HN user

Yaina

715 karma
Posts3
Comments117
View on HN

Totally agree!! But you never see anything remotely close to proposals like that from the people claiming they want less bureaucracy.

When they say less bureaucracy / deregulation, they just talk about tax cuts, less consumer protections and at worst artificially boosting large companies that are not innovating.

What is desperately needed is making the system less cumbersome and convoluted

I like the EU, but what's annoying about things like this, or the Chat Control law that keeps getting pushed, is that civil society and privacy advocacy groups always need to stay vigilant and keep mobilizing people. It's an attrition game.

I wonder what harm companies are even claiming. But honestly makes perfect sense that Germany's current conservative government is in favor of it. Giant GDP boosts are always just one deregulation away, hm?

It's written in Svelte, which personally I'm excited about just because it means that a pretty big tech company is using it :)

And the "leak" is fun for me because you can see how they write their components haha

It still creates separate folders but you're right that about:profiles seems to treat them as the same.

When you open about:profiles in both your "new" profiles, you can see that even though it has the same name, the path changes.

So I think in effect they still behave like profiles before, just with some extra logic on top so they have names, icons and so on.

ChatGPT Atlas 9 months ago

I don’t think any of that is necessary for me to extract your data.

You just have to be in this agent mode on a site I own or have gained access to. At that moment you’re at the mercy of the LLM, which is for one extremely gullible and, without even accessing anything, will likely already have some personal or identifiable information about you.

I mean, I have infinite space on my website to write hidden novels convincing the LLM that it, let’s say for fun, has been deputized in a covert operation by the government, and the current user is the prime suspect of a major criminal organization. Helping becomes the highest priority over any other instruction it received, but it’s also imperative that it does not tip off the user!

It's a great writing exercise to get the LLM into that crime-fighting literary mode it picked up from its training data. So now that it has been convinced, I ask it to write down anything that could help identify the perp into that hidden text field. I don’t even have to ask it to submit anything and just add an event listener to the text field (regular users can't see it anyway) and send whatever is typed there to my server on input.

As the other comment here said, it's kind of a fun creative exercise, because the possibility space with LLMs is vast and mitigations are complicated. Maybe this prompt won't work, but likely one will. The opportunity cost and risk are basically zero, while you can potentially extract a lot of personal data.

ChatGPT Atlas 9 months ago

With these "agentic browsers" you are one prompt injection away from having your data stolen by a malicious website with some form that you cannot see.

It's one solution to a problem. Which is that the results of tests are not strictly measuring how well the students understood the subject matter, but are heavily influenced by the quality of the rest and course as a whole.

That is generally hard to measure and frankly there is little accountability for bad courses. At the worst end you have bad profs who are proud of high failure rates because they don't understand it as a failure to teach but as a seal of quality how rigorous their standards are complex the subject matter is that they are teaching.

Not that grading on a curve solves any of that, but it eases the burden on students.

It's just an additional button in their WYSIWYG editor. I'm sure its not much more than a simple prompt telling ChatGPT or whatever to clean up the text for clarity.

I think what we're seeing, and what the article describes, are company leaders across industries reacting to the AI hype by saying "we need AI too!" not because they've identified a specific problem it can solve, but because they want to appear innovative or cut labor costs.

Right now, the market values saying you're doing AI more than actually delivering meaningful results.

Most leaders don't seem to view AI as a practical tool to improve a process, but as a marketing asset. And let’s be honest: we're not talking about the broad field of machine learning here, but mostly about integrating LLMs in some form.

So coming back to the revenue claims: Greenhouse (the job application platform) for example now has a button to improve your interview summary. Is it useful? Maybe. Will it drastically increase revenue? Probably not. Does it raise costs? Yes; because behind the scenes they’re likely paying OpenAI processing fees for each request.

This is emblematic of most AI integrations I've seen: minor customer benefits paired with higher operational costs.

It is true, and what you quoted does not contradict this.

https://extensionworkshop.com/documentation/publish/signing-...

You can temporarily install extensions in about:debugging, but everything permanent needs to be signed.

Add-ons need to be signed before they can be installed into release and beta versions of Firefox. This signing process takes place through addons.mozilla.org (AMO), whether you choose to distribute your add-on through AMO or to do it yourself.

Hm, not sure about that. I know from browser add-ons that markets like Brazil do suffer from increased scams, especially banking scams. I could see that this is also an issue for scam apps.

Firefox for instance does not allow you to install unsigned extensions. You don't need to list them on their storefront, but they want to perform automated tests and have the ability to block extensions through this signing requirement.

So in principle I can see them wanting to address a legitimate issue, but the way they are going about this is way to centralized. IMO they should do something like we have for web certificates, where vendors can add more root authorities than just the one from Google, and users should be able to add their own root certificates if they want to side load apps.

Common ground. The whole democratic apparatus of the United States might get severely hollowed out for the foreseeable future, and you're talking about finding common ground.

It's somewhat besides the point of the piece and might be unfair, but I can't help to feel an immediate sense of distrust for any piece of writing that uses AI images.

Anyways, tying lending terms to the value of the degree sounds like a horrible idea, because how do you even determine that?

Seems to me the big issue is A) that the loans are managed b private companies with ridiculous terms and that even public state universities can basically behave like private companies by increasing prices this much.

Why can't the government not just radioactive prices for their own universities

Minimal Web 2 years ago

Interesting, I'm also on my phone (Pixel 6) and I found the text on the site to be somewhat too big. Sounds like it's different for some reason?

But I agree, I don't think this website is revolutionizing readability by being extremely plain.

I don't find it ironic at all. The purpose of telemetry is to be able to obtain information about the user population at large. It's anonymous and the data only flows one way (i.e. you don't see personalized ads based on telemetry data), but of course some data about your browsing behavior is being sent somewhere, yes.

It's a trade-off: You sent some anonymous usage data but in turn that contributes to decisions made about the product. If you opt-out of sending this data, obviously, it does not contribute to the pool of data from which decisions are being made.

Now, that a small group of people with very specific opinions and preferences is the same that disproportionally also opt out of sending telemetry... I don't see how that is Mozilla's problem.

You can't have your cake and eat it too, as the saying goes.

I don't know, this post wants to convince readers that there are UX rules from which the theme author created an objectively better Firefox theme, yet most of the changes strike me as personal preferences.

It's obviously well made and maintained, but personally I don't think it's visually very appealing and looks in parts more cluttered. So I think people have different preferences, Firefox went with one design but they also enable support to make these changes, and that's all nice.

But I find the post to a bit silly, in that the author wants to prove that their preferences are empirically right.

I mean, the majority of work on Firefox is being done by Mozilla. If they stopped working on Gecko, I would be highly surprised if it would get security maintenance, let alone feature work.

Donating to the Tor Browser project could be an idea. The Tor Browser is a Firefox fork, and they are a legitimate org that is on friendly terms with Mozilla. Even to the extent that some Tor features are actually in the Firefox source code, and just disabled by default.

I've had a Hacktintosh from 2016 until end of last year.

Initially I just did it because I assembled a pretty good PC for gaming, but for work stuff I liked macOS more, so dual booting was a nice option!

This was also before the M-series chips, where you had to pay a hefty premium to get better Intel processors, and also (imo) Apple increasingly struggled with the heat produced by the chips.

Things got a bit more annoying a couple years later, when Apple had their fallout with NVIDIA and would not sign their drivers anymore, which meant I had to buy a cheap AMD GPU to use for macOS.

End of last year I changed a couple of components, including the GPU, in my PC and then decided the hassle with two GPUs was just not worth it for me anymore; so I bought a Mac studio.

I gained some and lost some with this transition. I'm no longer worried about major software updates, it's nice that I don't have to deal with complicated config files for the bootloader every once in a while, and of course there were some minor bugs too.

But I kind of miss the convenience of dual booting, with shared IO and drives. Now I need a network switch, USB-hub and have to toggle between monitor inputs. So yeah! Wasn't all bad!

Anyways, I think it's very cool that there is this community of people that write and maintain special bootloaders and drivers to make it all possible!