Hacker Newsnew | past | comments | ask | show | jobs | submit | fooker's commentslogin

Fun fact - on most Linux distros any user program can see almost any event, yes including key presses, by reading from the right /dev/... file.

This is not surprising. The desktop Linux community reacted with hostility to the well funded security efforts (selinux, apparmor, grsecurity, etc)


Do you have any source for that claim? That would be a pretty serious security issue even unrelated to any security hardening (eg. on a multi-user system, one user could read out the password from another user — even with desktop usage, second user could be SSHed in).

As a datapoint, everything in /dev/input/* is owned by root:input on my Debian Bookworm install, and my main user is not a member of the "input" group either.

Biggest problem with most security hardening for Linux desktop is that it breaks the natural usage pattern: I store my files by their content, not by their format (eg. I might have a folder for my project containing image files, spreadsheets, FreeCAD files, maybe even some code or TeX/ODF files). If programs are restricted to access the entirety of my $HOME though, there is not much benefit to that protection since that's where my most valuable data is. If they are restricted to per-program folder, I need to start organizing my data differently and unnaturally.

Android mostly does not use the "files" metaphor and basically does exactly that (per-app data): coming up with a security model and file management UX that does both is where the challenge is.


Security is a tradeoff (fucking always...)

It's the same reason I choose to keep my front door unlocked basically all the time - I know my neighborhood, the risk is really low and the convenience is high.

Further... practically everyone agrees that they don't need bank vaults as front doors. It makes zero practical sense: The cost is incredibly high, and the convenience is very low.

There are ALL sorts of wonderfully cool things you can do on a system where applications are allowed to trust each other, and the system is permissive by default.

You can customize behavior more easily, you can extend software more easily, you can add incredibly detailed & functional accessibility support, you can create incredibly powerful macros and commands.

This is so important that fundamental OS design from the early 90s actually prioritized and catered to exactly this style of open, trusted, platform (ex - all of COM in windows...). This is what made personal computing a reality...

All of those fall flat when you try to impose "well funded" security efforts.

Those efforts have a place, in the same way that bank vaults have a place. Whether that place is a personal computer is a different question.

Implying those folks are hostile for no reason is... at best a woeful misunderstanding of the situation, and at worst a malicious mischaracterization.


Ah, but did you know almost all the rich Nazis got off silently without any fanfare?

https://www.theguardian.com/books/2022/may/18/nazi-billionai...


The whole fanfic ecosystem is quietly dying now.

Everything new is AI slop, and there seems to be no coming back from it.


but the slop will likely better as models improve I guess

Or worse as the models try harder to avoid generating copyrighted stuff

What you described works when you have small repo with a few developers.

Unfortunately the trend nowadays is towards giant monorepos with many many people changing random things.


Any American within a good distance of a large city to mitigate latency issues can make about 4-5x driving for Uber or delivering food.

And latency to small towns in the middle of nowhere is not significantly better than latency to Philippines.

You can expect something in the ballpark of 70ms in both cases.


Not realistic but a remote work Uber driver is kinda an interesting (if dystopian) concept.

I'm semi-seriously expecting remote-work Optimus driving to be a thing in the near future.

Well, more so than it already is.

A factory in the US* staffed entirely by humanoid robots has the same impact on US employment opportunities regardless of if the robots are controlled by AI in the sense of software or in case where the "Actually Indians" meme still applies.

It's just that in the latter case your "illegal aliens" who are "stealing our jobs" are managing to do so without actually crossing the border, making it very difficult to deport them, and denying them access suddenly becomes a freedom of speech issue.

* I'm in Europe, I don't think we'll be tolerating "new" "exciting" "opportunities" from Musk any time soon. I don't think China or Russia will be either. Or indeed more than half of the G20 nations. He'll be told to prove it, and get told "no" a lot because experiments based on his rhetoric and vision are no longer worth the downsides without solid proof both that it works as advertised and that he won't cut things off when he has a hissy fit.


> Look at Reddit after the API switch up

Market cap is half compared to all time high, and having old organic data that LLMs want to be trained on is saving them right now.


This makes sense.

We'd be seeing a lot more supernovas in the night sky if all/most stars had to go through one.


Only stars significantly bigger than the Sun go through a supernova explosion, and such big stars are a small fraction from the total number of stars.

Moreover, the rate of seeing supernovas depends both on the number of stars that can become supernovas and on the lifetime duration for such stars.

Therefore, even in a hypothetic world where all the stars could become supernovas one might see a very small number of supernovas if the lifetime of stars were great enough.

Thus the frequency of seeing supernovas is not sufficient for any conclusion, without taking in consideration the proportion of stars susceptible to become supernovas and their average lifetime.


> bring over Christianity there

Yes, this covers about a thousand years of European history.

It's funny to see people pretending not to know the history of spreading Christianity and subsequently colonialism.


>pretending not to know the history

What are you referring to in the parent comment? It sounds like you're agreeing with them, but this antagonistic part is mysterious.


> plain old Nazis kicking around, holding offices and passing laws

This happened everywhere, to an extent that is genuinely surprising to me.

Pretty much every German company and government position post WW2 is in this category. And funnily enough, a good number of American organizations.

Chile's president is the son of a Nazi.

Japan went on operating business as usual except for the invading China part.


Supporting a fascist country bombing the Gaza Strip into oblivion ends up fucking your morality. We are seeing a lot of the west be very comfortable with fascism post 2023.

That works great when everyone has resources to pay for things online.

In practice, this cuts of 80% of the worlds population.


Oh you mean we can reverse the eternal September? Sign me up! Gatekeeping is good, actually! The “let people enjoy things” crowd is responsibility for facilitating the mass enshittification of everything.

Catering to the lowest common denominator is how we got the Burger King guy on spirit airlines.


Why are you commenting here instead of a website that gatekeeps commenters?

"You criticize society, yet you participate in it".

I have and do pay for website access. That doesn't mean much if the current model flocks to no paid services.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: