Hacker Newsnew | past | comments | ask | show | jobs | submit | itsthecourier's commentslogin

good examples

I use it on a 10 years codebase, needs to explain where to get context but successfully works 90% of time

the longest case I know is a guy in big crypto who after a fallout was taking care of a zombie company for about a year and half, full pay, practically 1 or 2 hours of work some of the weeks

so I was running a SVN server in a decommissioned PC somewhere in a startup as an intern. whole company ends up using it and out of nowhere it used to freeze, I would go to check if it had rebooted or crashed and everything was fine.

it fixed by itself, without any fixes from my part. happened many times.

asked for help to a senior, guy ran strace and found a read waiting in /dev/random. and of course it solved by itself any time I checked because I was moving the mouse!

controversially but acceptably, we had linked it to urandom and move on

how fast that guy used strace and analyzed the syscalls inspired me to be better at linux


it's like Putin decided his job is to test the limits of modern international politics

It is: Look up the theory of status quo and 'revisionist* powers, and how they interact. Russia is acting as the revisionist, very predictably in many ways. And many in the West act predictably as status quo - including not being able to fathom why anyone would revise their happy power structure (with them on top).

You can see the same thing in many areas, such as race relations. The status quo is outraged and can't believe that other groups may be unhappy - after all, things work well in the status quo person's experience!


"not being able to fathom why"

I see what you did there!


tokens are tokens, shorter or larger, they are tokens

in that sense I don't see how this is more succinct than phyton

it is more than typescript and c#, of course, but we need to compete with the laconic languages

in that sense you will end up with Cisc vs Risc dilemma from the cpu wars. you will find the ability to compress even more is adding new tokens to compress repetitive tasks like sha256 being a single token. I feel that's a way to compress even more


Because llm tokens don't map cleanly to what the compiler sees as a token. If coding is all LLMs will be good for this will surely change

reminds me of actors, they are sharing messages between kernels with a bus

file sharing is complex too it seems

would be good to see a benchmark or something showing where it shines


I think one reason UniKernels can be different are perhaps that they can allow more isolation or run user generated code perhaps inside the Unikernel with proper isolation whereas I don't think actors can do that

probably because bitwarden has a permission to overlay other apps and HSBC thinks it's malware stealing your access to your bank

The HSBC app will not work with apps with overlay permission OR with apps installed from outside the Play Store.

I have stopped using the HSBC app and asked for a security device (which they will send you if asked) instead and use the web site instead.


But the user needs to be able to override this faulty check, albeit my solution is to never let any app decide what I can have on my device by not installing the app.

EDIT: there's also Android Protected Confirmation that works in the TrustZone so apps can't display over that. It was made exactly for apps like banking apps, so they should use it.


This is "protect the users from themselves" as-a-feature to prevent scammers from using malware to obscure their scams. Letting the user override the warning would make the entire feature useless.

Using overlay permissions, it's relatively simple to trick someone into transferring money by overlaying a different UI that the malicious app makes the user type or paste into. I believe blocking access to the app while such an overlay is present makes a lot of sense. Trusting apps from Google Play to do this while blocking other install sources would be an obvious mistake, though.

I'd argue this feature shouldn't exist (because of things like the API you mention) but having a user override doesn't make sense here.


If Google can allow apps to block screenshot capability then it should also allow specific set of apps like financial apps having an option to block overlays too. It doesn't have to be all or nothing.

I think from HSBC's risk management perspective, it's fairly reasonable

A bank refusing you access because of your accessibility settings (app overlay is one) is not reasonable.

The problem (for the bank) is they are now liable in the UK[1] if you are defrauded because someone installs malware on the phone. There's basically zero upside for the bank to allow customers to use F-Droid, since probably 0.0001% of their customers would do this, compared to a vastly greater number of customers being tricked into installing random malware on their phones.

Accessibility settings are a tricky one since that's a separate law. I wonder if they whitelist screen reader apps from the official app store. Anyway that's not the case in the original article.

[1] https://www.bbc.co.uk/news/articles/cy94vz4zd7zo


From the bbc article, the number of fraud rose 12%, and you're presuming 0.0001% would be using F-Droid. Is preventing that an efficient ("reasonable") action from the bank ?

Fraud is 41% of all crime in the UK, affecting 3.2 million people.

Number of people using F-Droid + a banking app is approximately zero in comparison.

There is not the slightest chance in hell that taking on the legal risk from F-Droid users is a sensible use of the bank's resources.

Sources: https://www.nationalcrimeagency.gov.uk/what-we-do/crime-thre... https://www.nationalcrimeagency.gov.uk/threats-2025/nsa-frau...


risk management is all about what the bank is willing to trust. in this case it decided it was risky because have any information on the provenance of your overlay, but you could source an overlay from somewhere they trust, like the default app store.

The bank wouldn't (hopefully ※) do that if it was illegal or technically too complex. Letting the bank decide is fundamentally problematic IMHO.

※ I'm aware expecting HSBC to follow the law would be extremely naive given their track record.


it's fun to become a necromancer

I have become a general and a master of multitude of skeleton agents. my attention to the realm of managing effectively the unreproducible result of running the same incantations.

As the sailor through the waters of the coastline he have roamed plenty of times, the currents are there, yet the waves are new everyday.

Whatever limitation is removed, I should approach the market and test my creations swiftly and enrich myself, before the first legion of lich kings appear. they, better masters than I would ever be.


as much as I oppose many of Trump policies, I believe this one will benefit positively the continent and ensure the latin vote in the next presidencial elections

Yes. That worked brilliantly in Iraq, Afghanistan, Vietnam, Korea, Chile etc.

And Libya too!

Actually, has it ever worked?

Panama?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: