Hacker Newsnew | past | comments | ask | show | jobs | submit | throwaway290's commentslogin

> Honestly, if you live in tmux, this probably isn't for you but it's really helped to speed up my workflow.

Fresh honesty, nice.


Haha, I mean ever since launching this I’m learning of a zillion alternatives I should have probably tried earlier but for me the auto tiling is really the main thing and, as far as I can see, no other alternatives really do that for some reason? Maybe there’s a good reason but it suits my workflow anyway

And then in future if you try to build something to reverse the situation your coding llm becomes stupid and your psychologist llm recommends you some blue pills.

You haven't gone away from touristy track. A friend of mine did last year and the stuff I heard was pretty bad

touristy track is covered by cctvs and they are used to get people for anything including public urination or graffiti so of course it's clean


I don't think this falls under definition of genocide

> we suggest that infanticide is a sexually selected behaviour in killer whales that could provide subsequent mating opportunities for the infanticidal male and thereby provide inclusive fitness benefits for his mother.

I can see gene fitness benefit but mating opportunities, how?

"hey, me and maman uh killed your baby, wanna pump out a replacement real quick?"


With 1 in 30 chance of death can somebody help me understand why this had to be a manned mission?

It was essentially a dress rehearsal for next year's mission, which will result in an actual moonwalk. And then in 2028 we will go back for a second moonwalk and foundation delivery to start building an actual moon base. Artemis is a really cool and systematic set of missions that ultimately will result in a permanent human presence on the moon.

You wouldn't have this if your plug was properly grounded. Most developed countries have plugs that have grounding. EU via side pins UK via third prong

My experiences are all from third-prong countries.

To add to this, I notice this more frequently in the UK and EU countries than in some other parts of the world (although it varies within each country quite a bit).

Apple avoids shipping grounded plugs as if it was personal affront to Ive. Also caused many many times for me to be shocked with electrostatic build-up.

all my EU/UK macbook plugs I got from apple are always grounded, metal prong and metal side pins

so what I mean is maybe house electricity grid is not grounded.


UK plugs are always grounded because there is no ungrounded version.

But elsewhere you only get grounded plug if you buy extra extension cord for the apple power brick, otherwise it's only ungrounded.


> all my EU/UK macbook plugs I got from apple are always grounded, metal prong and metal side pins

The short version, where you remove the extension with the 3-prong plug and attach the plug directly to the charger brick, is only available in 2-prong in the EU/US (the UK thankfully still gets all 3 prongs in this configuration)


yes true the short one has no grounding.

Anyway as I replied to the other guy (and got downvoted for it) if the plug was grounded there would be no issue. Apple chargers have ground pins.

But sure it's bad if they stopped including grounded versions by default in EU...


> didn't have phones ... were fine in the end

Or depressed and suicidal because of being socially excluded in formative years. Let's roll the dice, what's the worst that can happen, more mentally sick adults? Clearly if we look around this is not backfiring in any way.


It seems that author basically found a 0day and published it. It's for sure better than selling it on the dark web but maybe it's better first tell it to Apple?

Not exactly. It's not a "new" attack vector, any software which was malicious would have already been able to attack when you first gave it permission (a prerequisite for this sticky permission issue). If you had downloaded an app and discovered it was malicious the remedy would generally be to uninstall the app, not just "revoke the permission for the one folder".

It's not a good look for Apple, and it's not great that the permission revocation basically doesn't actually work, but any malware that could have infected the system due to this issue would have also been able to infect the system while the permission was still (intentionally) enabled.


> If you had downloaded an app and discovered it was malicious the remedy would generally be to uninstall the app

There are many apps that themselves are not malicious but they run untrusted code via plugins and stuff. Like VS Code for example.

So you gave it a permission and then revoked it thinking all is fine. tomorrow an extension was hijacked and it now reads your files. cool?


Apple Security would instantly close it as "don't see the problem here" if you reported it to them. They have a poor reputation around TCC bug reports.

That makes it OK for you to not responsibly disclose a vuln? Cool I guess)

I have nothing to do with any of this.

But since they don't consider these as vulnerabilities in the first place, then yeah, sure.


It's very common for large companies to "close" or downplay vulnerabilities. That doesn't exempt researchers from responsible disclosure timelines. There have been plenty of instances where a company reverses course after some back & forth and the looming threat of going public.

You literally made a statement justifying not responsibly disclosing vuln because apple process sucks

whether it is a vuln is different argument (it's sandbox escape and definitely usable as part of an exploit)


Not really, just an unintuitive security feature. You still need the user's permission to access that folder, but that permission is then persistent. I consider it a UX bug for sure but not an exploit.

I agree, it's a ui/ux problem. It would seem that using the open file dialog should also request access but I'm guessing that was too intrusive and the user action is seen as implicit authorization. Security is one of those things that should aways be explicit though.

if having to run an arcane terminal program to disable access while GUI is as if access was not granted is "unintuitive security feature" for you, I can't even.

TL;DR we decided git needs more "ai" and we got money thrown at us!

It's not just you.

Imagine if smoking was allowed and considered cool. You basically must your child never allow to mingle with an average kid. If you are too busy at work, if you are single parent, or need a work trip, 100% you come back and your kid is a smoker.

All because what other families are free to decide and they don't give a fuck.

Do you want that world back? Do you have money to live in a gated house with private school and full time nanny and stuff so you can raise your child separately from the average? Must be nice


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: