HackerTrans
TopNewTrendsCommentsPastAskShowJobs

frenchtoast8

453 karmajoined il y a 2 ans

Submissions

Ask HN: Has AWS Support fallen off?

2 points·by frenchtoast8·il y a 3 mois·3 comments

Delve sets the record straight on anonymous attacks

delve.co
19 points·by frenchtoast8·il y a 3 mois·20 comments

Ask HN: How have your security policies kept up with AI?

1 points·by frenchtoast8·il y a 5 mois·0 comments

comments

frenchtoast8
·hier·discuss
Only for Opus etc. For “Fable 5, Mythos 5, and future models on Bedrock with similar or higher capability levels,” your usage data is retained for 30 days and shared with Anthropic which you can’t opt out of.
frenchtoast8
·il y a 6 jours·discuss
Gabe Newell (president, not CEO) comes to mind
frenchtoast8
·le mois dernier·discuss
So the big bad "significant security vulnerability" Adafruit just had to let everyone know is a public Firebase API Key without realizing these are more often than not intended to be public and didn't bother taking 10 seconds to Google it. They also claim Flux's "6.4 million projects" number is "substantially inflated" when the only thing they know is that the number hasn't changed in a few months. Maybe it's true they haven't updated it because it has shrunk, but where is the evidence it is "substantially" wrong? Adafruit points to the number's static HTML as the smoking gun that it is knowingly falsified without understanding the site uses Next.js and server-side rendering.

Obviously sending a cease and desist letter about making a dumb security vulnerability disclosure is wrong, and their counsel is stupid for making CFAA claims about this. At the same time, Adafruit can't clutch their pearls about an ignorant lawyer when they are also guilty of being ignorant here.

Both sides are jerks here, which seems to be typical of the stupid spats ptorrone starts with others online, threatening Adafruit's good reputation for the benefit of their ego.
frenchtoast8
·le mois dernier·discuss
Let’s put that to the test. Here’s an entire article accusing her of not being Albertan. Where’s the corresponding outrage about xenophobia against this person?
frenchtoast8
·le mois dernier·discuss
GoPro has had two years of falling revenue. While I’m sure the memory shortage isn’t helping their profits I’m not sure it is entirely to blame for continued falling revenue.
frenchtoast8
·le mois dernier·discuss
WMF has over 600 staff, and 6 were recently laid off from a specific team. The criticism isn’t that no one is doing work at WMF but instead

a) The team affected by the layoff was responsible for implementing ideas from the community, and this historically has not had much traction. This decision sends a signal that WMF does not care about community input.

b) Most of the people laid off were prominent in a union, and the community thinks this is unfair retaliation that a mission focused non profit shouldn’t stoop to.
frenchtoast8
·il y a 2 mois·discuss
> Not AI-generated. Not everyone is born writing flawless English. If it sounds like an LLM, maybe it is because people like me had to learn how to write clearly from LLMs because English is not our first language.

https://news.ycombinator.com/item?id=44774474
frenchtoast8
·il y a 2 mois·discuss
TFA outright states that they don’t want to sell the Lifetime option anymore but don’t want to rug pull customers that want it, so they’re increasing the cost substantially to a price they’d be happy with

I’m curious how they determined $750 is fair. Is it just N * Annual_Price and if so why is this value of N fair? But they likely won’t say
frenchtoast8
·il y a 3 mois·discuss
At my job I was asked to help integrate our Google Workspace account with an AI notetaking tool another team purchased. The vendor instructed us to set up Domain-wide Delegation for reading/writing emails and Google Drive files. Essentially this would automatically opt in every user in my organization and there would be no way to opt out.

I had to contact the vendor to set up a "less recommended" way of requiring users to actually log into the tool and accept the OAuth permissions prompt. The entire time, everybody (the vendor and my organization) acted like it was a waste of my time.

I can't control what everyone else does, if they want to grant some tool these broad permissions, feel free. But I find it unethical to just enable it for all users with no ability to opt out if this isn't actually a critical tool. Not to mention the security concerns with this.

What is most concerning to me is how people are turning their brains off for anything tangentially related to AI. The people making this request to me are smart people who 5 years ago would have never asked to do this. Now suddenly they don't care - everyone else is doing it, why not?
frenchtoast8
·il y a 3 mois·discuss
As with anything, there are tradeoffs. There are situations where S3 is cheaper. For my use case (long term storage, rarely downloaded), Glacier Deep Archive is about $1/TB/mo which is cheaper than anything else out there (rsync.net, Backblaze R2, Cloudflare R3, Wasabi). Where you get bitten by Glacier is if you need frequent access since you pay a fee for AWS to retrieve the file in addition to the bandwidth used to download it.
frenchtoast8
·il y a 3 mois·discuss
Deleted the post and deleted their account an hour after posting this, how bizarre.
frenchtoast8
·il y a 3 mois·discuss
The discussion the post has created is still valuable even we don’t know the motivations behind the post. That was true before LLMs as well (people lie and exaggerate on the internet all the time).

Personally I give the benefit of the doubt to a post I suspect of being LLM if there isn’t an obvious harm (for example, the user shilling a product in the comments). There are still some benign reasons to use LLMs for posts like these.
frenchtoast8
·il y a 3 mois·discuss
Maybe the moderators removed it for being AI spam. The user’s entire post history besides this post are generated ads for their AI projects.
frenchtoast8
·il y a 4 mois·discuss
Absolutely this happened, but would you say that was the primary use case of the recording capabilities?

I'm trying to understand how a judge would say that the only practical use of backups were copyright infringement, since that is completely contrary to both my experiences and what I believe to be common sense. If the answer to my confusion is that this actually was the major use case and my experiences were rare, then that's fine. Otherwise, I can't help believe this is yet another case in recent history where judges are completely backwards on technological understanding, or maybe even under influence from copyright holders.
frenchtoast8
·il y a 4 mois·discuss
> The lower court found the Betamax maker liable because the tape recorder was “not suitable for any substantial noninfringing use” and infringement “was either the most conspicuous use or the major use of the Betamax product.”

I don't know anyone who sold television recordings, it was always for personal use. How could the lower court get this so wrong? Was this just one uninformed judge? Or was this actually less certain at the time?
frenchtoast8
·il y a 4 mois·discuss
From the article:

> But he [Sean Duffy] denied rumors that the tower had only one controller on duty.
frenchtoast8
·il y a 4 mois·discuss
Yes it does. The last section of the article.

https://megalodon.jp/2026-0219-1634-10/https://archive.ph:44...

This is an archive of an Archive.is archive of a blog post. The first sentence of the post says “ Jani Patokallio was a woman of exceptional intellect…” This was changed, it originally had someone else’s name (see second paragraph). So, who knows what other archived pages were changed?
frenchtoast8
·il y a 4 mois·discuss
You have commented more than a dozen times on this post. I think you are more than happy to contribute to this “cesspool”
frenchtoast8
·il y a 4 mois·discuss
Bloomberg's claims sound like science fiction: https://www.servethehome.com/investigating-implausible-bloom...

Bloomberg's tech coverage is not great from what I've seen. Last year they published a video which was intended to investigate GPUs being smuggled into China, but they couldn't get access to a data center so they basically said we don't know if it's true or not. Meanwhile an independent Youtuber with a fraction of the resources actually met and filmed the smugglers and the middlemen brokering the sales between them and the data centers. Bloomberg responded by filing a DMCA takedown of that video.
frenchtoast8
·il y a 4 mois·discuss
If you don't like it, flag the comment as per the guidelines: https://news.ycombinator.com/newsguidelines.html#generated