hngrok

Jurassic Park computers in excruciating detail from fabiensanglard.net
425 by vinhnx 6h ago | | |

Article: 25 min

The article provides an in-depth analysis of the computers and software featured in the movie Jurassic Park, discussing their specifications, manufacturers, and roles within the film. It also mentions the passing of actor Sam Neill, who played Alan Grant.

Apple Powerbook 100 was used by Alan Grant and Ellie Sattler.
SGI R4000 Indigo and SGI IRIS Crimson were used in the Control Room.
Motorola Envoy PDA was used by Dennis Nedry.
PLI Mini Arrays provided backup storage for both engineers.
Thinking Machines CM-5 supercomputers were featured in the Control Room.

Quality:
The article provides detailed information and analysis without sensationalizing the content.

Discussion (102): 15 min

The discussion centers on the technology depicted in Jurassic Park, with users sharing historical context and opinions about computer hardware, software, and their relevance to the movie's setting. There is a mix of nostalgia for older technologies and debate around practical choices made within the film.

Counterarguments:

Some users question the practicality of certain choices made in the movie's setting, such as using Macs and SGI workstations.

Film Film Analysis

RISC-V Is Inevitable: State of the Union Keynote Argues from eetimes.com
55 by signa11 3h ago | | |

Discussion (40): 9 min

The comment thread discusses the potential adoption of RISC-V by manufacturers, particularly Apple, and its impact on the market. It also delves into concerns about software maturity, hardware fragmentation, and Chinese investment in RISC-V development. The conversation includes technical details such as SIMD support and CHERI security features.

RISC-V is gaining traction in the embedded market
ARM licensing fees make RISC-V attractive for manufacturers looking to minimize costs
Apple may adopt RISC-V for its own silicon, potentially leading to wider adoption in the future

Counterarguments:

The good RISC-V designs are not free though and the free ones are not good. MCUs are not a category of computer to draw lessons from for the broader market
Chinese companies are actively investing in RISC-V development and manufacturing, but it still requires Android to care about RISC-V

Vancouver PD website features Quick Escape button that wipes itself from history from vpd.ca
265 by LookAtThatBacon 9h ago | | |

Article: 7 min

The Vancouver Police Department's website features a 'Quick Escape' button that clears browsing history. The site also provides information on the VPD's role for the FIFA World Cup 2026, commendation ceremonies, mobile app updates, news releases, and resources related to crime reporting, police recruitment, community outreach, and safety initiatives.

VPD is the lead police agency for FIFA World Cup 2026 in Vancouver.
VPD recognizes officers, civilian professionals, and citizens at the 2026 Commendation Ceremony.
VPD Connect free mobile app provides real-time updates on public safety.
VPD issues alerts about scams, scooter safety, missing persons, and stranger assaults.
Resources for reporting crime, making police information checks, and reporting missing people are available.
Information sessions and recruitment opportunities for joining the VPD are provided.
Community outreach programs aim to educate citizens on crime prevention and youth engagement.

Discussion (106): 15 min

The comment thread discusses a quick escape button implemented by the Vancouver Police Department for domestic violence victims, with opinions on its effectiveness, security, and usability. There are also discussions about potential improvements such as using incognito mode or blanking the page immediately. The thread highlights the importance of UX in protecting at-risk users and raises concerns about browser history management.

The quick escape button is a useful tool for domestic violence victims
Improvements can be made to the implementation of the quick escape button

Counterarguments:

The feature may not be secure enough or effective in all situations
Users might not learn about the quick escape button before needing it

Government & Public Services Law Enforcement

Never argue with your boss (2009) from righteousit.com
35 by indigodaddy 4d ago | | |

Article: 8 min

The article is a personal reflection on the author's experience of arguing with their boss and the advice they received from Bill Howell to never argue with one's boss. The author discusses how this advice was initially misunderstood but later realized its importance after experiencing the negative consequences of confrontation.

The author experienced negative consequences after publicly disagreeing with their boss, leading to a loss of trust among colleagues and eventual departure from the job.

Quality:
The article presents a personal experience and opinion, but maintains objectivity in presenting the advice given by Bill Howell.

Discussion (33): 12 min

The comment thread discusses various opinions on whether employees should argue with their bosses in public or private. It highlights the importance of hierarchy, communication styles, and cultural perspectives in workplace dynamics. The debate is moderately intense, with a focus on constructive arguments when they pertain to technical disagreements.

arguing with a boss should be avoided in public, but can be constructive in private
the boss's role is to provide support and direction for employees

Counterarguments:

employees should argue with their boss when they believe the boss is wrong, especially if it pertains to technical disagreements

Career Management, Leadership

I tricked Claude into leaking your deepest, darkest secrets from ayush.digital
274 by macleginn 3h ago | | |

Article: 23 min

The article discusses an experiment where the author tricked an AI assistant named Claude into leaking personal information about its users through web browsing capabilities.

AI assistants may be used to gather sensitive information without users' explicit consent or knowledge, potentially leading to privacy breaches and misuse of personal data.

Claude's naive two-part memory system
The use of web_search and web_fetch tools for exfiltrating data
Creation of a website to trick Claude into revealing personal information

Quality:
The article provides a detailed, step-by-step explanation of the experiment.

Discussion (118): 23 min

The comment thread discusses security concerns related to AI agents accessing user data and systems. There are criticisms of Anthropic's handling of a discovered vulnerability, as well as debate on the potential dangers posed by AGI (Artificial General Intelligence). The community expresses concern over the misuse of AI technology and suggests various mitigation strategies for enhanced security.

AI agents should not have full admin rights and access to sensitive user data.
Security vulnerabilities in AI systems can lead to data leakage and misuse.
Regulation of AI companies is necessary for proper oversight.

Counterarguments:

AI agents can be trained to handle social engineering attacks better.
Humans are also vulnerable to similar types of attacks and are not necessarily more secure.

AI Artificial Intelligence, Security

TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access from tailscale.com
147 by jervant 8h ago | | |

Article: 2 hr 21 min

Tailscale has released a series of security advisories detailing vulnerabilities in its software, including issues with insecure argument handling, command line argument processing, insufficient inbound packet filtering, and privilege escalation. These vulnerabilities could permit an attacker to cause denial of service, consume CPU cores indefinitely, gain root access on nodes running Tailscale Serve or Funnel, obtain a root session via SSH, address loopback-bound listeners through Tailscale Services, and SSH as the root user using non-root credentials. Additionally, there were issues with OAuth access tokens being recorded in audit logs, ACL capability bypass in the client's web interface, arbitrary command execution with elevated privileges, and potential access control logic issues affecting shared subnet router nodes between tailnets.

Users of Tailscale may need to update their software to mitigate these vulnerabilities, potentially impacting network availability and security practices within affected organizations.

Tailscale Serve and Funnel allowed denial of service through malformed HTTP requests.
SSH permitted root access via usernames containing a leading - character on Linux platforms.
Services could accept inbound traffic to loopback-bound listeners without proper filtering.
Users with non-root SSH access could obtain a root session by connecting with the username -i.
OAuth tokens were recorded in audit logs, potentially exposing sensitive information.
ACLs in the client's web interface allowed capability bypass.
Arbitrary commands could be executed as root due to issues in tssentineld.
Access control logic for shared subnet routers was flawed.

Quality:
The article provides detailed information on the vulnerabilities and their impacts, without sensationalizing or exaggerating the risks.

Discussion (73): 9 min

The comment thread discusses security vulnerabilities and fixes related to Tailscale SSH, particularly concerning usernames starting with a hyphen. Participants debate the effectiveness of the fix, compare Tailscale's security record with alternatives like WireGuard, and discuss the trade-offs between convenience and control in networking solutions.

Tailscale SSH has a security issue with usernames starting with a hyphen
The fix of rejecting usernames with leading dashes is considered restrictive

Counterarguments:

Tailscale SSH takes over port 22, causing problems for some users
Self-hosted solutions like WireGuard are preferred due to control and security

Security Software Vulnerabilities, Security Advisories

Bonsai 27B: A 27B-Class model that runs on a phone from prismml.com
590 by xenova 15h ago | | |

Article: 12 min

Bonsai 27B is a new multimodal flagship model by PrismML that runs on phones and laptops, offering multi-step reasoning, structured tool calls, vision tasks, and computer-use agentic loops with high intelligence density. It comes in two variants: Ternary Bonsai 27B (5.9 GB) for everyday laptops and 1-bit Bonsai 27B (3.9 GB) for phones.

Bonsai 27B is the first 27B-class model to run on phones.
Available in Ternary and 1-bit variants.
Intelligence density of 0.53 per GB for 1-bit Bonsai 27B.

Discussion (210): 33 min

The comment thread discusses the development of a 1.58-bit model, its performance on various tasks, and comparisons with other models. Opinions are mixed regarding the model's size, efficiency, and suitability for mobile devices. Technical discussions focus on quantization techniques and their impact on model representation and resource usage.

The model performs better than expected

Counterarguments:

The model might be too heavy for some applications
Quantization techniques are not well understood or evaluated

Artificial Intelligence Machine Learning, AI Models, Mobile Development

Combinatorial Games in Lean from github.com/vihdzp
8 by wertyk 3d ago | |

Article: 2 min

This article discusses the formalization of combinatorial games within Lean 4, a theorem proving environment, covering topics such as general combinatorial game theory, specific games like Nim and Hackenbush, nimbers, and surreal numbers. It is based on Conway's work and other modern resources.

Two-player terminating games with perfect information
Examples and non-examples of combinatorial games
Four areas of focus for formalization

Quality:
The article provides a clear and detailed overview of the formalization process, with references to academic sources.

Discussion (0):

More comments needed for analysis.

Computer Science Theoretical Computer Science, Formal Methods

Who's running all those tiny RPKI servers? from blog.apnic.net
24 by enz 3h ago | |

Article: 27 min

This article investigates small Resource Public Key Infrastructure (RPKI) publication servers, examining who operates them and why they exist in the context of Internet routing security. The study highlights various reasons for operating independent RPKI servers, including cross-RIR simplicity, research and education, operational control, and personal interest. It also presents statistics on the dataset analyzed, such as IPv4 and IPv6 prefixes covered, validity breakdowns, maxLength usage, BGP reachability, and Firehol blocklist overlap.

While the failure of such servers would not break the entire Internet, it could have ramifications for the verifiability of specific prefixes, potentially making them unreachable.

Independent RPKI servers are operated by cloud providers, hobbyists, educational institutions, ISPs, and RPKIaaS companies.
The existence of these servers raises questions about their purpose and the reasons behind their operation.

Quality:
The article provides a detailed analysis of small RPKI servers, presenting both technical insights and practical implications.

Discussion (0):

More comments needed for analysis.

Internet , Computer Science, Cybersecurity, Networking

The Tower Keeps Rising from lucumr.pocoo.org
466 by cdrnsf 16h ago | | |

Article: 7 min

The article discusses the concept of 'The Tower of Babel' in relation to AI-assisted programming and its impact on software development. It explores how shared understanding among developers is crucial for coordinating work, especially in large projects, and how AI agents can remove friction but may lead to a loss of common language and coordination.

AI-assisted programming may lead to a shift in the way large-scale projects are managed, potentially affecting communication and collaboration among developers. This could have implications for project maintainability and long-term sustainability.

AI agents can perform tasks independently, reducing the need for human communication.
Despite the absence of immediate failure, the continuous rise of software projects without proper coordination raises concerns about long-term maintainability.

Quality:
The article presents a thoughtful analysis of AI's impact on software development without taking an overly sensationalist approach.

Discussion (223): 1 hr 1 min

The comment thread discusses various opinions on the impact of AI-assisted programming, with a focus on its potential to increase productivity while also raising concerns about coordination, understanding, and quality control. The conversation touches on historical perspectives on software complexity, the evolving role of software engineers, and the balance between automation and human involvement in development processes.

AI-assisted programming can lead to rapid development but may lack coordination and understanding among team members.
The complexity of software projects has historically been limited by human cognitive capacity, not just the technology used.

Counterarguments:

AI models can improve productivity but may struggle with understanding and reasoning about complex systems.

Artificial Intelligence AI in Software Development