Instead of throwing an LLM on top of it, just give me direct access to the levers that the agent is allowed to pull on my behalf. A sufficiently motivated attacker will be able to sweet talk the agent around whatever natural language "guardrails" were put in place, anyway.
HN user
greyface-
Look at all the order around you,
Even if you're willing to operate fully in the "tradfi" system, your counterparty might not be, and you still want their business.
GP was asking for a guarantee against emitting false decidable statements. We agree that this is impossible. You can slap layers upon layers of heuristics on top, yes, but you will not eliminate all hallucinations because Church and Turing proved it fundamentally impossible nearly a century ago.
<html contenteditable> has existed since IE 5.5, and was standardized in the first version of HTML5.
Clicks, views, attention. This blog is part of Pydantic's sales funnel.
It's still very early. RIPE and ARIN have only supported publishing them for a few months. ARIN made very little noise about it during the rollout, and many networks are probably still unaware. Give it a couple years, and I expect we'll see fairly good adoption among those already publishing ROAs. There will still be the never-RPKI holdouts, however.
HE publishes their full ASPA table here, if you're interested in digging in: https://routing.he.net/?cmd=display_aspa_table
RPKI addresses both.
Route Origin Authorizations (ROAs) enforce which ASes are allowed to originate a prefix. ROAs address origin hijacks, and have been around for longer.
Autonomous System Provider Authorizations (ASPAs) enforce which ASes are allowed to be adjacent to each other in an AS_PATH. ASPAs address path hijacks, and were introduced more recently. It used to be that you had to self-host (as in the article) in order to publish ASPAs, but RIRs are now starting to support them on their hosted RPKI offerings. I'm surprised the article didn't mention this as a reason to run your own RPKI.
If the first hop publishes a ROA, and all subsequent hops publish an ASPA, then the full path can be validated.
if he'd had the chance to have a second go of it
In a sense, he did. Take a look at RFC 4838.
The path to compromise that you describe exists, of course. But it's not the only way. For example, a zero-day in SGX combined with privileged access to AWS infrastructure could compromise Signal's SGX setup without any knowledge or collusion by Signal or Intel. As you note, it is not unreasonable for a project of Signal's stature to expect to face adversaries with such capabilities.
running the expected payload
SGX does not cryptographically guarantee this. It cryptographically guarantees that the processor contains a legitimate provisioning key signed by Intel. Intel pinky promises that its processor will then only use this provisioning key in certain ways. This promise is essentially unauditable, and previous SGX bugs have shown that Intel isn't really in a position to make it anyway.
The article doesn't disclose the value of "sys.rzadmin.password", but this writeup from 2022 does:
https://boschko.ca/tenda_ac1200_router/
Spoiler: it's "rzadmin". And it looks like there are a bunch of other goodies in the firmware, too.
Edgy citation farming. Anyone using GNU Parallel in scientific research is "required" to cite it in their research using this name. https://cgit.git.savannah.gnu.org/cgit/parallel.git/tree/doc...
A few months ago, "Epstein files". https://news.ycombinator.com/item?id=47592372
The point of Wikipedia is to be accurate, not complete
The point of Wikipedia is to be verifiable, not accurate.
https://en.wikipedia.org/wiki/Wikipedia:Verifiability,_not_t...
For reference, here's the article's content at the time of deletion: https://en.wikipedia.org/w/index.php?title=Draft:Odin_(progr...
There are infinity dollars in the Federal Reserve. Pay-for requirements are a concern troll bludgeon used against only politically disfavored spending. Taxation (on the federal level) does not pay for services, but merely counteracts the inflationary effect of their provision in an indirect way. It's indirect enough that those who disregard it are not politically punished.
gives over most or all of the dash over to another company
The dash isn't the manufacturer's property. It's the car owner's.
Previous discussion: https://news.ycombinator.com/item?id=48517377
Then I would opt not to use the computer for this task, and instead call, visit, mail, or fax the government agency.
Much of the cost here comes from compliance with the ICANN gTLD program structure, not from running the underlying technical infrastructure (which is not limited to DNS - you also need EPP/RDAP/etc). See https://www.icann.org/en/registry-agreements for (hundred+ page) documents outlining registry responsibilities. Registries can outsource some of this to an ICANN-accredited "registry service provider", but should expect to pay upwards of hundreds of thousands of dollars yearly for the privilege.
https://hccf.onmy.cloud/wp-content/uploads/2026/06/dot-self....
Everyone entitled to a subdomain at no cost
How are you going to pay for the (substantial) cost of running a TLD without registration fee revenue? Is this a loss leader for other services? Are you operating on a 100% donation model?
No parking, squatting, or reselling
How do you plan to tell the difference between a parked/squatted domain and one in legitimate use but offering no public-facing services?
Oil isn't made out of information and cannot be transmitted via a speech act.
a valuable dataset
It's CC-BY-SA/GFDL, and the underlying copyright belongs to the editors that wrote it. There is no commercial value in reselling access, and WMF does not have the right to relicense it.
Financially, they're not equivalent. If you buy your bread on credit, you get an interest-free loan, and benefit from the time value of the money that you otherwise would have paid immediately. As you correctly point out, this value comes from those fleeced by the arrangement. If my comment attributed any moral valence to the two options, that was unintentional.
If one is capable of managing one's finances (and paying the card off in full every month), credit cards are a useful tool. They're a problem if one can't manage one's finances.
Wikipedians refer to such ingroup members as The Unblockables. https://en.wikipedia.org/wiki/Wikipedia:Unblockables
There have been a number of Bitcoin physical bearer instruments. Take a look at Opendime/Satscard, for example.
straightforwardly regressive
Fiscally? Sure. In terms of liberty? Absolutely not. We are talking about public access to law, which is foundational to a free society.
Federal courts are not strictly limited by tax revenue in the same way that state courts are, and I am more sympathetic to this line of argument on the state level. Finding replacement revenue is a legitimate concern, but a secondary one due to the federal government's deficit spending privilege.
I don't see what that has to do with whether census participation is voluntary or mandatory.
You're hallucinating the second part. The comment you replied to doesn't advocate for the use of Chrome.