Live data from Hacker News

Anonymous GitHub account mass-dropping undisclosed 0-days

github.com

261–270 of 407 posts

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#262

Earlier quoted context omitted.

Then say “When I was at my old school” - not “we”.

No thank you. I meant it when I said it intentionally. I still run BB programs the same way, and expect others to behave similarly. Funny enough I was just talking to that friend this week, about the BB program. Nothing has changed so given my friends still follow the same pattern at that company... We is more accurate. Sorry it bothers you, but not everyone is you.

Nothing you said (in isolation) is “bothering” me,

but the ridiculous contradictions in what you’re saying are difficult to ignore.

You went from implicitly speaking for a bug bounty team,

to not speaking for one (but sort of your colleagues?),

to now unabashedly speaking for TWO bug bounty teams

…without even naming an industry?

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#263
post #196

Earlier quoted context omitted.

> I mean, that's how people get hacked. ...when was the last documented case of an in-the-wild hack targeting VNC?

VLC != VNC

Oops! I was on my phone. I meant VLC.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#264
post #206

Earlier quoted context omitted.

I mean I do actually think laws are basically useless. Good people don’t need em, bad people don’t listen to em. I guess “bad” is excessive. I regularly observe traffic laws with less rigor the your average police officer would prefer.

As you're basically saying, the world isn't black or white. There's also a category of people that needs an incentive to behave. Also, without any laws, it would be problematic to punish "the bad guys". At that point, what you can or cannot do would be only a matter of relative power: who is stronger can do whatever they want to weaker people.

This is how it's always been. The law just produces another axis of strength that is easier to gatekeep.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#265

Earlier quoted context omitted.

At this point, I believe the LLM "style" is on purpose. Perhaps the labs want to be able to distinguish their slop from human content for future training; I don't know. But it feels very deliberate that they've kept the style so consistent for so long.

I agree. They're voluntarily adding fingerprints to images so I expect the default voice is intentional and it wouldn't surprise me at all (though I have no evidence of this) if the output text has a fingerprint stenographically embedded in it.

In a video of Hank Green, he interviewed an AI expert (if there even is such a thing), and he said that in the thinking part of the conversation, LLMs seems to use code language to communicate with itself, like in the usage and ordering of words, and such.

I think that there could be even more then a fingerprint in those messages.

It’s this video: https://youtu.be/5CKuiuc5cJM?is=9VQ1FCxY_X3eNm-b

Warning: They anthropomorphize a lot in this video, but I get it… the words exist, why not use them.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#266
post #54
post #40

0-days-vibes-vulns ? There should be a new category, for spotting and handling the em-dashes of this brave new world of vulns and making the old fossils like me only picking my head up for the old painfully still hand-crafted artisanal ones instead. A kind of label, like free-range for eggs, in sum.

Yes, big pet peeve of the new world. Every em dash is apparently an AI trigger. Back in my day, they were a sign of great respect within my people.

The thing is, in lots of contexts you cant easily type em dashes.

Google docs will convert “—-“ to an emdash but simple text inputs wont.

So when you see one in that context you have to consider the explanation. They copy pasted an em dash specifically, they drafted in Google docs, they know the unicode keyboard shortcut, etc. None of these are safe assumptions. And if it’s markdown you know it wasnt drafted in Google docs.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#267

Earlier quoted context omitted.

> There was a very famous case back in Washington state back in the early 2000s where a group of men were sexually abusing horses. It was uncovered because one of them died, and the other could only be charged with trespassing because it wasn't illegal at the time to sexually abuse animals. What I said, verbatim, about that case. What part of that is incorrect or warrants clarification, exactly?

Using the legal definition of "abuse", yes it was illegal to sexually abuse animals. Their actions didn't qualify. That's what warrants clarification here. I appreciate your definition of abuse here but it's confusing in a discussion about legality.

> yes it was illegal to sexually abuse animals

No, it wasn't. The laws are quite explicit about what "abuse" means, and if you take a gander at most laws (including Washington state's circa 2000 or so) in the context of animals it usually explicitly refers to physical harm (for example, mutilation) or improper living conditions. Charging them under Washington's existing abuse laws would've required the animal to be physically injured, which it wasn't. It's quite literally why they had to pass a new law.

I don't know why I have to explain this, but:

1) Sexual abuse can occur without physical harm or injury.

2) Beastiality is sexual abuse.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#268

What if this person is from an AI lab that really wants the govt to keep suppressing Mythos/Fable & GPT5.6? It's what I would do, the timing couldn't be any better.

wouldn't it be trivial to match the repo to the user logs?

my point is that if someone is releasing these without access to mythos/gpt5.6, then it can spook to govt and cause them to keep suppressing access to those models. if i'm competing with anthropic or openai and feel they have pulled far ahead, this is a decent move. i didn't say that it is for sure what's going on, but hey, there's a tiny bit of probability that it can't be ruled out.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#269

Earlier quoted context omitted.

Using the legal definition of "abuse", yes it was illegal to sexually abuse animals. Their actions didn't qualify. That's what warrants clarification here. I appreciate your definition of abuse here but it's confusing in a discussion about legality.

> yes it was illegal to sexually abuse animals No, it wasn't. The laws are quite explicit about what "abuse" means, and if you take a gander at most laws (including Washington state's circa 2000 or so) in the context of animals it usually explicitly refers to physical harm (for example, mutilation) or improper living conditions. Charging them under Washington's existing abuse laws would've required the animal to be p…

#2 can be split into two sides, and not everyone believes one of those is sexual abuse.

Edit: Removed video link because the second half was gross and unrelated. May try finding another clip, but the first half was of Cenk Uygur from The Young Turks about a decade ago saying he'd legalize cases where the person pleasured the animal.

Edit2: https://www.youtube.com/watch?v=6QUUcQqBkJA

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#270
post #177
post #138

Earlier quoted context omitted.

I've only ever been using "regular" dash, a minus, for that. How do you even type yours? If I ever needed differently-sized dashes (and I don't know the difference between them) I always used wiki to copy them. (disclaimer: I feel like this obsession with dashes is special to native English speakers, which I'm obviously not)

silly specific: the minus sign is a separate character. The dash equivalent is the en dash (–), versus the larger em (—) and smaller hyphen (-). The en dash is also used in things like scores (3–2 Turkey), votes (the bill passed 58–42), or connecting words where the second part is longer than one word (the Australia–New Zealand alliance.) You can remember the latter as, "a hyphen isn't big and strong enough to hold o…

My first language is Dutch (Flemish). I didn’t even know there were three different dashes. The em dash is something I didn’t know exist, or were used, until llms came about. The hyphen is something we use when we make a list, that’s just the minus symbol right?

So em dashes are for pauses or highlighting things I guess? The en dash you explained in your reaction. Is there any other use for the hyphen except for making lists?

Post reply on HN