Recent submissions

Comment · 3 days ago
'Coming soon'. 2027 perhaps?
Comment · 3 days ago
Of course it is, if you rely on that boundary. The 'consumer' use of tailscale is just as a reverse proxy, and that's how I figured GGP sees it. I don't have anyone on my tailnet, and when I did they didn't have ssh keys, and if they did I imagine there'd be many paths to privilege escalation, certainly it's a bigger surface than sshd. So I was clarifying it seems like an escalation from authorized execution to privileged execution, and not e.g. from unauthorized users to RCE
Comment · 4 days ago
I gather the bug allows people you've explicitly authorized to ssh into some account on your machine, to access more than that account can. So if you only use ssh yourself, or only give ssh keys for users with sudo, or only to people you trust not to exploit this, or if other vulnerabilities allow local shell users to escalate, or if you only use tailscale for port forwarding, then you're unaffected. Arguably even less exposed than a public openssh instance, though I can't say I have any issue doing that
Comment · 7 days ago
I got a replacement widget recently, the website pushes the app but when I asked in branch they gave me one without even asking my name. I had to wait on the phone to register the new serial number, maybe I could've done that in person too, but it lasted years (and multiple phones) so I don't mind too much
Comment · 18 days ago
They shouldn't be locked the day you buy them.
Comment · 19 days ago
2% tolerance is not the same as 2% failure rate
Comment · 21 days ago
Yeah, I don't think the problem needed billions of tokens
Comment · 28 days ago
Well, that part is easy.
Comment · 28 days ago
Not everything is trying to be a walled garden. Only 2 apps on my machine are nonfree, and not productivity ones I would care to integrate like this. But yes it's fundamentally hard (and I don't think their suggestions are great)
Comment · 1 month ago
(More precisely, doesn't have the reasoning from when the code was written)
Comment · 1 month ago
It's not that apps should be websites, but that you should be able to load apps as freely as websites.
Comment · 1 month ago
uBlock Origin has a built-in option for AI overviews (among other things). Settings > Filter lists > Annoyances > AI widgets
Comment · 1 month ago
I'm British and I think it's quite different.
Comment · 1 month ago
Leaflet is (generally) for streaming image tiles, OsmAnd renders a set of geographical features itself. But yes, it could do so more efficiently

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton