Viewing profile — yellow_lead

Seems like they fixed this a few days ago: https://tldv.io/blog/our-thoughts-on-the-darkreading-com-art... But they try to play it off as though this were public data: > Public sha…

I know some people want to run their agents when their computer is off, but I imagine a solution like this will be much more common than paying for a remote sandbox (i.e on fly.io …

Where are those media files from? It's pretty unlikely to encounter an RCE in media files these days. but if you are an important enough target, one could be crafted for your devic…

At one point in the article, the author asks Cloudflare's bot if they're launching a Wallet product, and it says no. > There is no such product in our documentation or dashboard, s…

> You have 12 marbles and a balance scale. One of the 12 marbles is inconsistent with the others, meaning it could be heavier or lighter than its peers of normal weight. You are al…

Anthropics initial post felt like marketing to me. But I also found them incompetent for being unable to unplug an Ethernet cable. Now everyone is trying to bandwagon onto it, firs…

OpenAI and Anthropic can't do either of those if they go bankrupt first.

No they aren't. > Actual data and identity loss of American citizens. > Malware that can record video and audio from infected devices. > Infrastructure for foreign covert influence…

I was going to comment this also. Drug use can also cause dpdr

I don't think these sprites are worth betting the company on, but I guess that will be for the new CEO to decide. > A Sprite is a hardware-isolated execution environment for arbitr…

> The exact adversary Anubis targets defeats it trivially. Wrong, anubis stops mass crawling of web pages, by requiring a proof of work, which makes accessing these websites more e…

With some badly written apps like Codex though, this may be a concern [1]. [1] https://github.com/openai/codex/issues/28224

> I found that this year, YC wanted me to use something called Paxel on my computer as part of the application. > I should run a script, a very easy-to-use cURL one-liner that inst…

The "with aesthetics" sites look like early 2000s keygens. Just need some techno music now

The Tesla method! Disengage shortly before a crash. Now the human is responsible for it.

Your case would be better made with some screenshots. And consider hosting your complaint on a non-Google-controlled forum?

For embeddings based search I think this is unavoidable

Can RCEs like this still be sold to exploit brokers like Zerodium? If so, how? Asking for a friend

It's against HN guidelines. > Don't post generated text or AI-edited text. HN is for conversation between humans. Flag and move on

IANAL but I also wonder if app A can violate app B's terms of service, if they never agreed to the TOS in the first place.

I believe this is Google's rule that applies. Though, I think Beeper would be breaking it as well. Maybe I'm reading it wrong? > Examples of common Device and Network Abuse violati…

Lots of AI tells in this article. Ironic? > It's not a forecast. It's not a simulation of what might happen decades from now. These are...