loumf

The cop made me call my mom on a pay phone and 40 years later I still have to hear about it. Cruel and unusual.

Contemporaneous notes are absolutely used in courts. That doesn't make these summaries illegal, but I can't see how they won't become evidence. They will be subject to discovery.

The main argument against them being good evidence is if they are not accurate and the public (i.e. the jury) knows that.

There are legal prohibitions against one-sided recording in some states (for example, mine).

Am I liable if my watch starts doing this? Or is Apple if it does this by default without even my consent?

I have no idea if the law cares about the privacy features Apple mentioned (no accessible audio, no speaker ID) if the audio was clearly captured at some point.

You'd have to compromise wikipedia in some way to get invisible text on its pages.

The one that was shown to work[1] was a niche answer to a specific question that programmers might ask. That site was controllable by the attackers in a way that wikipedia is not. Being a niche answer comes with automatic SEO, but for a smaller attack surface.

[1]: https://simonwillison.net/2025/Nov/25/google-antigravity-exf...

Suddenly it’s “copyright infringement” to put dots of ink on white paper.

I am unaware of any statute or constitutional provision that confers rights to AI.

Even if so, in older disputes (see Betamax/VHS), the possibility of verbatim reproduction didn’t stop the technology from being allowed because there were other non-reproduction benefits (time shifting).

Also, the restriction isn’t on a technology that could possibly reproduce something. It is on the act of using the technology to reproduce something.

Even after they decide, it is ok for people to disagree and work to overturn those decisions. You could just be a person that _wants_ a different reality. We have political mechanisms to do that.

I am not personally affected because I don’t mind LLMs using my code and writing to learn. I have open source under MIT and similar licenses. I didn’t foresee LLMs learning from it, but it does feel like it’s in the spirit of what I intended.

The instructions will have to get more and more sophisticated to work, but the general problem is unsolvable, I think, in the way we do it now.

This paper describes a two-agent “solution” that is more like what I think we need: https://ai.meta.com/blog/practical-ai-agent-security/

I don’t think it has been shown to work yet, but humans also use this kind of thing too — in accounting, it’s called “segregation of duties” and “dual control”.

You are saying exactly what I said, but making it seem like you don’t agree with me.

Part of reading a document is that in the middle of it, it may ask the reader to do something. That is true for humans too. Sometimes they might not realize that the instructions are malicious or are coerced to comply.

A simple example: Let’s say I know that you have a human assistant reading your email, summarizing and filtering it, and then forwarding on the important ones to you.

I could write an email that is directed towards that person with a bribe, threat, or other incentive to forward me your next password reset email.

The intellectual property law that governs ACM articles is copyright law, not patents. I don’t know who controls these (the ACM or the authors) or what rights might have been granted to the public.

The entire point of copyright law is so that people can make their writing public and still be able to control the right to make copies (for example, into your dataset for training an LLM).

I don't know if his final analysis is right or wrong, but if he believes this, he's completely clueless (about this aspect at least).

I think it’s apps that don’t implement the JPEG orientation tag correctly.

Also cash? Scammers will (and do) send a mule to your house to pick up boxes of cash.

I’m sure the source is LinkedIn ultimately. They reference my job and things from there and pretend to have carefully considered my posts (just LLM generated BS)

I am saying that 70 emails would be 70 seconds of time, so not a big deal. I can usually tell from the sender that it won’t be real and it takes just a couple of words to prove that. The good thing is that they tend to get to the point quickly, which works in my favor.

I get about 10 AI generated spam emails a day that get through my spam filter. It takes about 10 seconds to block and mark as spam. I barely read the first three words of each.

It’s been known for decades that you should never put your current directory in your PATH. There are endless opportunities for vulnerabilities then. I learned this in college in the 80’s (by not following it and getting owned).

For me, it feels like a prompt injection based security nightmare.

Literally every file on my mac and every site I browse is potential malware.

Edit to add: every email and text message as well.

Wins for "devices owned", but not necessarily for customers, which depends on the product/service.

The OP has said they have fallback to SMS/RCS.

The threat is that you depend on this library or use the VS Code Extension.

This is great. Now we won’t have to fix y2K36 bugs.

I recently switched to Linux for all development. I still use my Mac for everything else.

The main reason was to protect my personal data from possible supply chain issues or LLM agent mishaps.

I’m 99% in VSCode, a browser, and a terminal. There’s hardly a difference day-to-day.

I have recently gone all in on Python. Before I decided this, I was using Python for projects where I needed Pandas or numpy. I used React/TypeScript/Node for web applications. But, I moved to Django/HTMX.

The main reason is to avoid npm, but also, I wanted something with more built-in defaults (my web apps have simple needs). It has nothing to do with the language -- it's more the ecosystem for me.

I considered Ruby/Rails, but it didn't seem enough better than Python and can't replace the Pandas work I need to do.

When you do regular updates, they are quick. But also, you can timebox it and then back out and plan a harder than expected update.

Also, it keeps you in touch with your deps so you can consider if it’s even worth it. My favorite update was removing the dep (or starting a plan to remove it because it was interfering with regular updates)

I think of it a different way. The consumer market (if Microsoft doesn’t value it) is holding them back from paying tech debt. The fear of regressions is a good reason to not touch stuff.

If you do value a market and ignore this, the consequences can be fatal (see Sonos). But if you don’t, then doing the minimum is rational.

Wanted to share some stats and thoughts about Show HN's impact on my book.