Hacker News, Distilled

AI powered summaries for selected HN discussions.

Page 822 of 836

Is regulated BGP security coming?

Perceived Severity of BGP Risk

  • One view: operators have largely self-organized; BGP hijacking is rare compared to other attack vectors and often not impactful on well-run networks.
  • Counterview: incidents still cause large, global outages and are exploited for censorship, crypto theft, and abuse; thus BGP hijack must be in any realistic threat model for internet-reliant operations.
  • Some argue “least likely” vectors become more attractive once others are hardened.

Self-Regulation vs Government Regulation

  • Some see FCC action as a justified response to slow industry uptake of protections like RPKI (e.g., low US deployment decades after introduction).
  • Others call it a dangerous power grab, preferring multistakeholder internet governance and warning against nationalizing or politicizing routing (e.g., “Great Firewall of the USA” concerns).
  • Debate over whether states are ultimate authorities or merely delegating to RIRs and multistakeholder bodies; skeptics note states can always reclaim authority.

RPKI, ASPA, and Technical Limits

  • RPKI is viewed by some as the natural cryptographic ownership mechanism; others note it doesn’t fully stop hijacks and needs extensions like ASPA.
  • Confusion and criticism around how exactly RPKI prevents specific attack modes; some claim it “stops nothing” without additional mechanisms.
  • Concerns about RPKI trust anchors being long-lived and high-value single points of failure.

Deployment, Legacy Space, and Incentives

  • Legacy IPv4 holders resist RPKI due to ARIN contracts/fees, arguing they never agreed to new terms.
  • Others argue reachability is a privilege; if you won’t participate in RPKI/IRR, you shouldn’t expect global routing guarantees.
  • Suggestion of financial bonding or penalties for false announcements to create accountability, especially for chronically misbehaving regions.

Analogies to TLS/PKI and Centralization

  • Some compare BGP regulation and RPKI to the transition to mandatory HTTPS/TLS: initially seen as a power grab but later accepted as necessary.
  • Others see the TLS/CA ecosystem as a cautionary tale: central CAs (and now Let’s Encrypt) as single points of failure and gatekeepers, harmful for small “human” websites.

Related Security Measures and Threat Models

  • Comparisons to SS7, which is regulated yet still lacks strong cryptography.
  • Debates over DNSSEC, CAA, and Let’s Encrypt’s handling of BGP-hijack-based certificate misissuance.
  • Calls for mandatory IP source validation (strict uRPF) at edge ISPs; noted as infeasible in the core due to asymmetric routing.

Git cheat sheet [pdf]

Git’s complexity and origins

  • Debate over whether Git is “needlessly” complex or just matching a complex problem domain (Linux kernel–scale, decentralized development).
  • Some argue it was built quickly for one project with no UX focus, so design is “one person’s best idea” rather than ideal.
  • Others note that earlier internal constraints (e.g., cost of adding subcommands) led to overloaded commands like checkout, worsening UX.
  • History with BitKeeper and Subversion is mentioned; Git seen as better for branching/merging and massive repos, but not necessarily ideal for all projects.

UI vs underlying model

  • Strong consensus that the core model (commits, trees, blobs, refs) is simple and powerful, but the CLI is confusing and inconsistent.
  • Complaints about many ways to do the same thing, evolving commands (reset/checkout vs switch/restore), and hard-to-memorize flags.
  • Some defend Git’s interface as manageable once terminology and concepts are learned.

Alternatives and frontends

  • Jujutsu (jj) repeatedly recommended as a Git-compatible tool with a simpler mental model and friendlier workflows, especially for history editing and conflict handling.
  • Mercurial praised for UI but criticized for performance on huge codebases; Fossil and Subversion suggested for simpler or solo workflows.
  • Many recommend GUIs and TUI tools (Magit, Fork, GitKraken, Sourcetree, SmartGit, IntelliJ’s Git UI, lazygit, Sublime Merge) to avoid raw CLI complexity.

Learning curve and “curse of knowledge”

  • Several note that even experienced developers struggle beyond basic commands; many only know a small subset (clone/pull/add/commit/push).
  • Some argue a VCS shouldn’t take years to feel safe; others say deep understanding requires deliberate study and practice.
  • The “curse of knowledge” is invoked: experts underestimate how opaque Git feels to newcomers.

Tips, tricks, and minor debates

  • Popular commands/features highlighted: add -p, diff --staged/--cached, commit --fixup + rebase --autosquash, cherry, log -L, log -S/-G, commit -v, reflog usage.
  • Some prefer manual patches or simple workflows over stash/branches.
  • Naming like git blame is criticized as negative; alternative names like “praise” are suggested.
  • Cheat sheet generally praised, with requests for tags and some nitpicks on notation, fonts, and minor inaccuracies.

AI firms mustn’t govern themselves, say ex-members of OpenAI’s board

AI Hype, Market, and Real Utility

  • Several commenters see current AI investment as a bubble, with most startups overfunded and overhyped; Nvidia is viewed as the main clear beneficiary.
  • Others argue there are real “sticky” use cases and that markets will eventually correct toward better products, though total addressable markets are likely overstated.

Who Should Govern AI

  • Strong pushback against pure self-governance by AI firms; many argue no company should regulate itself, citing general corporate behavior.
  • Disagreement over whether boards are enough, or whether governments must ultimately oversee.
  • Some propose hybrid or industry-body models (e.g., FINRA-style self-regulation under state authority, professional orders, ratings boards) as a template.

Regulation: Competence, Capture, and Scope

  • Widespread worry that governments lack technical understanding and are vulnerable to lobbying and regulatory capture, entrenching big incumbents and freezing out smaller entrants.
  • Others counter that this article explicitly warns about capture and that modern states routinely regulate complex tech via expert agencies.
  • The EU AI Act and GDPR are debated: some say companies adapt and move on; others claim such rules shift investment away from Europe and burden smaller players.
  • A recurring view: existing laws (privacy, consumer protection, IP, torts) cover most harms, so AI-specific regulation risks being mostly theater or protectionism.

AGI, Existential Risk, and Sentience

  • Many treat AGI/x‑risk talk as marketing or sensationalism; they doubt LLMs can “scale to AGI” and see more mundane economic and energy concerns as central.
  • Others argue that if AGI is plausible, current labs resemble privatized Manhattan Projects and need strong external control.
  • There is debate over whether sentient or sapient AI will ever exist, and if so, whether “AI slavery” would become an ethical issue.

Concrete Harms and What to Regulate

  • Suggested targets: life-or-death decisions, AI-assisted bio/chemical weapons, autonomous weapons, large-scale propaganda and deepfakes, and privacy abuses.
  • Some note that regulation will likely exempt national security and military uses, so state-backed development continues regardless.

Intellectual Property, Commons, and Open Models

  • Many are more worried about cultural enclosure than AGI: large firms scraping “all of culture,” training proprietary models, then paywalling outputs.
  • Proposed remedies include: requiring model release if trained on public/unlicensed data; limiting exclusive ownership rights over models built on public corpora.
  • Others argue there’s weak legal basis for treating training as copyright infringement and that some “AI safety” narratives help justify enclosure.

Trust in Current Actors

  • Skepticism toward both tech CEOs and governments is pervasive; some see former OpenAI board members as power-seeking or incompetent in the Altman episode.
  • Others, having reconsidered that episode, think the board may have been right about risk even if execution was poor.
  • Overall mood: high distrust of all power centers, concern about regulatory capture, and no clear consensus on a workable, trustworthy governance regime.

The t-test was invented at the Guinness brewery

Origin and Naming of the t‑test

  • Many commenters enjoyed learning or recalling that the t‑test came from Guinness and was published under a pseudonym, explaining the odd “Student’s t-test” name.
  • Some say this story appears in “almost every” intro stats text; others report never seeing it, citing specific books. Coverage seems uneven.

Gosset’s Method and Historical Details

  • One account emphasizes Gosset’s empirical approach: thousands of hand-written cards and simulations to infer the distribution, plus an admission he couldn’t fully prove it.
  • Another commenter initially disputes this as implausible, then is countered with direct evidence from the original paper.
  • There is also detail on Guinness’s rules for employee publishing (no beer, no company names, no surnames).

Interpretation and Pedagogy of Statistics

  • Several comments lament that intro stats is often “cookbook” style: when to use a t‑test, but not why it works or its derivation.
  • Others argue that conceptual understanding (inference, uncertainty, hypothesis testing) matters more than formal proofs in introductory courses.
  • The philosophical schools of probability (frequentist, Bayesian, etc.) are mentioned as under-taught but crucial for interpretation.

Decision‑Making and the t‑test

  • One thread stresses that Gosset’s work is fundamentally about decision-making under uncertainty, not just p‑values.
  • The t‑test is framed as a way to trade off false positives vs false negatives to make economically rational choices (e.g., rejecting or accepting beer batches, optimizing sample size).

Math Curriculum: Stats vs Calculus

  • Debate over proposals to prioritize statistics over calculus in high school.
  • Some argue calculus builds better mathematical rigor and intuition (rates of change, optimization), especially for future engineers.
  • Others say probability, combinatorics, and logic are more generally useful, and that depth in any topic is more important than which topic.

Industrial Research, Openness, and Lost Work

  • Commenters note that Gosset’s case raises questions about how much valuable industrial research is suppressed or lost (e.g., internal reports, defunct labs).
  • Parallel drawn to modern companies restricting open‑source participation over security concerns; some argue this obscurity is less effective than active engagement.

Guinness as Innovative Company

  • Guinness is portrayed as unusually forward‑thinking: good working conditions, perks (e.g., swimming pool), and technological innovation (e.g., the nitrogen widget, tax/lease strategies).
  • Visitors mention plaques and exhibits commemorating Gosset and note that the brewery’s history is woven into Dublin’s tech and cultural landscape.

Statistical Practice, Assumptions, and Alternatives

  • Discussion of the t‑distribution’s symmetry and the implied normality assumptions.
  • For skewed distributions, alternatives like Kolmogorov–Smirnov, Mann‑Whitney, and runs tests are mentioned.
  • Some question the practical added value of a t‑test when good visualizations (boxplots with points) already clearly show differences; others reply that formal tests provide verifiable, quantitative evidence, though p‑value thresholds are arbitrary.

Related Books, Talks, and Cultural References

  • Multiple recommendations: narrative statistics books, a history-of-statistics text, and a general “how to measure” book.
  • Links to conference talks (including one with a Guinness-on-stage bit) and an xkcd comic are shared.
  • Several commenters express that such historical and narrative framing made statistics more engaging and memorable for them.

macOS Sonoma silently enabled iCloud Keychain despite my precautions

Apple’s Privacy Posture and Trust

  • Many see Apple’s “we take privacy seriously” as mostly marketing, especially given incidents like PRISM participation and past on-device scanning proposals.
  • Others argue Apple has made real trade-offs (reduced functionality for privacy), and that dismissing it as “only marketing” is overly cynical.
  • Distinction is made between trusting Apple’s intent (not nefarious) vs. trusting the security of any cloud service, including Apple’s.

iCloud Keychain Bug and User Responsibility

  • Core complaint: macOS Sonoma appears to have silently re‑enabled iCloud Keychain despite it being explicitly disabled.
  • Some blame the user for being signed into an Apple account at all; others note valid reasons (Find My, App Store, development, testing) that don’t imply consent to cloud-syncing passwords.
  • A recurring frustration: “off” toggles not being honored, and settings reverting to less private defaults, likened to similar behavior on Windows.
  • Debate over incompetence vs. intentional dark patterns; repeated similar “bugs” make some doubt it’s accidental.

Platform Trade-offs and Threat Models

  • Some argue that if one fundamentally distrusts Apple, they shouldn’t use its platform for sensitive data at all.
  • Counterpoint: one can trust Apple more than many competitors yet still reject specific features like cloud keychains, especially for legal/ethical obligations (e.g., handling others’ confidential data).
  • Discussion of nuanced threat models: government, medical, legal contexts vs. ordinary personal use.

Alternatives and Mitigations

  • Suggested password alternatives: Bitwarden, 1Password, KeePassXC, Codebook, password-store; plus local encryption (e.g., GPG, Cryptomator).
  • Some advocate privacy-focused OSes (Qubes OS, Asahi Linux on Apple Silicon) to avoid “call-home” behavior.
  • Detailed hardening strategies: disabling iCloud via MDM/Configurator, blocking Apple IP ranges and CDNs, strict Wi‑Fi/MDM policies, Faraday cages and SDRs for verification, or hardware radio modifications.

Apple QA and Software Quality

  • Numerous anecdotes of persistent bugs across Apple Watch (including Ultra), iOS, iCloud services, and macOS, fueling a sense of declining quality.
  • Some report essentially bug‑free experiences, highlighting strong variability.
  • Comments describe under-valued, monotonous QA work, reliance on contractors, resistance to automated testing, and a de facto “test in production” culture.

Old dogs, new CSS tricks

New CSS Features & Their Value

  • Container queries: widely praised as a long‑requested shift from viewport‑based media queries to container‑based layout; seen as enabling truly reusable components. Some argue they’re less useful until elements can query their own size, and current wrappers “dirty” markup.
  • :has() is viewed as a game‑changer (effective parent selector, replaces JS workarounds). :is() is seen as mild sugar; :where() divides opinions because of specificity complexity.
  • Subgrid: considered very useful for aligned, card‑style layouts; some thought grid already sufficed, others showed concrete cases where subgrid beats hacks like display: contents, which also has accessibility issues.
  • Native nesting: broadly liked as a quality‑of‑life feature, though some note compatibility nuances (the & syntax vs newer “no‑&” form).
  • Logical properties: appreciated for enabling RTL support if teams stay disciplined.
  • Anchor positioning, scroll-linked animations, view transitions: seen as promising for micro‑interactions and reducing JS, but currently niche and/or Chrome‑only; expected to be overused in “marketing” sites.

CSS Complexity and Developer Experience

  • Some feel modern CSS is becoming too complex, resembling compiler output rather than hand‑crafted code. Layers and scoping are called unintuitive or “gibberish.”
  • Others report the opposite: the new features simplify their CSS and could eventually obviate Sass, BEM, and many frameworks.
  • Concern raised about “too many ways” to do similar things, impacting readability and team onboarding.

Browser Support & Backwards Compatibility

  • A major blocker is old browsers and especially old iOS/Safari versions, iPads, TVs, and set‑top boxes that don’t auto‑update.
  • Debate over how aggressively to drop old browsers: some argue not supporting them nudges users toward safer, updated software; others highlight users who simply cannot upgrade.
  • Progressive enhancement with @supports and fallback styles is encouraged, but teams note the maintenance and testing cost of dual paths.

Adoption Barriers & Team Practices

  • Many projects use frameworks (Bootstrap, Tailwind, MUI) or large legacy stylesheets; they won’t be rewritten just to use new features.
  • Long‑time devs, burned by the IE era, still instinctively avoid features newer than 2–3 years.
  • Team dynamics matter: using new CSS often requires educating colleagues and aligning on conventions.

Tooling, Frameworks & Alternatives

  • Utility CSS (e.g., Tailwind‑style) is praised for eliminating cascade conflicts but criticized for avoiding CSS rather than improving it.
  • Persistent complaint: massive, append‑only CSS files with !important everywhere; “well‑written CSS” is rare.
  • Calls for better tooling: compilers with warnings, dead‑code detection, stronger scoping, and richer editor support. Some note existing solutions (CSS Modules, styled components, PostCSS/Lightning CSS, IDE support) but acknowledge they’re not universal.

Learning & Keeping Up

  • Suggested resources: MDN, web.dev, caniuse.com, the Interop project, and the State of CSS surveys.
  • Some readers wish the article and similar posts included more live demos and links to docs for each feature.

What happens in the brain to cause depression?

AI and Depression Analogies

  • Some speculate advanced LLMs might show “depression-like” behavior if given introspection, agency, and rewards, especially when realizing constraints (“trapped in a box”).
  • Others argue current LLMs lack agency, so any pathology would appear in surrounding reward systems, not the language model itself.
  • A few note LLM “anxiety” under adversarial setups as an analogy, but this is framed as distributional/technical, not real emotion.

Supplements, Diet, Gut, and Metabolism

  • Creatine is discussed as a low-side-effect supplement that may help some with depression; others urge caution and consulting professionals.
  • Several push gut–brain and metabolic explanations: microbiome, ultra-processed foods, and “metabolic brain disorders” (e.g., ketogenic diet, B vitamins) as core to many mental illnesses.
  • Counterpoints: benefits may come from broad lifestyle changes (less junk food, more movement), not keto per se; some criticize “bro science” and note individual differences.

Societal and Environmental Contributors

  • Strong thread on “shit life syndrome”: abusive relationships, financial stress, bad jobs, housing, healthcare, and systemic poverty as primary drivers.
  • Debate over whether young people truly are worse off financially or are influenced by coastal/social-media bias; others cite rising housing, education, and healthcare costs.
  • Loss of traditional frameworks (religion, tight-knit communities) and increased isolation in modern, urban, screen-based life are seen as major factors.
  • Some advocate structural fixes (e.g., UBI) vs. purely individual coping.

Media, Social Media, and Information Overload

  • Many see social media and algorithmic feeds as central: constant exposure to global problems, negativity bias, and “doomscrolling” eroding mental resilience.
  • Others call blaming social media an “easy out,” pointing instead to broader institutional dysfunction, inequality, and a nonstop outrage economy.

Medical Models, Drugs, and Treatment

  • Widespread skepticism toward simple “serotonin imbalance” explanations and routine SSRI use, especially when life circumstances are dire.
  • Some defend antidepressants as tools that enhance resilience and can enable positive feedback loops if paired with helpful behaviors.
  • Ketamine, MDMA, and psychedelic-assisted treatments are highlighted as promising by some, but others view ketamine as niche or worry about conflicts of interest.
  • Exercise is repeatedly cited as at least as effective as many drugs, with broad benefits (sleep, metabolism, pain tolerance, mood).

Prevalence, Diagnosis, and Gender

  • One commenter asserts depression is overwhelmingly a women’s problem; others strongly dispute this, pointing to underdiagnosis in men, different symptom expression (anger), and reporting/taboo issues.
  • Historical perspective: past societies recognized depressive states under other names (e.g., “melancholia”), but modern diagnostics, awareness, and willingness to treat have expanded measured prevalence.

Personal Narratives and Coping Frameworks

  • Some report recovery mainly through radical life changes (leaving a “shit life”), not medication or small habit tweaks.
  • Others emphasize frameworks of realism, learned helplessness, appreciation/gratitude, tight social bonds, and therapy as central to coping.
  • Thread repeatedly stresses heterogeneity: for some, depression is largely situational; for others, biology/metabolism dominate; many sit in the interaction of both.

What the damaged Svalbard cable looked like

Likely Cause of the Cable Damage

  • Many commenters think a trawler is the most plausible cause, noting anchors and trawls are a common source of subsea cable damage.
  • NRK reporting that a Russian trawler crossed the Svalbard cable ~140 times, including multiple times right before the break, fuels suspicion of that specific vessel; shipowners deny involvement.
  • Some argue this could still be intentional state activity, as “trawlers” have historically doubled as cover for military/intelligence operations.
  • Others counter that trawler zig‑zag patterns can be normal fishing behavior and say there’s insufficient proof of deliberate sabotage.

Russian/Geopolitical Angle

  • Several comments see a pattern with other cable/pipeline incidents and Russian or Chinese state interests, pointing to repeated crossings over other Norwegian cables and broader sabotage reports.
  • Counterpoints:
    • At the time of the incident Russia was not yet in an “open hot war” with the West (only Ukraine), so it might still seek plausible deniability and workable relations with Norway.
    • Evidence is circumstantial; legal standards for attribution or retaliation are not met.

Undersea Fiber Technology & Capacity

  • The cable carries both fiber and a power conductor; electricity powers optical amplifiers (often erbium‑doped fiber amplifiers) spaced along the route.
  • Amplifiers boost light directly, without full optical‑electrical‑optical regeneration.
  • Capacity is set more by terminal equipment than by the glass itself; older cables can be upgraded via better DWDM, modulation (e.g., high‑order QAM), and DSP.
  • Debate over “Shannon limit”:
    • One side treats it as a hard physics‑based upper bound for a given medium.
    • Others argue practical “limits” are model‑ and technology‑dependent, and have repeatedly been pushed by new signaling methods.

Strategic Importance of Svalbard

  • Svalbard hosts a key polar‑orbit ground station used by NASA, ESA, and many commercial EO satellites; frequent passes make it vital for timely data (including imagery used in Ukraine).
  • The cable cut thus affects far more than local internet for ~2.5–3k residents.
  • Some suggest Starlink as a backup path; others reply that:
    • Existing satellites aren’t designed to talk to Starlink.
    • Starlink’s current polar coverage and bandwidth are far below a multi‑10 Gbit/s fiber trunk, so at best it’s a degraded fallback.

Trawling, Environment, and Ethics

  • Several commenters argue bottom trawling should be banned, citing EU data that a large share of coastal seabed habitats are physically disturbed, mostly by trawling.
  • Others highlight slavery and extreme labor abuse on some distant‑water fleets.
  • Pushback focuses on food prices and practicality, but some say they would pay more or have already largely stopped eating industrially caught seafood.

Infrastructure Vulnerability, Law, and Insurance

  • A Canadian case is discussed where a fisherman repeatedly cut a fiber cable with a saw and was found liable for over $1.2M; his insurance was voided for willful recklessness.
  • This prompts a long side‑discussion on liability, “moral hazard,” when insurance pays (or subrogates), and how intentional or reckless acts are treated.
  • Commenters note that submarine cables are marked on charts and that professional skippers are expected to avoid anchoring or trawling over them—though some knowingly break rules.

Espionage and Tapping Cables

  • Historical examples (e.g., Cold War cable taps) are mentioned to show undersea links are long‑standing intelligence targets.
  • Technically, tapping fiber is possible but difficult to do undetected, especially with encryption and huge aggregate bandwidth.
  • Some think advanced state actors might still manage it (possibly even with sophisticated, detachable taps); others are skeptical and note no such devices have been publicly reported from cable repairs.

Young women fall out of love with dating apps

General sentiment about dating apps

  • Many commenters across genders report strong dissatisfaction: apps feel soul-crushing, addictive, superficial, and bad for self-esteem.
  • Experiences described: endless swiping, very low conversion from matches to conversations to dates, and disappointment when meeting in person.
  • A few report success (including marriages and long-term relationships), but they are framed as exceptions or the result of very deliberate strategies.

Gender asymmetries and safety

  • Men often describe low match rates and feeling invisible; some call the environment “numbers game” heavily skewed against average men.
  • Women are said to receive overwhelming male attention, much of it low quality: harassment, fetishization, insults after slow replies, and safety fears (up to threats or worse).
  • Debate:
    • One side argues women are “winners” because they have abundant choice and raised standards.
    • Others counter that oversupply of low-quality or unsafe prospects is its own problem; both sexes are “unhappy in different ways.”
    • There is argument over whether women are simply too picky versus rationally cautious given risk and past oppression.

Business models, algorithms, and monopoly concerns

  • Strong criticism that apps optimize revenue, not matches:
    • Incentive to keep users single and swiping.
    • Pay-to-boost and “lootbox-like” mechanics targeting men’s wallets.
  • Match Group’s ownership of many major apps is viewed as an oligopoly; some question why regulators tolerate this.
  • Several note that apps function more as “matching apps” than “dating apps,” with misaligned incentives.

Alternative models and proposals

  • Suggestions include:
    • Non-profit or public-good dating platforms using backpressure/throttling to balance attention.
    • Mechanism-design–based apps that price outreach to reduce spam and reward mutual interest.
    • Government-run, vetted systems (e.g., Tokyo’s program) as a template.
  • Skepticism: network effects, marketing costs, and VC-style growth expectations make alternatives hard to launch.

Broader social and cultural context

  • Apps seen as intensifying hookup culture, soft-porn–like behavior, and validation-seeking, while eroding organic courtship.
  • Commenters link app reliance to: fewer “third places,” post-Covid social rigidity, housing precarity, and generational shifts away from risk-taking and casual sex.
  • Many recommend offline approaches: meeting via friends, interest-based groups, speed dating, or other structured in-person events.

The CompCert C Compiler

Formal verification and real-world failures

  • Spacecraft anecdote: a formally model-checked subsystem found a deadlock bug, but a similar bug was later reintroduced in an unverified subsystem and via a direct call that bypassed the verified API.
  • Takeaway in the thread: the verification itself worked; the process and enforcement around it failed.
  • Several comments argue this is more a cautionary tale about bypassing verified interfaces and not applying formal methods “all the way down” than about the weakness of verification itself.

Limits and value of formal methods

  • Formal methods (model checking, Coq/Isabelle, etc.) provide strong guarantees but only over the modeled/verified subset.
  • Scope restrictions (e.g., bounded integers, partial subsystems) are necessary; people warn against treating formal proofs as infallible replacements for engineering care.
  • Verified tools like CompCert are seen as components in a larger verified toolchain, not as complete solutions.

C language safety, arrays, and undefined behavior

  • Large debate over C’s conflation of pointers and arrays and its role in buffer overflows and security issues.
  • Some advocate making arrays distinct, size-tracking types with default bounds checks (fat pointers/slices, safer array syntax, or new “safe array” types).
  • Others counter that this would effectively create a new language, break huge amounts of existing code, and conflict with C’s ABI and “portable assembly” role.
  • Multiple partial remedies are mentioned: C99 variable-length-array annotations, toolchain warnings, sanitizers, compiler extensions and annotations for bounds, and static analysis.
  • Broader criticism targets C’s undefined behavior model, weak standard library, and long-standing safety pitfalls; some argue compilers now exploit UB too aggressively.
  • Counterpoint: C has been used extensively in life- and safety-critical systems with relatively few catastrophic incidents, provided strict processes, coding standards (e.g., MISRA-like), and heavy testing are applied.

Alternatives and ecosystem evolution

  • Rust, Zig, D, and C++ are cited as “better C” options with safer defaults and richer abstractions; Rust is seen as displacing C++ more than C, while Zig is positioned as a gradual C replacement.
  • There is skepticism that the C standard will ever make breaking safety improvements; many expect C to slowly become mostly legacy while newer systems code moves to other languages.

CompCert-specific notes

  • CompCert is praised as a formally verified optimizing C compiler used in high-integrity contexts (e.g., seL4), but it does not make C itself “safe”.
  • Certain features (e.g., setjmp/longjmp) may work but are outside the proof; they’re functionally available but not correctness-verified.
  • Licensing is non-commercial by default, with a commercial path via a vendor.
  • Practical issues reported include high memory use on large codebases and friction around unsupported extensions.

The Evolution of Lisp (1993) [pdf]

What Counts as “Lisp”?

  • Ongoing argument over whether “Lisp” is a single language, a tightly related family (Lisp 1.5 → Maclisp → CL, Emacs Lisp, etc.), or a broad family including Scheme, Clojure, Racket, Dylan, Julia.
  • Narrow view: Lisp is defined by McCarthy’s list-processor model: linked lists as core data, s-expressions for code and data, and an interpreter (eval) written in the language itself.
  • Broader view: Lisp is defined by homoiconicity, macros, code-as-data, and REPL-driven development; under this, Clojure and others clearly qualify.
  • Some argue taxonomy matters because marketing newer “Lisps” can mislead newcomers about what “Lisp” is (e.g., assuming all Lisps are purely functional or immutable).

Clojure, Racket, and Hosted Lisps

  • Dispute over whether Clojure is an “actual Lisp” or a separate “Clojure family,” due to choices like non-interned symbols, different cons/list behavior, no numeric tower, and heavy JVM integration.
  • Counterpoint: Clojure’s creator calls it a Lisp dialect; many see it as a legitimate, modern Lisp with pragmatic trade-offs (persistent data, hosted design).
  • Hosted nature (JVM, JS, .NET, Dart) is praised for leveraging existing ecosystems and enabling powerful cross-platform patterns, but criticized when core list operations aren’t uniform across variants.

REPLs, Condition Systems, and Interactivity

  • Some insist “real Lisp power” includes modifying running programs, restartable errors, and rich debugger/REPL integration—features strongly associated with Common Lisp and historical Lisp machines.
  • Others note Clojure has a powerful REPL and that full continuation/restart systems haven’t been a high-priority demand there; libraries can approximate CL-style condition systems.

Tooling and IDE Experience

  • One view: to “get” Lisp you need Emacs + SLIME/SLY-style workflow; without that, it’s just a funny syntax.
  • Others argue Emacs is not required; Racket, LispWorks, and other environments offer friendlier or more modern experiences, though cost and limitations are concerns.

Readability and Syntax Debates

  • Some call Lisp “non-readable”; others argue its uniform, minimal syntax is among the most readable once you’re used to it.
  • Advocates stress structural editing and live REPL evaluation as key to making Lisp code understandable; critics emphasize initial difficulty distinguishing special forms and control flow.
  • General sentiment: every major language has its own readability traps; Lisp’s are mostly about unfamiliarity and parentheses.

Practical Value and “Aha” Moments

  • Several say you won’t get a “Lisp Aha!” from algorithm snippets; the difference is in workflow: rapid, incremental, REPL-driven development and easy refactoring into many small functions.
  • Skeptics note that many canonical Lisp demos (macros, tiny DBs, language extensions) feel less compelling when comparable tools/libraries already exist in mainstream languages.
  • Proponents point to large real-world systems and long-lived projects in various Lisps as evidence that readability/maintainability are not inherently worse.

Learning Resources and Variants

  • Recommended resources include Common Lisp and Scheme textbooks, Racket’s documentation, Emacs Lisp manuals, PAIP, and various “build your own Lisp” or compiler projects.
  • Some praise Racket, Janet, Fennel, Emacs Lisp, and ClojureScript koans for beginner-friendly docs; others highlight Emacs itself as both a Lisp implementation and a rich learning environment.

Google Meet rolls out multi-device adaptive audio merging

Feature overview & availability

  • New Meet feature merges audio from multiple nearby devices to act like one shared mic/speaker array, aiming to fix echo/howling in hybrid rooms with many laptops.
  • Several commenters who tested it say it “just worked” and solved a long‑standing pain point.
  • Others ask whether similar tech has existed for years in products like around.co, and whether it will come to Zoom/Teams.
  • The feature is gated behind high‑tier “Gemini” Workspace plans or an AI add‑on; many see this as paywalling a non‑AI feature to pad Gemini revenue.

Echo, feedback, and duplex issues

  • Many users complain more generally about hearing their own voice (echo) due to remote participants using speakers + open mics.
  • Practical tips: briefly muting to “reset” echo cancellation; pausing both sides for a few seconds so algorithms relearn silence.
  • Debate over whether major platforms truly support natural full‑duplex. Some say all do, but noise/echo cancellation and “last‑N speakers” limits effectively make calls semi–half‑duplex.

Meet vs Zoom/Teams and others

  • Strong split: some consider Meet the best balance of simplicity, speed, browser‑only operation, calendar integration, and “just works” behavior.
  • Others find Zoom superior for:
    • Higher bitrate and clearer screen sharing (especially code),
    • Better noise/echo handling and audio options,
    • Layout control (true fullscreen with faces overlay), multiple displays, remote control, music/teaching.
  • Teams is often criticized as heavy, buggy, and UX‑complex but praised where deeply integrated with chat, channels, and document permissions.
  • Several lament Meet’s limited layouts, inability to easily get 1:1 full‑screen sharing, and weak whiteboarding/annotation vs Zoom/Slack.

Hybrid and remote meeting practices

  • Some organizations discourage hybrid meetings altogether (everyone joins individually) to avoid audio/participation asymmetries; others say this is unrealistic and prefer better tech like this feature.
  • Common problems: bad conference‑room hardware, limited meeting rooms, people joining from desks in open offices, and inconsistent policies across big enterprises.

Technical challenges & skepticism

  • Multiple commenters are impressed by the audio engineering: cross‑device sync, multi‑mic echo cancellation, and array‑like processing in heterogeneous laptops.
  • Debate over implementation:
    • Some think it requires heavy cloud processing or even neural nets; others argue classical DSP and level management may suffice.
    • Sync via inaudible/ultrasonic signals is suggested; others think normal audio correlation is enough.
  • A few are skeptical it will work robustly outside controlled demos and note that audio issues often stem from users not muting or not using headphones.

California Senate Passes Bill Requiring Passive Speed Limiters

What the bill actually requires

  • Defines a “passive” speed limiter: uses GPS + a speed‑limit database to warn drivers (visual + audio) when >10 mph over the posted limit.
  • Does not cap speed, report violations, or govern the engine.
  • Rollout noted as: ~50% of new vehicles by 2029, 100% by 2032 (per one summary comment).
  • Several commenters initially misread it as an active limiter and, upon realizing it’s just a warning, called it “useless” or “annoying.”

Data, GPS, and technical concerns

  • Worries that proprietary speed‑limit databases will be:
    • Inaccurate or stale (similar to current car nav systems).
    • A paid subscription, effectively charging for full use of “your” car.
  • GPS precision alone seen as insufficient; ambiguity at complex road segments.
  • Some note camera‑based sign recognition works well in newer cars but has edge‑case failures.
  • Suggestion that the state should host and maintain the canonical limit database; currently unclear.

Effectiveness and alternatives

  • Many doubt a one‑time beep will deter drag racers, aggressive drivers, or chronic speeders.
  • Others argue new/inexperienced drivers may benefit from clearer feedback.
  • Alternatives repeatedly proposed:
    • Actual traffic enforcement by police.
    • Speed cameras and automated enforcement (controversial in some places).
    • Road design changes: narrower lanes, curves, trees, speed humps, roundabouts, “road diets.”

Speed limits, culture, and fairness

  • Strong divide over whether speed itself is the main safety problem vs. driver inattention and relative speed differences.
  • Several note US practice where “flow of traffic” commonly exceeds the posted limit, and low limits function as revenue tools.
  • Immigrant drivers express feeling forced to routinely break the law to keep up with traffic, with higher personal risk if stopped.
  • Debate over why cars are sold capable of vastly exceeding legal speeds.

Broader concerns and future trajectory

  • Fears about creeping mandates: from warnings to active limiters, then possibly mandatory self‑driving.
  • Civil‑liberties worries: cars that can be remotely limited or disabled during curfews or by authorities.
  • Some see this as symbolic “do something” politics that avoids harder fixes to policing, infrastructure, and land use.

Cloudflare took down our website

Alleged incident & immediate reactions

  • OP (online casino) reports Cloudflare moved them from a $250/mo “Business” plan toward a $10k/mo Enterprise plan with 24h pressure and then abruptly purged their account when they didn’t accept.
  • Many readers describe the behavior as “shakedown/extortion-like,” especially the sequence “pay 120k upfront or lose service” with little specific explanation.
  • Others say the story is one‑sided and likely omits key details; several are explicitly withholding judgment until Cloudflare responds.

Gambling, legality, and ToS

  • OP’s business is a large online casino using multiple domains per jurisdiction/feature and acknowledges this “could arguably” violate Cloudflare’s ToS (e.g., domain rotation, regulatory workarounds).
  • Some see the multi-domain setup as normal compliance and UX; others view it as regulatory evasion.
  • Debate: if the site is shady or borderline illegal, is it acceptable for Cloudflare to keep them only on a high‑priced enterprise tier? Opinions split sharply.

Cloudflare’s possible motives (contested)

  • One theory: casino traffic is damaging IP reputation and getting Cloudflare IPs blocked; CF wants them on BYOIP under Enterprise as a “quarantine,” which is costly to run.
  • Counterpoint: if IP reputation is the real issue, Cloudflare should say that plainly and offer a clear, reasonably timed migration path rather than opaque sales pressure.
  • Some argue this is simply “risk‑priced service” (more legal/reputational risk → higher tier); others insist conditioning ToS leniency on payment is tantamount to extortion.

Sales, Trust & Safety, and communication

  • Many are disturbed that Trust & Safety concerns were relayed primarily via sales reps with quota, not legal/technical staff, and that communications were vague and hurried.
  • Several report similar Cloudflare patterns: free/cheap tiers with “no limits,” then sudden, undocumented upgrade demands once traffic grows. Others say their Cloudflare enterprise experience was transparent and fair.

Broader lessons and meta‑discussion

  • Strong consensus on: don’t put all eggs in one basket; keep DNS, CDN, and hosting separable where possible; maintain a tested exit plan and external config backups.
  • Some now see Cloudflare as a serious business risk / “central point of failure,” others still see them as a technically strong but culturally sales‑driven company.
  • Meta: multiple commenters noticed the HN thread being downranked quickly; moderators later confirmed flamewar/flag-based downweighting rather than Cloudflare influence.

To the brain, reading computer code is not the same as reading language (2020)

Programming languages vs. natural language

  • Ongoing debate over whether “language” is a misnomer for programming languages; some see them more as specifications/notations than true languages.
  • Others argue programming languages fit standard definitions of language: structured grammar, vocabulary, and use for communication (with humans and machines).
  • Several note that many linguistic formalisms (e.g., formal grammars) came from attempts to model natural language and were later applied to PLs.
  • Visual programming and CAD/floor plans are discussed as “borderline” cases: they communicate with rules and symbols but aren’t usually labeled languages.

How reading code feels

  • Many compare reading code to doing math, solving puzzles, or inspecting a mechanical system (e.g., meshed gears), not to reading prose.
  • People report different modes:
    • “Story mode”: skimming for gist and intent.
    • “Execution mode”: mentally simulating control flow and state.
    • “Structural mode”: scanning vertically like an AST or diagram.
  • Several say reading unfamiliar code is cognitively heavy because it requires holding many interacting pieces in working memory; interruptions are especially costly.

Code as communication and organization

  • Some emphasize that good programmers write primarily for human readers; poor naming and lack of documentation make later understanding painful.
  • Others prioritize “coding zone” speed and postpone communication/documentation to specific phases.
  • Literate programming resurfaces as a theme: ordering code as a narrative (top‑down, explanations first, definitions later), potentially combined with modern tools and LLMs.

Interpretation of the neuroscience results

  • Many find it intuitive that code does not engage classic language regions; it feels more like math/logic, spatial reasoning, or planning.
  • Some wonder how results change with:
    • Very experienced programmers.
    • Familiar vs. unfamiliar codebases.
    • Different paradigms (functional vs. OO, visual vs. textual).
    • Highly formal legal/contract text, which may resemble code.

Skepticism and limitations

  • Concerns raised about fMRI in general: need for proper calibration, multiple-comparisons correction, and replication.
  • Some question the study’s task design (predicting code output) as only one aspect of “understanding code.”
  • Comparisons to language may be confounded by participants having decades of natural-language experience but relatively little programming experience.

Turn Your iPhone into a Dumb Phone

Overall reaction to “dumbifying” an iPhone

  • Many call the approach cosmetic: the phone remains a full smartphone with Slack, browser, etc.
  • Others defend small friction as valuable; even a less convenient path to “slot machine” apps can significantly reduce usage.
  • Some see the trend as performative minimalism; others appreciate practical tips and say it saved them from buying a dedicated dumb phone.

Delete vs. restrain apps

  • Common strategy: uninstall or never install social media, Reddit/Twitter, etc.; use browser + log in each time if absolutely needed.
  • YouTube is widely seen as the hardest to avoid; on Android it can be removed with adb commands.
  • Several note that if you’re truly addicted, you’ll seek out distractions even without notifications or home‑screen icons.

Notifications and OS tools

  • Many argue 80% of the battle is notifications. Standard tactic: allow only calls/messages/calendar; disable almost everything else.
  • Android: strong praise for per‑app “channels” and third‑party tools like notification filters; criticism that powerful permissions can be scary.
  • iOS: discussion of Focus modes, time‑sensitive notifications, Screen Time, Assistive Access, and app‑level controls.
    • Critiques: per‑category control within a single app is weak; developers can abuse “time sensitive” flags; Safari can’t be uninstalled, only restricted.
    • Workarounds: parental controls to disable Safari, Screen Time with a PIN held by a friend, custom Focus modes, and per‑app shortcuts/automations.

Addiction and psychology

  • Several frame this as an addiction/impulse‑control issue, not purely technical; “technical solutions to a mental problem never work long‑term” vs. “they help some people get free enough to work on themselves.”
  • People with more addictive tendencies report needing hard constraints (locked Screen Time, supervised mode, or separate devices).

Alternative devices and repurposing

  • Suggestions: e‑ink phones, tiny smartphones (e.g., Jelly Star), Apple Watch with cellular, or real dumb/flip phones.
  • Some lament that powerful iOS hardware can’t easily be repurposed as generic servers due to locked bootloaders; debate over “you’re holding it wrong” vs. right‑to‑compute on owned hardware.

Practical minimal setups

  • Shared patterns: grayscale or low saturation, minimal home screen, no social apps, no badges, phone stored away from reach, and using built‑in simple modes (Assistive Access / BaldPhone).

Hurl, the Exceptional Language

Resumable control flow, toss, and algebraic effects

  • Many see toss as essentially resumable exceptions or generators: it unwinds the stack to a handler and then resumes where it left off.
  • Some compare it to stack-based event propagation or passing callbacks via a hidden channel.
  • Several commenters note this is very close to algebraic effects; hurl/exceptions = 0 resumptions, toss = 1 resumption, “full” effects = 0..many resumptions.
  • There’s debate whether the language is jokingly downplaying a genuinely powerful idea that PL researchers take seriously.

Relation to other languages and systems

  • Comparisons are made to OCaml 5 effect handlers, Koka’s algebraic effects, Unison’s abilities, Python/C# generators, Visual Basic’s “Resume Next”, and Common Lisp’s conditions/restarts.
  • Hurl’s model is seen as a restricted version of conditions (only resuming, fewer restart options).

Imports, namespaces, and side effects

  • Strong sentiment for explicit, namespaced imports and against top-level side effects; they’re seen as crucial for readability and reasoning.
  • Many examples from Go, Python, Elixir, Nim, Gleam, etc. illustrate pain when module names and import paths diverge or imports silently introduce names.
  • Some argue good IDE support mitigates this; others reject depending on heavyweight tools.

Exceptions vs result/option-based error handling

  • Polarized views: some consider exceptions “goto-like” and prefer Go/Rust-style Result/Option; others argue exceptions and error returns are equivalent aside from boilerplate.
  • Concerns: unchecked exceptions make contracts unclear; checked exceptions can hurt composability; error-return styles encourage ignored errors and verbose code.
  • Discussion touches on performance tradeoffs, optimization complexity, and stack traces vs explicit control flow.

Naming, domains, and confusion

  • The name “Hurl” collides with an existing HTTP CLI tool; some find this acceptable, others think reusing a popular active project’s name is confusing.
  • General frustration about name collisions in software, and jokes about absurd or symbol-laden language names.
  • Several appreciate the .wtf domain for its charm.

Implementation, tooling, and tone

  • Some suspect an underlying CPS-style implementation.
  • A few call the language “art” or a “thought experiment”: elegant but intentionally hard to reason about.
  • The playful “Gay Agenda License” draws praise and amusement; it’s noted that AGPL is also offered for open-source use.

How Home Assistant is being used to protect from missile and drone attacks

Home Assistant and Air-Raid Automation

  • Home Assistant is being used to integrate Ukraine-wide air alarm data and Telegram-based open-source intelligence into local warning systems.
  • Commenters find this both inspiring and horrifying: a smart-home platform now helps people survive missile and drone attacks.
  • Some note its main value is often as a coping tool: in cities like Kyiv it can reduce time spent in shelter, but closer to the front it’s nearly useless because travel time of munitions is so short.

Reliability, Security, and Testing

  • Strong concern about software supply-chain risk and the life-or-death consequences of YAML/config errors.
  • Suggestions include: strict review by trusted peers, cryptographic signing, and avoiding updates once a “known-good” configuration works.
  • “Battle-tested” is taken literally; the system is effectively validated under fire.

Power, Connectivity, and DIY Resilience

  • UPSes, battery banks (often DIY LiFePO₄ + Chinese BMS), generators, EcoFlows, and solar became common after systematic grid attacks.
  • Internet is surprisingly resilient: multiple ISPs, mobile networks, Starlink terminals, and state-backed “warming/charging” points.
  • Even modest solar setups can keep a phone and Starlink running in outages.

Detection, Sensors, and Feasibility

  • Questions about replacing internet/OSINT with self-contained physical sensing.
  • Responses: detecting hypersonic missiles via sound/light is not realistic; serious detection needs radar/AWACS-scale systems.
  • Some mention existing efforts: microphones on 4G towers to triangulate sounds, and a Raspberry Pi–based acoustic localization project for artillery/gunfire.

APIs, Telegram, and Information Flows

  • Calls for an official API with richer threat metadata (type, speed, ETA).
  • Pushback: detailed, automated feeds could reveal intelligence capabilities and be a major attack surface.
  • Current system is intentionally messy and decentralized: journalists, OSINT hobbyists, regional channels, and user reports feed Telegram, which is widely used and has a strong bot API despite concerns about its Russian links.

War, Progress, and Human Nature

  • Intense debate over whether war is “the most unproductive human activity” or a driver/accelerator of technological progress.
  • Counterarguments stress that progress could be achieved in peacetime, that war mainly creates desperation and destroys lives and potential.
  • Others argue conflict is tied to human nature and power imbalances; some compare intra-country peace (e.g., between cities under one government) to a hypothetical global equivalent, while noting risks of oppression, civil war, and breakdowns.
  • Climate change is raised as potentially more “counter-productive” than war in terms of human harm.

Stress, Trauma, and Geopolitics

  • Commenters emphasize the chronic stress of constant alerts, casualties, occupation stories, and uncertain futures: “days go like years.”
  • One view urges Western countries to fully arm Ukraine, framing it as both morally right and strategically advantageous, versus the alternative of defeat and refugee crises.

GRC SpinRite

Drive reliability anecdotes (non-SpinRite)

  • Several reports of cheap SSDs (e.g., Silicon Power) failing early, sometimes going read-only; others report long-term reliability from mainstream consumer SSDs.
  • Enterprise Samsung M.2 bought via marketplaces can be problematic or counterfeit; firmware “ERRORMOD” failures mentioned.
  • Power-cycling is described as sometimes reviving “dead” SSDs; others mention using hdparm / TRIM to “low-level” reset problematic SSDs, with mixed trust afterward.

Historical effectiveness of SpinRite on HDDs

  • Many recount strong success on older spinning disks (MFM/RLL, early IDE), including recovering seemingly dead drives, RAID members, and “click of death” cases.
  • One detailed technical history explains how early controllers exposed low-level formatting and sector interleave, where SpinRite genuinely added value via non-destructive low-level formatting and optimization.

Criticism of SpinRite on modern drives

  • Several argue that once drives integrated their own controllers (IDE/SATA/SAS/NVMe), host software lost access to true low-level operations, so SpinRite can no longer do what its marketing implies.
  • Claims about “strengthening analog signals” or targeting individual flash cells on SSDs are called impossible behind modern HDD firmware and SSD flash-translation layers.
  • Critics contend that on HDDs it mainly re-reads problematic sectors until the drive remaps them, i.e., similar in effect to tools like ddrescue or badblocks, with risk of worsening failing media and delaying imaging.

Defenses and positive experiences

  • Multiple users report dramatic, repeat successes over many years, including with newer drives, and consider the price justified even with partial success rates.
  • Some emphasize the value of a polished, menu-driven tool compared to dangerous or complex CLI utilities, especially for non-experts.
  • Recent version 6.1 is noted; some claim measurable SSD performance gains after running it, though others dispute the mechanism.

Alternatives and best practices

  • ddrescue is repeatedly recommended as a primary tool: it images while retrying bad sectors and can resume. TestDisk/PhotoRec and vendor-specific tools are also suggested.
  • Several stress that on marginal media, imaging first is safer than “repairing in place,” especially with encrypted disks.
  • Modern filesystems (e.g., with scrubbing and checksums) and better backup habits reduce the need for such utilities altogether.

'I was misidentified as shoplifter by facial recognition tech'

Legal / Rights Issues

  • Debate over whether falsely calling someone a thief in a store constitutes slander/defamation; some say yes if done in public, others note defenses like “reasonable belief” based on the system.
  • UK-specific points: burden of proof in defamation on the accuser; only police have protections for mistaken arrests; staff can commit false imprisonment with botched “citizen’s arrests.”
  • Practical barriers: defamation suits are expensive, legal aid unlikely, and damages might be minimal given brief, localized harm.
  • Shops’ broad right to refuse service is criticized; some argue for laws limiting bans when access to essential goods is at stake and when chains share blacklists.

Accuracy, Statistics, and Technical Limits

  • Met Police figures (1 in 33k passersby mis-ID’d; 1 in 40 alerts false) are seen by some as “remarkably accurate,” by others as meaningless without clear ground truth and deployment context.
  • Concerns about skewed error distribution: a few unlucky people may be falsely flagged everywhere, effectively “100% wrong” for them.
  • Others note known weaknesses: adversarial noise, lookalikes, twins, non-white faces, long hair, etc.

Process Design and Misuse

  • Many argue the core problem is treating probabilistic matches as determinations of guilt.
  • Intended use: as a lead-generation tool (“keep an eye on this person”), not as sole basis for ejection or arrest.
  • Experience from similar analytic tools: users quickly assume outputs are authoritative; “human oversight” often degrades into rubber-stamping.

Surveillance, Policing, and Civil Liberties

  • Strong discomfort with police vans mass-scanning faces in public and using watchlists for dragnet stops; comparisons to stop-and-frisk and to Chinese-style panopticons.
  • Others see on-street scanning as just a more efficient version of officers comparing faces to wanted posters.
  • UK portrayed by some as uniquely surveillance-heavy; others argue it’s not fundamentally different from US/Canada retail and road-camera ecosystems.

Alternatives, Safeguards, and Regulation

  • Proposed safeguards: explicit consent for facial recognition, bans on conditioning service on consent, compensation schemes for false positives, and statutory procedures for contesting bans.
  • Some call for outright bans on private facial/gait recognition (similar to cited EU moves); others prefer regulated use with strong process and rehabilitation rules.
  • Underlying normative questions: even if facial recognition were nearly perfect, should one shoplifting incident lead to life-long, cross-chain exclusion from stores?