ortekk

w zeszłym miesiącudiscuss

Reminds me of a time when Tailscale cofounder went on a rant about how big bad AWS charges too much for bandwidth, and his solution was to send that money to Tailscale instead

ortekk

w zeszłym miesiącudiscuss

With deluge of Chinese models popping up recently, I believe there's a few issues one needs to evaluate before deciding to use these models:

- Ethics. As known, ou American frontier AI companies are incredibly ethical. And I have yet to see any interviews or blog posts by Chinese companies where they talk about how they are ethical, or at least credible HN comments about it.

- Safety. Do they covertly sabotage or at least refuse to answer questions that could help cyber- and bioterrorists in their nefarious purposes? What about ML-related questions that could help terrorists create AI models without guardrails?

- Child safety. This is especially important with "free for all" open-weight models, most of which are Chinese (ever think about why that's the case?). How are we going to do age verification and KYC with models that anyone can just download on their computer?

- Intellectual property theft. How can we be sure that no output of our American frontier AI models was used while training these Chinese models?

Frankly, there's a plethora of other issues I don't have time to get into right now. Personally, I believe distribution of Chinese models in the US should be paused until they are required to submit models to the government for review and evaluation, to make sure they are made to Anthropic/OpenAI standards.

We need legal grounds for that.

Write to your congressman, congresswoman or congressperson and urge them to stop proliferation of dangerous non-American intelligence. This is a matter of national security and needs to be acted upon as soon as possible, preferably before IPO.

ortekk

w zeszłym rokudiscuss

It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation

[0] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

ortekk

4 lata temudiscuss

Move fast and break things

ortekk

5 lat temudiscuss

$0. Their page on Hackerone is a "Vulnerability Disclosure Program", not "Bug Bounty Program".

ortekk

6 lat temudiscuss

Their keyboards, while pretty, are made of cheapest ABS plastic. One of my keys became stuck just 2 months after the purchase, because of the crack on the keycap fitting. Corsair also refused to replace it.

ortekk

7 lat temudiscuss

Well, I just verified this article's claims with this curl request: curl --head -H "Pragma: akamai-x-get-client-ip" "https://www.disneyplus.com"

It returns different IPs for every request, and these IPs do look like residential ones.

ortekk

7 lat temudiscuss

You don't have to worry about cache rules, but what about your bill with Cloudflare?

5$/month plan is kinda open ended, you pay for each request above included in the plan (0.5$ for 1 million requests)

With a high-perfomance language like Golang for example, I could write a script that's making 500req/second to your site. That would cost you 20$/day.

With Github Pages it wouldn't cost you anything (or they might disable your page if it costs too much bandwidth, not sure)

ortekk

7 lat temudiscuss

See also Firefox Send - https://send.firefox.com/

Files are encrypted and then uploaded to Mozilla servers. Links automatically expire after some time.

ortekk

7 lat temudiscuss

If you are using python in your pipeline, might as well go all in!

  from pathlib import Path


  all_possible_filenames = {f'{i:04}A.csv' for i in range(1,10)}

  cur_dir_filenames = {Path('.').iterdir()}

  missing_filenames = all_possible_filenames - cur_dir_filenames

  print(*missing_filenames, sep='\n')

ortekk

8 lat temudiscuss

Then why not just use "refresh token" as a session token?

ortekk

9 lat temudiscuss

My AdWords account got locked a few years back. It was my first attempt to try AdWords on my website. I've loaded around $20 and it almost immediately got locked (not a single ad was shown/clicked). I could never unlock it or retrieve my money from it. So Google has my 20 dollars now.

ortekk

9 lat temudiscuss

Out of curiosity, can you... run video games with it?

ortekk

9 lat temudiscuss

That looks great! How do you automate google's rank checking? Do you use proxies/swarm of VPS's?

ortekk

10 lat temudiscuss

I wish ProtonMail would offer more email aliases with its paid plans - credentials reuse is what often allows to snoop on someone's online identity. That would really boost its value in terms of privacy.

ortekk

10 lat temudiscuss

Could you please elaborate? It looks like this program is only for people that already have an CS-related degree.

What courses are you taking?

ortekk

10 lat temudiscuss

Which one would you recommend?

Submissions

Found a critical vuln in DataStax, and all I got was block on Twitter from CEO

Ukrainian hackers say HackerOne is blocking their bug bounty payouts

Considered Harmful

Facebook crawls links in PDFs you send in Messenger

comments