now, I’ve always been intrigued by just how green everything is, literally something growing in every single crack in the pavement, or endless rolling green fields of prosperity during spring - whereas, where I’m from its year-long spinifex and grass shrubs and wattles with the occasional bush flower bloom, barely hanging on out in the desert, mostly reds and blacks and greys, not much green - so the vibrancy of European fields and the abundant diversity of countryside flora have always been pleasant to my eyes ..

During this trip, I was kind of shocked that things felt a bit more Australian to my eyes .. the grasses are dry and barren, the beautiful city parks of both Budapest and Vienna dustier than usual, the Danube water level definitely noticeably lower than I remember ever seeing.

I’ve long been encouraging my European friends to not take the abundance of growth for granted, and now we see it in the environment, plain and clear: the worlds’ weather is changing.

A week of sweltering heat is predicted for us again in Vienna, and as we get started on September and then October so close, two thoughts are on my mind: use this opportunity to go for more dips in the Danube, and .. I wonder what the floods of late-autumn will bring, because .. inevitably .. this super dry summer means there will be heavier rains in October. Might be we look back in a month or two and wish we had this dry heat back again, who knows ..

Either way, neither city is particularly comfortable in the heat. A hundred or so years ago, the heat retention was a feature. Now it’s a bug.


Worth noting that TrueNAS recently stopped publishing their build scripts, intentionally making it harder to build their open source code.[0]

[0] https://forums.truenas.com/t/clearing-the-air-on-build-scrip...


Stream deck Steam deck Stem deck

We really suck at naming things...


> They’re smart enough

I worked at a small company that had a policy of putting devs on front-line support in a rotation, both because it was too small to have dedicated support staff and because the owners wanted devs to understand how users interacted with the system better.

I can assure you that while some users merely think differently than devs, there is cohort of users who are absolutely not smart enough. It's impossible to do any amount of front-line support without collecting some horror stories.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: