szc
Joined 14 years ago
Joined 14 years ago
I do concede that the book does contain a distillation of material that is also available from other sources, but it also contained a lot of personal experience. That aspect does seem to be lost in this new representation.
I am not saying that letting AI models read the material is wrong, but the hubris in the way models answer questions is annoying.
The CalDigit support response sort of suggests that some monitors (or interfaces that fake it) aren't providing unique EDID data.
EDID is supposed to contain a serial number. Connecting two monitors that claim to be the "same" device because the serial number is the same is going to be a problem - which one is on the left or right? How can you know / remember? Basing it on which "port" they are plugged into will also lead to frustration if they get swapped or a hub is used.
What if you have two sets of the same monitors at home (L and R), and two more of the same monitors at work (L and R). What do you want the experience to be? (mapping Apps to the correct displays when moving environments is also an issue that, ahem, hasn't always worked well!)
I'd want (and I've been TOLD) that plug and play experience needs to be the same at home and at work after the manual setup of the monitor placement. At home the built-in display is on the right, with built-in switched to the left at work. NB: I really cannot see how to do all of this unless the monitors can uniquely identify themselves.
Recording or noting these setups / placements also could be a technical challenge - plugging in external monitors in a different order, including timing, does that create a new monitor "environment"? Given what I've observed, I think it does.
My wife has a setup like the above with 2x LG 4K displays (two USB-C thunderbolt cables / connections) in two locations. It has been "mostly working, but slow" for her old Intel MacBook pro or "working well" for a newly acquired Apple Silicon MacBook Pro with the current macOS Monterey.
Doing the numbers, home has 7 configs. IR=Internal-right. (I), (IR, LH), (IR, RH), (IR, LH, RH), (LH), (LH, RH), (RH). Work also has 7 configs. IL=Internal-Left. (I), (IL, LW), (IL, RW), (IR, LW, RW), (LW), (LW, RW), (RW).
Ramble: For the (exaggerated) 400 open windows any display plug/unplug event this is going to cause a re-render storm for a new DPI, colour depth and location for every window for each plug / monitor transition. Ouch.
I am dinosaur and this is an X11 flashback. How can or does any of this even work for Linux? An X11 app opens a connection to a "Display" and the DPI (size), colour depth and other params used to be "fixed" at that point in time, the client does all of the rendering for the window, providing a bitmap to the X11 server. In the past it was not possible to move windows between incompatible display parameters - making dynamic changes not possible. How does moving windows between monitors of different DPI / colour depth now work in X11? I need to look into this. Prediction: I likely will be a casualty in the war of display rendering.
Final ramble. With some of these new "standards" (looking at you, USB-C), it seems the goal is to get the license payment but there is no requirement that your product passes a conformance test in order to ship it.
I cannot undo what I've said - it is clearly very incorrect. I would like to retract it.
Do you have any recommendations for getting better at critical thinking? How can it be practiced in a way that doesn't get you banned when making mistakes?
I really would like to avoid making these sorts of mistakes in the future.
This is at least the 2nd time on HN that a report has suggested Ashley Gjovik was complaining about "toxic chemicals at work". The previous article referred to something published at "The Verge" - "her office is in an Apple building located on a superfund site" <https://www.theverge.com/2021/9/9/22666049/apple-fires-senio...>
Other published articles (and I believe is likely the truth) indicate that the toxic chemical issues were related to her personal living space <https://sfbayview.com/2021/03/i-thought-i-was-dying-my-apart...>
The nytimes ought to be very embarrassed about this stupid error.
I note that the personal toxic superfund site issues were previously discussed on HN.
I am also somewhat confused about the persona of "Cher Scarlett". I do not think it is a real identity. I also have some serious doubts if they, or their alter ego, is actually employed at Apple. Reputable journalists could actually verify this with employment and tax records -- journalists would actually have to do the necessary due diligence.
Twitter suggests that "Cher Scarlett" is located in Seattle. (This would make them a remote worker for Apple). Also seemingly making quite a lot of tweets. When does this person do any work for Apple? Is this person the reason why Apple isn't responding to Security reports and the bug bounty program?
After reading many tweets I am failing to detect any comprehension of, or demonstration of, a computer security "mindset" -- something that, in my experience, does tend to manifest itself in the personality of security folks over extended periods of time.
I am unable to determine what sort of security role this person has.
I am not suggesting any malice or ill will towards "Cher Scarlett". I am trying to present this as a technical analysis.
In summary, I really question if "Cher Scarlett" is actually a real person in they way they are presenting themselves to be.
It is a frustrating exchange.
The words that have been used attempt to tie two controversial topics together PRISM and FISA. The logic then seems to be that because companies can now report on FISA orders, this means they also willingly participated in PRISM.
What has been said seems to ignore that the FISA reporting by companies shows the number of identities that data has been provided for. PRISM on the other hand looks like a program to collect as much data as possible, regardless of identity.
At this point it is going to just be agree to disagree.
This can be entirely explained if the NSA had already performed a "solar winds" supply chain attack on the vendor that supplied the TLS encrypt / decrypt endpoints. Is the vendor of that hardware known or discoverable?
Google would have no idea the traffic could be intercepted. The NSA could use the Smiley face, perhaps with a nudge, nudge, wink, they are now a "supplier of data" on slides.
I know of at least one way a to implement a "secure" TLS product that you could purchase and deploy in your datacenter that would leak all of the the keying material to compromise every data connection to the NSA. You would be 100% in compliance of all technical requirements, but your data would be utterly transparent. You would not be able to detect this using an internal or external audit.
Did you purchase your rack-to-rack equipment from the equivalently Trojaned "Solar Winds" vendor? The "Solar Winds" event was a "commercially" botched exploit.
Sorry, NSL(s) do not scale. It is an ever expanding "circle of trust".
Containing secrets is only effective if they are only shared within "your shared culture" and your culture is very stable -- nobody leaves because of a difference of opinion.
NSL can only be effective if nobody knows.
PRISM, based on the data available, is all about consuming data WITHOUT a warrant -- vacuuming data associated with identities that are not associated with ANY identities subject to a court order. Violating laws and possibly (USA) constitutional rights in quite a few ways. PRISM likely exists.
I ask of "sneak" to confirm their assertion that "PRISM == FISA orders" is true. Please present this "evidence" and the evidence of connection. If you cannot you are, by default, distributing mis-information, bad logic or at worst tying to mislead.
(my naive searching suggests that "sneak" is definitely not in a position to make these claims)
(I am independently looking for this, but cannot currently confirm)
There was a slide that indicated that data from Apple and other companies was now part of the PRISM program.
I am not trying to deny or refute Snowden's whistleblowing. I think it is highly likely that PRISM exists. What I dispute are the speculations that the companies listed are complicit.
The 2012 date is quite suspicious - it is precisely the same year that a new Apple datacenter in Prineville came online. Facebook also has a datacenter. Literally next door. Facebook also appears on those slides. I am not sure who else is also now in the area.
I wonder where all of the network cables go?
I personally think that PRISM works by externally intercepting data communication lines running to these facilities. Similar to the rumors that international comms links have been tapped. The companies themselves have not participated, but the data path has been compromised.
The NSA has previously tapped lines (AT&T), but they made the mistake of doing it inside the AT&T building. Google "Room 641A at 611 Folsom Street, SF". That is where "beam splitting" was done. This eventually leaked out. The NSA isn't stupid, I doubt they wanted to repeat that sort of discovery. The best way to keep something from being discovered is to not let people know. This is why I think it is believable and likely that the companies listed on the slides have no idea what has been done.
I will also note that PRISM and "beam splitting" are a rather cosy coincidence.
I think it is most likely that PRISM is implemented without the knowledge of anyone except the NSA and in Prineville there is some "diversion" of network cabling to a private facility that is tapping the lines.
The outrage at not being able to repair a 4gm Airpod when compared to the complete disregard to wasting other resources, in my opinion, has a very dubious moral stance.
I get that the price paid is indicative of the engineering that went into the product and you feel it might be outrageous to pay that amount for 2x 4gm.
Any argument about repairability needs to be considered in the context of actual resources used to make the product, what the cost to humanity was when compared to what it will cost to repair the product, including the human cost.