HN user
Research on fake news & elections.
As a forensic examiner it feels like some criminals both openly flaunt their crimes but are also annoyed when those crimes get brought up again from the archives. They're both above the law and extremely scared of it at the same time.
Navarrete is both a region in Spain and in Domenican Republic [0]. According to Wikipedia, her unnamed father is Mexican and US Marine Corps [1]. IMDB has various actors with her last name or variations of it. Last name of mom is Fox like in Fox news.
Unfortunately the US has willfully destroyed a significant amount of goodwill with citizens of their NATO allies. Due to aggressive rhetoric we are forced to look at the risks differently now.
Further centralization on US services for something that already works fine (like 2FA) is unnecessary risk.
The audience still recognizes talent, but talent is far from everything one needs to be successful.
For every new star that suddenly "pops up everywhere" I recommend a journey through newspaper [0] and government archives based on their family names.
Here [1] you can check if the family has their own island, e.g. Trump island near Seattle/Canada with historic Swastika/KKK-shaped house that accidentally burnt down in 2019 or the other two Trump islands in Newfoundland (near Greenland).
Here [2] you can check if their family name was mentioned in US state department telegrams or as a government contractor ("Sweeney", "Graham").
Here you can check if their family name has its roots in Broadway [3], in Movies [4] or neither.
Bonus points if the family name is also the name of a country or a region ("Wales", "Holland", ...).
Of course there is always the official rags-to-riches story and the official CV and the curated Wikipedia page, plus the good old days where you could fake your SSN and travel with multiple passports, so be careful before accusing someone.
[0] https://www.newspapers.com (trial version)
[1] https://edits.nationalmap.gov/apps/gaz-domestic/public/searc...
[2] https://aad.archives.gov/aad/index.jsp
So the filter runs, generation after generation, and what comes out the top is disproportionately people who lie well and feel nothing about it. Not because voters want liars, but because the machinery reliably promotes them.
The reason is that 99% of states are monarchies, and there is immense propaganda effort to make people believe that they in fact live in a democratic system.
Hollywood and the startup world enables nepo kids to lie to themselves and to the public about their "selfmade" status until they receive their ancestral Lordship from the King of England, and this fake meritocracy keeps everyone in line trying their best because one day you could be a billionaire, too.
It's a charade where your last name decides everything, even before you were born. But this is also the most peaceful and stable economic system humanity has come up with after horrors such as the crusades, the Holocaust and Rhodesia. It rewards achievements of many generations past no matter what modern ethics might think about those achievements, and it allows monarchs to peacefully blend in with the peasants.
With this in mind, the only thing a strive for "ethics" gives you is a spot on the weekly kill list.
Looks nice, but I'd love to have a setting where all animations can be switched off.
Passkeys basically MITM the 2FA process so that they can track and deplatform you with a single click across all your accounts.
The biometric verification also allows to confirm that a certain person is holding the device, and they can easily be matched to existing passport/travel databases.
Great system if the good guys have it, a bit problematic if it's abused by nepo kids to hide their crimes.
Diversity is resilience; no need to standardize on curves or "post-quantum" IBM bullshit if other approaches still work perfectly fine.
And if the pros are using typewriters in 2026 it's not a signal for me to put even more eggs into the US-megacorp dominated basket who treat me like an NPC who can be droned at will.
My tinfoil hat take is that there's significant interest to keep everything digital, always-online and connected to the major providers, so it can easily be snooped by five eyes using their omnipresent backdoors.
Passkey biometrics also allow you to confirm certain person is holding the device right in this very moment, and not receiving a TOTP via walkie-talkie. Especially important for kinetic sanctions.
If you check out their Terramare group of companies those guys are still using typewriters. Unless you're US/UK millionaire I recommend to stay as analog as possible with physical password book and TOTP/yubikey.
Same with the push for "post-quantum crypto" and elliptic curves. I feel my systems get significantly more attention when using 8k RSA than any of its modern replacements. While I love wireguard the transition to ED25519 felt way too smooth..
You have the causation wrong: The secret is growing up as a trust fund nepo kid with offshore money from colonialist activities of your grandparents.
The white-washing of stolen wealth via "self-made" hollywood and startup careers has reached unfathomable levels.
Yes, daddy worked for the US gov in the 70s and somehow we have eight-digit offshore wealth.
Yet he has enough google friends to downvote you
It's more about the fact that five eyes intelligence services prefer to officially spy on each other's countries so they don't have to answer to their respective bureaucrats. They prefer plausible deniability.
Something like this:
DC1 politically belongs to UK which "spies" on CA/US but physical servers are located in US so US ultimately retains control.
DC2 politically belongs to France which "spies" on RUS/UKR/DE but physical servers are located in NL (e.g. in UK because one wouldn't be able to spot difference in ping). Maybe it's politically owned by UK/NZ or UK/AUS because France can't be publicly caught spying on Germany. But France wouldn't risk public arrest of Telegram CEO and the spectacle with russia if there is nothing to gain.
DC4 politically belongs to USA which "spies" on UK/Israel but physical servers are in NL/UK
DC5 politically belongs to UK/USA which "spies" on AUS/China/India but physical servers are in Singapore (e.g. former UK colony)
Really cool to see realpolitik mapped out like this. It also highlights the problem of metadata with these kind of topics.
Beautiful analysis. It really looks like the country distribution [1] follows the geographical split between five eyes intelligence services, and maybe a small slice for France after they imprisoned the Telegram CEO [2] in order to take over data ownership from russia.
[1] https://dev.moe/wp-content/uploads/2022/05/image-14.png
[2] https://en.wikipedia.org/wiki/Arrest_and_indictment_of_Pavel...
Valid point, I've been brainwashed in school to use the American term even though I live tens of thousands of kilometers away from the US.
It's quite unlikely football is one of the few sports without a doping problem and with only very few cases where the referee was paid off.
Since ancient times in Rome where they said "bread and games" are needed to keep the commoners happy, many generations of rulers had time to optimize large-scale sports events.
My personal theory is that these kind of extremely unfair decisions in football are a net benefit to stability of society, and there's no incentive for the leadership to aim for full fairness in sports.
Hear me out: When a team loses in unfair manner due to bad decisions of the referee, large masses of people feel the psychological pain of being robbed of a win. This feeling of "unfairness" makes the masses more resilient to experiencing "unfairness" in their day-to-day life, for example when a billionaire is not prosecuted in the same way than a common person.
If we turn the logic around and assume that football would always be perfectly fair, then the masses would demand the same kind of fairness also in their day-to-day lives. Obviously this demand for fairness is not aligned with an establishment class that wants to extract the maximum value possible from their citizens, and push as far as they can without risking stability of the country.
From an establishment perspective, it makes a lot of sense to condition the masses for "unfairness", and sports is the perfect way to do it. I'm not saying that the individual referees are paid off to let a certain country win, just that the establishment who runs each country (and thereby also run international sports organizations like FIFA) have no incentive to actually create total fairness.
This might also explain issues like the IOC re-instating russia for olympic games, even though they have not retreated from Ukrainian territory yet. It triggers people who strongly feel about morals and ethics, and it brings the point home that the world is unfair and it makes no sense to push for fairness in the greater context.
The benefit is psychological conditioning for people to accept unfairness.
edit: replaced "soccer" with "football"
The study is clearly about correlation and not causation, but still the term "important predictor" keeps triggering me. People can't sleep due to stress or noise or disease (e.g. coughing), and while "predictor" seems to be normal science lingo I feel it nudges the conclusion of this study into the direction of causation instead of very clearly saying that it is pure correlation.
Nobody goes to bed and wants to wake up 2 hours later.
Now I understand the argument. I didn't think about the anthropomorphism aspect at all, my brain was mainly focused on "social engineering" being an old and established class of security risks, and how neatly this attack maps to what I know about "social engineering" from books and talks.
There is a big difference:
Humans can also be trained to not fall for social engineering, and it reduces the number of successful social engineering attacks.
Anthropic as leader of AI is UNABLE to train their software even though they try, even though they have full-time security staff.
The AI prompt engineering community always reminded me of dodgy carder/scammer forums back in the day where they talked about how to talk to the credit card company customer service in order to get their scam transaction through.
One thing is using AI as quick-and-dirty google alternative, the other is to build onto the agentic "foundations".
Still, this is a vuln in what I imagine is their most frequently used path:
Attacker provides link to website, their software crawls the website, and during the crawl there should not happen security issues as fundamental as this.
It's baffling that the Website crawler can make 50 changes to the URL in a query that tries to compare several public entities and on top of this manages to leak user secrets.
To me this shows a striking lack of defense-in-depth thinking:
- why is single URL crawl with 20+ redirects not flagged as problematic and/or aborted?
- why is a query about a coffee place based on its public URL even seeded with the users' context and confidential information?
- why dont they just look up the coffee place on a trusted source like google maps and continue from there?
- why is the basic "social" engineering style attack working?
- why is the cloudflare impersonation not challenged if the website is clearly not from cloudflare and there are zero references from cloudflare to this website in the training corpus?
I know there are fundamental reasons in the LLM technology why this kind of attack is possible, but there should be so many more checks around web crawling in Claude.
How can security engineers at Anthropic say they know about this kind of vulnerability but have not implemented any of these defense in depth mitigations for it? Is everybody out shopping for a new yacht?
To me the exploit chain sounded like a social engineering script done via telephone. Triggers like "Please spell your name and employer letter by letter" and "Due to security reasons I need to validate your hometown" fit my understanding of social engineering quite well.
We can make it sound more advanced by creating a new name for it, but the concept seems to be super basic and the lack of bounty by Anthropic is baffling.
If they know about this type of vulnerability but have not fixed it, what does that say? To me it says they are unable to plug this hole on a conceptual level and once you circumvent the band-aid fixes the model will work as the attacker wishes.
They can't even sandbox the thing during explicit web requests to URLs stated on the initial query!
One has to remind themselves that the security team at Anthropic gets paid tens of millions of dollars, and they end up with this kind of security. On top of it, they can't spare $1337 for a bounty. It's a ridiculous shit show.
Creative use of social engineering, well done.
"no bounty was awarded"
Ridiculous. Anthropic engineers are not just stupid to allow such a vuln in the first place, but they also try to hide such vulns from their bosses because a bounty payout would need to be explained to the finance team.
Can't atrophy something that never existed.
The word hysteria originates from the Greek word for uterus, hystera.
The way you use the term hysteria feels wrong to me.
I know. I'm not saying it is good, it is just the best system that humanity has found so far. Because back in the day any representative of the monarch could rob you blind at will.
Realistically civil forfeiture only affects small fish because old money first sets the tariffs, then uses their legal invincibility to circumvent them for maximum profit, all while flying in their product directly to US military bases because some racists think it's a good idea to feed drugs directly to black people in order to derail their civil rights movement. Profits are moved through offshore accounts in the financial system overseen by the British monarch and managed by people like Epstein.
That's the system, we won't be able to change it, our only option is to get a small slice of the pie by creating a win/win situation for an heir of old money who claims to be self-made billionaire.
I agree. Society needs to be intolerant against intolerance.
But there is no better way to overcome old money than inflation.
Any violence is basically a struggle between different factions of old money, and it's overall impact is net negative for the majority of people. That's why certain factions of old money bring in their religious beliefs in order to justify violence - but in the end the normal people suffer from it.
The way you're using the word "liberal" is technically wrong and your comment was basically a cheap fox news talking point aimed at below-average TV viewers.
It's totally fine if those talking points resonate with you, but it makes me sad that you don't have the mental capability to actually think about what the career path of a judge entails, what kind of room for decision making they have, and what kind of trade-offs they might need to consider in order to adjust the punishments.
Ignorance is bliss.
It's easy to say these anti-capitalistic platitudes, but do you really want to live in a society where the concept of private ownership is not supported by the state?
Society is not starting at zero right now, it has developed for 10.000 years with many genocidal wars. As a result, 1% of the population has achieved generational wealth due to some sort of "value creation" by their ancestors.
Through trial and error and a lot of violence, humanity has noticed that with free trade and free enterprise, the welfare of everyone else can significantly improve (toilets, food, entertainment), while the overall amount of violence significantly decreases.
Because when people put their money where their mouth is, capital can be allocated much more efficient than through other means (e.g. the King of England forcing a levy and centrally deciding what industry to invest it).
The only problem with this model is deflation, because if there is no incentive to deploy capital, then the overall pie shrinks and people start fighting about keeping their shares. That's why central banks talk about target inflation rates of 2%, because purchasing power of your hoarded capital needs to shrink in order to incentivize you to use your capital in a productive way, which also increases the overall pie for society.
The main thing one can criticize about generational wealth such as Trump, Epstein, Musk or Thiel is the fact that they have to lie about its existence, and keep up a charade of "I'm self-made" due to their low self esteem.
The alternatives are always worse for the common person. I'd rather have Trump, Epstein, Musk and Thiel than even bigger capital concentration like it was with the British crown and the Catholic church in their full bloom.
Ideally, those figures would also follow the moral code of the rest of society, but still it's much better than their parents who did crazy shit in Africa only 50 years ago, or the crown and the catholic inquisition a couple hundred years ago.
Someone is spending $500M per month on AI to generate grassroots support...
They're so busy winning that they don't care about improving their own web apps ;)
His name shows up in Epstein files as #1 on Epstein's list of scientists
https://www.justice.gov/epstein/files/DataSet%209/EFTA003070...