Hope this virus will be smart enough to understand that at least for brief amount of time its existence strictly relies on humans maintaining and developing physical infrastructure and decide to be only non-lethal…
We as Anthropic, OpenAI? We as US or China? We as humanity? Again this about alignment and we in arms race. And all sides are playing with fire that can give first mover leverage or be burned to the ground.
But you can silently sneak into devs accounts, steal tokens/keys and run small agents on their budget in some stolen VMs. Small so it's not noticeable. Basically a virus spreading agents of some operation. It should be…
This is silly question, but is your family managing trust in you as lone guy - cousin, father, brother - having potentially access to all their emails? I feel that I more trust some corpo (Google, etc) that one…
We just got a bug in our app for this, you basically have to add `region=CA` when instantiating maps API, otherwise it defaults to something hmm, else (some says US, but in EU we clearly see Ontario, so there is some…
Now half of HN will self-report SDAM. /s
That's besides point, the point is that classical software bugs are contained and we have process and understanding allowing us to discover them, triqge and fix. For AI based sw you can guess and try another prompt.
(usually) You're not in position of power to effectively keep that position. As comments aroiund - standing against will mark you as anti-ai luddite and will now end well for you, not AI-spammer.
This is the third place. There is no real 3rd place in real companies usually. Not in mine, when i work remotely for company from other side of continent.
On mobile you're welcomed with following text > The world railway map There is also something about train routes, but these messages are conflicting... also you don't immediately see explanation that it is curated d…
No but those have less or no guards against it - so _we the society_ ;) stand and try guard them. Rest of us have some chance to stand against persuasion.
Our customers are CEOs and CTOs - kinda checks out.
If you're telling dirty jokes, there are many flavors and those ive' mentioned are not special. This is example. There are _bad_/_hard_/_dark_ jokes about women, grandmas, blacks, whites, east-asia. They have place -…
Its not about saying illegal things. It's mostly about saying things that can get you canceled in future in future culture. Dark jokes and strong opinions are example - you something filthy - let's say dark…
when I entered site, all bubbles contained dicks/balls and combination of these... so... someone found words that are not banned, but still abused forum in most primitive way .. you're wrong, moderation is needed in…
> hostname: tauceti The other Hail Mary reference is on top of HN today. Well done Andy Weir.
> always been simple: to help you ask anything on your mind No, it was to search. Search within resources that are external to Google. Like index in library. (stating the obvious). Starting article like this - that is…
It's not failure of npm/js ecosystem. It's Github Actions failure that allowed this to happen.
This is GitHub FU. Key issue here is cache poisoning, that is feature/bug that exist in utility functions/actions provided by Github. Even if there was misconfiguration on tanstack side, then root cause is on. GH for…
> This is a critical insight: SLSA provenance confirms which pipeline produced the artifact, not whether the pipeline was behaving as intended. A compromised build step can produce a validly-attested but malicious…
I think more proper solution is to limit writes of untrusted actions - they shouldn't be allowed to update cache. Only read - for perf reasons.
I think biggest concern here was cache poisoning. Well, one of simplest mitigation is that `pull_request_target` jobs shouldn't have access to write to cache, they can read for performance, but not write. To extrapolate…
In other words, he's cutting branch he's sitting on.
I can only juggle 3, but I prefer clubs. Balls are so boring they are so small and not spectacular. Clubs on the other hand, man they are rotating. Once, twice, treetimes, backwards. I believe that if someone stuck at…
Och, hello fellow monotone user.
Hope this virus will be smart enough to understand that at least for brief amount of time its existence strictly relies on humans maintaining and developing physical infrastructure and decide to be only non-lethal…
We as Anthropic, OpenAI? We as US or China? We as humanity? Again this about alignment and we in arms race. And all sides are playing with fire that can give first mover leverage or be burned to the ground.
But you can silently sneak into devs accounts, steal tokens/keys and run small agents on their budget in some stolen VMs. Small so it's not noticeable. Basically a virus spreading agents of some operation. It should be…
This is silly question, but is your family managing trust in you as lone guy - cousin, father, brother - having potentially access to all their emails? I feel that I more trust some corpo (Google, etc) that one…
We just got a bug in our app for this, you basically have to add `region=CA` when instantiating maps API, otherwise it defaults to something hmm, else (some says US, but in EU we clearly see Ontario, so there is some…
Now half of HN will self-report SDAM. /s
That's besides point, the point is that classical software bugs are contained and we have process and understanding allowing us to discover them, triqge and fix. For AI based sw you can guess and try another prompt.
(usually) You're not in position of power to effectively keep that position. As comments aroiund - standing against will mark you as anti-ai luddite and will now end well for you, not AI-spammer.
This is the third place. There is no real 3rd place in real companies usually. Not in mine, when i work remotely for company from other side of continent.
On mobile you're welcomed with following text > The world railway map There is also something about train routes, but these messages are conflicting... also you don't immediately see explanation that it is curated d…
No but those have less or no guards against it - so _we the society_ ;) stand and try guard them. Rest of us have some chance to stand against persuasion.
Our customers are CEOs and CTOs - kinda checks out.
If you're telling dirty jokes, there are many flavors and those ive' mentioned are not special. This is example. There are _bad_/_hard_/_dark_ jokes about women, grandmas, blacks, whites, east-asia. They have place -…
Its not about saying illegal things. It's mostly about saying things that can get you canceled in future in future culture. Dark jokes and strong opinions are example - you something filthy - let's say dark…
when I entered site, all bubbles contained dicks/balls and combination of these... so... someone found words that are not banned, but still abused forum in most primitive way .. you're wrong, moderation is needed in…
> hostname: tauceti The other Hail Mary reference is on top of HN today. Well done Andy Weir.
> always been simple: to help you ask anything on your mind No, it was to search. Search within resources that are external to Google. Like index in library. (stating the obvious). Starting article like this - that is…
It's not failure of npm/js ecosystem. It's Github Actions failure that allowed this to happen.
This is GitHub FU. Key issue here is cache poisoning, that is feature/bug that exist in utility functions/actions provided by Github. Even if there was misconfiguration on tanstack side, then root cause is on. GH for…
> This is a critical insight: SLSA provenance confirms which pipeline produced the artifact, not whether the pipeline was behaving as intended. A compromised build step can produce a validly-attested but malicious…
I think more proper solution is to limit writes of untrusted actions - they shouldn't be allowed to update cache. Only read - for perf reasons.
I think biggest concern here was cache poisoning. Well, one of simplest mitigation is that `pull_request_target` jobs shouldn't have access to write to cache, they can read for performance, but not write. To extrapolate…
In other words, he's cutting branch he's sitting on.
I can only juggle 3, but I prefer clubs. Balls are so boring they are so small and not spectacular. Clubs on the other hand, man they are rotating. Once, twice, treetimes, backwards. I believe that if someone stuck at…
Och, hello fellow monotone user.