mschuster91

> The big question is: who's going to get wiped, and what will that mean?

The end of democracy, that's what all of this is about and why we've seen so many of the super rich build private bunkers or buy entire private islands, talking about shock collars for their staff to keep them from rising up. They're preparing.

You shall own nothing and rent everything, and the easiest way to achieve that is to wipe out everyone's retirement savings.

> Chip producers (Tiawan SK) will also get burned.

They'll be fine. They already got paid, and if the AI bubble crashes, there's years of pent up consumer demand just waiting for affordable slots at the chip fabs.

> Basically the USA will be looking at a great depression.

The US is looking at a return to medieval times. Rich elites lording over the poor masses.

Alternatively, we'll see World War 3. It's notable enough that most countries have slowly risen the temperature on disaster preparedness, even those not in direct line of fire of Russia.

Huffman should huff less glue, it seems. Unfortunately, ever since the largest Reddit mod strike in history and the infamous "fuck spez" r/place both failed to gain traction or enough of a media stink... he's gone Musk level megalomaniac.

Obligatory fuck u/spez.

> Aviation is a perfect industry to learn from, they figured out a lot of things about how to keep humans from making mistakes.

Aviation is used to paying through the nose for stuff. For developers, employers want to pay as little money as possible.

No, I'm always clicking Allow and am pretty pissed because it's like once every week that each piece of software on my Mac wants yet another update and nothing can be bothered to use the App Store for distributing updates...

> I just dumped my TCC database and the entries are mostly not path tied. The Chrome entry is as expected a bundle ID+designated requirement. Unless the local network permission inexplicably uses a different permissions engine, that statement is a misdiagnosis of what's happening.

weird. Mine looks identical to yours and yet each Chrome update I get asked the permission for local network devices and notifications again.

> And, in the last year clankers have started coming for us EEs.

Get your practical skills in residential and commercial electricity up to speed and join the trades. The world is going for solar, heat pumps and electric vehicles no matter what corrupt politicians want (yay free market for once, lol), and that means there will be demand for people actually pulling wires and installing cabinets for decades to come. Start out as a side gig and when you find the clankers get too close to home turf, expand.

> I am pretty sure most of you are experiencing the same as me, but: Have you found ways of using AI without increasing mental overload?

Yeah. Quitting before this shit eats me alive. I'm in an EE degree program now. Better three years of study while everyone else gets to deal with the bananaware and the bullshit, and let's see then once the seas have calmed.

Until then, I actively try to avoid engaging with Slop Generator regurgitations and call it out whenever I see someone not disclosing they used a Slop Generator.

> A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising revenue from Bing and Yahoo.

I've recently published my first extension (I'll make a show hn in a few weeks when it's more polished)... and despite it not being advertised anywhere, it took less than 24 hours for the first "pitches" to drop in my mailbox. Some wanted to sell consultancy services, others wanted to buy the extension outright... it's pure madness.

It's a user experience thing. They don't want to show the cast icon to the user if there is no device present to cast to.

(I think both POVs are valid, but the actual solution should be for a proper OS-level interface to provide mDNS discovery...)

> Are you suggesting that AO3 is akin to Nazi content? Are you suggesting that non-skittish hosting providers are uniformly also unprincipled? Are you equating erotica and fascism? I’d prefer to hear your explanation in your own words rather than be forced to infer bad faith participation here.

I think the point they're trying to make is that "normal" hosting providers like AWS, Azure or Google won't accept AO3 as a customer in the first place or yeet them the day the first DMCA email arrives or some Evangelicals yap about furries and they realize what their customer is doing. "Nazi" hosters (aka wherever Gab, Truth Social et al are hosted) or your average cybercrime "bulletproof hoster" are being used to deal with a lot of bullshit, or they just pipe any complaints straight to /dev/null - and they are used to dealing with cyberattacks of all kinds as well because they are a very, very juicy target for anyone from antifascist activists over cybercriminals wanting to cash in on Trump's Truth Social privileges to other nations' secret services that might want to sow chaos by manipulating Trump's Truth Social feed.

So... AO3 is nowhere near Nazi crap in terms of content, but a very, very similar threat model (exhaustion of customer support goodwill).

> Chromium browsers (Chrome, Brave, Edge, Island, Arc) copy their own app bundle into a random temp folder at launch so the code signature survives in-place updates. macOS keys the Local Network decision to that random path, so the next launch looks like a brand-new app.

OH DEAR GOD that explains so much other cursed behavior, including the "do you want to allow google chrome helper to show notifications" always reappearing. or teams. or anything that does autoupdates.

> Nothing on a typical Mac needs this permission except a printer or scanner utility, a media server, or a LAN-discovery tool, and those you answer once and they're done.

This is wrong. Browsers and media players need it because that is how multicast discovery for stuff like Chromecast works. Spotify, same thing. And Steam plus virtually all games with LAN multiplay for the same reason. Did I note already that Steam also has an autoupdater and so does Spotify and... argh.

Apple really needs to fix the very first point, preferably in a way that doesn't force app developers to ship a "helper" binary.

(Side note: it might even be the case that opening the file picker may be enough, if you got network-discoverable paths in your Finder Locations sidebar, but i'm too tired to test that one out...)

> And that it's not for example a hardware failure?

They say they have a second site, the chance of hardware failure taking out both sites at the exact same time is near zero.

> You seem to be jumping to a lot of conclusions here.

There aren't that many scenarios which make a restoration time of weeks inevitable, even after taking into account the AO3 people are volunteers - given the large intersection between nerds and fanfiction or a loooot of furries working in IT, I'd assume you'll find the most competent people working on it, so I doubt the cause is incompetence.

They say the data is safe, which implies an offsite backup with a different architecture (or a managed provider). They said in the past they had a secondary site which they could switch over to if needed, which implies that the issue is not related to hardware or datacenter problems (e.g. your usual backhoe related issue or a physical destruction of the datacenter).

And that leaves only two options: a) a former staff member went fully rogue and everything needs to be rebuilt because everything might be backdoored, but there is no indication of that, or b) they got compromised really hard by one of the multitude of the vulnerabilities that cropped up the last days and chose to rebuild from scratch for a similar reason.

(And as far as I know AO3, like FFN, is limited to text and stuff like cover art, so the dataset should be small and easy enough to restore from a backup)

When the threat model is "a fire takes out the DC", sure. But "the servers are root-level compromised", whoops, that's worth rebuilding from scratch. No way to make sure whatever AI agent did the compromise didn't go and embed malware in some flash ROM.