Hacker News new | past | comments | ask | show | jobs | submit | benwaffle's comments login

Apple chose to implement things like OHTTP and homomorphic encryption when they could easily have done without it. Doesn't that count for something?


Nope. It's still taking the user's data away without informing them, and saying trust us we super good encrypted it.

Apple is building a location database, for free, from user's photos and saying it's anonymized.

It's not a service I want, nor one I authorize. Nor are my photos licensed to Apple to get that information from me.

Encryption is only good relative to computational power to break it available to the many, or the few.

Computational power usually seems always available in 10-20-30 years to generally break encryption for the average person, as unimaginably hard it seems in the present. I don't have interest in taking any technical bait from the conversation at hand. Determined groups with resources could find ways.. This results in no security or encryption.


> Apple is building a location database, for free, from user's photos and saying it's anonymized.

Where on earth did you get that from? The photos app is sending an 8bit embedding for its lookup query, how are they going to build a location database from that?

Even if they were sending entire photos, how do you imagine someone builds a location database from that? You still need something to figure out what the image is, and if you already have that, why would you need to build it again?

> Encryption is only good relative to computational power to break it available to the many, or the few. > Determined groups with resources could find ways.. This results in no security or encryption.

Tell me, do you sell tin foil hats as a side hustle or something? If this is your view on encryption why are you worried about a silly photos app figuring out what landmarks are in your photos. You basically believe that it’s impossible for digital privacy of any variety is effectively impossible, and that you also believe this is a meaningful threat to “normal” people. The only way to meet your criteria for safe privacy is to ensue all forms of digital communication (which would include Hacker News FYI). So either you’re knowingly making disingenuous hyperbolic arguments, you’re a complete hypocrite, or you like to live “dangerously”.


That can also be affected by the supported DRM level. Try safari or edge.


> Quantum Leap plans to run FreeBSD on contemporary laptops as a hypervisor-like solution using Bhyve to virtualize other operating systems, including Linux and Windows.

Are they gonna sell laptops running FreeBSD with a virtualized Windows guest as "more secure" to the US government?


>To be clear, systemd-boot doesn't replace GRUB, in that systemd-boot can only boot other EFI binaries, so it still requires the kernel to be compiled as a UKI. A GRUB setup with a regular vmlinuz + separate initramfs in root partition (or boot partition that's not the ESP) can't be replaced with systemd-boot directly. You first need to switch to a UKI-in-ESP setup.

That's wrong, my laptop right now uses systemd-boot with a vmlinuz and an initramfs, no UKI. See a configuration example here: https://wiki.archlinux.org/title/Systemd-boot#Adding_loaders


Ah yes, I've used it with the default auto-detected UKIs for so long that I forgot about the explicit loader entries config.


Install arch with a couple of different bootloaders and disk layouts, and you'll learn it all. The simplest option is potentially systemd-boot + an unencrypted rootfs.


The simplest is LILO without an initrd


I actually did a ctrl-f for LILO and this was the only comment that mentioned it. Time flies.



Yep.

And you usually get lumbered with some shitty thing like github actions which consumes one mortal full time to keep it working, goes down twice a month (yesterday wasn't it this week?), takes bloody forever to build anything and is impossible to debug.

Edit: and MORE YAML HELL!


> The biggest issue for me is that it increases the attack surface

What's your threat model?


> What's your threat model?

Why do you ask, will you help with designing a mitigation plan?

I'll humor you: It's a turnkey gadget for sniffing/exfiltrating the output of any open iTerm2 shell.


Because you’re already using other software that has LLM integration. What specifically about this iterm2 impl makes the threat more real??


> Because you’re already using other software that has LLM integration

Oh really, which software would that be? And which other LLM-enabled software connects production environments or has access to auth credentials/tokens?


How do you know what other software they are using?


Is someone not using GitHub these days? Or web search? Or macOS? Or Windows?


I use GitHub, I don't use its copilot.

I use web search, I don't use LLM websites.

I use MacOS, I don't use Siri.

I use Windows, I don't use Cortana/Copilot.

------------------------------------------

I don't want LLMs to parrot back code from other projects without understanding what that code does and what my code does. I don't want it to parrot back irrelevant slop.

And I especially don't want it to parrot:

rm -rf $BUILDDIR/ && ./build-project.sh

and just hallucinate the assumption that $BUILDDIR is already defined.


But GitHub doesn't ship copilot as a separate binary. So the threat vector of “AI has no place in my VCS get it out it increases the surface area” is there. So it’s okay for github to have copilot but not iterm2 to have codesierge? Doesn't add up.


Github isn't a binary, it's a repo host. Github can hallucinate whatever it wants, it's not going to brick my computer.

A terminal on the other hand...


The point here is about compliance. I agree it’d be stupid to pipe the output of an LLM to a terminal’s command line. But people are saying they can’t use iterm2 now because compliance says no AI and having an mdm-secure way to disable the functionality is not enough because _there could be a bug_ or something. Yet they’re checking commits, in presumably the same compliance regime, into other software with AI features.


Github doesn't come with Copilot, even on the enterprise plan.

You have to explicitly pay for it and add it to your repo.


We've got a one-liner for spinning up your own ollama UI. See https://github.com/fly-apps/ollama-open-webui


Oh snap thank you!


I use it to clear my scrollback buffer. It makes it easier to search any new output.


There’s probably a hot key in your terminal emulator to do that. Fewer buttons to press, so even quicker. ;)


Sadly there isn't on Linux. There is on Mac - Ctrl-K. But for some reason nobody on Linux has realised how useful it is. It's actually even better than `reset` because it works at any time.


I think you're conflating SHELL with TERM because the OS has nothing to do with what hot keys your terminal emulator supports (the OS wouldn't dictate hot keys available for shells either, but popular Linux distros don't tend to default to Zsh like macOS does).

A terminal emulator is the software application you use to bring the command prompt up. So a terminal emulator is operating system agnostic.

Granted there are some macOS only terms out there like iTerm2 and Apples own Terminal. Just as there are terminals that haven't (as far as I'm aware) been ported to macOS, like xterm. But there's plenty of cross platform terminal emulators too, in fact most are cross platform.


I'm not conflating anything. On Mac you can press Ctrl-K in any terminal emulator and it will clear the terminal and scrollback. On Linux no terminal emulators support this (except Kitty it turns out - as mentioned in the other comment).

Sadly Kitty is very bare-bones. Not really for me. And I can't choose to use Kitty in VSCode.


Konsole supports Ctrl+Shift+K by default, and you can change the keybinds. Don't confuse Gnome with Linux.


> Sadly Kitty is very bare-bones.

Care to elaborate? I had an impression that it's a pretty complete piece of software. I've been driving it daily for more than 1½ years, and I'm pretty happy with it.


Well the first two things I tried that are present in pretty much all software - scroll bar and Ctrl-F to find, did not exist. There's no menu bar at all in fact.


> scroll bar

I didn't even realize, I don't see a need for it anyway.

> Ctrl-F to find, did not exist

That's because Kitty has something much better:

> Sometimes you need to explore the scrollback buffer in more detail, maybe search for some text or refer to it side-by-side while typing in a follow-up command. kitty allows you to do this by pressing the ctrl+shift+h shortcut, which will open the scrollback buffer in your favorite pager program (which is less by default).

> There's no menu bar at all in fact.

Which is a big plus. Emacs has a menu bar (and a toolbar), and I obviously turn them off, because they take up screen real estate.


> ctrl-shift-h

Ah yes, the logical shortcut for "find" (enormous face palm).

Why do so many open source devs find sane UX so hard? It's a bit weird.

(And yes I know it isn't exactly the same as "find" - it that is your instinctive response then you're misunderstanding how UX works.)


That shortcut opens HISTORY, hence it is ctrl+shift+H. And if the terminal emulator used up ctrl+f to implement find, it would mean that no terminal program could use ctrl+f to implement find. Maybe next time before you try to imply other people dont know UX, pause, and consider if you know what you are talking about. Incidentally, using the term UX itself, generally is a good signal that the person that is using it doesnt have a clue what they are talking about.


> And if the terminal emulator used up ctrl+f to implement find, it would mean that no terminal program could use ctrl+f to implement find.

Gnome Terminal sensible uses Ctrl+Shift+F to get around this. Kitty... does not.

> Incidentally, using the term UX itself, generally is a good signal that the person that is using it doesnt have a clue what they are talking about.

Of course you think that.


And ctrl+shift+f is the same as ctrl+f for you? The point of using "identical" keybindings is to ease discoverability across programs. ctrl+shift+f and ctrl+f are not identical and therefore there is no point to doing that.

And pretty much anyone that has to deal with internet commenters using the term UX thinks that, not just me.


Ctrl+Shift+F is commonly "find in all files" so it's a logical shortcut to try. In addition, adding Shift to a shortcut to get around this exact problem is also common. For example Ctrl+Shift+C/V are common copy/paste shortcuts in terminal emulators on Linux.


> I'm not conflating anything.

I said most terminal emulators are cross platform and that hot key isn't an OS dependant thing. You then reply with:

> On Mac you can press Ctrl-K in any terminal emulator ... > On Linux no terminal emulators support this

which not only contradicts what I said, it also misunderstands how terminal emulators work

> and I can't choose to use Kitty in VSCode.

So the issue is VSCode doesn't support ctrl+k? that's very different to the statement you opened with


alacritty supports scrollback clearing



Is this an instance of that meme where people insult Linux to get better technical advice?


Logging and tracing have this problem too.


Wide events described in this article seem to equal structured logging but a more loose dumping ground. So yeah to an extent it has this problem, just more so.

How does tracing? Are folks adding PII to spans? I suppose you could but I'm not sure why.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: