741–750 of 752 posts
So purely from a hacker perspective, I'm amused at the whining . Like, a corporation had a weakness you could exploit to get free/cheap thing. Fair game. Then someone shares the exploit with a bunch of script kiddies, they exploit it to the Nth degree, and the company immediately notices and shuts everyone down. Like, my dudes, what did you think was going to happen? You treasure these little tricks, use them cautiou…
Earlier quoted context omitted.
It's unfortunate though that they lie and deceive by having a name called "Open"AI when they are in fact "Closed". And the whole non-profit to profit and Microsoft deals are just untrustable and unethical. They also actively employ dark strategies in cooperation with CIA and who knows when they will pull the rug under you again. Do you really trust a foundational rotten group of people who avoid accountability?
I don't know what it's called when something becomes an irony and then this irony becomes an irony itself, but that's what's up with OpenAI today. On one hand, they started this 'we're closing things down because safety' line, they normalized $200/mo subscriptions, but now they're becoming the most open AI company between the big 3. Their tooling is open source, they're lenient on their quotas on lower plans, and the…
When people grab OAuth tokens for replay in OpenClaw, they are essentially doing at the user level what malicious skills do at the agent level — bypassing intended access controls because the system has no way to distinguish legitimate from illegitimate use.
This is the same pattern showing up everywhere: - 312,000 instances on Shodan with no auth (CyberSecurityNews) - 40,000+ exposed instances (SecurityScorecard this week) - 824+ malicious skills in ClawHub - Infostealers now grabbing entire agent identities (Hudson Rock)
The common thread: agents operate with broad, undifferentiated access. No permission tiers, no credential isolation, no audit trail.
Until the ecosystem adds proper trust layers at both the platform level (what Google is clumsily trying to do here) and the host level (monitoring what agents actually do with their access), this cat-and-mouse will continue.
The OAuth token replay discussion here highlights a broader problem with the OpenClaw ecosystem: there is no standardized trust model between agents and the services they access. When people grab OAuth tokens for replay in OpenClaw, they are essentially doing at the user level what malicious skills do at the agent level — bypassing intended access controls because the system has no way to distinguish legitimate from…
Earlier quoted context omitted.
Sorry to be that guy, but given how often Google has done this for lesser infringements (some reported here on HN), is anyone really "shocked" by the permabans? The apparent shock around this sort of thing always feels like cope for the fact that we (myself included) understand the power imbalance between Google and its customers but don't want to admit it. There's plenty of evidence at this point, and I feel like we…
>Sorry to be that guy, but given how often Google has done this for lesser infringements (some reported here on HN), is anyone really "shocked" by the permabans? Yes, we are surprised. Google understands our surprise, too. To quote the Google employee another commenter mentioned: "We understand that a subset of these users were not aware that this was against our ToS and will get a path for them to come back on" http…
>Account Remediation Pathway
>Introduced a formal remediation process for accounts suspended due to Terms of Service violations. See our official announcement.
Earlier quoted context omitted.
Nope. Bing, DuckDuckGo, Yandex, and Kagi all have more-or-less complete indices. There's no moat around scraping the public Web.
I’m a Kagi user, but I understood this recent post by the Kagi team to mean that they do not index the web themselves and that it’s nearly impossible for them to do so. https://blog.kagi.com/waiting-dawn-search
I'm paraphrasing here of course. But it doesn't seem impossible. I mean I don't think it's easy either. I also want to add that I don't want to live in a world with only one search engine.
Earlier quoted context omitted.
You couldn't Google this? I mean, even ChatGPT is capable of doing that.
> TFA most commonly refers to Trifluoroacetic acid, a highly persistent, mobile "forever chemical" (PFAS) found globally in water and soil, widely used in organic chemistry as a solvent.
Additional information from Google employee https://x.com/_mohansolo/status/2025766889205739899 : "We’ve been seeing a massive increase in malicious usage of the Anitgravity backend that has tremendously degraded the quality of service for our users. We needed to find a path to quickly shut off access to these users that are not using the product as intended. We understand that a subset of these users were not aware…