Readit News logoReadit News
werrett commented on Awakening Bell   awakeningbell.org/... · Posted by u/mehagar
gbuk2013 · 3 months ago
Can anyone recommend an iPhone app to do the same? I am literally keeping around an old tablet for running https://codeberg.org/tslocum/meditationassistant.git F-droid app in my meditation room.

I tried web apps before but iOS would cut them off when the phone went to sleep.

werrett · 3 months ago

Loading parent story...

Loading comment...

werrett commented on Anthropic revokes OpenAI's access to Claude   wired.com/story/anthropic... · Posted by u/minimaxir
ethan_smith · 5 months ago
These anti-competitive clauses are becoming standard across all major AI providers - Google, Microsoft, and Meta have similar terms. The industry is converging on a licensing model that essentially creates walled gardens for model development.
werrett · 5 months ago
You guys are tripping. EULAs have had anti-competition, anti-benchmarking, anti-reverse engineering and anti-disparagement clauses since the late 90s.

These unknown companies called Microsoft, Oracle, Salesforce, Apple, Adobe, … et al have all had these controversies at various points.

werrett commented on The Myth of Developer Obsolescence   alonso.network/the-recurr... · Posted by u/cat-whisperer
tbrownaw · 7 months ago
The first listed iteration is to late, what about the COmmon Business-Oriented Language?

Also, something being a liability and something having upkeep costs are not the same thing.

werrett · 7 months ago
> something being a liability and something having upkeep costs are not the same thing.

What would your definition of /liability/ be then? 'An ongoing commitment to pay future costs' is a pretty good one.

werrett commented on I'm Peter Roberts, immigration attorney, who does work for YC and startups. AMA    · Posted by u/proberts
OnionBlender · 7 months ago
Have people gotten into trouble for having a nearly empty phone when they get searched? Like using a burner phone or doing a factory reset prior to the trip. I've wondered if that would be considered suspecious.
werrett · 7 months ago
At least one person has been subject to secondary screening and ultimately denied entry on the accusation that they had two phones.

> I thought I was just going to be given my passport and sent on my way, or maybe asked a couple of questions, but they made some pretty outlandish accusations. They said, ‘We know you have two mobile phones. We’ve been tracking your calls. We know you’ve been selling drugs’.

https://www.theguardian.com/us-news/2025/apr/11/australian-w...

werrett commented on Accountability Sinks   250bpm.substack.com/p/acc... · Posted by u/msustrik
TeMPOraL · 8 months ago
My go-to example of a whole mesh of "accountability sinks" is... cybersecurity. In the real world, this field is really not about the tech and math and crypto - almost all of it is about distributing and dispersing liability through contractual means.

That's why you install endpoint security tools. That's why you're forced to fulfill all kinds of requirements, some of them nonsensical or counterproductive, but necessary to check boxes on a compliance checklist. That's why you have external auditors come to check whether you really check those boxes. It's all that so, when something happens - because something will eventually happen - you can point back to all these measures, and say: "we've implemented all best practices, contracted out the hard parts to world-renowned experts, and had third party audits to verify that - there was nothing more we could do, therefore it's not our fault".

With that in mind, look at the world from the perspective of some corporations, B2B companies selling to those corporations, other suppliers, etc.; notice how e.g. smaller companies are forced to adhere to certain standards of practice to even be considered by the larger ones, etc. It all creates a mesh, through which liability for anything is dispersed, so that ultimately no one is to blame, everyone provably did their best, and the only thing that happens is that some corporate insurance policies get liquidated, and affected customers get a complimentary free credit check or some other nonsense.

I'm not even saying this is bad, per se - there are plenty of situations where discharging all liability through insurance is the best thing to do; see e.g. how maritime shipping handles accidents at sea. It's just that understanding this explains a lot of paradoxes of cybersecurity as a field. It all makes much more sense when you realize it's primarily about liability management, not about hat-wearing hackers fighting other hackers with differently colored hats.

werrett · 8 months ago
This is the ultimate nihilistic take on security.

Yes, 'cyber' security has devolved to box checking and cargo culting in many orgs. But what's your counter on trying to fix the problems that every tech stack or new SaaS product comes without of the box?

For most people when their Netflix (or HN) password gets leaked that means every email they've sent since 2004 is also exposed. It might also mean their 401k is siphoned off. So welcome the annoying and checkbox-y MFA requirements.

If you're an engineer cutting code for a YC startup -- Who owns the dependancy you just pulled in? Are you or your team going to track changes (and security bugs) for it in 6 months? What about in 2 or 3 years?

Yes, 'cyber' security brings a lot of annoying checkboxes. But almost all of them are due to externalities that you'd happily blow past otherwise. So -- how do we get rid annoying checkboxes and ensure people do the right thing as a matter of course?

werrett commented on New Study: Waymo is reducing serious crashes and making streets safer   waymo.com/blog/2025/05/wa... · Posted by u/prossercj
johnfn · 8 months ago
As someone who is often on SF city streets without a car - I bike and run a lot - I absolutely love Waymo. I am continuously seeing human drivers cut me off, perform illegal maneuvers (i.e. run red lights when I'm going through a crosswalk), and break various other traffic laws. All these things genuinely put people in danger. Just the other day, a guy started running a "no right turn on red" lane in SF, and when I pointed it out to him he floored his car - through the red - right in front of me and laughed at me as he sped away. To say nothing of all the times when cars will honk or give me the finger for doing normal things on a street, like walking on a crosswalk.

Waymo is like the most courteous, respectful driver you can possibly imagine. They have infinite patience and will always take the option which is the safest for everyone. One thing which really impressed me is how patient they are at crosswalks. When I'm jogging, a Waymo will happily wait for me to cross - even when I'm 10 feet away from even entering the crosswalk! I don't know if I even have that much patience while driving! I've had a number of near misses with human drivers who don't bother checking or accelerate for no reason after I'm already in the crosswalk. Can you imagine a Waymo ever doing that?

If I see a Waymo on the street near me I immediately feel safer because I know it is not about to commit some unhinged behavior. I cannot say enough good things about them.

werrett · 8 months ago
I’m a fellow cyclist in SF and can only wholeheartedly second this. To add some extra anxiety, I’m usually riding a cargo bike, ferrying a child to or from daycare.

I still remember the first time I went through a four-way stop intersection and saw a driverless car idling, waiting for its turn. It was weird and nerve-wracking. Now… I’d much prefer that to almost any other interaction at the same spot.

werrett commented on Tailscale has raised $160M   tailscale.com/blog/series... · Posted by u/louis-paul
werrett · 9 months ago
I've got conflicted feels about Tailscale. I love their product and a bunch of the people I know use their free tier, including myself.

But their enterprise strategy destroys their good will. I can only assume it's focused on killing old school VPN products. The free tier that we love is a marketing expense. And it’s not even a conversion play.

People are complaining about ~10/user/month -- add basic things that you'd need to manage more than 10 peeps (SAML/SCIM support) and you're talking ~20/user/month. For us, a small sub 200 person company, they immediately lost their chance. We have lots of problems in the security space, some we're willing to spend more than 20/user/month to solve. Legacy network access is not one of them.

werrett commented on ASML's boss has a warning for Europe   economist.com/business/20... · Posted by u/ksec
sigmar · 9 months ago
Article reads to me like they want the EU to start ignoring US export bans so that ASML can maintain their market position. Not sure how they would answer that "where?" though
werrett · 9 months ago
I doubt it’s a real threat but it would be a country that would happily unsubscribe from US export bans. So Israel or Singapore would be two good options for the chip industry. South Korea or Switzerland you could argue for but are probably less realistic. Maybe Canada now, lol.

Loading parent story...

Loading comment...

u/werrett

KarmaCake day441March 23, 2010
About
infosec curmudgeon. appsec. product husbandry.

[email: jonathan at werrett dot co; twitter: http://twitter.com/werrett; mastodon: https://infosec.exchange/@werrett]

---

[age public key: age1jarg867ve9mg6w32vwx80qg873fryvhtuzd204fhxucs5afhns0saa587z; https://age-encryption.org]

View Original