HN user

Habgdnv

414 karma
Posts0
Comments95
View on HN
No posts found.

<sarcasm> Today I sat down on my PC determined to finally go and file that bug report with debian - when I open their site in order to download the new .iso I am moving my mouse to the bottom of the screen and waiting to click that I accept the cookies in order to continue but I cannot see the banner. It is really frustrating. </sarcasm>

The internet is still kind of the same. Yes - some IRC networks changed but people think that facebook/discord/reddit/tiktok are the center of internet. No - just go to the real web - it still exists out there. IRC is still here, and they do not ask about your age/id in order to enter and chat. BTW HN is one of these places where you are free too. Probably when Paul starts demanding my ID in order to post my dull sarcasm here I will move, but for now it is a pretty nice place to be.

I just woke up this morning and I am amazed. I am taking all my nasty words back and I starred the project and followed the author who reacted so fast to my dull negative feedback and this reaction shows how much he cares about the project.

Just my personal thoughts:

Section 230 is the reason for the current situation. It allows youtube to host many videos and the internet became centralized. Then they decide that they will censor someone or some topic they don't like.

If tomorrow they remove section 230, and youtube cease to exist as is right now and everyone starts to self-host it will become quite impossible to deplatform anyone.

I saw it, it is NOT spyware. It just sends a random UUID. It is just a personal disappointment for the fact that it is something so simple as a console player and yet connects somewhere. But that's just me. I grew up in other times.

Also I just compiled mp3blaster and I am listening to it again. So cool!

I remember with nostalgia the mp3blaster. I spent years listening to it in my terminal. At one point I used only cli without graphical desktop on slackware and one of my TTYs was dedicated to it.

Turns out these times are forever gone - never to come back. The huge disappointment when I tried this on the first run to play a mp3 file from my local disk and it initiated outbound connection. Why a local CLI player needs outbound TCP connection to play a local file from my local disk?!?! The answer was in the source. It is called telemetry. Back then when I used mp3blaster we used to call this spyware, but the times had changed since then.

Few years ago a huge NRA database was left public with admin/1234 or similar by the Bulgarian NRA. They government fined itself some non-trivial amount, then in the source/destination IBAN they put the same value and paid the fine. They managed to find someone to blame and it was not the person who left the database but the person who found it. Turns out that if you leave the PII of a whole country open to the public it is not your fault and you get to keep your cozy job. It is already unlawful to access that, so if someone access it - it is his fault - he broke the law.

Edit, i checked the facts: The Bulgarian government said that the it should pay too much to itself, and appealed the fine for few years until it somehow expired. And the guy (20 year at that time) they accused was later acquitted after they tried to ruin his life.

At least you think that this is satire, until the author receives a DMCA from one of the big corps saying that he leaked the transcript of their last meeting

Linux users are still behind on this innovation. Big corporations with money can move much faster. The closest I got on Fedora was a "donate to the author" button in a game launcher I installed last week. I saw it once. That pretty much exhausts my "modern platform" experience for the past few months.

Still waiting for the copilot button in cat | grep.

I bought my PC like 2 weeks ago and ran my ram at 5800 to test its limits and forgot to lower it. After few strange crashes of my fedora desktop - super strange behavior, apps refuse start/stop, can't even escape to the console... I ran memtest today and it lit all red in the first 2 minutes! Then I log in to my stable desktop at 5200 MT and I see this in the front HN page! What are the chances?!!

I am 100 percent certain that one of my domains i registered before and now I am still looking for lawyer to help me sue my government for blocking my domain for something I never commit and refusing to remove the block - just be cause they can. short .com domain! I even paid it for 2 years because I was willing to commit.

I was in the shop for new PC today and decided on 9950x3d but I don't know how I opened HN just before the checkout and now I am a happy owner of intel 14900!

In Bulgaria we have a similar speed reduction strategy but we are a bit ahead of Sweden: We use medium-radius but very deep potholes. If you lose attention for even a split second, you are forced to a full stop to change a tire. Near schools it gets more "advanced": they put parked cars on both sides of the road, and the holes positioned so you can't bypass them. For example, two tire-sized holes on both sides of the road right next to the parked cars. You have to come to a complete stop, then slowly descend into the hole with the front wheels, climb back out, and repeat the process for the rear wheels. Occasionally, even though we (technically) have sidewalks, they are covered in mud or grass or bushes, so pedestrians are forced to walk in the middle of the road. This further reduces driving speed to walking pace and increases safety in our cities. Road markings are missing almost everywhere and they put contradicting road signs so drivers are not only forced to cooperate but also to read each other minds.

And also it would be good to limit the ban duration with a law. For example manslaughter can be 5 years in prison. So if google decide to ban your account because you send your doctor a photo of your son for medical purposes, they are not allowed to ban you for more than 5 years and then they must restore full access to your account.

The problem is a bit wider than that. One can frame it as "google gemini is vulterable" or "google's new VS code clone is vulnerable". The bigger picture is that the model predicts tokens (words) based on all the text it have. In a big codebase it becomes exponentially easier to mess the model's mind. At some point it will become confused what is his job. What is part of the "system prompt" and "code comments in the codebase" becomes blurry. Even the models with huge context windows get confused because they do not understand the difference between your instructions and "injected instructions" in a hidden text in the readme or in code comments. They see tokens and given enough malicious and cleverly injected tokens the model may and often will do stupid things. (The word "stupid" means unexpected by you)

People are giving LLMs access to tools. LLMs will use them. No matter if it's Antigravity, Aider, Cursor, some MCP.

Ok, I am getting mad now. I don't understand something here. Should we open like 31337 different CVEs about every possible LLM on the market and tell them that we are super-ultra-security-researchers and we're shocked when we found out that <model name> will execute commands that it is given access to, based on the input text that is feed into the model? Why people keep doing these things? Ok, they have free time to do it and like to waste other's people time. Why is this article even on HN? How is this article in the front page? "Shocking news - LLMs will read code comments and act on them as if they were instructions".

I remember back in the 90s that Squid was adding this header while acting as a forward proxy. This header was sent across the internet years before someone have ever dreamed of the concept of a "reverse" proxy. I have not fact-checked but I am pretty sure it is older than IPv6 and the original standard was to add this header at the origin and send it across the whole internet.

I self host and I have something like this but more obvious: i wrote a web service that talks to my mikrotik via API and add the IP of the requester to the block list with a 30 day timeout (configurable ofc). It hostname is "bot-ban-me.myexamplesite.com" and it is like a normal site in my reverse proxy. So when I request a cert this hostname is in the cert, and in the first few minutes i can catch lots of bad apples. I do not expect anyone to ever type this. I do not mention the address or anything anywhere, so the only way to land there is to watch the CT logs.

Well, logically you should be able to keep the old name because you have documented proof that your user base in EU is small enough that this should NOT cause any confusions between your name and the new trademark holder. Just keep the cancellation documents as proof that you use this name but not in EU. This is their claim and not yours, right? The other possibility is that if you have enough users in EU you should also keep the trademark. Only one of these can be true?

Also note that I already lost some court cases using my logic.

First they came for the porn, and I did not speak out - because, officially I do not watch porn.

Then they came for cryptocurrency, and I did not speak out - because I am not a crypto bro.

Then they came for the games, and I am a gamer... but there was no one left to speak for me, because payment processors had already "ethically" deplatformed everyone else.

Fight Chat Control 12 months ago

Yes, my bad. It is actually a debit card. She uses it only for roblox right now. My point was to unwrap the secret of where these mystical roblox points came from and also make her feel empowered and independent.

Fight Chat Control 12 months ago

I keep seeing people mentioning credit cards as a mean to verify one's age. My daughter is 11, but she have her own card with her own name since at least one year.

I owned a 3310. I remember going into the mountains for a week and didn’t even charge the phone beforehand, because the battery would last anyway. Back then I used to climb, and I remember how it fell out of my pocket from around 30m (100 feet). When I got down, I just picked it up from the ground and put the back panel back on. The phone worked perfectly for at years after that.