karussell
Joined 16 years ago
Karma
1,598
Submissions
708
Member since
Nov 1
Co-Founder of GraphHopper - hosted & open source route planning
https://www.graphhopper.com
View on Hacker NewsRecent submissions
Comment · 17 hours ago
A few aspects of this article are strange or not well expressed.
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
Comment · 18 hours ago
Older discussion with original source (washington post)
https://news.ycombinator.com/item?id=50241543
MSN access: https://www.msn.com/en-us/news/other/it-took-just-12-hours-f...
Comment · 7 days ago
It has been shown that you can keep determinism (Bohm etc), but what follows is not necessary something you'll find more intuitive or cleaner or more logical.
Comment · 8 days ago
See the article where this is already stated :)
Comment · 8 days ago
The idea is that there is still an advantage even in times of LLM and the delay helps with an orchestrated fix. (E.g. not only php needed the fix, but also several docker image etc.)
But I agree it is doubtful that there is still such an advantage...
Comment · 8 days ago
Thanks for taking the time to explain this. This sounds reasonable to me too. However, it might be just the start :)
Comment · 8 days ago
Oh, ok, thanks for the information. But if it is a one-time, device-level wait, not per source and not per app, then I'm unsure how this should prevent scammers in the long term?
I'm pretty convinced it is just Google testing boiling the water steady and slowly :)
Comment · 8 days ago
I'm okay with paying but I really hate ads with a passion and especially for kids this is not okay. I was a customer of Disney and I guess I'll never be one again.
What alternatives exists for kids? Youtube?
Comment · 8 days ago
> Personally, I think the 24h cooldown is an excellent compromise to allow user freedom while slowing down attackers sufficiently to mitigate the harm.
The best solution would have been to be able to mark ANY alternative app store like fdroid as trusted and no such cooldown period would hit every time people install an app from there. This avoids that people can immediately use installed apps downloaded from an arbitrary URL but at the same time keeps the alternative app stores as a good alternative. Google decided to play unfair again.
Comment · 8 days ago
> but simple enough to barely be an inconvenience for anyone who cares enough and can go through it.
Any sources for this claim? I don't buy it.
Comment · 8 days ago
Great project. Also nice that they are using photon for their address search.
I might be pendantic here (for reasons you find in my profile), but this isnt a "half hour walk" and it is just a 3 km radius around the location, i.e. as the crow flies and rivers or walls are ignored. A real half hour walk would be an isochrone for a walking profile ;)
Comment · 17 days ago
I agree about what you mean with the dunning kruger effect. A similar effect is when I work with AI in a field where I don't know as much, and I would think that the AI works much better there or even has more than expert knowledge. So I do not (necessarily) overestimate myself, but the AI's capabilities, which can be as dangerous for society.
(Note that latest research shows that the dunning kruger effect might only be a statistical artefact.)
Comment · 18 days ago
Isnt K-9 Mail supposed to join forces with Thunderbird? K-9 Mail works fine for me.
Comment · 18 days ago
I wonder if they use Gemini how can the promise "Private for all" be fulfilled? Local model like gemma4?