Hacker Newsnew | past | comments | ask | show | jobs | submit | bestcommentslogin

If the vulnerability is already being exploited in the wild --- as in, it's a vector people already know about and are tracking --- it's possibly not worth much at all. Vulnerability valuations depend heavily on the lifespan of the vulnerability; payments on black market are tranched (explicitly or less explicitly, as with "maintenance payments") based on whether they're patched.

Further: a vulnerability is probably not worth that much either, even if it's a hypercapable vulnerability, because the grey market buys full enablement kits, not vulnerability information. People making 6 figures on vulnerabilities are selling fully enabled full chain exploit systems, not just intelligence about a sandbox escape.


I laughed when I saw this; my 14yo looked over to see why I was laughing and asked "what's IBM?"

indeed, child, indeed.


I love this line of thinking but the framing comes across to me as a bit inflammatory and uncharitable. Just about anything involved in the exchanged of ideas can be viewed as a virus! That is because, when viewed from an evolutionary biology perspective, ideas are the cognitive equivalent of genes (in fact, this is where the term meme comes from).

There's a whole field, evolutionary memetics, dedicated to this. Cultural values, marketing, religion, social media, education, propaganda, etc. can all be viewed quite naturally through this lense. Even the terms we use in every day language (eg, going "viral") seem to intuitively grasp this.

Is my friend a virus for recommending me their favorite book? Well, yes I guess, but that's kind of just how ideas work. Just my two cents


My revolt is against the cognitive stress of reading generated text. A trope typically indicates I’m in for an uphill read.

I recently read this William Zinsser quote that inspired a nickname for this: Clotted Claude [1].

> Nobody has made the point better than George Orwell in his translation into modern bureaucratic fuzz of this famous verse from Ecclesiastes:

> > I returned and saw under the sun, that the race is not to the swift, nor the battle to the strong, neither yet bread to the wise, nor yet riches to men of understanding, nor yet favor to men of skill; but time and chance happeneth to them all.

> Orwell's version goes:

> > Objective consideration of contemporary phenomena compels the conclusion that success or failure in competitive activities exhibits no tendency to be commensurate with innate capacity, but that a considerable element of the unpredictable must invariably be taken into account.

> First notice how the two passages look. The first one at the top invites us to read it. The words are short and have air around them; they convey the rhythms of human speech. The second one is clotted with long words. It tells us instantly that a ponderous mind is at work. We don't want to go anywhere with a mind that expresses itself in such suffocating language. We don't even start to read.

[1] https://blog.kierangill.xyz/clotted-claude


I work at OpenAI and I was the Incident Commander for yesterday's outage.

We had a routing error within our infra that caused issues for some of our products. It was not related to the Astra launch. We don't comment on other providers' outages.


These are all important points and I love the analogy. But there is an even bigger issue with having LLMs write for you:

Writing is thinking. Thinking and deciding. There have been many times when I start out writing something substantial - could be an email, a blog post, a software design document, anything - when my own views substantially changed during the writing process. Writing forces you to serialize your thoughts - and you can't always trust the gestalt.

Reviewing gives you the chance to ensure the arguments connect solidly, that references are accurate (even informal references) and gives you the time to consider counter-arguments you aren't addressing.

None of this matters much on LinkedIn, but it matters a lot in our work. You cannot outsource your understanding to AI. They are powerful tools but they do not have any human understanding - that isn't their optimization target.


What's even worse: the court fined us because they claimed this use case was in some way in contempt of their ruling. Then, when we won the overall case, that money was never returned because it wasn't specifically referenced by the final court. The response from the lower court was effectively: "Well, you will need to sue the court to get that money back." <table flip>

Edit: I'm with Quad9 (CTO)


Looking at their charts, Democrats and Independents clearly think corruption is up a lot since 2024. But Republicans think corruption is down from 2024. The polarization of the electorate in the U.S. is pretty incredible.

This is a huge success, but it I think also tells us that the EU is further decoupling itself from the US. Slowly but steadily.

Which is obviously the right thing to do, but it's interesting that it's not just a hypothetical anymore.


Because keeping your national gold reserves in a Mafia state run by a arbitrary kleptocratic elite is a very bad idea.

At this point international trust in the USA is at around the same level as trust in Iran and Russia .

China handily beats the USA in the trust rankings in most of the world.


>The speed with which we were able to produce this proof demonstrates that it is now possible to formalize large swaths of mathematics, which may both catch errors in the common body of mathematical proofs and reduce the burden of refereeing new work.

^ this section should have been in the first few paragraphs imho. Explaining why this is relevant shouldn't be so far down.


Chrome may be an excellent browser, but the venn diagram overlap with malware keeps getting larger.

I would love to use Pangram but they simply don’t allow signing up with my custom email domain. The error was “This email address can't be used for signup. Please use a different email.” I’m not about to create a Gmail is to use your service. To me the attack on the decentralized nature on Internet infrastructure is no less serious than the attack on the human provenance of writing itself.

Not much of a surprise. Government action has been anemic at best. Industry action (overall) has been net negative.

The only hope now is exponential growth of (solar and wind)+batteries making other sources uneconomic. This seems to be slowly happening, so I hope we hit the exponential curve soon and we're there quicker than we expect.

This only stops it.

Then, to fix it, we'll need a massive Direct Air Capture industry that will have to operate for a century, and probably past that so we can hit and maintain a CO2 level of 250ppm.


Someone should make a browser extension to label HN posts with Pangram results of the top 100 posts, so I don't waste my time reading crap.

Always a pleasure reading Bryan's writing; it's like Bryan is sitting there with you and saying the words (hard to convey the feeling).


No it isn't, the idea that strict vegan diets would have stoped climate change is just nonsense. Run the numbers. "Strict vegan diets" is the attitude of US activists telling the developing world that they need to change their behavior before the US activist is willing to accept driving less or adopting dense urban infill housing.

"Making money" is the incentive system of society. Technology has now aligned society's incentive systems to promote climate action.

People who refused to acknowledge the reality of human society, refused to acknowledge that the profit system exists whether they want it to or not, are responsible for focusing action on ineffective means of change.


This administration has done nothing to end or undermine the antitrust cases against Google. In both cases the judges found Google in violation of antitrust law, but both handed down fairly mild remedies, despite the administration (prosecutor) pushing for much stronger changes. The judges were appointed by Clinton (Leonie Brinkema) and Obama (Amit Mehta).

> and it's quite enjoyable

Used to be somewhat enjoyable. Nothing pleasant about digging around codebase that was heavily affected by the last 12-18 months of AI-ing.


Time, quiet mind, slow mornings, rest without guilt, calm and boring days - are all the same thing - escape from being busy. This assumes being busy is common, which is actually not that common for an age of 60+.

The real luxury, for any age, in general, is in not having dependencies and needs. The need to impress someone, the need to know every ugly news from around globe, the need to read everything and be knowledgeable, need to stay connected, need to be smart, the need to travel and see places, need to taste foods from around the world, need to have many friends, need to be loved by someone, and need to have more money and things.

Those are dependencies that make you weak. Lack of those means you won't be happy. Luxury is being happy without having any of those.


I'm using this for my mother's website (https://www.touchofglass.eu/), and my only complaint is that it assumes you version a website in a Git repository. You can work around it by uploading a tarball or something like that, but it is far less convenient than using sftp/rsync. But considering that we are far into the free 10GB a month and I only have to update it very infrequently, it seemed like the best solution.

This is absolutely my take as well. They removed all constraints, trained the model to hack, stopped watching, and stood back and said "wow isn't this thing more powerful than anyone could have imagined?" They're asking to be the writers on LLM legislation and right during IPO phase for both of these companies. It's just obvious.

Priorities need to be straightened out. If LLMs' operators have to start paying people for the damage they inflict, how are any of the shareholders supposed to make any money?

It's okay, they're not a monopoly according to this administration. Nothing to see here, carry on!

Meta, the other company involved, engaged in industrial scale piracy in pursuit of training data[1].

Let me break out the world's tiniest violin for them.

[1] https://arstechnica.com/tech-policy/2025/02/meta-torrented-o...


However, Strike 3 argues that this is no ordinary home pirate, using the timing of the downloads as evidence. On March 20, 2025, the porn producer’s general counsel first emailed Meta’s lawyers with forensic evidence of BitTorrent activity on the tech giant’s corporate IP addresses.

“Just hours later, Strike 3 first recorded BitTorrent infringement on John Doe’s residential IP Address,” the motion reads.

“This may suggest that Meta desired to shift infringing activity to this hidden residential IP Address in order to prevent further detection,”

Seems like there are 2 different reads to that. (a) is like they say, and Meta was using porn for AI training or something else official. Or (b) that he was personally downloading porn either at the office or a corp VPN and was told to stop by their corp It folks..


The technology-will-save-us mentality is part of the reason we are here. We live in a society that doesn't do anything unless it makes money for some set of decrepit old men.

We had the means to avoid this (strict vegan diets, ground based mass transit, dense development & re-wilding, energy transition) but people made money doing the opposite. And more people made money sabotaging solar+battery pricing in the US.

So we get to watch the world burn down around us.


I think it's simpler than that, I think Hanlon's Razor applies here.

Not sure there has been a less capable Secretary of Defence in my lifetime than who they currently have in the role.

Note: not saying less objectionable, I'd put Rumsfeld right alongside for that but as much as I didn't like the man, it was hard to argue he was incapable.


> 30 minutes of patient, old school troubleshooting

This is also the best way to understand a codebase, and it's quite enjoyable.

I think the models are getting too egotistical. They're so confident of their fixes they won't bother suggesting basic techniques like isolation of the problem by disabling code paths, for example. They'll keep shotgunning less-and-less likely fixes with undiminishing confidence until the code is full of fixes that do nothing. Then they'll double down on why these should be kept.


Any country that keeps gold in US or dollar reserves may end up looking very foolish. Sanctions and asset (financial and real) forfeitures coming soon to a country near you.

The simplest and easiest geopolitical strategy that is available to any country: switch completely to renewables (solar, maybe wind), EVs, green hydrogen/ammonia and synthetic fuels. Keep out of oil and natural gas. Keep out of dollar system. Any country can be immune to geopolitical drama, dollar shenanigans. Remember China has export restrictions on oil. When things get tough, most of the oil countries (with refining capacity to export) are going to have export restrictions. Thats the only way to deal with the mobs in their own country.

From: https://www.youtube.com/shorts/KPq7jyQcemA

Richard Campbell: Politicians aren’t going to do things that aren’t popular, so we have to make these solutions popular for there to be a chance to build political will.

Richard Campbell: Corporations are inherently conservative, and power companies doubly so. Until there is a public groundswell demanding these changes, they won’t act. It’s up to us to make enough noise and show that these are good solutions worth pushing forward.


The entire point is that it can't be reasonably enforced with any granularity. Rights-holders want it to be like that so a copyright win in a single country means something has to be taken down globally.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: