Hacker Newsnew | past | comments | ask | show | jobs | submit | tom1337's commentslogin

macOS Permission Management regarding shell scripts is so bad. For example they show you a list of software thats allowed to access the full disk - but I have like 8 "sh" or "bash" in there and some random scripts with no way to open the enclosing directory in Finder making it basically impossible to see what it is and if its legit…

I was one click from downloading it and was happily surprised that the page did not talk about Pricing so I assumed it was free - went back here to check if I missed something and seems like I did...

The application is free. But I apologize, where is the confusion coming from?

I won't understand why Cowork isn't simply opt-in. It also installs a ~10GB vm bundle which you cannot remove

https://www.reddit.com/r/ClaudeAI/comments/1rlc71n/claude_de...


Rule 1 with making number go up is you eliminate friction at all costs. The user's hard drive is free to you, so there's no reason to gate a feature you want them to use based on that. 98% of them will have no idea you're foisting garbage on them.

RIP, every base model mac from the past 10 years with the <= 256GB SSD. Including the new Neo. When you consider how much of that is eaten up by the system, swap space, caches, reserved space to download OS updates, and apps (2GB a piece is far from uncommon) -- having less than 15GB free is completely unsurprising on that size disk.

I've found that the easiest way to 'remove' the bundle is to delete its contents, then change the permission on the folder, so Claude can't write to it.

It was on my machine at least, I remember I had to do an additional install to activate that tab...

I don't think I get foldable phones. When is the extra space necessary? I mean most of them turn from a somewhat 9:16 aspect ratio to 1:1. You don't earn anything in space to consume media content. The only real improvement might be for multitasking?

You get more to see.

Maps are too narrow on phones.

Books also are easier to read.


The foldable iPhone will have an aspect ratio very close to 3:2 for the outer display (like the original iPhone) and of 1.41:1 (between 3:2 and 4:3) for the inner display (similar to an iPad).

Multitasking would be huge. One reason I hate doing anything "real" on my phone is because I can't see more than one thing at a time.

I mean you can see more at once but now your typing experience is worse. I have an iPad and it's by far my least productive device unless it's connected to a physical keyboard. Typing on a giant touchscreen is so much more tedious than my phone's screen.

It's not perfect, but there are plenty of things I do where I'm not typing very much, but I am swapping back and forth between apps or web pages quite a bit.

You can read more Hacker News comments per screen without having to scroll.

Running two full size apps at once is pretty nice. Text conversation and website, things like that. Or copying and pasting credentials out of a password manager

> It’s the DMA regulation that forces Apple to give the same access as they have to other AI chat apps.

But why can Tesla ship Grok to their cars in the EU without any problems? Why aren't they required to let me choose between Grok, OpenAI etc or even a custom endpoint?


The are not a "gatekeeper" under DMA (not enough users). Same as macOS.

> But why can Tesla ship Grok to their cars in the EU without any problems?

Simply because they are too small in user count. EU DMA, DSA etc. only apply at certain thresholds. Twitter for example falls under the scope, but Tesla is a distinct entity from Twitter and even if they were merged together, they would still be distinct services in the eye of the law.


Because Tesla hasn't been classified as a gate-keeper in the DMA.

Tesla is not marked as a gatekeeper by the EU and thus the law does not apply.

What exactly is this doing? Expiry notifications are offered by pretty much every registry already? Nameserver management also confuses me. Is this centralizing DNS from all providers or just the NS records?

> Expiry notifications are offered by pretty much every registry already?

It's an ICANN requirement. They all do it.


That's a fair observation. The product is definitely more useful for people managing dozens or hundreds of domains than for someone with a handful of domains on a single registrar.

I built it because I found myself dealing with domains spread across multiple registrars, each with different interfaces and workflows. The goal isn't to replace registrar features like auto-renewal, but to reduce the operational overhead of managing a larger portfolio from one place.


really odd that it basically doesn't tell or show you anything specific about the features. no screenshots of the service, or documentation to know exactly what it does or how it works

Adding extra emails to your inbox on top of the registry emails

Looking at the setup.js it seems to be an infostealer which posts the found details to a newly created github repo (on the victims account) or a command and control server. As far as I can tell it looks for github secrets and kubernetes cluster secrets.

Nuxt & Nitro -> Vercel Svelte -> Vercel Astro -> Cloudflare

Also Lovable just switched to TanStack as a default project framework which uses Vite under the hood. Lovable uses Cloudflare so they’re probably deploying it via Cloudflare Workers.

Cloudflare should just buy Lovable next.

Some packages need to build native dependencies. sharp for example needs to build libvips on the system [0] to work

0: https://github.com/lovell/sharp/blob/main/install/build.js


I’ve always felt this automation shouldn’t exist at all, but should rather be selectively controlled via a hook. The hooks yarn offers out of the box for example can be used to run any code you need to after install. Putting the project owner in control instead of the dependency.

Nuget/.NET ecosystem just handles it so much better. Netvips assumes libvips is available and they provide packages for common platforms. No need to waste electricity rebuilding stuff, or install native build chains, build and test deps. Similar for Skia or Sqlite or whatever.

sharp does this too:

https://sharp.pixelplumbing.com/install/#prebuilt-binaries

it can sometimes need to compile the C++ shim that sits between node and libvips, but that's rare.


but how can you verify that the prebuilt binaries aren’t compromised?

Out of interest, do you verify that every single binary file on your machine isn't compromised? All the packages coming from your package manager?

I absolutely don't. I even sometimes use "curl | bash" to install new things on my machine because most of the time it's easy and I tend to trust the authors.

My point was just that I don't think moving to pre-built binaries solves this issue.


sharp downloads over https and checks the sha256 (I think?) of the archive.

sharp does not rebuild libvips, it downloads a pre-compiled libvips for your platform.

https://sharp.pixelplumbing.com/install/#prebuilt-binaries

It can usually also download a precompiled binary for the C++ shim that sits between node and libvips, but if your node / arch / etc. is not supported, it'll compile that (that's what the build.js file you linked does).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: