Hacker Newsnew | past | comments | ask | show | jobs | submit | londons_explore's commentslogin

Outside the apple ecosystem, AV1 is supported nearly everywhere.

They’ve had hardware decoding since M3 and equivalent A cpus. So I’d say it’s pretty well supported.

It works even without hardware decode. I noticed youtube is using AV1 on my M1.

Pretty sure this is beyond copilots abilities... It's really bad at any kind of binary analysis.

It is absolutely great at binary analysis, as long as you give it a decompiler.

Really? It's been pretty good with a Ghidra MCP at signature scanning for extremely niche undocumented software.

Which probably allows them to skirt legal liability...

After all, a computer with the date set to 2021 will still function...


Until they shut down the server, which will almost certainly be soon after the certificate expires.

Yep. Scummy, even for Microsoft. Too bad their EULA blocks class action.

They were selling it until October 2021, so it's not some ancient system. By building a time bomb into it, they misrepresented what was effectively a $50/year subscription as if it were a $229 purchase. Should be a slam dunk case, but it won't be.


I didn't know you could block class actions just by stating it in the TOS for a product - thanks for the tip!

Their EULA is meaningless in countries with strong consumer protection laws.

I would like to see approaches to recovering data from fragile disks by placing the inner disk on a flat surface and using some kind of imaging technology to measure the magnetic fields - perhaps an electron microscope could do the job at low enough field strengths?

Using this I imagine it might be possible to not only read the disk data, but perhaps even previous versions of data that has been overwritten.



Could you use them on a hard disk platter? Is there software out there for recovery of data from a set of platters taken from a bad HDD for which replacement heads / doner drives are not longer available?

Perhaps only a very early hard drive, as 15um is the resolution of those cameras but the latest hard drives have a track pitch around 100nm (0.1um); in any case, in the data recovery industry the usual solution is a spinstand:

https://www.guzik.com/products/head-and-media-disk-drive-tes...

https://ieeexplore.ieee.org/document/4262329


Photo reproduction should be the target here...

And it looks like the software support needs work too - the obvious way to do it is being done able to import a jpeg or png to project or wrap onto the surface, a bit like texture maps in video games.


> Photo reproduction should be the target here...

There's an app called Hueforge that produces models that color mix to reproduce photos:

https://shop.thehueforge.com/

It's been around for years. There are databases of filaments with their TD values and color measurements to use. The blog really sells Prusa's attempts to do this with their own PLA, but there's a long history of color mixing in the community with extensive measurements of filaments that anyone interested should check out, too.


That looks/feels a lot like the Cerilica Truism approach (arbitrary mixing).

Will have to keep it in mind for when I get a printer which does nozzle/toolhead switching.


You can use it with any printer if you're willing to swap the filaments manually.

The print file will have pauses inserted at the layer swaps. You manually swap the filaments when it pauses. There are only a few layers and colors so it's not too hard.


I have a printer with four filament changer --- my predilection for this is mostly a concern for waste --- plus, I want a 4th 3D printer....

Seems doubtful that this security will be very strong. It won't be hard to spoof an official client.

If they’ve done it using Secure Enclave it’s essentially physically impossible to spoof.

The github OP reports that browser-based login still works, so it'll likely be circumventable.

Wouldn’t any Volkswagen keys need to cross the network to get into the Secure Enclave? Or couldn’t you exploit the Volkswagen app itself?

Keys in the Secure Enclave never leave the device (or the SE for that matter) and cannot be extracted even physically.

Newer devices support Remote Key Provisioning (RKP), so you still can't export keys but you can import them. (Physical attacks are still possible, just very difficult)

If the data is going through the air or a wire it can be sniffed, right? Is every message signed or encrypted like ssl/tls, or is this just some kind of extra header(s)?

Yes, it can be sniffed. It will at least use transport encryption, like TLS. For everything, yes. So you'll only get encrypted data you cannot read. You could attempt a Man-in-the-middle attack on this connection. Unless the app is badly made, this will not succeed.

And then, even if you could look inside, there's another type of asymmetric cryptography going on: the remote attestation itself. Again, if properly designed and possibly backed by a hardware security chip, it cannot be spoofed. This isn't something trivial like a shared secret in an HTTP header.


Wrong.

Okay, well that's a start. Could you help me understand where I went wrong? I'm not trying to be stupid here but just saying "wrong" is extremely unhelpful.

Also, who is taking the other side of these bets?

I understand betting on something as a hedge - for example a farmer betting there will be no rain as a way to hedge the failure of his crops.

But nobodies life depends which singer is most searched (apart from maybe the singers themselves trying to have a more stable income). Surely that doesn't equate to millions of dollars though.


Deepseek v4 pro is damn close to Claude 4.6, and whilst you'll pay quite a lot for a rig able to run it, it is open source.

The printing press was good enough for product market fit back in the 1700's. But now it isn't.

Last year's AI models will be the same. Do you want to spend 3 hours prompting free AI to fix your code or 1 hour prompting AI you paid $20 for?


That's only if these AI companies can keep improving their model performance faster than open source options can keep up. I don't think performance will keep scaling with more training data, and even if it does they've likely already used the entire history of content created by humans for training. Everything points towards diminishing returns in an increasingly crowded space of competitors, there's no other reason for these companies to be rushing to an IPO if they felt secure in their market positioning.

Did they actually sell $200M of illegal products, or is this a number plucked from thin air?

Why would they need to sell €200 of illegal products to be fined that same amount?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: