Hacker Newsnew | past | comments | ask | show | jobs | submit | bestcommentslogin
Most-upvoted comments of the last 48 hours. You can change the number of hours like this: bestcomments?h=24.

Author here. I admit I am rather startled by the tone of many comments here and the accusations of disingenuity. Splitting hairs about the origin of the term "sideload" does not change the fact that those who promote the term tend to do so in order to make it feel deviant and hacker-ish. You don't "sideload" software on your Linux, Windows, or macOS computer: you install it.

You have the right to install whatever you want on your computer, regardless of whether that computer is on your desk or in your pocket. That's a hill I'll die on. I'm dismayed to see that this sentiment is not more widespread in this of all communities.


These aren't "job losses", these are "firings". They aren't unfortunate accidents of external origin that happened to them, they are conscious internal decisions to let people go.

It's similarly insulting to read your AI-generated pull request. If I see another "dart-on-target" emoji...

You're telling me I need to use 100% of my brain, reasoning power, and time to go over your code, but you didn't feel the need to hold yourself to the same standard?


If you don't know him already, I highly recommend videos by LockPickingLawyer — he routinely destroys bogus claims of various companies within seconds. It's quite entertaining to see how little security you actually get from most locks.

I wonder if anybody tried suing him…


I fought insurance over this past summer after they declined covering a life saving surgery for my 6-year-old child at the last minute. We were in despair that my child's life was at risk each day we waited because of insurance incompetence.

ChatGPT literally guided me through the whole external appeal process, who to contact outside of normal channels to ask for help / apply pressure, researched questions I had, helped with wording on the appeals, and yes, helped keep me pushing forward at some of the darkest moments when I was grasping for anything, however small, to help keep the pressure up on the insurance company.

I didn't follow everything it suggested blindly. Definitely decided a few times to make decisions that differed from its advice partially or completely, and I sometimes ran suggested next steps by several close friends/family to make sure I wasn't missing something obvious. But the ideas/path ChatGPT suggested, the chasing down different scenarios to rule in/out them, and coaching me through this is what ultimately got movement on our case.

10 days post denial, I was able to get the procedure approved from these efforts.

21 days post denial and 7 days after the decision was reversed, we lucked into a surgery slot that opened up and my child got their life saving surgery. They have recovered and is in the best health of the past 18 months.

This maybe isn't leveling the playing field, at least not entirely. But it gave us a fighting chance on a short timeline and know where to best use our pressure. The hopeful part of me is that many others can use similar techniques to win.


It seems like a number of the "DEI is anti-merit discrimination" messages in this thread are overlooking how DEI work usually works.

A relevant tweet from 2016 (https://x.com/jessicamckellar/status/737299461563502595):

> Hello from your @PyCon Diversity Chair. % PyCon talks by women: (2011: 1%), (2012: 7%), (2013: 15%), (2014/15: 33%), (2016: 40%). #pycon2016

Increased diversity in communities usually comes from active outreach work. PyCon's talk selection process starts blinded.

If 300 people submit talks and 294 are men, then 98% of talks will likely be from men.

If 500 people submit talks and 394 are men, then ~79% will likely be by men.

Outreach to encourage folks to apply/join/run/etc. can make a big difference in the makeup of applicants and the makeup of the end results. Bucking the trend even during just one year can start a snowball effect that moves the needle further in future years.

The world doesn't run on merit. Who you know, whether you've been invited in to the club, and whether you feel you belong all affect where you end up. So unusually homogenous communities (which feel hard for outsiders to break into) can arise even without deliberate discrimination.

Organizations like the PSF could choose to say "let's avoid outreach work and simply accept the status quo forever", but I would much rather see the Python community become more diverse and welcoming over time.


This guarantees I'll never buy a Samsung appliance. If they're this willing to screw with their customers today, they'll do it again tomorrow.

Sadly, I'm including their TVs in this. I have one today, displaying the output of an Apple TV and not directly connected to the Internet because hah, no way, but I'll be shopping around when it comes time to replace it.

Pity. They make nice stuff. Not nice enough that I'm willing to tolerate their anti-customer shenanigans, but otherwise decent quality.


What is with the negativity in these comments? This is a huge, huge surface area that touches a large percentage of white collar work. Even just basic automation/scaffolding of spreadsheets would be a big productivity boost for many employees.

My wife works in insurance operations - everyone she manages from the top down lives in Excel. For line employees a large percentage of their job is something like "Look at this internal system, export the data to excel, combine it with some other internal system, do some basic interpretation, verify it, make a recommendation". Computer Use + Excel Use isn't there yet...but these jobs are going to be the first on the chopping block as these integrations mature. No offense to these people but Sonnet 4.5 is already at the level where it would be able to replicate or beat the level of analysis they typically provide.


The American Medical Association owns copyright to all the codes and their descriptions. They have an extremely restrictive and expensive licensing options and they strictly forbid training models with the codes.

This month, the practice was called out (https://www.help.senate.gov/rep/newsroom/press/chair-cassidy...) so the Overton window may be opening.

The AMA (a nonprofit!) clears ~$300M/year revenue from the codes, which is the direct cost passed through to consumers, but the indirect costs are the byzantine nightmare of OP.


> Once AGI is declared by OpenAI, that declaration will now be verified by an independent expert panel.

> Microsoft’s IP rights for both models and products are extended through 2032 and now includes models post-AGI, with appropriate safety guardrails.

Does anyone really think we are close to AGI? I mean honestly?


LPL owns Covert Instruments, who employs McNally, the YouTuber who got sued in this case. Probably not a coincidence that Covert Instruments wasn't named in the lawsuit.

> Under questioning, however, one of Proven’s employees admitted that he had been able to duplicate McNally’s technique, leading to the question from McNally’s lawyer: “When you did it yourself, did it occur to you for one moment that maybe the best thing to do, instead of file a lawsuit, was to fix [the lock]?”

Sometimes a single question tells you how the entire case is going to go.


Back in 2007, I published the first YouTube bypass of the Master Lock #175 (very common 4-digit code lock), using a paperclip.

After the video reached 1.5M views (over a couple years), the video was eventually demonetized (no official reason given). I suspect there was a similarly-frivolous DMCA / claim, but at that point in my life I didn't have any money (was worth negative) so I just accepted YouTube's ruling.

Eventually shut down the account, not wanting to help thieves bypass one of the most-common utility locks around — but definitely am in a position now where I understand that videos like mine and McNally's force manufacturers to actually improve their locks' securities/mechanisms.

It is lovely now to see that the tolerances on the #175 have been tightened enough that a paperclip no longer defeats the lock (at least non-destructively); but thin high-tensile picks still do the trick (of bypassing the lock) via the exact same mechanism.

Locks keep honest people honest, but to claim Master's products high security is inherently dishonest (e.g. in their advertising). Thievery is about ease of opportunity; if I were stealing from a jobsite with multiple lockboxes, the ones with Master locks would be attacked first (particularly wafer cylinders).


It's important to understand that we could genuinely lose general purpose computing. I don't think it's in serious danger at the moment, but we've been in the midst of a slide in that direction for the last 10-15 years. Part of it is mobile phones, part of it is TPM, part of it is market forces. The latest turn is strictly political. We've really foolishly built the technology necessary for authoritarianism just a few years head of a general global trend towards authoritarianism. At the moment, anyone can use Linux; it's better and easier than ever. Will the laws of your country make it harder or more difficult to avoid? Will major vendors lock you out of basic functions? Will age verification require an agent run on your Windows or macOS computer? (or worse, require the use of a smart phone just to use the internet?)

We're not anywhere there yet, but we're closer than we've ever been, and things keep moving in the wrong direction.


In high school, I ran a robotics team that did lots of STEM outreach. We went to community centers, after school programs, and worked with other similar orgs like "girls who code."

I think we played an important role in the community. In our mission we stated we wanted to help bring "equity to STEM education."

In 2025, according to the current admin's stance on "DEI," my robotics team would not be able to receive grants without risk of being sued. It's plainly obvious the line is not drawn at restraining "overly progressive policies" - it's just arbitrarily placed so the govt can pick and choose the winners based on allegiance.

It's a shame that folks with a strong moral fiber are now punished for wanting to help their communities.


> On July 7, the company dismissed the lawsuit against McNally instead.

> Proven also made a highly unusual request: Would the judge please seal almost the entire court record—including the request to seal?

Tough at first then running away with the tail between their legs. Typical bullying behavior.

> but Proven complained about a “pattern of intimidation and harassment by individuals influenced by Defendant McNally’s content.”

They have to know it's generated by their own lawsuit and how they approached it, right? They can't be that oblivious to turn around and say "Judge, look at all the craziness this generated, we just have to seal the records!". It's like an ice-cream cone that licks itself.

> the case became a classic example of the Streisand Effect, in which the attempt to censor information can instead call attention to it.

A constant reminder to keep the people who don't know what they are doing (including the owners of the company!) from the social media.


I once worked for a company that kept its passwords locked in a safe. One day, all other copies of the password were lost, and they needed it, but the safe's key could not be found.

They expensed a sledgehammer and obtained the password through physical modification of the safe using a careful application of force. Some employees complained that meant the safe wasn't... well, safe.

The security team replied "Working as Intended" - no safe is truly safe, it's just designed to slow down an attacker. At that moment, I was enlightened.


Having wrangled many spreadsheets personally, and worked with CFOs who use them to run small-ish businesses, and all the way up to one of top 3 brokerage houses world-wide using them to model complex fixed income instruments... this is a disaster waiting to happen.

Spreadsheet UI is already a nightmare. The formula editing and relationship visioning is not there at all. Mistakes are rampant in spreadsheets, even my own carefully curated ones.

Claude is not going to improve this. It is going to make it far, far worse with subtle and not so subtle hallucinations happening left and right.

The key is really this - all LLMs that I know of rely on entropy and randomness to emulate human creativity. This works pretty well for pretty pictures and creating fan fiction or emulating someone's voice.

It is not a basis for getting correct spreadsheets that show what you want to show. I don't want my spreadsheet correctness to start from a random seed. I want it to spring from first principles.


Provenance and trust are relevant for a remote KVM.

But I can't find any information on their Web site about who runs the JetKVM company, not even a partial name or handle of anyone, nor even what country they are in. Which seems odd for how much this product needs to be trusted.

Searching elsewhere, other than the company Web site... Crunchbase for JetKVM shows 2 people, who it says are based in Berlin, and who also share a principal company, BuildJet, which Crunchbase says is based in Estonia. The product reportedly ships from Shenzhen. BuildJet apparently is a YC company, but BuildJet's Web site has very similar lack of info identifying anyone or their location, again despite the high level of trust required for this product.

Are corporate customers who are putting these products into positions of serious trust -- into their CI, and remote access to inside their infrastructure -- doing any kind of vetting? When the official Web sites have zero information about who this is, are the customers getting the information some other way, before purchasing and deploying?

If these people are still running the companies, why aren't they or anyone else mentioned on the company Web sites? That would be helpful first step for trust for corporate use. So its absence is odd.


They’ll devalue the term into something that makes it so. The common conception of it however, no I don’t believe we are anywhere close to it.

It’s no different than how they moved the goalpost on the definition of AI at the start of this boom cycle


I think we could set the bar substantially higher. Don't even bother with discussion of sideloading. Talk about bounded transactions and device control.

What is needed is: Once I have purchased a device, the transaction is over. I then have 100% control over that device and the hardware maker, the retailer, and the OS maker have a combined 0% control.


The thing is the prices are all made up anyway. The hospital hallucinates prices, so they don’t blink an eye when an llm does the same.

This is how DEI should work, and probably does in some, or maybe many, cases.

In other cases, it boiled down to "this quarter, we only have headcount for 'diverse' candidates", metrics for DEI hiring that turn into goals, and e-mails stating "only accept new L3 candidates that are from historically underrepresented groups".

I expect that I'll get accused of making this up, which is why the latter is an exact quote shown on page 28 in this court case: https://www.scribd.com/document/372802863/18-CIV-00442-ARNE-...


This isn't good for the PSF, but if these "poison pill" terms are a pattern that applies to all NSF and (presumably) other government research funding, the entire state of modern scientific research is at risk.

Regardless of how you, as an individual, might feel about "DEI," imposing onerous political terms on scientific grants harms everyone in the long term.


This reminded me of Matt Blaze's work on physical lock security back in 2003. He found a method of deriving the "master key" for a building (one key that opens all locks) from a single example: https://www.mattblaze.org/masterkey.html

When he published about this he was bombarded with messages from locksmiths complaining that they all knew about this and kept it secret for a reason! https://www.mattblaze.org/papers/kiss.html

It was a fascinating clash between computer security principles - disclose vulnerabilities - and physical locksmith culture, which was all about trade secrets.


Non-US person here.

Happy for your happy-end to that story!

Though why do you Americans put up with all this? I have heard the US is a democracy. So then insurance-based healthcare is what American people truly want?


This is good stuff coming from the guy who said it's ok if people coordinate terrorist attacks on facebook as long as the company continues to grow

> "Despite minor differences between individual surveys, the data consistently show that the average number of close friendships rose from 2.2 in 2000 to 4.1 in 2024," says Hofer.

If true, this is an astonishing social transformation, because it goes against everything we here about the loneliness epidemic getting worse.

Or have people redefined what they consider to be "close friends"? Or are people actually genuinely maintaining more friendships because phones make it so much easier to message?


having hired an expert in this field, I can tell you they aren't really that sophisticated. I found myself with an absolute mountain of cash after an accident as part of a settlement. My medical insurance won't pay claims until I've exhausted that cash. The claims I had were much higher than even the mountain of cash. The lawyer I hired use a pretty effective strategy: he contacted all of the claims against me and told them we could engage in N-way negotiations amongst all the parties until we came to a settlement so everyone got their nibble of the pie. Or they could get X today, where X was some amount that was a bit less than the rate the industry actually gets paid for those services. They all accepted.

The discounts he negotiated left me with tons of cash & were in excess of the fee he charged me.


We suddenly woke up in the Kafka-esque purgatory of critical American healthcare billing. We’re in our 50s and had been perfectly healthy, then suddenly we got diagnosed with what will be over $500k in treatment over the next 12 months— and multiple millions for the foreseeable future. We have insurance, but many of the required procedures are “out of network” and there’s no way to tell (we have “the best” insurance, supposedly). Even with insurance it will be at least $50k/yr out of pocket

But the raw numbers like $200k for this poor gentleman’s heart attack or $500k aren’t the most alarming. It’s the Terry-Gilliam-level of absurdity of the billing process. Absolutely no one will tell you how much things are, and when you ask, they sass you that it is a ridiculous question. Even though one of my providers just recently started offering estimates, those are off by 100-200% , and completely missing for about half of what has been ordered.

We are both very strong accountants, and despite trying to do audits of these services, it’s impossible. There are 3-4 levels of referred services, bundled codes, nested codes, complication / technical / professional codes , exceptional status codes . Providers overbill, double bill. On accident and on purpose. When we call to get it corrected there is no way to make corrections.

You’ll be asked to take a diagnostic not knowing whether it will cost $10 or $15000 . Even if you try to be responsible and call the provider (who isn’t your doctor, clinic, or hospital ) – they won’t be able to tell you.

The point I’m trying to make isn’t to make you sympathetic. It’s to reinforce in all of the great technical minds here that healthcare billing is the most complicated spaghetti code cluster flock of a system that you’ve ever imagined. It’s far worse than any piece of software you’ve ever seen. And we all just accept the bills and pay them.

Supply and demand and finding a better vendor doesn’t work. There are some rare exceptions like elective MRIs – but those aren’t the norm. Nearly every service is something time sensitive or your disease will get significantly worse. Moreover, signing up a new provider has $1000+ in billing and a few hours in paperwork to make the transfer. is it worth saving $500 for one MRI when $250k worth of services are unaccountable?

The only thing I’m sure of is that there has to be tremendous amounts of incidental and deliberate corruption . Auditing a single patient’s billing is impossible – so a population’s worth is a goldmine .


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: