Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Codex scraped the ICM website and discovered 2026 Fields Medal winner list

phemex.com

Post reply on HN
Print view View original

91–100 of 119 posts

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#91

Post by yread »

edoceo wrote: post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

I have about 50 subdomains. One was used by a colleague who cant do his shoelaces without claude. That subdomain gets 10 times more spam and hacking attempts.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#92

Post by intrasight »

Arainach wrote: post #89
bronson wrote: post #80

Earlier quoted context omitted.

I'm tired of the framing in the media these days. "Mythos will end the world!!" "How?" "By finding a bunch of wide open security holes that have existed for years." Oookay. Is this a Mythos problem? Or a lazy/greedy/uncaring people problem?

On the one hand, news coverage is overblown. But scale and accessibility are absolutely a new class of problem. In the 1960s you could pay thousands of people to watch hundreds of cameras and listen to hundreds of phone lines to monitor people, but the cost was so enormous that unless you were in East Germany or Moscow it wasn't a realistic threat model. Now with computers we can cheaply have thousands of cameras wit…

Storage is less cheap right now

I've often shared my prediction that future historians will study us all and that every living human will be the subject of someone's PhD thesis. I'm updating that prediction to be that those future someone's will be silicon based.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#93

Post by afarah1 »

Arainach wrote: post #89
bronson wrote: post #80

Earlier quoted context omitted.

I'm tired of the framing in the media these days. "Mythos will end the world!!" "How?" "By finding a bunch of wide open security holes that have existed for years." Oookay. Is this a Mythos problem? Or a lazy/greedy/uncaring people problem?

On the one hand, news coverage is overblown. But scale and accessibility are absolutely a new class of problem. In the 1960s you could pay thousands of people to watch hundreds of cameras and listen to hundreds of phone lines to monitor people, but the cost was so enormous that unless you were in East Germany or Moscow it wasn't a realistic threat model. Now with computers we can cheaply have thousands of cameras wit…

Yes but also as always a people problem. People put the cameras and monitoring systems in place and operate them, to govern other people who ultimately yield to be governed, as the alternative is made too costly / dangerous by the governors.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#94

Post by ben_w »

bronson wrote: post #80
sixtyj wrote: post #27

> The leak occurred when four Fields Medal laureate lecture fields, marked "HIDDEN," were discovered in the front-end code of the ICM 2026 official schedule. So it was easier than I thought. Bot just scraped public page with hidden fields, not a secret page or to-be-published page from database.

I'm tired of the framing in the media these days. "Mythos will end the world!!" "How?" "By finding a bunch of wide open security holes that have existed for years." Oookay. Is this a Mythos problem? Or a lazy/greedy/uncaring people problem?

> Oookay. Is this a Mythos problem? Or a lazy/greedy/uncaring people problem?

¿Porque no los dos?

All AI risk can be described with a narrative that ends in "some human were lazy and didn't care enough", it's just which humans and how much caring was enough.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#95

Post by joshspankit »

bronson wrote: post #80
sixtyj wrote: post #27

> The leak occurred when four Fields Medal laureate lecture fields, marked "HIDDEN," were discovered in the front-end code of the ICM 2026 official schedule. So it was easier than I thought. Bot just scraped public page with hidden fields, not a secret page or to-be-published page from database.

I'm tired of the framing in the media these days. "Mythos will end the world!!" "How?" "By finding a bunch of wide open security holes that have existed for years." Oookay. Is this a Mythos problem? Or a lazy/greedy/uncaring people problem?

It’s systematic

“6-12 mo to shaky profitability + ability to quickly iterate” is a business that has a good chance of surviving while “However long it takes to be fully secure” is a business that is not only rigid but needs massive up-front capital to get there and even then there’s no guarantee that the market fit is right

And after that is something we could call the “Pareto spiral”: if a company find market fit and builds an excellent product, competitors can survive at 80% of that quality. If the “100%” fails for any reason, the competitors become the new ceiling and now their competitors can survive at 80% of that (now 64%)

And only one round in, how secure could that 64% company be?

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#96

Post by ben_w »

afarah1 wrote: post #93
Arainach wrote: post #89

Earlier quoted context omitted.

On the one hand, news coverage is overblown. But scale and accessibility are absolutely a new class of problem. In the 1960s you could pay thousands of people to watch hundreds of cameras and listen to hundreds of phone lines to monitor people, but the cost was so enormous that unless you were in East Germany or Moscow it wasn't a realistic threat model. Now with computers we can cheaply have thousands of cameras wit…

Yes but also as always a people problem. People put the cameras and monitoring systems in place and operate them, to govern other people who ultimately yield to be governed, as the alternative is made too costly / dangerous by the governors.

> as the alternative is made too costly / dangerous by the governors.

There's nothing government (corporate or political) has made "costly" or "dangerous" about not having them, society did that all by itself: people will actively pay more to have these things because they see the benefit more than the risk, video calls with friends and family, not a hacker being able to duplicate their keys from one photo.

There's 6 cameras on my desk right now, attached to internet-capable devices. Two phones, two laptops. I've got covers over all of them, which is easy, and sometimes mandatory e.g. when visiting the headquarters of certain big-tech firms.

I'd never buy a smart camera. Don't trust them not to spy on me. But I do have a Raspberry pi upstairs, with a NoIR camera module, and an AI-coded bit of webcam software. Might consider it for seeing what animal gets into the garden at night.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#97

Post by edoceo »

morpheuskafka wrote: post #45
resonious wrote: post #10

Earlier quoted context omitted.

I've also seen Google indexing pages with random values in the path that don't get linked to statically (server asks for the URL then redirects to it immediately). I'm pretty sure they index straight out of the Chrome address bar.

This may have been part of this issue I found a few months back, as no other explanation for how UUID URLs got indexed was found: https://news.ycombinator.com/item?id=47769796

What the heck! That is terrible!

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#98

Post by edoceo »

cynerx wrote: post #20
edoceo wrote: post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

Are you using Cloudflare by any chance? I think the Crawler Hints setting [1] exposed some of my "secret" pages in the past. [1] https://developers.cloudflare.com/cache/advanced-configurati...

I'm not using cloudflare.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#99

Post by edoceo »

dataviz1000 wrote: post #64
edoceo wrote: post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

The tin hat guess. Did you include Google analytics embedded in the pages? Do you navigate to pages and Google analytics sends that data home? 10 years ago I discovered that Google analytics would send the equivalent amount as organic users; meaning if we sent an email newsletter with links to articles, Google would send almost 1:1 ratio the same number of people from search results. They are tracking everything and…

No GA, no external assets, no Google fonts. I really thought I was being careful.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#100

Post by edoceo »

dreambigwrkhard wrote: post #17
edoceo wrote: post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

Depending on the CMS, if it's wordpress (15% chance, ha) there is a sitemap function built-in out of the box. The bots don't need to guess.

No CMS, no sitemap, no robots.txt either.
Post reply on HN