Hacker Newsnew | past | comments | ask | show | jobs | submit | teoruiz's commentslogin

Back in 2011 (!) I went to a wedding in Denia, a medium-sized town on the Mediterranean coast of Spain.

The day after the wedding we went to a restaurant by the sea to have some hangover paella, part of the wedding celebrations. Weddings in Spain are usually 2 or 3 day affairs. Anyway, since we were travelling back to Madrid later that day we left our luggage in the trunk of the car, not visible from the outside. We locked the doors and off for paella.

Or so we thought: some bad guys were jamming the car key frequencies so the car didn’t actually lock. They hit jackpot with my bag: my Canon IXUS camera (I loved that camera), my Kindle 3G, my MacBook Pro and my iPad… with 3G.

When we found out later that day we went to the local Guardia Civil and told them the story. I opened “Find My” on my phone and told them exactly where the bad guys were, all the way in Valencia already.

You should have seen the face of the two-days-shy-from-retiring officer when I told him that my iPad was connected to the internet and broadcasting its location continuously. Remember this was 2011.

So they sent a police car to check out the area and found a suspiciously hot car. They noted it down and did some old-fashioned policing the rest of the summer. Two months later I got a call: they had found them and waited on them to continue stealing using the same MO, until they had a large enough stash that they could be charged with a worse crime.

They had found my bag, my MacBook and my iPad. The smaller items had already been sold on the black market.

It still is one of my favourite hacker stories. I went to court as a witness and retold the whole thing. The look on the judge’s face was also priceless.


Similar story for me. Except in Rome, and the ending wasn't happy because all I could do is watch my wife's iPhone go to Tunisia where it disappeared.

Still, in those very early days of "Find my" I could see how this was going to eventually change things.


I found that the PydanticAI [0] framework strikes a perfect balance between control and abstraction.

I’m building a non trivial AI app and the validation and dependency injection is such a great addition compared to using the LLM libraries directly.

[0] https://ai.pydantic.dev/


They recently added MCP support: https://ai.pydantic.dev/mcp/

Have you tried it?


Not yet! Really looking forward to it. Their development pace is hard to keep up with.


Thanks, this looks great. I've been playing with Huggingface's Smolagents, which is fun to tinker with and relatively easy to read through. But it is so tightly coupled to its two agent implementations - ToolAgent and CodeAgent - that it's not trivial at all to add your own state transformations.

This framework looks really well designed, I'm going to take it for a spin.


The main problem that I found playing with smolagents is the lack of documentation and examples. Anyway the framework has potential


Thanks just discovered https://ai.pydantic.dev/graph/

from the above link, which seems to use FSMs instead of DAGs.


The one thing I wish was better developed is persistence and streaming - they give sample code to stream, but it’s essentially a complete implementation of streaming that every client needs to implement.


Honest question: why are houses in the US primarily built with wood? Is it just because it’s cheaper?

Even if it’s cheaper, is it worth to have a cheaper but obviously less durable building when compared to brick and mortar?

It’s always been baffling for my southern European mind.


Depends on where you are in the US. There are a lot of brick and stone buildings in the northeast. Florida because of hurricanes they tend to build houses out of cinder block. In California because of earthquakes they tend not to build with masonry.

That said the US historically had a lot of wood. Most everywhere. So it was cheap and light[1] easy to transport. And wood if it's kept dry is durable. My house is 70 years old. The wood framing is totally solid. Previous house is 115 years old. The framing is also solid.

[1] House built of wood is probably 1/4 the weight of a house built of masonry.


It goes up much quicker and requires less highly skilled tradesman to build and to maintain.

There are new developments in the states where they produce the frames for the various housing 'templates' off-site, and then ship it to the plots and build the house there, almost like a lego kit.


A wood frame is much better in earthquakes; it just happily flexes. Steel is an alternative but until the plague was more expensive than wood.


At least in my area, brick houses are actually less durable because they crack on our shifty soils


I'm from the suburbs of Chicago and brick and mortar are very very normal there.


For my gf (in the usa), it's aesthetics. Though I look at brick and think "longevity." Perhaps historically it was cheaper/easier to use local wood and that image stuck with people?


Nothing is built with brick anymore. If you see a newer than 1940s brick house, its a stick frame (wood) with a layer of brick outside it for aesthetics. Also people associate brick with longevity, but as several of my friends in old ass brick row homes, their foundations are crumbling, and are usually in need of serious structural repair. Brick isnt bomb proof like people think it is. Its even more susceptible to long term stress from wind shear.


Relic from boom after WW2, many houses needed to be build fast.


> * ECS: Two containers can not use same port on same node. Anti pattern to containers.

That's solved if you use Application Load Balancer instead of ELB classic for your ECS service.


Is there any indication the vulnerability is present on Intel-based Macs?


It's not present because Macs don't have AMT.


There's been a plenty of Macs with vPRO CPUs. Unless Apple is getting custom CPUs or CPU firmware then it would seem that Macs do have AMT. No?

Enabling it is tremendously difficult though AFAIK.


It has to have the ME silicon and the AMT enabled firmware. According to Matthew Garrett, who I'd generally trust on this stuff, Apple hasn't ever shipped AMT-enabled firmware.


It's nice to see that for once it's a good thing that Apple hardly ever ships standard firmware and instead usually leaves out all the components and features they don't plan to use.


vPro isn't a CPU, it's a particular combination of CPU, PCH (southbridge), Intel NIC/WiFi, and AMT firmware. There's no evidence that Macs have AMT or vPro.


Well, Intel does a particularly bad job of explaining whether this exists. My MBP CPU is a Core(TM) i7-4850HQ, and Intel's ark site says it has vPro.


You're right about that. Intel's product lineup is a huge mishmash of optional features that no one understands and now it's going to bite them. (But not really, because what else are you going to buy? A Ryzen laptop?)


I don't see any reason why it wouldn't be. However it doesn't seem immediately clear whether or not it'd be exploitable under default configs.


Exactly the same right now from Spain. It seems the attackers are now targeting Dyn's European servers.


Try with `brew upgrade git`


How long will it take for the CA to be distributed to a large enough browser base?

I mean, it could be years. Is there any other, speedier process? (cross-signing, for instance).


8 to 12+ months for it to be in a release version of Firefox. https://wiki.mozilla.org/CA:How_to_apply#Timeline and https://wiki.mozilla.org/CA document the process in great detail.


Does that go for new root certificates as well?


I joined a startup wholly-owned by GOWEX 5 months ago. A startup that is now defunct.

I know it sounds crazy but we all believed those numbers, we were happy, money everywhere.

But from time to time one of my mental alarms would go off, and I would just ignore it. "What could possibly be wrong with this company? It's a publicly-traded company, after all."

The moral of the story is: pay attention to your instincts.


"I know it sounds crazy but we all believed those numbers, we were happy, money everywhere.

... 'What could possibly be wrong with this company? It's a publicly-traded company, after all.'"

Sounds like we've already forgotten about Enron[1]. They seemed to be rolling in cash, were hyped by Wall Street analysts and the media, etc. How could it all have been a scam?

[1] https://en.wikipedia.org/wiki/Enron_scandal


The first time around you curled "www.trucrypt.org" (note the missing "e") and it went to a domain parking service (findingresult.com).

The second time you went to the real "www.truecrypt.org", which is the real domain that now redirects to SF.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: