Hacker Newsnew | past | comments | ask | show | jobs | submit | paulnpace's commentslogin

> the reporter should not be the one responsible for reporting separately to every single downstream of the thing they found a vuln in.

It's 2026. We're more than 30 years into the Linux ecosystem. I don't believe this bullshit for a moment.

Given how trivially users can implement mitigation, distributions could have done _something_ to protect their users prior to publication date. A handful of messages is all that was required, not "every single downstream" - that is a straw man.

The publication of a bug that trivially gains root on an incredible number of Linux installs that was discovered using an A.I. tool prior to any of the "downstreams" implementing a fix is intentional. I speculate the motivation is free promotion of the A.I. tool.


>distributions could have done _something_ to protect their users prior to publication date.

yeah, distributions could be following the kernel updates more closely and they would have been patched prior to publication. mainline was patched 30 days before publication.

it is not the reporter's responsibility to babysit the linux distributions.


And here, with this comment, we see how the overall system functions: nobody actually cares what is going on with anything outside of themselves. It is a large group of individualized nihilists with total disregard to everyone, and you will provide lengthy justifications to maintain this system, as is.

It is a large group of people with their own incentives, and you're surprised they aren't self-organizing (or accepting outside pressure) to align with your own incentives.

>nobody actually cares what is going on with anything outside of themselves.

"not caring" would be not disclosing the vulnerability at all, and instead selling it to the highest bidder on one of the private markets

which, given the ridiculous and undeserved lashings the researchers are receiving from people completely outside of the security ecosystem, i would not be surprised if they moved in that direction. they would certainly make more money.


Ah yes, all those nihilists spending their spare time volunteering as developers and maintainers of open source projects.

I think the real issue here is hardware attestation. GrapheneOS will not protect you.

I will believe the GrapheneOS-Motorola project is a thing when I receive the phone.

Google hates real competition. They blasted out Chrome when Firefox was really taking off and normies were discovering adblocking. Chrome allowed adblocking as a honeypot until everybody was safely in their garden.

The goal in this for Google is to support digital ID. Every totalitarian goal currently being employed requires a digital ID and phones are how they want citizens to access their digital ID (the actual digital ID is created, owned, and managed by the regime, though they will outsource). However, this requires a phone they completely control. Google doesn't care about GrapheneOS or Agoristic users and will lock them out without even thinking twice about it.


> I personally wouldn't want my connection to my deceased best friend to be subject to some decay feature on a social network.

It seems like a feature could deal with this specific case, such as marking a friend as deceased. Possibly, other friends doing the same thing puts the profile to be in deceased status until the user logs in and changes the status.


People just shouldn't look to the online digital world for connection with dead loved ones. It's entirely impractical and one day after a bankruptcy or when it's no longer profitable it may just disappear. It can take years or weeks.

Much bullying potential. "You're dead to us" ...

If it requires Play Store, I will only put it on my work phone.

Some people don't really want the planet covered in solar panels. Others are cool with it so long as they don't have to see it.

IIRC, part of the original sales pitch was replacing physical books, for whatever reason one might like to do that. I did it because I was doing a LOT of travel.

I haven't had a job that requires travel in a long time, so looking at it from that perspective, having my library also require some kind of additional device maintenance cycle or whatever really adds a layer of complexity I don't want to deal with, so depending on what options I have and what I'm buying, I'm finding myself these days purchasing physical books more frequently just to avoid the hassle for future me.


One benefit apart from travel that I couldn’t go without is adapting the font size. I have pretty poor eyesight and some physical books were a PITA to read. Especially from bed / bath where I wouldn’t normally wear glasses.

Yeah, my sister bought into the Kindle eco-system early on, but I picked a Sony PRS-505 instead (mostly because it would fit in a Travelsmith shirt pocket) and for a long while, the only ebook which I had "purchased" was Robert Heinlein's _Space Cadet_ which I got w/ a $10 credit for browsing their store on a certain day (which I then got a price-fixing rebate check for which I kind of wish I'd kept...) and it was so rife with errors I had to check out a copy from the library to determine what some of them were. When the Sony ebook store closed down, my "library" was transferred to Kobo's and their copy of that novel was made in a different fashion, or corrected, so was actually readable on the Sony PRS-600 I eventually upgraded to.

Since then, I bought a Kindle Paperwhite, and I've made a game of either getting free e-books when offered on the store, or purchasing books when on sale and I've had sufficient Amazon gift cards from Microsoft Rewards, so that I've not spent "real" money on any virtual books, except for when I've purchased an ebook to go along with a newly published hardcover by an author whose work I feel strongly enough that it merits such doubled purchasing.


I still buy e-books for nonfiction I expect I'll read once, take a few notes on, and then probably never come back to, if I can't easily get them at the library. No need to clutter up my already overflowing bookshelves. For anything else I'm with you – not only do you not have DRM or other bullshit, physical books are still easier to navigate and overall more usable.

(This is absolutely bonkers though – the experience of using an e-reader has basically not gotten better since 2008 when I got my first Kindle. There are still glaringly obvious usability issues which nobody has spent any time innovating on.)


My shorts are on.


Thank you, I had not found this one.

What I had considered is that in the case of self-driving cars, nobody is criminally accountable, even though the rest of us may be criminally negligent should we make some horrific error. Philosophically, there is some kind of reason that criminal acts require punishment beyond mere financial liability (e.g., prison time) and self-driving cars are exempted from this. Currently, self-driving cars are also exempt from the actual laws of the road because the police are dis-empowered to enforce anything on the self-driving car.


In the U.S., most or all states require all corporations to have a president, secretary, and treasurer.


Heh, how long before someones agent starts looking for these 3 so it can run the business in the background and feeding them all the reports they need to sign.


In most jurisdictions, all three can be the same person.



Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: