Hacker Newsnew | past | comments | ask | show | jobs | submit | andrewaylett's commentslogin

The problem with asking an LLM for "its reasoning" after the fact, is that any justification it might give is a post-hoc rationalisation rather than a pre-meditated reason.

Agreed, and you could get a completely unrelated LLM to generate a similar apology without any of the real context, it would make up reasoning just as effectively.

You probably don't want to be setting up Maps on either a touch screen or a with keys while driving. But navigation and media selection are the two functions I'm generally happy to interact with via voice.

I have a pre-facelift MB A-class, and I think it's the best car I've driven for controls. You don't have to touch the screen ever if you don't want to: there's a trackpad on the centre console that just works even (most of the time) with Android Auto (and the back/home/map/media/phone buttons will still save you even if Android Auto won't always let you move the cursor to the back arrow in YouTube Music). The steering wheel has two touch-sensitive buttons, one for each screen (duplicating the trackpad, which itself duplicates the media touchscreen). I can't even easily reach either screen when driving, so I don't.

Driving controls are all available on the stalks and wheel, volume is adjustable from the wheel or the centre console, all physical buttons, levers, or scroll inputs, unless you need to change a setting using the trackpad. The only thing that's missing is wheel control for skipping tracks :P.


And then in the facelift they replaced the buttons on the steering wheel with touch sensitive ones and just removed the touch pad and replaced it with nothing. It's still useable and nice, but worse than the older model and there was no need to change anything.

I've used[0] `.local` to achieve something like this, by advertising service endpoints over mDNS.

Exposing random services to your local network is exactly what mDNS is for, I always thought it was a shame more dev tooling didn't do that.

[0]: https://github.com/andrewaylett/mod_bonjour is a fork of Apple's mod_bonjour, very much unloved of late I'm afraid.


That list contains issues with the APIs that Chrome exposes via MV3. Firefox still supports APIs that Chrome removed.


Note that this isn't six weeks of reserve, it's an estimated six weeks of draw-down given what they're still receiving from other sources combined with (I suspect) both known fuel in transit and a reserve that wouldn't last nearly as long as six weeks if it were all they had.

If they can increase supply or reduce demand, the reserve will take longer to draw down.


It's the author's problem with the UK (and the UK's Online Safety Act, which establishes requirements on hosts that can't be avoided by merely not being in the UK), rather than the UK's problem with the author.

But as much as I dislike the OSA: if you're not subject to UK law, why do you (website author) care what our government thinks of your website? It's not like they can do anything to you.


Visitors are subject to UK law.


Selected quotes from Apollo's GDPR page:

> Consent must be "freely given, specific, informed, and unambiguous."

and

> Apollo notifies them when their data is added to Apollo's database of business contact information and provides them with instructions on how to opt out.

https://knowledge.apollo.io/hc/en-us/articles/4409141087757-...

Now, their claim appears to be that they're processing business contact data under the legal basis of "Legitimate Interests". But as much as I am a big fan of not doing things that require a legal basis of "Consent", I'm unconvinced that they ensure their customers are sticking as tightly to their basis as they ought to be if they wish to claim it.

In other words: yes, if you have a CRM in then you might derive legitimate interests in sharing with Apollo. But you need to make sure you actually have the right legal basis for putting customer details into your CRM, and your support database almost certainly does not hold appropriate data!

So ultimately I think this is on both Browserstack (for connecting and sharing data other than in accordance with a legal basis) and Apollo (for making it too easy for their customers to send them data without a sound legal basis and then for sharing that data without suitably validating they had the legal basis to).

Apollo's privacy centre makes all the right claims about how they comply with GDPR, but the OP's story demonstrates that they're not as scrupulous in their verification as they claim to be. And strictly, both should be reporting the breach and taking steps to ensure it doesn't recur.


There would have been a power imbalance at the point of signing. I can well imagine that the implications of that particular clause weren't apparent at the time.

As a society (more so here in the UK than in the US, I'll grant) we have laws governing what one party may demand of the other. They don't prevent a genuine meeting of the minds, because enforcement of a contract will only be an issue if at least one party doesn't follow through. But they do limit the ability of the company to impose sanctions beyond a point.

One limitation in the UK is that penalty clauses that are "private fines", like this one, must be based on the actual damage caused.

In this case, as in the non-compete case, I would say that if a company wants to continue to influence what someone does, they should continue to pay them.


Given the Epic settlement means Google is allowing alternate app stores, and also the delay only applies for unregistered developers, I'm not certain it won't actually get easier to get folk set up on F-Droid.

It still remains to be seen what the actual requirements are, and even if F-Droid could become "approved" that doesn't mean they want to. Time will tell.


"only applies for unregistered developers" but remember the whole point is to allow Google to pull your "registered developer" status on a whim. Something they've shown over and over again they cannot be trusted with


But if there's a court order saying Epic and F-Droid have to be registered developers, they can go to jail for doing that.


Sure. But there isn't.


Why the hell should we "mother may I" with Google for running apps on our own phones if it isn't sourced from the Play Store?

The "security" rationale is horseshit given just how much malware is readily download able on the Play Store. Google never cleans its own house before going after others.


It's not just the US, story through the grapevine is that Google is under a lot of pressure Asian governments over "online scams".

(Allegedly the main actor behind this push is Singapore)


Singapore is not big enough to dictate terms to Google. If Singapore wanted this change and Google didn't, Singapore's most extreme option would be to ban the import of standard Android phones to a market of a few million people.


They're free to make changes to Asian country phones and not let the political pressure of Asian countries impact non-Asian countries.


Poor, poor Google


Don't you know? If one elderly person gets scammed we all deserve to be infantilized.


Wouldn't it be something if, given all the surveillance already in place, law enforcement punished the scammers instead of the innocent?


The scammers are often in a very different country than the victim. Finding the scammer is only 50% of the work, the other 50% is diplomacy and hoping the other side is willing to extradite. This is not made easier if the police force in the scammer's country is extremely corrupt.

This is why those scams so often rely on gift cards (or sometimes on cash which a local mule converts to crypto).


Many banking scams involve fake checks and deposits into other accounts, but I don’t see the government or banks taking active steps to stop them.


Maybe they can just sanction that person? Block them from making phone calls to the country and publishing apps?


But then how would they police what you install?

Maybe you have the criminal idea of installing an adblocker, for example.

That is not allowed since corporations need to make money.

The government and ad networks need to track you for your benefit.

Ads are needed before listening to each minute of a song.

You must submit to crpyto miners running in the background from the ads, increasing your electricity bill and pollution.

Only USA sanctioned and approved ads are allowed, also. We wouldn't want you seeing an ad from a competing entity, right?

If you install an ablocker, you are a terrorist and broke 324582 American laws.


(nevermind that the scams are extraordinarily likely to come through Meta, Google, Apple, Amazon)


They don't want users to find out who's the real scammer.


The scams are likely to some from outside Play. In the US, these scams don't run because iPhone is the dominant platform and side loading in iOS is not possible. In the rest of world they are widespread.


"Likely"? Do you mean that based on actual data, or are you using it as a weasel word so you can present whatever convenient "facts" that benefit Google as truth?

I’m betting on the latter. No Kitboga video mentions custom Android apps. What actually appears on almost all videos are online ads/spam or fake celebrity accounts messaging random people on Facebook.

It's funny how you aggressively push solutions that ignore the most common scam vectors investigators encounter. Could it be a coincidence that your proposal conveniently places every aspect of people’s lives at the mercy of big businesses? Or that the scam vector you downplay, ads and social media, just happens to be cash cows for some of the richest companies in history?

We already have plenty of paid lobbyists cheering the transfer of wealth from the poorest to the richest. There's no need to do that dirty work for free. Weaponizing the elderly being scammed of their life savings while protecting those that benefit from it is beyond messed up.


My proposal? Who exactly do you think I am? lol


Outside Play, on YouTube or via Google Ads for many of them. Likewise for Meta ads.


The scams that are happening in the rest of world are calls posing as bank support about urgent security issues and telling people to install apps to protect their accounts.


All the scams are for apps that are already in the Play and App store.


Absolutely! Never had one problem with apps on FDroid. Not even when tbe Simple Mobile Tools suite was sold to a shady company without a heads up to its users. And that safety isn't an accident.


I don't disagree about that.


Ah, sorry there seem to be a lot of people that seem to think that side loading is an issue to anything other than Apple and Googles profit margins.

They let so much malware in their stores already.


In the USA they tell you to install AnyDesk and remote access your computer. Or they just ask for your password. Or forge a check.


Does not sound like an Android problem. Maybe ask Microsoft or Apple about that.


Sideloading is very possible on iOS and there's an entire subculture surrounding it.


Not widespread enough to be a viable grift target.


And how much grift happens through Android side loading? (BTW, I hate that weasel word used to vilify a perfectly reasonable activity.) Practically all grift on Android happens through apps on the Play Store. People who know how to 'side load' are also usually careful and smart enough to think about what they're putting in. That's not a useful target for grifts either.

As somebody put it, Google goes after others without cleaning their own house first. It's just abuse of power at this point.


Apparently it's widespread in Asia and South America.


Are Debian repos a viable grift target?


They absolutely are and that's why they're tightly curated by maintainers.


Exactly like... you guessed it... F-Droid. Not Google Play.


FDroid has 0.2% of app volume of Play Store.

Don't mistake obscurity for security. FDroid isn't the size to even be noticed by problems that Play Store and AppStore are dealing with.


F-Droid at least does a quick review to make sure there's nothing malicious in the app before adding it. Since we know Google does something similar and there is still malware on the Play Store one might reasonably conclude that Google doesn't actually care about malware.

Now, it might be a problem of vetting at scale or malware being really subtle, but if that's the case Google should focus on improving their process before locking down Android for "security".


This is exactly why I gave the example of Debian repos.


Which again work on a model of a single entity having all the curation power.


My point is that Google does not want to protect users by restricting "side loading". If they actually wanted that, they would remove all the malware in their store. They are just building higher walls in the walled garden to lock you in.


Right, but the Debian Developers don't prevent you from installing (installing, not "sideloading") other programs. If you want to install malware you're free to, but they don't distribute it.


What does that have to do with Android and iOS?


Free software protects from malware, not walled gardens.


If you don't want Play Store, don't use it?


"Google is slowly removing such option "for your safety", and "hackers" on this website really believe them.


You can still install any ROM you want. Not having Play Store has some downsides, but those trades offs should be familiar to a free software enthusiast.


You can only do this on a tiny number of devices supporting free drivers (and mainline kernel), otherwise you are tied to an ancient Linux kernel. I'm using Librem 5 btw and don't believe that Android, whose development completely depends on Google, is a viable long-term solution.


Ha if we follow that to it's logical conclusion we should ban smartphones.


Ok, but the vast majority of people do need their hand held because they're incompetent, naive, or both. IMO this is pro consumer move


We shouldn't let naive or mentally disabled people to dictate how computing should work. That's the same logic behind the age verification shit that's happening worldwide.

If you (not you specifically) are unsure of your abilities to use computers, let a friend or a family member buy a dumbed down device for you or install parental controls or something. Or maybe have clicking the build number 7 times reveal "toddler mode" where you can lock your device down irreversibly as much as you want.


It might be pro consumer if the power were lying in some kind of democratically justified organization, which then decides which apps are allowed and which are not.

This way, consumers are helpless victims of the same megacorporation, which will use its near-absolute power over the mobile ecosystem (shared with one other megacorporation) to profit on the back of consumers.


No. Society should not be holding the hands of adults. It's unnecessary and it's insulting.


If Google actually wanted to protect people from malware, they would not approve Facebook, Instagram, TikTok, …


This is as pro-consumer as cutting off one's nose to cure a cold. Let me say this for the... I don't know how many times, that security, child protection, scam prevention, terrorism, miniaturization, sophistication, etc are all lies peddled by trillion-dollar megacorps to justify their cash grab, and by despotic governments to justify their consolidation of power over citizens. Nobody wants to know why all those problems still occur despite these unpopular measures. Meanwhile, NONE of those draconian restrictions on users' freedom and privacy are technically necessary to achieve any of those ideals. It's a lie that they convince the people by repeating incessantly.

This is 2026, for God's sake! How long has this grift been playing out? At least two decades? What will it take people, much less the tech savvy ones, to learn that all these are designs of greedy and power lusting minds?


It's not about malware. It's about Google complying with USA's geopolitical adventures.

Basically, Google needs an answer when men in suits ask them why they have technology that enables users to install sanctioned Iranian banking apps.


Somehow if you replace Google with Apple in the same sentence you'll get cursed to hell. Go figure.


Says who? The fanbois? What makes you think that ordinary people are any happier with Apple's abuses than Google's? This is not a worthwhile justification for what either one of them does.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: