Hacker Newsnew | past | comments | ask | show | jobs | submit | dv_dt's commentslogin

I hold the inverse risk assessment- I think acting on a peek risk is much higher with larger operations such as OpenAi or eg Amazon -as they've allegedly done the same on their product marketplace and deciding on generic products, in addition to open source-alike service offerings.

Larger entities have the resources, the inclination and the protective legal teams to act much differently than a resource tight n-tier platform operator


It's really quite the opposite.

Large firms have a much harder time hiding that kind of behavior, and they have much more to lose.

Large firms require processes and controls around everything. If Amazon is peeking into corporate customers' data, then there have to be mechanisms designed to allow that, a whole bunch of people know, it's part of engineering designs, and a whistleblower is going to leak it to the press.

And then Amazon is going to lose all of its business customers once its privacy guarantees were shown to be intentionally circumvented.

It is simply not economically rational for a company like Amazon or OpenAI to look at the data of its corporate customers.

Regular consumers are a different story, because you need to respond to abuse, illegal activity, etc. So they don't have the same privacy guarantees.

But corporate customers, that stuff is watertight. No cloud provider is going to risk losing their entire business because they violated their privacy guarantees.


> If Amazon is peeking into corporate customers' data, then there have to be mechanisms designed to allow that, a whole bunch of people know, it's part of engineering designs, and a whistleblower is going to leak it to the press

An awful lot of this sort of thing in the corporate world is based on pinky-promises and legal threats, more than on robust technical controls.

Every production system I have ever seen has at least one set of dev-accessible keys that has access to the production DB. Mature systems at least had audit logging around who retrieved those keys, less mature systems often didn't have any kind of internal access logs.

Is "Amazon the corporate entity" snooping on your data? Absolutely not. Is someone with Amazon internal access snooping on your data? You'll never know either way.


> If Amazon is peeking into corporate customers' data, then there have to be mechanisms designed to allow that, a whole bunch of people know

According to this comment, they did have a mechanism and a process for that: https://news.ycombinator.com/item?id=23929959

Yet it seems to have had negligible impact on their ability to obtain and retain customers.


That's exactly how amazon decides what becomes an amazon basics product.

AWS has also strip mined open-source software, elasticsearch, redis, mongo, browser rendering tools, etc.


If you don't know the name already check out Krita https://krita.org for art software

Depending on interests other solid sw is Inkscape, Blender, and GIMP. But those get increasingly intricate to use. I also wonder how the Adobe AI clones will do after their first one shot publicity.


Krita has a Flatpak, it will run well under Fedora Atomic.

Ah, the game of what can be taxed that has the least lobbyists to protect it - it's a game that plays out as a decline for civilizations because government representatives aren't representing the interests of the people of the nation. And because the biggest entities with money have the most lobbyists.

I could be misremembering, but wasn't it mostly a software offering at that point?

From TFA

It's not a prototype. The Grid has been running for customers for five years. It already builds tens of millions of dollars of electronics a year. Across CircuitHub we've shipped more than 2.2 million boards, placed more than 150 million parts and served more than 26,000 engineers.


But is the actual architecture of systemd giving simple, securable, reviewable boundaries? This is a codebase that runs in stages of inherent privelege and very low levels in many linux systems.

Yes, systemd is not one piece of software, it’s a collection of software, like GNU. The components aren’t just modules or something, they’re actually different programs altogether.

When people say systemd they really mean systemd-init, which is one piece of software. Not systemd-resolved, which is another.


The number of binaries installed on the system has little to do with how the software is developed - how many pieces of software is LibreOffice?

What matters is if they’re separate programs or not. They’re separate programs. Systemd is, like, 25 different pieces of software. It’s not 25 objects that are dynamically loaded or something. No, it’s 25 different pieces of software.

Most distributions only use some of them, and the “some” set is different from distro to distro. Many distros swap parts out. And some distros only use systemd-resolved.

Systemd is, legitimately, well divided. Most of the complaints against systemd are from people who know basically nothing about systemd.


Why does it matter that it's 25 binaries on disk? Surely the logical structure matters way more than the filesystem structure. Is Windows 3000 pieces of software because there are 3000 executables in system32?

It matters if they're separate programs or not, and they are. You can pick and choose, and distros do. Systemd is not a monolith, it just isn't.

Is Windows 3000 pieces of software?

How many pieces of software is nginx or Apache, where every feature is an optional plugin?


Are they working together with interdependencies or not?

E.g. explorer.exe is not replaceable on windows so the display server and that is one software. (The kernel is NOT though, because it can surely run in a headless way). It's not that hard of a concept..


the display server and explorer.exe on windows are much more separated than systemd-init and systemd-journald...

Actually no they’re not, you can’t run one without the other on windows. Explorer.exe isn’t just the file explorer, it’s most of the minnow management and shell.

You can absolutely run systemd-init without systemd-journald, and some distros do.


Well, does the way spreadsheet cells are handled has any relevance to presentations? If not, then they don't increase each other's complexity budget.

systemd-init has nothing to do with network resolution.


Except it does, because it signals systemd-resolved whenever a network interface service comes up or goes down. And where do those come from? They're created automatically by systemd-init's tight coupling with the network subsystem, which it shouldn't have.

systemd-journald is a nicer example though.


Well, my only gripe with it is that it's C. Otherwise it's very modular.

Not even the next cycle, as far as I can tell if you say stop or unsubscribe, the political spam mailing list system adds a new candidate to the ~8-10 candidates they keep you loaded with

Many private utilities in the US have fought against residential solar, and are seemingly motivated to act against it as something against their long term interests. In California the amount of Public Utilities Commisssion retrograde policy is ridiculous.


Just dont expect net metering and get yourself some batteries. They are cheap now.


If its any consolation, with your solar system you have a shared massive fusion reactor


The disappointing aspect is how frequently censorious actions are initiated at the beck of private corporations or authoritarian motivations


Im not sure the strategic calculation is as simplistic as that


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: