Hacker Newsnew | past | comments | ask | show | jobs | submit | semiquaver's commentslogin

Ok? Not sure what a package manager can do about the fact that eventually you want to run the things you install.

Have any kind of provenance. eg like Debian has for 30 years. Key signing in person etc

That has also been implemented recently. With staged publishing the author must verify a new release with 2FA so automated attacks dont work anymore. Some human in the loop must verify a release.

A surprising number of companies do include “you may not use the service we provide you to compete with us” in their terms of service.

(edit)

After a quick search the best example is Atlassian. It would (apparently, IANAL) break terms to plan a JIRA competitor using JIRA.

  > Customer must not (and must not permit anyone else to): [...] (d) use the Products to develop a similar or competing product or service
https://www.atlassian.com/legal/atlassian-customer-agreement

Also Salesforce. Their competitors are explicitly disallowed from using any of their services for any reason.

  > SFDC’s direct competitors are prohibited from accessing the Services, except with SFDC’s prior written consent.
https://www.salesforce.com/en-us/wp-content/uploads/sites/4/...

I remember working for a company that did a lot of business in logistics. We were strictly prohibited from using any Amazon Web Services because several of our very high profile customers didn’t want anything on AWS. The higher ups were thoroughly convinced Amazon would copy it (and I mean, they came out with a product that competed with us, so they weren’t wrong!)

This kind of stuff “but they’ll copy us” is always weird (and wrong). Logistics isn’t some secret sauce. It’s taught in operations degrees across colleges. If a company is worried that all it takes is another company “copying” their IP to supersede them, then you don’t have a company, you have a simple app.

Amazon didn’t “copy” logistics from Apple. But both of them use similar underlying processes and optimizations. They both excel at it, and neither is eating the other’s profits. The same goes for smaller companies. Or the logistics providers like UPS.


Perhaps provide an example or two?

Was the parent comment edited, because it does have a couple of examples in it

Yes, I edited after about 20 minutes to add examples, mea culpa. Will mark the edit.

I think cognito was internally low-staff/KTLO for a while and that changed recently.

What does KLTO mean?

To add to the other posters, keep-the-lights-on usually means a product has no active feature development. It’s just supported with on-call and maybe some bug fixes depending on capacity.

No clue if Cognito actually was KTLO though.


Probably meant KTLO: Keep The Lights On

"Keep Lights To On." It's the post-it on the light switch wired to the Cognito server.

I can (honestly) tell that exact same story, except offset by three years so it was before AI and I did the same exact steps and had the same insights except with Google results instead of an LLM providing the key unlocks.

...and now you probably won't be able to find that info with regular Google and HAVE to use Gemini.

Always thought it was weird for the omniscient narrator to refer to her as “YT’s mom”

I found Snowcrash to be surprisingly poorly written. Especially given that I had read Cryptonomicon and Diamond Age before it. The quality of writing is so different. I thought perhaps Snowcrash was his first novel, but it wasn't!

Have to agree with you on this. Neal Stephenson is not a writer's writer by any means. But even by his standards I found the prose in Snowcrash to be plodding and amateur. I still love the book for its campy nature and for all the amazing ideas it birthed but it would have definitely benefited from a round of aggressive editing. Also the ending quite frankly was horrible, but I hear this is a general issue with Stephenson's works.

In general if you are new to Stephenson I would recommend reading Snow Crash first otherwise the transition from his other better written books will be jarring.


Stevenson's endings are "pregnant endings" as in the Aeneid:

https://old.reddit.com/r/mythology/comments/196r7mn/i_just_f...

It's not a bad way to end a book in principle.

I can't actually recall how snowcrash ends, I think I was losing interest by the end.


Swordfight (which is very stephenson to have in the ending) and nuclear-powered robot dogs showing extreme loyalty to the person who saved one of them from overheating.

I found the second part of Seven Eves to be a surreal experience. I think I might have stopped reading Stephenson after that.

Howso?

(Not parent)

The second half differs dramatically in tone. If you were really into the specific feeling of the first half, it is very jarring.

I found the whole thing very interesting and enjoyable, but I can imagine being excited for more content similar to the first half and being disappointed by the drastic shift in scale/tone/focus/etc.


That's definitely true.

I saw the book as two parts:

I: We have a problem, how do we solve it?

II: What are the (very long term) consequences of how we (and possibly others) solved that problem?

From that perspective, it fits pretty well, though yes, the tones of the two parts are decidedly different.

Wouldn't mind hearing from OP on their specific concerns.


I just found the transition extremely abrupt and a bit jarring.

Fun fact, Snow Crash was originally written as a video game script (and it shows.)

Was visiting a university bookstore few months ago and came across it used in paperback. Never read it but know it has modern/tech significance. Read some of it and went "well, naah" and passed. Ironically the book I ended up purchasing instead was really bad and I couldn't finish it (something by Maureen Down the NYT columnist, I love her opinion work but the book was horrible)

There's something you'll start to notice in Stephenson's books, where a passage will be almost entirely standalone and you think, he wrote this some other time and just barely massaged it to fit into this text. See also "Part 3" of *Fall; or, Dodge in Hell* which is pretty much entirely disconnected from the rest of the story but god damn it Trump just got elected (for the first time) and I've gotta write this.

I experience this as me being a ridealong on my friend's random diatribe. Oftentimes it feels like something he just learned and needs to tell someone about.

I believe REAMDE included an entire page dedicated to the virtues of lashing tires to fishing craft.


William Gibson's writing really fell off a cliff post-Trump. Agency was one of the dullest reads I've encountered in a long time.

Speaking of Fall, after a couple hundred pages I ended up just skipping the chapters about Bitworld.

I didn't bother reading Termination Shock and if Gibson ever finishes Jackpot, I doubt I'll pick it up either. What a bummer.


Isn't that Stephenson driving home the faceless drone, cog-in-the-machine characterisation of YT's mom?

I mean, literally not giving the character a name fits right in with the alienating working conditions of the quote above, and the fact YT's mom is working on a software cog with no understanding of the machine it fits into.


But she did have a name in the story.

I haven't read it, but if it's written in the first person with the narrator referring to themself as 'YT', then it's at least consistent? If yours truly suddenly referred to my mother, or indeed if I referred to yours truly's mother, that would be more jarring I think?

That’s not what’s happening. Snow Crash has an omniscient 3rd person narrator.

A protagonist (but not THAT Protagonist!) is named Y.T. (street nickname for Yours Truly) and her mom doesn’t matter. She’s environmental set dressing.


Called YT by someone other than herself?

I'm not sure she's actually addressed as such by others in the story, but it's how the narrator addresses her. And IIRC how she introduces herself to the hero protagonist (Hiro Protagonist) on first meeting.

In a later work she's referenced as Miss Matheson.


WTF, why chime in without any additional research if you haven’t read it in the first place?

No, it’s an omniscient third person narrator. Yeah, YT is probably the “true” viewpoint, esp if you take diamond age into account. “Chiseled spam” and all that.


There seemed to be enough information to comment from a language perspective.

Third-person narration that refers to the narrator themself as 'yours truly' seems contradictory to me.


Weirder than having a character just named Y.T. ?

'Yours Truly' seems banal when the main character is Hiro Protagonist.

Self-debasing levity is one of the many reasons Snow Crash (1992) is a great reaction to Neuromancer (1984).


I think quite a few folks missed or have forgotten that Snow Crash is a satire on the cyberpunk genre AND society at the same time

And those folks are trying very hard with the whole Torment Nexus thing.

nueromancer tried to be edgy and serious, snow crash is weird and fun

Neuromancer was edgy and serious... in 1984.

And as Gibson later said ~00s, cyberpunk's moment is past and now it's boring. (At least according to him, but that counts for something)


In reality, even if they did recognize the severity of this problem, they likely view the cost to remediate it as prohibitive, as it would involve reworking their whole weird janky system. So better to pretend they don’t have to deal with security.

This is why governments need to — and are — stepping in with things loke Cyber Resilience Act in EU.

If this product continues to sell in EU after Dec 2027, they will have an obligation to update.


Easy fix from the company’s point of view: make product lifecycles one year tops.

> This post is already getting too long, so I won’t cover all the extra problems besides the big two.

> There’s no estimate of the environmental impact of all the extra processing

The “environmental impact” of this data processing is one of the “big two” problems with the proposal? Maybe this was just a backup filler argument but it is such a silly point that it immediately makes me question the entire article. This is a massive tell that someone is arguing in bad faith.


From context, it seems there was an API that was internal for support use but was supposed to be gated by some required process of convincing the support agent you were who you said you were (also vulnerable to social engineering) but they didn’t really evaluate whether tools intended for conscientious human use should be provided directly to the LLM that replaced the former support agents.

People are wont to stick to their pet theories even after they’ve been contradicted by facts. The idea of a Bluetooth speaker named “boom” filled the initial vacuum and became a meme that won’t die.

> they've taken no action.

Not running lifecycle scripts by default is eventually going to be the default behavior. Late is worse (edit: I meant better) than not at all. https://github.com/npm/rfcs/pull/868


Wait how is being late worse than not doing it at all? Is it true for mortgage payments and apologies?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: