Readit News logoReadit News
HelloImSteven commented on The Great Gatsby is the most misunderstood novel (2021)   bbc.com/culture/article/2... · Posted by u/1659447091
thomassmith65 · 2 months ago
Breaking Bad, if we're lucky. More likely some superhero movie with a title like ThunderMan VI: Dawn of the Mayhem Battalion.
HelloImSteven · 2 months ago
To be fair, it’s a fair assessment. Superhero movies like that are a defining feature of the last two decades, with titles and plots worsening at an exponential rate. Not that prior decades lacked superheroes. They just used to be less superficial.
HelloImSteven commented on Google will allow only apps from verified developers to be installed on Android   9to5google.com/2025/08/25... · Posted by u/kotaKat
JustExAWS · 7 months ago
While I like to jump on the Google bash train as much as anyone, this is to comply with EU laws.

Apple implemented a similar change for the EU App Store earlier this year to comply with the Digital Services Act (DSA), a regulation that now requires app developers to provide their “trader status” to submit new apps or app updates for distribution.

HelloImSteven · 7 months ago
But this is for apps outside the Play store, so the DSA isn’t at play here insofar as Google needs to be concerned. I don’t think there’s any solid decision on whether third-party app distribution is subject to the trader requirements, but if/when there is, it’d presumably be on the alternative distribution platform to enforce, not Google. Plus, Google already adjusted its policies to comply with the DSA.

For the record, Apple notes that the DSA requirements only impact developers distributing through the App Store, not through alternative distribution [1].

[1]: https://developer.apple.com/help/app-store-connect/manage-co...

HelloImSteven commented on Copilot broke audit logs, but Microsoft won't tell customers   pistachioapp.com/blog/cop... · Posted by u/Sayrus
immibis · 7 months ago
More accurately, CVEs are for vulnerabilities that may be present on many systems. Then, the CVE number is a reference point that helps you when discussing the vulnerability, like asking whether it's present on a particular system, or what percentage of systems are patched. This vulnerability was only present on one system, so it doesn't need a CVE number. It could have a Microsoft-assigned bug number, but it doesn't need a CVE.
HelloImSteven · 7 months ago
But this isn't a problem on one system, it's potentially a problem in any system with Copilot enabled. It's akin to a vulnerability in a software library (which often means a separate CVE for every affected product, not just one for the library). CVEs also limited to issues impacting multiple systems; even if a vulnerability only affects one product, ideally a CVE should get made. The 'common' aspect is the shared reporting standard. See my other comment on this thread for more on that, or Redhat's explanation here: https://www.redhat.com/en/topics/security/what-is-cve
HelloImSteven commented on Copilot broke audit logs, but Microsoft won't tell customers   pistachioapp.com/blog/cop... · Posted by u/Sayrus
db48x · 7 months ago
Fun, but it doesn’t deserve a CVE. CVEs are for vulnerabilities that are common across multiple products from multiple sources. Think of a vulnerability in a shared library that is used in most Linux distributions, or is statically linked into multiple programs. Copilot doesn’t meet that criteria.

Honestly, the worst thing about this story is that apparently the Copilot LLM is given the instructions to create audit log entries. That’s the worst design I could imagine! When they use an API to access a file or a url then the API should create the audit log. This is just engineering 101.

HelloImSteven · 7 months ago
CVEs aren’t just for common dependencies. The “Common” part of the name is about having standardized reporting that over time helps reveal common issues occurring across multiple CVEs. Individually they’re just a way to catalog known vulnerabilities and indicate their severity to anyone impacted, whether that’s a hundred people or billions. There are high severity CVEs for individual niche IoT thermostats and light strips with obscure weaknesses.

Technically, CVEs are meant to only affect one codebase, so a vulnerability in a shared library often means a separate CVE for each affected product. It’s only when there’s no way to use the library without being vulnerable that they’d generally make just one CVE covering all affected products. [1]

Even ignoring all that, people are incorporating Copilot into their development process, which makes it a common dependency.

[1]: https://www.redhat.com/en/topics/security/what-is-cve

HelloImSteven commented on We may not like what we become if A.I. solves loneliness   newyorker.com/magazine/20... · Posted by u/defo10
vel0city · 7 months ago
I live in a suburb in the US

> The front stoop/street/sidewalk where everybody hangs out?

My kids and other kids in the neighborhood close by play around in the cul-de-sac quite often. Lots of people are out walking around. A lot of neighbors have patio furniture in their front yard and can be found out there, at least when its not 100F+ outside.

> The public square?

The downtown area nearby has lots of events going on.

> The park?

My suburban town has 42 of them. Almost 2,000 acres. They're mostly connected by dedicated bike paths. There's a city park attached to nearly every neighborhood area. Down the street from me there's a park with multiple playground areas, walking path through some small woods, a fishing pond, some basic sports areas (fences and graveled areas for baseball/softball, space for soccer, etc). So yeah, plenty of parks to be had. And there's usually a good bit of people at these places.

And that's before getting into the public sports facilities and other recreation facilities.

> The market—not to buy or sell necessarily, but because everybody’s there?

I hung out at the farmer's market this morning that's routinely held in town most weeks on Saturday mornings. Lots of people walking/biking to it.

> The library?

Excellent library with lots of events going on. They're rebuilding the main building after a fire, but even in their temporary space its great. Its usually pretty busy. It has excellent transit and bike paths to get to it, even in its temporary location.

> The public pool/baths?

Lots of city pools. Even one with a lot of water slides, its like a small water park.

> The house of worship in walking distance?

There are plenty of churches in Texas, trust me.

So once again, what's missing? And I'm not in an absurdly wealthy place, my suburb has a pretty average average household income. And its been roughly like this for most places I've lived or stayed at for significant periods of time. Maybe a bit less on transit, that is something my current place is probably a decent bit better than the average US suburb there.

HelloImSteven · 7 months ago
I’ve lived on both sides of this in different areas of the US. Overall I’d say there’s a lot of places that have what you’ve described, but there are many that don’t, even in more urban locations. Sometimes roads lack sidewalks, parks/skateparks/etc close for repairs but never reopen, local events stop getting funded for one reason or another, or high crime rates make people weary about leaving patio furniture out. All of those contribute to a lack of stable third spaces and associated connections with people.

Other countries have similar issues, of course, but often (not always) they have more cultural factors keeping third spaces alive. In my experience traveling Europe and Africa, community and familial ties generally have a more active role, so there’s just more opportunities for stable third places to develop. It’s not that the spaces are different, imo, but they do seem more common.

HelloImSteven commented on Tokens are getting more expensive   ethanding.substack.com/p/... · Posted by u/admp
mystraline · 7 months ago
This is complete utter hogwash.

Up until recently, you could hit somebody else's S3 endpoint, no auth, and get 403's that would charge them 10s of thousands of dollars. Coudnt even firewall it. And no way to see, or anything. Number go up every 15-30 minutes in cost dashboard.

Real responsibility is 'I have 100$ a month for cloud compute'. Give me a easy way to view it, and shut down if I exceed that. That's real responsibility, that Scamazon, Azure, Google - none of them 'permit'.

They (and well, you) instead say "you can build some shitty clone of the functionality we should have provided, but we would make less money".

Oh, and your lambda job? That too costs money. It should not cost more money to detect and stop stuff on 'too much cost' report.

This should be a default feature of cloud: uncapped costs, or stop services

HelloImSteven · 7 months ago
Lambda has 1mil free requests per month, so there’s a chance it would be free depending on your usage. But still, it’s not straightforward at all, so I get it.

Perhaps requiring support for bill capping is the right way to go, but honestly I don’t see why providers don’t compete at all here. Customers would flock to any platform with something like “You set a budget and uptime requirements, we’ll figure out what needs to be done”, with some sort of managed auto-adjustment and a guarantee of no overage charges.

Ah well, one can only dream.

HelloImSteven commented on AI overviews cause massive drop in search clicks   arstechnica.com/ai/2025/0... · Posted by u/jonbaer
accrual · 8 months ago
I don't know this for certain, but I imagine there's some kind of kv store between queries and AI overviews. Maybe they could update certain overviews or redo them with a better model.
HelloImSteven · 8 months ago
I also don’t know for certain, but I’d assume they only cache AI responses at an (at most) regional level, and only for a fairly short timeframe depending on the kind of site. They already had mechanisms for detecting changes and updating their global search index quickly. The AI stuff likely relies mostly on that existing system.

This seems more like a model-specific issue, where it’s consistently generating flawed output every time the cache gets invalid. If that’s the case, there’s not much Google can do on a case-by-case level, but we should see improvements over time as the model gets incrementally better / it becomes more financially viable to run better models at this scale.

HelloImSteven commented on Anthropic cut up millions of used books, and downloaded 7M pirated ones – judge   businessinsider.com/anthr... · Posted by u/pyman
homebrewer · 8 months ago
I used to order books in English from the US before shipping costs became prohibitive and the cost of shipping the book went to about twice to thrice the cost of the book itself. Is it fair use for me to download books from Anna's Archive now considering that books in English are not available in my region through other means (including the vast majority of ebooks)?

Rhetorical question, we all know that me reading books is not "transformative" so it won't be considered fair use for me to yoink them (transformative as in transforming more damage to the society at large into more money for the already rich).

HelloImSteven · 8 months ago
In the U.S. at least (obviously not the same everywhere), fair use doesn’t necessarily require your work to be transformative. It’s one of several aspects that gets considered, albeit a fairly significant one in many cases. Downloading books/research articles/pirated works in general wouldn’t be fair use as the purpose of the act (obtaining a book to read) directly impacts the market for the work (selling books). There could still exceptions in some cases, mostly related to teaching I’d imagine.
HelloImSteven commented on JavaScript Trademark Update   deno.com/blog/deno-v-orac... · Posted by u/thebeardisred
tolmasky · 9 months ago
In all seriousness, let's just rename it "WebScript". WebAssembly, WebGPU, WebRTC, WebWorkers. It fits. And it seems like there's no active trademark for it too (although I admittedly did not do a super sophisticated search).

The “Java” prefix still confuses new users, not to mention "bizdev" people, and probably leads to legal issues beyond just the trademark. "JavaScript" has always sucked as a name, we're just used to it now. Why are we fighting so hard for it? Let's just take this as an opportunity to name it something that actually makes sense. It will maybe be sort of annoying for a few years, but I'm certain one day we'll look back and not believe we used to call it "JAVA Script".

HelloImSteven · 9 months ago
WebScript is trademarked by Apple [1], but not sure how enforceable it is at this point.

[1]: https://www.apple.com/legal/intellectual-property/trademark/...

HelloImSteven commented on Show HN: Chat with 19 years of HN   app.camelai.com/log-in?ne... · Posted by u/vercantez
cwillu · 10 months ago
“This is not relevant to your point but I want to say that's an entirely third party project and we didn't even know about it for a long time. We don't publish data to them except in the sense that we publish it to everybody: https://github.com/HackerNews/API. I think their page gives a misleading impression that the project is somehow official, when it's not (https://news.ycombinator.com/item?id=43850991).” --dang at https://news.ycombinator.com/item?id=44022318

There is no such thing as an offical y combinator data

HelloImSteven · 10 months ago
Thanks, good to know. Their page on BigQuery is very misleading.

u/HelloImSteven

KarmaCake day53March 23, 2023View Original