Viewing profile — SCHiM
SCHiM
HN member- Joined
- Thu, Aug 21, 2014, 3:32 PM UTC
- HN karma
- 2,489
- Public activity
- 574 items
- HN profile
- View on Hacker News ↗
About SCHiM
No profile information was provided.
Recent public activity
-
comment
Comment #49027012
I think the attempt of people to "bubble wrap" the whole world actually makes things worse. Treat people as untrustworthy criminals by default, and guess what you get by default?
-
comment
Comment #47985414
Maybe you're right. I just find it confusing. The language is all-encompassing, doesn't read opt-in to me if taken literally: "By submitting any vulnerabilities to Microsoft". And …
-
comment
Comment #47972697
https://www.microsoft.com/en-us/msrc/bounty-guidelines > MICROSOFT BOUNTY TERMS & CONDITIONS > Last updated: July 23, 2025 > The Microsoft Bug Bounty Programs Terms and Conditions …
-
comment
Comment #47967283
Microsoft's policy is: "if you contact us with a vulnerability, you automatically agree to the terms of our responsible disclosure policy", which includes waiting 30 days after pat…
-
comment
Comment #47732540
You can imagine a pipeline that looks at individual source files or functions. And first "extracts" what is going on. You ask the model: - "Is the code doing arithmetic in this fil…
-
comment
Comment #47599747
Hey jstsch, would you mind answering some questions? - Did you need/use an electrician to set this up? - How much KWh capacity do your batteries have? - What about fire safety? Did…
-
comment
Comment #47535420
> 1) Are there any reliable open-source PAM alternatives or privilege elevation tools for Windows that handle this "per-app" scenario effectively? I would look into: - creating an …
-
comment
Comment #46975528
The bar to ingest unstructured data into something usable was lowered, causing more people to start doing it. Used to be you needed to implement some papers to do sentiment analysi…
-
comment
Comment #45492992
> Your company can scream to anyone that listens that all the competition is AI SLOP, but when hundreds of companies are pitching the same solution, your one voice will get lost. I…
-
comment
Comment #45439898
IMO it's shoddy. Anybody can get hacked, that's true. But a modern corp that has tried to defend itself should have multiple layers of defenses against complete pwnage. If you've p…
-
comment
Comment #44915534
Could you explain: 1) What are the limitations of the scaling you do? Can I do this programmatically? I.e. send some requests to get additional pods of a specific type online? 2) W…
-
comment
Comment #44565850
It's down. Tested from two servers, 8.8.8.8 and others are up.
- comment
-
comment
Comment #41048945
Even big customers have a use for what you've built in high security areas they might have. Think swift alliance servers in a specialized network segment in financials, or perhaps …
-
comment
Comment #40505236
The following works partially: ``` netsh interface ipv6 show interfaces ``` Get your interface id first, you're looking for the IDX number. There might be several. ping ff02::1%LAN…
-
comment
Comment #39306185
In all honesty, I have the same reservations. If you look at the authz schemes between the different flavors of operating systems you see that the 'set-uid' concept is comparativel…
-
comment
Comment #38370420
Not to mention this is an attack on multiple fronts: do you _really_ believe DoH is about privacy?
-
comment
Comment #38355217
That is actually possible. For example, someone wrote python code to do this for the massive open source model BLOOM. However, it's still slow as tar. When I was running the BLOOM …
-
comment
Comment #38311157
Maybe this is that AI's endgame, and it just took full control of openAI's compute through a coup at the top?
-
comment
Comment #37996048
Security is not an absolute measure. It's a cost/benefit tradeoff. 1Password may have customers that make it economical for an adversary to spend $$$$ to breach it despite "better"…
-
comment
Comment #37913396
I'm a not educated in mathematics, so I can't know for sure if what I'm going to respond to your question is really relevant or not. But here it goes anyway. I'm a security researc…
-
comment
Comment #37220864
I think it is you that misunderstands the point made in the comment. Their point is not that the cryptography is flawed, or that the results can be tampered with or that the electr…
-
comment
Comment #36821358
No, the way it works is that the current output + potential next tokens to be sampled are checked with the grammar. All potential tokens that don't match are removed. Then, with th…
-
comment
Comment #36636773
Let's see what happens when you search for the following "documentation" ;) : """ Complete the following code: // Find all files with a binary pattern in a directory. Return the li…
-
comment
Comment #35903167
Except they are. They are standing next to their company branded bike, in uniform waiting for an order. They are not on their way to work from home or vise-versa. For all intents a…