评论者认为 Matt 对法院裁决的描述在很大程度上是偏误（并非完全在撒谎）。裁决中多项驳回是“留待修正”，意味着 WPEngine 还需改正指控；还有一项被驳回是应在后续阶段作为抗辩使用。尽管有少数不可修正的驳回，但多数仍然被维持或有胜诉要点。
评论指出爱国者法案原本应是临时且狭窄的，但二十年后已成为金融监控的基础设施，仿佛把隐私视为问题而非基本权利。与加密类似，一旦隐私被视为犯罪的同义词，便削弱了对守法用户的安全，强化了受监管中介的垄断。这样的走向对创新和民主都不健康。
评论者通过引用文学与历史名言，提倡理解、同情与非暴力的公共对话。引用了艾斯基斯拉斯（Aeschylus）及肯尼迪1968年的言论，强调团结、爱、智慧与对仍在受苦者的关怀。整体呼吁在国家层面避免分裂、暴力和无纪律的情绪表达。
评论者表示历史书能讲事实，但难以传达情感与体验，当前环境让人感到荒诞与情绪高涨。强调学习历史的同时，也要正视情感与直觉的作用。
评论者强调若不能以非暴力方式回应，就不应发帖；非暴力不仅是行为准则，也包括对自身情绪的调节与克制，以避免在公开讨论中爆发攻击性言论，并呼吁遵守站点指南。
评论者认为问题不在教育供应侧，而在文化层面。现代社会提供比以往更多的学习资源，但美国文化对教育存在抵触，长期的考试成绩下降被视为这种文化转变的一个征兆。
评论者表达深切的个人情感：对失去的妻子深感悲痛，同时对免疫治疗带来希望表示欣慰。作者将个人经历与科研进展联系起来，强调前辈与研究者对未来治疗可能产生的影响。
评论者描述自家公司实施强制 RTO 的情况，尤其在小城市的办公室资源有限。对高层以投资者“集体智慧”为名推动此举表示怀疑，认为这会影响生产力与人才获取，质疑背后的动机与长期影响。
评论者质疑对 iPhone Air 的实际吸引力，认为在“薄”与“凸起”之间，薄型设计可能并未带来实质性的改进，对“变薄”是否能实现真正的摄像头设计持怀疑态度。
评论者指出 A19 Pro 具备矩阵乘法加速能力，等同于 Nvidia 的张量核心，预计有助于本地大语言模型推理。若未来的 M5 也获得 GPU 提升，本地推理时代将进一步到来；还提及其他产品要点与苹果生态的潜在影响。
评论者提到 EFF 发布的检测基站仿真器的开源工具，硬件低成本且易于布置，提醒公众保持警惕并了解潜在的监控手段，提升自我防护意识。
评论者指出私有化水务后没有新增水库容量，仍依赖河流等资源，私有化前后差距使系统在长期投资方面不足，造成巨大浪费。主张应有国家级水资源策略，否则以利润为导向的经营模式难以解决供水挑战。
评论者表示自己长期远离广告生态，但偶尔在没有广告拦截的设备上浏览时，会感受到网页密集的广告与 SEO 导向的体验，认为这是多数用户的普遍现状且令人沮丧。
评论者指出恶意负载的社会工程学特征：攻击者会在地址列表中寻找视觉上最相似的地址，试图让用户误以为自己在发送给正确的地址，从而绕过常规的首尾检查。作者提到已完成去混淆分析，并提供相关安全提醒。
评论者描述自己遭遇被攻击的经历，列出受影响的包与细节，提到 Chalk 已有更新，NPM 账户也遇到问题。表示目前无力自行解决，只能等待官方回应与补救措施。
评论者指出事件不仅是对社交媒体禁令的抗议，更多是青年对腐败政府的不满与抗争；现场描述显示这是复杂的阶级与政治冲突，反映出对政府透明度与公民权利的关注。
Matt is in large part mischaracterizing, although not outright lying about, the court's ruling. If you follow the link he provided to the ruling itself, many of the dismissed claims were dismissed "with leave to amend" (basically WPEngine has to fix their allegations), and one was dismissed for the reason that it should instead be asserted "as an affirmative defense if appropriate later in this litigation." There were some claims dismissed in a way WPEngine can't fix, but not many, and others were upheld.
I have no connection to either side here, nor am I a lawyer, but I do know how to read a legal opinion.
In case Matt removes the link to the actual ruling from his post, and also simply for HN readers' convenience, here it is: https://www.courtlistener.com/docket/69221176/169/wpengine-i...
The Patriot Act itself was supposed to be temporary and “narrow.” Two decades later it’s the foundation for a financial dragnet that assumes privacy is the problem rather than a basic right.
Just like encryption, once privacy becomes associated with criminality, you end up weakening security for law-abiding users and concentrating power in a few regulated intermediaries. That’s not healthy for innovation, or democracy.
But we have to make an effort in the United States. We have to make an effort to understand, to get beyond, or go beyond these rather difficult times.
My favorite poem, my -- my favorite poet was Aeschylus. And he once wrote:
"Even in our sleep, pain which cannot forget falls drop by drop upon the heart, until, in our own despair, against our will, comes wisdom through the awful grace of God."
What we need in the United States is not division; what we need in the United States is not hatred; what we need in the United States is not violence and lawlessness, but is love, and wisdom, and compassion toward one another, and a feeling of justice toward those who still suffer within our country ...
We can do well in this country. We will have difficult times. We've had difficult times in the past -- and we will have difficult times in the future. It is not the end of violence; it is not the end of lawlessness; and it's not the end of disorder.
But the vast majority of [people] in this country want to live together, want to improve the quality of our life, and want justice for all human beings that abide in our land.
And let's dedicate ourselves to what the Greeks wrote so many years ago: to tame the savageness of man and make gentle the life of this world. Let us dedicate ourselves to that, and say a prayer for our country and for our people.
Bobby Kennedy, 1968
https://www.youtube.com/watch?v=A2kWIa8wSC0
History books can tell you facts that happened, but they can never truly tell you how it feels.
I feel we're riding a knife's edge and there's a hurricane brewing in the gulf of absurdity.
====
Incidentally, I feel like this is why it is so hard to actually learn from history. You can read about the 1918 'Spanish' Flu, but you think "we're smarter now". etc.
All: if you can't respond in a non-violent way, please don't post until you can.
By non-violent I mean neither celebrating violence nor excusing it, but also more than that: I mean metabolizing the violence you feel in yourself, until you no longer have a need to express it aggressively.
The feelings we all have about violence are strong and fully human and I'm not judging them. I believe it's our responsibility to each carry our own share of these feelings, rather than firing them at others, including in the petty forms that aggression takes on an internet forum.
If you don't share that belief, that's fine, but we do need you to follow the site guidelines when commenting here, and they certainly cover the above request. So if you're going to comment, please make sure you're familiar with and following them: https://news.ycombinator.com/newsguidelines.html.
Most of the comments are focused on the supply of education. But I don't think the supply side is the problem, irrespective of teachers and high schools. There is more and cheaper education available than ever before. Nearly every highschooler has more access to learning that kings and emperors would have fought wars for less than 200 years ago. However,the United States, particularly in the last 50 years, seems to have fostered a culture averse to education. I believe the years long decline in test scores is a symptom of that cultural shift.
I’m both sad and incredibly happy to read this. I lost my wife recently to a recurring metastatic melanoma. She was treated at MSK by an amazing team.
It was a terrifying diagnosis and literally would have been a guaranteed death sentence in 2017. In 2023, she had a very real chance of pulling through due to immunotherapy. Unfortunately some complications led to the worst outcome and we lost an amazing woman.
I remember that my wife said once that the everything she had on that journey was on the shoulders of those before. So maybe in some small way she helped with the research and a future mother, sister, wife, husband, son, dad will have hope where there was none.
At $org, we too are undertaking a mandatory RTO order, enforced with door access logs.
People are up in arms, particularly those in our smaller locales, where the offices we have are perfunctory at best.
The rationale is the usual one: collaboration, watercooler chat, unspecific evidence / "research" about productivity (that we are told definitely exists, but is yet to be shared).
I remain baffled by executives' obsession with RTO... C suites are committed to spending as much as possible on real estate and geographically limiting their talent pool. Whilst making workers more tired and less productive.
I still have no idea where it comes from. My best guess is that nobody at that level wants to break ranks with the "collective wisdom" of "investors", which creates a kind of groupthink.
(An RTO mandate is also an excellent thing for a CEO to show investors they are doing, if they are not making money and lack better ideas.)
Can someone that is actually interested in this explain the appeal? Thin on its own I get but thin with a giant bump 100% defeats the whole point for me. Seems clear at this point there is little hope of them engineering their way into thin cameras.
It has A19 Pro. A19 Pro has matmul acceleration in its GPU, the equivalent of Nvidia's Tensor cores. This would make future Macs extremely viable for local LLMs. Currently, Macs have high memory bandwidth and high VRAM capacity but low prompt processing speeds. Give it a large context and it'll take forever before the first token is generated.
If the M5 generation gets this GPU upgrade, which I don't see why not, then the era of viable local LLM inferencing is upon us.
That's the most exciting thing from this Apple's event in my opinion.
PS. I also like the idea of the ultra thin iPhone Air, the 2x better noise cancellation and live translation of Airpods 3, high blood pressure detection of the new Watch, and the bold sexy orange color of the iPhone 17 Pro. Overall, this is as good as it gets for incremental updates in Apple's ecosystem in a while.
Just wanted to advertise that the EFF recently released an open source tool for detecting cell-site simulators. The hardware is like $20 and it's pretty easy to setup yourself. Worth having around to stay aware of what's out there, especially if you live in one of the places recently targeted by the administration.
https://github.com/EFForg/rayhunter/
As the article mentions, privatised water companies have built no new reservoir capacity and relied on drawing from rivers and other sources.
What the article doesn’t mention is that pre-privatisation a new reservoir was built every year up to about 1960 and then every few years until privatisation in 1992.
So we are about 30 years behind in adding capacity to the system. This combined with the inadequate levels of investment in the system leading to enormous wastage, is the answer.
Water should never have been privatised. At least not without a framework for a national strategy for water. I suspect that wasn’t done because it would have made water companies and unattractive source of profit.
I am extremely insulated from ads online and have been for about a decade. Once in a while I have to browse on a device that does not have an ad blocker or most of the times does not even let you install one. Seeing a website that is SEoptimised and heavily ad supported feels like walking into a crack den. That this is the normal experience for the vast majority of users is sad.
One of the most insidious parts of this malware's payload, which isn't getting enough attention, is how it chooses the replacement wallet address. It doesn't just pick one at random from its list.
It actually calculates the Levenshtein distance between the legitimate address and every address in its own list. It then selects the attacker's address that is visually most similar to the original one.
This is a brilliant piece of social engineering baked right into the code. It's designed to specifically defeat the common security habit of only checking the first and last few characters of an address before confirming a transaction.
We did a full deobfuscation of the payload and analyzed this specific function. Wrote up the details here for anyone interested: https://jdstaerk.substack.com/p/we-just-found-malicious-code...
Stay safe!
Hi, yep I got pwned. Sorry everyone, very embarrassing.
More info:
- https://github.com/chalk/chalk/issues/656
- https://github.com/debug-js/debug/issues/1005#issuecomment-3...
Affected packages (at least the ones I know of):
- [email protected] (appears to have been yanked as of 8 Sep 18:09 CEST)
It looks and feels a bit like a targeted attack.
Will try to keep this comment updated as long as I can before the edit expires.
---
Chalk has been published over. The others remain compromised (8 Sep 17:50 CEST).
NPM has yet to get back to me. My NPM account is entirely unreachable; forgot password system does not work. I have no recourse right now but to wait.
Email came from support at npmjs dot help.
Looked legitimate at first glance. Not making excuses, just had a long week and a panicky morning and was just trying to knock something off my list of to-dos. Made the mistake of clicking the link instead of going directly to the site like I normally would (since I was mobile).
Just NPM is affected. Updates to be posted to the `/debug-js` link above.
Again, I'm so sorry.
It was absolutely not just social media ban, it was mostly youth protesting against the corrupt government and unfairness, social media ban was one element that was against the freedom of speech, but it was right around the time where everyone was documenting the rich politicians, their business connections and their families that have been living lavishly and just inheriting the election seats from generation to generation and spinning beurocracy to their sides.
I was there a few hours ago. It was a class struggle, but it was bound to be spun up as "kids don't get facebook and throw tantrum".