skysight-inc/HackerNews huggingface dataset:
> A syncserver is the only way to access firefox mobile history, as its api (browser.history) is severely restricted or unavailable. So short of rooting your device to directly access places.sqlite, there's no alternative.

What I'm pointing is that in previous versions, Firefox ITSELF used to allow setting an arbitrary WebDAV server as "sync server", and STILL sync history, tabs, whatever the heck you can think of. https://arstechnica.com/information-technology/2010/02/mozil... . It is much later that the option to use a plain WebDAV server disappeared from Firefox Sync, and also later that the option to set your own E2EE key also disappeared (and forced to use the login pw instead, making it easier for Mozilla to capture). The "restriction" you are pointing out is entirely Mozilla-made. All in the name of user convenience of course.

Again, why is anything other than a dumb storage server required, considering than previous versions used to be able to do it with just a dumb storage server ?
This, but here are some things I've learned to do:

* Use a .local directory under my home directory instead of ~/bin. That's a great prefix when installing from source or tarball at the user level, keeps the top-level of the home directory from getting cluttered with /share /lib /include /etc /lib etc. etc.

* Reach for the package manager first when installing new software, unless there is a good reason not to. It makes keeping things up-to-date easy, and since I use Arch, which uses a rolling release, you pretty much get the latest stuff.

* If I can't get what I want from the package manager, I'll look at what is available using asdf-vm (https://asdf-vm.com/), and failing that, build from source or install from tarball.

* I don't use snap or the like.

I gave up on Windows over 20 years ago, and I can't say enough how liberating it has been. One of the nicest things is that there is a distro for almost every need (see https://distrowatch.com/). I use Arch; but your use case may point to a beginner-friendly distro, such as Mint, Ubuntu, etc., or a repeatable install type of distro, such as NixOS or Guix, or many others.
I suspect most people take the best job they run across randomly, less so have a huge range available to them.
That sounds like a prejudgment. You say Russia would have done this regardless of NATO's actions, but you don't know that. And you're downplaying the importance of NATO's actions and it's influence on Russia's actions.
Anil Dash - Understanding DOGE as Procurement Capture

https://www.anildash.com//2025/01/04/DOGE-procurement-captur...
Why do you feel the need to be so rude about an interesting little blog post?

Obviously you don’t need an LLM to prettify obfuscated JavaScript. But take a look at the repo. It didn’t just add the whitespace back — it restored the original file structure, inferred function and variable names, wrote TypeScript type definitions based on usage, and added (actually decent) comments throughout the source code. That simply isn’t possible without an LLM.
I'm curious about this too. AFAIK the most recent leaked Cellebrite docs indicated that GOS can't be broken into, and I dunno how iOS could be more secure than that.
But some URLs will still be on "live.com", others on "outlook.com", others on "sharepoint.com", others on "msbinbows.com", others on...
I agree. I think Macron's proposal for a tiered EU membership model might work as well - give some states the unified market and contracts enforcements, give other states that plus unified military posture under a single command, give other states almost complete devolution of powers to the EU

> that can call upon its French or German division to take certain steps that those divisions cannot refuse

A major additional issue is national constitutions as well. For example, Germany's constitution doesn't allow an expeditionary force outside of NATO territory, which pisses off France and Netherlands because they both have dependencies outside of NATO that face pressure from China (French Polynesia, Mayotte) and Venezuela (Dutch Antilles).

--------

And the question of Turkiye remains, becuase it's the only NATO state that has direct combat experience against Russian forces (Libya, Syria, Nagorno-Karabakh in 2016) and mass deployment.

Turkiye needs to be integrated as part of the EU's structure, otherwise the EU will continue to lack the heft needed to defend itself.

But Greece, France, and Cyprus will continue to veto Turkiye because of North Cyprus (Greece, Cyprus) and business+geopolitical conflicts (France)

Ironically, Germany has been quietly receptive to including Turkiye in the EU as German businesses and MICs are closely aligned with Turkiye.
What you call “monopolistic behavior” a senior/lead engineer with a brain will see as ecosystem compatibility. If you are working within an org that already uses Microsoft for everything, why the hell would you bother introducing a new stack everyone else will have to learn rather than use the Microsoft offering if it’s competent enough? On top of that, the Microsoft product will most likely work nicer with other MS products. Same reason people buy iPhones and Macs and stay in the apple ecosystem. Yeah it’s not as hip and exciting but enterprise development is rarely hip or exciting. At a startup not already using MS products, yeah no shit you can use whatever you want with little to no considerations for compatibility within the stack, especially when your main goal is cost savings.
HIV/AIDS deaths likely to soar after USAID promises broken
Which ones? I’ve had exactly one problem with Firefox lately (one component didn’t work on LinkedIn).
Before the election, everyone on HN was telling me that we live in the best economy ever and we're in a "vibes recession" where ignorant Americans can't understand how impossibly good things are. Now that it's less politically salient, everyone can just say true things. I wish every subject were like this all the time.
Sounds like you might have absolutely no idea how to create a prompt for an LLM. Telling it to stop is just creating a spurious prompt, lowering the quality of your interaction for no gain.
I think the difference between electrical work and software work is with electrical a lot of those standards don’t really change from year to year outside of some code updates. Wiring a wall socket or moving a socket around has been pretty much solved for decades. maybe a different kind of outlet that is a little more safe or some exception about sockets near a sink.

Versus software I were there’s hundreds of different outlets hundreds of different wires tens of different storage mechanisms. Now if the LLM is even slightly unsure, it will hallucinate leading to a mess when things go wrong that the user doesn’t know how to fix

Then an actual expert will have to come in and try to understand what went wrong, which adds additional time than if it was just built right the first time
I kinda understand it if a developer actually wants DRM. But why does my bank care to use it? I'm not likely to pirate my banking app.
I had 3 courses of material science at university (30y ago) and back then the theoretical models where nowhere: being within 2 orders of magnitude of reality was already a success. Engineers would just build a big formula with plenty of constants that allowed the formula to fit reality.

Last year, my son had a course of material science at university and beforehand he did not believe me about how clueless we humans used to be back then. Turns out nothing has changed.
There is no angle here that makes much sense to me. If human drivers are needed, net wages will still need to be comparable to Uber. And I don't think a "blame the driver" liability scheme will work in court.

My sense is that most ride share drivers already underestimate their actual mileage costs so Tesla will be hard pressed to significantly out-Uber them (or Waymo) and make tons of money from a self owned fleet.

The P/E ratio for Tesla stock is currently around 140.

The P/E ratio for Tesla's established competition (auto manufacturers, ride share, etc.) are all well under 20. GM for example currently has a P/E of 8. Uber has P/E of 17.

Tesla's share of global personal auto sales was about 2.5% last year but recent reports suggest a significant decline is underway amid increased competition from all sides.

https://worldcrunch.com/business-finance/tesla-sales-down-eu...

By any reasonable marketplace scenario --- either as manufacturer or yet another ride service provider --- Tesla looks way, way, way overpriced based on current or projected earnings.

The stock market goes up like a staircase --- one step at a time. It goes down like an elevator --- controlled freefall. The elevator is waiting for Tesla with the door open in my opinion.
I don't think the average American knows about what tariffs USA has against Thailand.

I think they feel cheated because they are told to feel cheated.
The source is that information is the CEO of SpaceX.
If you look at recent American history you will see this pattern has roughly already played out.

If a main part of your platform is that government sucks, you have no incentive to un-suckify it. Starve the beast.
Exactly why monetary donation from EU is useless in battle field. Ukr could buy weapons with that money, sure but what if no one is selling?

Without US, EU cannot fulfill Ukrainian needs with their current arsenal.
App developers are going along with it because many of the third-party ROMs so insolently take the view that a user's device should serve the user.
I agree, but we're essentially asking for a unicorn for each of those favors. Just getting one of those done with the current societal setup could easily be a decade+ of very heavy campaigning. I'm not convinced I'll see all 5 in my lifetime, and I'm not super old as is.

It is more possible now than ever though with unprecedented communication. But to paraphrase Warren Buffet a bit: "We (the rich) are a lot better at this and we're kicking your ass right now". Imagine if we could have even a fraction of the youth anger from Tiktok aimed at such issues above.
How to the ground work was laid leading up to trump getting into office deserves a documentary. He just had to say some memetic/populist words that had been unadressed/supressed/agitated for years leading up
Press on Vinyl are able to make there own masters. Can you clarify what you mean?
> The mere act of asking for help isn’t disrespectful.

I agree but that’s not what happened. Watch the whole event, if you haven’t. Because snippets don’t do justice. And I’m not going to rewatch it just to reply to you. But you’re really misrepresenting what went down. It’s fine if we disagree over what is disrespectful. But I think you can at least admit, if you watch the whole thing, how his behavior can be interpreted that way even if you personally don’t think it merited the response it got.
I can't imagine Google doesn't know about the techniques Graphene employs or how to enable them themselves. What are the downsides to offering these mitigations? Is the performance impact of zeroing freed memory that high? Does offering a setting to block USB devices by default impact the user experience that badly?

I kind of want to try GrapheneOS but because unlike other ROMs they care about security and not so much compatibility, most root-avoiding/ROM-block-avoiding features just aren't available on it.
With a synthetic ETF you are not actually buying the titles of the index. There is a swap with a bank that guarantees you the same earnings as the index. Why would a bank do that if they cannot outperform the index?

I'm just a layperson, so I might be wrong in some way that I don't understand
This voice chat is so realistic, I’m left speechless.

“Her” is here.

They will open source the weights under Apache2:

https://github.com/SesameAILabs/csm
I've just recently switched to GrapheneOS and I must say it has been very convenient. That is, coming from the hassle of flashing LineageOS to Samsung devices.

Obviously, buying a device and using it as it is will always be the easiest path and I would have recommended Apple to anyone looking for this until this week, when Apple pulled the E2E feature from British phones.

So GrapheneOS is the only reasonable option left that I know of.

Installing sandboxed Google Play (no sideloading needed) from the Graphene App Store is a breeze by the way. It's right there after installing the OS.

And Pixel devices don't try to keep you from replacing the stock rom, you don't lose your warranty doing it. And there is a browser-based installer that gets rid of the need of using command lines.

Klickibunti, as German GUI-defiers would say.
I wish people paid this close attention to federal workers and their agencies all the time.
“Yet you participate in society. Curious”
GrapheneOS team has done an amazing job building a rock solid OS for mobile. But because it does not have the feature you need, doesn't mean it's useless for rest of us. I use it everyday for it's privacy and security features. Your argument is really weak. What does cloud backup has to do with it protecting from zero days?
I really hope these modems will come to MacBooks.
I would implore that you just write a blog post or two (or three) instead, but it is your choice of course.
Ask HN: AI tool to convert videostream of slideshow into original slide quality?
Is there an AI tool that can process a video stream of a slideshow and turn it into looking like the original slides, preferrably with the original slides as a guide (to correct coloring artefacts from lighting etc)?
Everyone who still works for US goverment, agrees with Trump!
This is very well said. Every time the subject of smartphones comes up, people will claim there are workarounds to the privacy, security, repair-ability, or usability issues. These arguments have some merit, but these workarounds are almost always very fragile, tenuous, and completely out of reach for most normal users. If you come to rely on these workarounds, you'll be playing a game of cat and mouse for years as Google and Apple find different ways to indirectly ruin your workflow.
It's tricky.

On the one hand, everybody seems to agree that countries should reduce their debt.

On the other hand, everybody seems to complain as soon as costs are cut.
TL;DR. Wine (the windows emulator) is about to get more contributors to it than ever before. How can people miss the gold at the bottom of the post. Heh.
> If by "resolving" a war you mean forcing the victim into a surrender and making the agressor a victor than sure.

What other option is there? In all options, Ukraine loses territory in order to stop the fighting. NATO is not going to escalate with Russia, so clearly Ukraine won't be kicking Russia out.

And even if Ukraine did kick Russia out, then what? Russia can just invade again a year later. Is this just an endless war? Is the West going to pay for an endless war?

Seems like the better approach is for Ukraine to get the best deal with Russia they can.

> You seem to forget the obligations the US has when they signed (and made Ukraine sign) the Budapest memorandum. In which Ukraine gave up the world's third largest nuclear arsenal in exchange for protection of their sovereignty. The US since 2014 (invasion of Crimea) failed to uphold their part of the deal.

The US had an obligation not to expand NATO to Ukraine, but hey, here we are.
To be fair, lots of "actual" programmers who don't know good from bad have been shipping insecure code to prod for decades.

AI is just another vector for this, not something entirely new.

When you have your amazing idea, instead of hiring an inexpensive low-skill developer (whose work you are also incapable of evaluating) to build and ship your idea in a low quality way, you're just paying AI to do it.

It's just putting they money into different (centralized) pockets.
I mean sure but is that possible for OS builds? Generally you will generate a private key, get a cert for it, give it to Apple so they sign it with their key and then you use the private key to sign your build. I have never seen a guide do a two level process and I am nof convinced it is allowed.
> get over the bump

You call learning, making mistakes and fixing them, and improving "a bump"? That's the whole point.

> That’s necessary for learning

You haven't learned anything in the end. I read a lot of programming books in the past thinking I would be a computer god at the end, and I realized I learned nothing because "I did nothing" exactly like what we have with ChatGPT.
What is important that it works for you. I think it is good that more users can solve their own problems.
PotPlayer added AI-generated subtitles like VLC in December 2024
File Explorer on Windows 7, and Windows 7 in general, provided a far better (and faster) user experience. It's been downhill since then.
VkQuake – a cross-plaform Quake port in Vulkan
For one, Google would have access to less telemetry for ad purposes.
I think this idea, and AI in general, really scares a lot of professional programmers, but this is the world we live in now. You can't spend too long denying the impact of AI on writing code.

The ability to adapt to a changing world is one of the most useful skills you can have.
You blame the Deep State
Oh, I've tried captchas, and I can say that they're an awful experience for the humans you accidentally hit, at least for a service like mine that is relatively low value per session (a dictionary website). Within minutes of changing my WAF configuration to captcha users that it thinks are high-probability bots, I'll get angry feedback from users in Singapore (say) who don't want to have to solve a puzzle in order to look up a word in the dictionary. I don't blame them.

I like the Cloudflare challenge ideas suggested on this thread, though, I might try them again.
then you missed the gold at the bottom....
This is such a shallow take. There is little learning involved in setting up GrapheneOS, especially if someone a little more techy lends a hand. I'd argue I need less of my tech background and run into far less hiccups than my typical linux desktop install experience. What's especially frustrating about this, is there's no need to sideload apps, or anything you're implying. I can use any cloud backup app I want, there's a built-in installer for a sandboxed Google Play Store, and generally you have almost no discernible usability differences vs stock.
As of now, such stricter certificate requirements only apply to publicly trusted CAs that ship with the browser. Custom-added CAs are not subject to these requirements—this applies to all major browsers.

I haven't tested Firefox's implementation yet, but I expect your private CA to continue working as expected since it is manually added.

Private CAs can:

* Issue longer certificates, even 500 years if you want.
Public CAs are limited to 1 year I think, or 2? I think it was 1..

* Can use weaker algorithms or older standards if they want.

* Not subject to browser revocation policies - no need for OCSP/CRL etc.

* More things that I do not know?
Destroy every agency and privatize them.
They have the MC-21 under development as well, though not much information seems available.
You can always click the 'hours ago' thing on greyed comments to read them.
> basic features like cloud backup/restore

Cloud backup/restore work fine (well, kind of fine; they should stop with the stupid restrictive list of supported backends).

They just don't happen to support Google's cloud, because Google is untrustworthy.
Yet stuff like CalDAV which is used by millions transparently handles syncing on top of WebDAV (arguably not just dumb storage , but not much better than it). Not only that, but Firefox Sync _itself_ used to be WebDAV.
It's not tricky at all. When you're the richest country in the world and you have a lower than average tax rate, there is one very simple trick that gets rid of the debt problem.
If we should call things what they are, we should definitely start by calling Americans who emigrate to other countries what they are: immigrants in the other country. Of course most choose to cutely refer to themselves as "expats".
Claude Code Reverse Guide
> Accenture, IBM and other big companies have employed vibe coders for years.

Having worked in a few codebases/projects by these companies (and some other "big name" consultancy companies in this same "space"), I cannot imagine copypasta from Claude/Copilot would be anything other than a massive improvement.

What companies have paid these firms to do is nothing short of appalling, and I'm not even referring to the notorious Hertz lawsuit, just the average run of the mill junk.
I think the complaints are more to do with how it's being done.
Ketamine is a terrible drug that rots your brain.
> specialist equipment is needed to cut a record

I remember there was a Soviet practice of cutting records into old XRays (called "ribs") as a way to bootleg them. I think those cutting machines were made from retrofitted old phonographs.
This is the most mealy mouthed disclosure ever. Shame on them.

How can an employees 2FA misconfiguration lead to someone else accessing these repos? 2FA setups are supposed to prevent this sort of thing. If I had to guess it was someone on the “devops/sre/infra” team that usually has god mode access that were setting up some integration and disabled 2FA for testing or something for a test account … but it would have had to be disabled for a while for the attacker to get access.

What kind of customer data were they storing in their repository? Were they storing raw webhook data/API responses in github gists or something (wouldn’t put it past them).

As a sidenote, Ive worked with folks from zapier and Im not impressed with their engineering. Their integrations are super fucking brittle, its like it was designed by toddlers. I would not depend on them for any kind of business critical functionality.
Isn't this just another version of low coding except we are using AI?
Vibes coding.
Google is afraid of small performance penalty. GrapheneOS offers knobs to control compatibility. You can always turn off individual protections, in case an app could not function under default settings.
> What if I did (understand)?

I think its pretty clear you don't.

> What if I knew a thing or two about it, even some lesser known details and side-effects?

Then you would explicitly mention them instead of alluding to them.

People who know what they are talking about actually bring up the things that they are concerned about. They don't just say, i know an issue but im not going to tell you what it is.
SpaceX is missing its milestones. Boeing is missing its milestones. Why not both?
That is helpful, thank you! I will check it out.
Last year Ukraine wasn't particularly worried the US would cut off military aid, Romania wasn't particularly worried the US would paint it as a poster child of failed democracies, and Denmark wasn't particularly worried the US would annex Greenland. The world is unpredictable.
There is always the possibility to dig deeper mines, explore further into space or just give people the possibility to live more a comfortable life.

But it is not only about that. Trade is also for comparative advantage. If you ever played settlers boardgame with more than two players you'll soon realize that whoever trades the most wins. And it does not really matter who you trade with, it is just reaping the benefits of trade instead of being stuck with 10 wood that is of low value to you but of high value to someone else.
I mean false as in filing a DMCA claim just to take down something you don't like rather than to protect material that actually means anything. So, false as in morally, not legally.

Besides, this shit was clearly at least 90% AI-generated anyway, and I think the jury is still out on whether some specific arrangement of AI-generated chunks of code actually even counts as a copyrighted work.

But everyone knows the drill is DMCA notices now, lawsuits years to decades later.
The point I'm making is that it never stops being positive-sum. It remains true that it's better for everyone if everyone works together. If you halt international trade, everyone will be poorer.