Hacker Newsnew | past | comments | ask | show | jobs | submit | mcintyre1994's commentslogin

I think that’s just a matter of their capabilities, rather than anything specific to this?

Do any of the example apps work for anyone? I tap “try now” on one, and it just opens a page with its logo/name/description. There’s a sidebar menu that just has its name, and a restart app button that does nothing. I can’t see how to make the app do anything.

I had to switch from Duck Duck Go browser to Safari, then the Book Recommendation app worked for me. For what its worth, the recommendations were good, evidenced by my having already read half the recommended books. The vibe promots to create this app were incredibly simple.

It’s not a law, it’s just banned from a specific event. Chairs are also on the list.

It’s a sentence structure that LLMs over-use: “this isn’t just X, it’s Y”.

In what way is it harder to write a library that exfiltrates credentials passed to it in those languages? I’d think it’d be a bit easier because you could use the standard library instead of custom encryption, but otherwise pretty much the same.

> In what way is it harder to write a library that exfiltrates credentials passed to it in those languages?

It is not harder to write. It is more challenging to execute this attack stealthily.

Due to the myriad behaviors of runtimes (browser vs. backend), frameworks (and their numerous versions), and over-dependency on external dependencies (e.g., leftpad), the risk in JS-based backends increases significantly.


Ironically if I needed to manually copy the text from a barcode on my phone, I'd take a photo and use Apple's AI to select and copy the text from it.

I’d guess a first pass is done automatically? Eg if a page mentions eg Trump, just redact that whole page/paragraph/etc. So the people who have done the closer reading to redact further probably don’t actually know the scale of what was already redacted. Just a guess though.

Graphite isn’t really about code review IMO, it’s actually incredibly useful even if you just use the GitHub PR UI for the actual review. Graphite, its original product anyway, is about managing stacks of dependent pull requests in a sane way.


This is annoying, Graphite's core feature of stacked PRs is really good despite all the AI things they've added around their review UI. I doubt we'll want to keep relying on that for very long now.


You can still think of AI as one facet of Graphite's product that you can use or not depending on your work style. Stacked PRs are still a core piece and not going anywhere :)


Except for the undismissable "Pay use more to enable AI reviews" nag that Graphite places above your CI checks and assigned reviewers.


Never heard of graphite before today. Were they built specifically for AI code reviews or it's a pivot / new feature from a company that started with something else?


No, they've been doing "managing stacks of dependent pull requests" for a lot longer than AI code review. I've mostly been a happy user, they simplify a lot of the git pain of continually rebasing and the UI makes stacks much easier to work with than Github's own interface.


They started as a better PR review tool, with the main feature that you can stack PRs that have dependencies on each other. It solves the problem of having PRs merging into other PR branches, or having notes not to merge something until another PR merges. Recently they became an AI code review tool, and just added a bunch of AI tools to the review UI, but you could just ignore it and the core functionality was still great.


stacked prs will only get better from here :) we have an incredible amount of resources to keep improving that part of our product.


check out a range-diff approach using patchsets: https://pr.pico.sh


The more practical law is to ban using VPNs to bypass local censorship/filters/etc, which is the law the UAE has for example. Companies can keep using them for security, so can individuals who aren't using them to pretend to be somewhere else to bypass local laws.

This also has the benefit (to the government) of criminalising individuals, making prosecution much easier and allowing it to be more selective according to the government's whims. It reminds me of the way the US dealt with piracy, you could go after a bunch of college kids to make a point etc.


I'd guess the tricky part there is proving intent. If I sign up to a VPN so I can watch sports or other geo-restricted content while on holiday, does that count?

In a fully authoritarian state of course you likely don't have to worry too much about proof, but I'd suggest the UK has a ways to go for that.

On the piracy front, well we've seen how successful they were in stopping piracy.... not at all.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: