Hacker Newsnew | past | comments | ask | show | jobs | submit | moontear's commentslogin

Oh come on, now that I have a personal remote control already set up using hooks, specifically the PermissionRequest, and Home Assistant push notifications where I can allow or deny a specific action?

TIL that HA notifications can have associated actions. I have the exact same setup as you, except I only receive the notification and then walk over to the laptop to unblock the agent feeling like a human tool call. This will improve my workflow, thank you.

The notification payload for reference, you will also need a permission input_select (pending/allow/deny) and an automation that triggers upon mobile_app_notification_action:

  notification_payload=$(cat <<EOF
  {
    "message": "$escaped_message",
    "title": "$escaped_title",
    "data": {
      "tag": "$escaped_request_id",
      "group": "claude-code",
      "actions": [
        {
          "action": "CLAUDE_ALLOW",
          "title": " Allow"
        },
        {
          "action": "CLAUDE_DENY",
          "title": " Deny"
        }
      ]
    }
  }
  EOF
  )

Actionable notifications are a bit cumbersome on iOS since you need to long-press the notification for actions, but it does work.

I'm trying to understand the setup you have here.

So your hook -> HA -> push notification? And then you just tap to approve?


Exactly that. And the push notification includes what I am approving. Also with some sensible delay in sending out these pushes, because otherwise I may be bombarded with push notifications, while already having it manually approved.

Time and time again it is shown to *not* use your main account for everything. This goes for Apple and having a separate account for development work, for the App Store and your main iCloud account but this also goes for all other SaaS providers.

You are doing groundbreaking new and untested stuff with Claw? Do not use your main account. You want to access your main account's data? Sure, allow it via OAUTH/whatever possible way.

Have separate accounts, people. You don't want one product groups decision in those large SaaS corps to impact everything else.


> Time and time again it is shown to not use your main account for everything.

Good luck opening new google accounts for separation of concern. The new account is banned before the eula page finishes loading.

Google sends code via text msg to my main account phone number to unban, without me ever even filling a phone number.

After a day the account was banned again and pending automatic deletion. The appeal then took an artificial 5 days wait. I had to plead to what I presume is an AI. I had just paid $100 so it's not like I didn't show I was serious.

I am fairly certain that if they ban one account they will also ban the other anyways.


I have multiple Google Accounts and I am running them at the same time without problems. If you really want to separate things use different browser profiles per account. My work Google account never touches my private Google account in terms of browser profiles.

I never had issues with work accounts created via google workplace.

Google forbids you to have multiple identities. It's stated clear in their term of service. Any account you create must be linked to the same identity.

This means that it is trivial for them to ban all your accounts at once.

This also means that the 2factor is difficult to separate. Somebody with an unlocked access to my phone can hijack all my Google accounts by starting a password recovery.

Even though I made sure to never share my phone number to the new account, and I never loggued with it on my phone, and used a different browser session on desktop, it still forcefully sends a notification to my phone when I login because my login is suspicious it says. There is still no phone registered on the new account.

During reinstation of the banned accout I also got a scary msg essentially saying that if they denied my appeal, they might also ban my main account. Chilling.


"how does Google figure out it happened" - no insider knowledge, but the calls Claw makes are very different than the regular IDE, so the calls and volume alone would be an indicator. Maybe Google has even updated their Antigravity IDEs to just include some other User Agent, that Claw auth does not have.

Everything just guesswork, but I don't think it is too hard to figure out whether it is Antigravity calling the APIs or any Claw.


This is exactly what I thought. The person did something illegal by accessing random accounts and no explanation makes this better. Could have asked his diving students for their consent, could have asked past students for their consent to access their accounts - but random accounts you cannot access.

Since this is a Maltese company I would assume different rules apply, but no clue how this is dealt with in Malta.

How the company reacted is bad, no question, but I can’t glance over the fact how the person did the initial „recon“.


Introducing the „are they home“ device to assist burglars. Just slap that miniature device somewhere non-suspicious on the place of your potential marks and let it run for the battery life of 7 days. Afterwards you collect it and know movements patterns.

Features automatic notifications if no movement detected for more than two days.


To be fair, that's basically a variation of techniques that have existed long before Bluetooth

I don't disagree, nothing new to see here. I just thought that this would be a nifty device to sell via nefarious shops. Include some more passive tracking of WiFi and bob's your uncle. Maybe add mesh functionality via LoRaWAN and track the whole neighborhood.

Archival is one side of the coin, but consumption as-in read-later is very important as well.

I am currently evaluating Linkwarden, Wallabag, Hoarder, Linkding and each of the services has pro and cons making it hard for me to choose one. Linkwarden is AWESOME in its way to store content in multiple formats, but the read-later wfs could be improved.

Without checking again: does Linkwarden sync reading location across devices and automatically scrolls to that location on the next device? Does it tell me how „long“ an article takes to read (solely based on the length of it)? Does Linkding support marking up text and persist (mark some text yellow and see those marks somewhere or even add comments or favorite specific parts of texts).

No need to answer any of the questions, I can research myself, just putting these out there for a read-later solution I would like. Add a link on my mobile device, Linkwarden could do its magic in the backend, and I check out the content later on desktop or even on my mobile device.


The experiment may have been successful, but if it was why don't we see underwater datacenters everywhere? It probably is a similar reason why we won't see space datacenters in the near future either.

Space has solar energy going for itself. With underwater you don't need to lug a 1420 ton rocket with a datacenter payload to space.


Salt water absolutely murders things, combined with constant movement almost anything will be torn apart in very little time. It's an extremely harsh environment compared to space, which is not anything. If you can get past the solar extremes without earths shield, it's almost perfect for computers. A vacuum, energy source available 24/7 at unlimited capacity, no dust, etc.


The vacuum is the problem. It might be cold but has terrible heat transfer properties. The area of radiators it would take to dissipate a data center dwarfs absolutely anything we’ve ever sent to orbit


Also solar wind, cosmic rays etc. We don't have perfect shielding for that yet. Cooling would be tricky and has to be completely radiative which is very slow in space. Vacuum is a perfect insulator after all, look how thermos work.


I can't see any reason to put them underwater rather than in a field somewhere. I think the space rationale is you may run out of fields.


Placing them underwater means you get free, unlimited cooling.

Exactly the opposite of space, where all cooling must happen through radiation, which is expensive/inefficient


It's not free cooling underwater, you still have to circulate the water and seal the components.

Makes far more sense to build on the beach than underwater, if all you want is unlimited sea water to pump around.


I understood that part of Microsoft's experiment was to see how being hermetically sealed would affect hardware durability. Submerging is a good way to demonstrate the seal, but that part might have been just showmanship.


They are not only a wrapper for Wireguard even though people keep saying that.

Each of the tools gives different benefits and yes, you can roll all of that on your own, but let's take Tailscale as an example: You have custom ACLs to secure your network on a client/user/device basis with tagging of devices. You have your own tailscale SSH connection, the possibility to create private-public tunnels (just like Cloudflare tunnels). The hole punching using DERP servers and native IPv6/IPv4 interoperability means it really connects any device on any network type to all other devices. And of course the management pane and GUI you talked about.

This is not supposed to be a marketing ploy for Tailscale, but saying "they are just a wrapper for Wireguard" is plain wrong.


Why do you assume OP paid $5 a month? You get Tailscale for free in many use-cases. Your argument that self-hosting is more expensive is still valid, but I don't get the 5$.


It is not only a reverse proxy (which is actually just traefik), see this blog post https://pangolin.net/blog/posts/1-15-0-release

Pangolin is a hub-and-spoke style network. They actually have some comparisons between Netbird and Pangolin https://pangolin.net/blog/posts/pangolin-v-netbird and Pangolin and Tailscale https://pangolin.net/blog/posts/pangolin-v-tailscale


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: