Hacker Newsnew | past | comments | ask | show | jobs | submit | happyopossum's commentslogin

> Most people don't have lidar phones

the most popular phones in the US (iPhone pro max and pro) have had lidar cameras for the past 6 models...


Some quick googling suggests that in the US, only 60% of people have iphones, and only 50% of iphones in use are pro or max. I would guess that HN skews towards more recent and higher end phones, but also skews towards android. Maybe saying most people don't have lidar is inaccurate, but I think it's still accurate to say the majority of people don't have lidar.

Most people don't have lidar phones. The statement is still very true, even if you said US only. What are you trying to say?

Bristlemouths are a family, made up of 32 distinct species. The question is dominant species...

Fine, you want a species? Cyclothone alba, circumglobal, possibly in the high trillions [0].

[0] https://researcharchive.calacademy.org/research/ichthyology/...


He is actually still probably right.

If we say the fish is 2cm wide and 7.5cm long (average length according to wiki) That's 23cm^3 Assume the fish is neutrally bouyant so it's 1g/cm^3(I know deep sea pressures change density, but let's just go with this)

1 quadrillion*23g= 23 trillion kg

So like... 1/32 of that is still around 100x bigger than the trees.


That seems dubious, trophically. Whatever the prolific bristlemouth species eats would then likely be the greater biomass species

Copepods and a variety of other things like molluscs and small fish, not necessarily just one species. Of course, as you point out, the fish must have more food biomass than themselves, but it is not as concentrated (high density of one genus) in the lower trophic levels.

> hundreds of thousands

Not to take anything away from your point, but TFA said hundreds or thousands - not hundred of thousands. Couple orders of magnitude of difference there…

You’re still spot on - even thousands of agents working on a single codebase would mean hundreds of humans directing them…


> protect things on your computer from being accessed by you

This has nothing to do with your access to the disk and everything to do with 3rd party deceiving unhindered access to everything about your life because you installed something like Muse.


Would it really be too much to just allow the user to grant the permission that they want? You already have to jump through special hoops for full-disk access, and there's ALREADY a big warning at the top, explaining that it grants access to things like messages and such.

> Of course, my generated password is longer than 20 characters

Ok, yes - an undisclosed max length that doesn’t throw an error is horrible, *and this is entirely Vanguard’s fault* but what’s with the “of course”?

There’s virtually no reason to use a randomly generated password that long, and there have been more than enough stories, anecdotes etc about sites failing on long passwords that throwing an “of course” here is a little overboard.

A high entropy random password with 62+ potential characters before including “special characters” with a length of 16 characters is basically un-bruteforceable. It would take 4.6 billion years to brute force at 164.1 billion guesses per second, and vanguard (or anyone else) is gonna notice if you try the 4.77 × 10^28 possible combinations.


You are right about high entropy short-ish passwords but almost nobody does that. Virtually everybody chooses something not just low entropy but often easily crackable with good search heuristics. Why not give people another way to produce passwords that are harder to crack? With luck, at least a few people will choose a correct-horse-battery-staple.

It costs me nothing to use a 20+ character password. The questions isn't why should you, the question should be "why shouldn't you?"

1. For whatever reason, and a reason will come, typing out those extra characters will be an extra pain.

2. Stupid choices by services (like Vanguard!) making those extra characters a liability.

3. What are you protecting against? Even 16 characters with ~60 combinations is more than enough entropy.

4. It’s just cumbersome. And that, frankly, is the reason why the question is “why should you?”


> For whatever reason, and a reason will come, typing out those extra characters will be an extra pain.

The possibility of having to manually enter a password is actually why I used to want very long passwords to be allowed.

Say I have a streaming account, which I use from my desktop and maybe my phone or tablet. I never have to enter it manually on those devices because my password manager runs on all of them.

But then I want to use that service's streaming app on my TV. Nowadays most services have figured out a way for you to enter your credentials on their website or in the app on your phone or tablet and link that to your attempt to set it up on the TV, but back in the day most did not.

What we had to do back then is manually enter the password using the on-screen keyboard on the TV, navigated using the up/down/left/right buttons on the remote.

Worse, any time your password switched between symbols, numbers, lower case letters, and uppercase letters you needed to press some kind of shift key.

If long passwords were allowed I could pick a password that only uses say lower case letters from a small group that are right next to each other on the virtual keyboard, like qawe, and make up for the small character set with length. 40 random characters from qawe is 80 bits of entropy which is fine for a streaming account.



My 1password actually generates 4 random words with symbols and numbers as delimiters. A generated password is often ~24 characters.

Many do - teslas, ford lightnings, Kia ev9, all the GM Ultium stuff (Silverado etc, hummer ev, Cadillacs), and a bunch of others.

Isn’t Tesla V2G just for Cybertruck?

If they were real labels the charge wouldn’t be Counterfeiting.

They can still be real tracking numbers, but faked labels. USPS used to let a lot slide but they've definitely gotten more aggressive with catching packages even slightly out of spec of what the label was for.

> im pretty sure sites like this operate by getting stolen credentials to third party shipping sites

If that were the case the charges would be fraud and the victims would be the companies that paid for the postage. The charge of counterfeiting is pretty specific - if I steal a $100 bill from you and spend it I don’t get charged with using counterfeit money, I get charged with theft.


That’s retconning at its best - there was no support for 3rd party apps then, just websites.

That's the point, in the beginning there were not supposed to be native apps, just web apps, some of them advertised in Apple site but not otherwise privileged.

The point is that customers who bought an iDevice knew in advance that they were buying into a walled garden ecosystem with a web browser.

It was Google that lied to the public about Android being an "open" ecosystem that allowed you to do anything you liked without interference.


CARES is for a completely different group of kids than TFA - infants vs small children...

Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: