HN user

sanbor

1,527 karma
Posts29
Comments260
View on HN
olearysec.com 1mo ago

GCP IAM Authorization Bypass

sanbor
7pts0
learnxinyminutes.com 1mo ago

Learn X in Y Minutes

sanbor
7pts0
unhook.app 1mo ago

Unhook, extension to block YouTube suggestion feeds, comments, and more

sanbor
3pts0
en.wikipedia.org 4mo ago

International Law of Self-Determination

sanbor
3pts2
en.wikipedia.org 4mo ago

Copland (Operating System)

sanbor
1pts0
www.youtube.com 5mo ago

Myths about correct posture [video]

sanbor
2pts0
drajmarsh.bitbucket.io 6mo ago

Sun Position Calculator

sanbor
170pts36
www.reuters.com 11mo ago

US imposes sanctions on Brazilian judge who charged Bolsonaro with plotting coup

sanbor
13pts1
www.axios.com 1y ago

Behind the Curtain: A white-collar bloodbath

sanbor
13pts1
www.yadaphone.com 1y ago

Yadaphone – Make calls directly from the browser

sanbor
2pts1
nielscautaerts.xyz 1y ago

Problems with Python dependency management

sanbor
86pts135
github.com 1y ago

CyberChef – The Cyber Swiss Army Knife

sanbor
1pts0
www.bbc.com 1y ago

Snowden case: France apologises in Bolivia plane row (2013)

sanbor
18pts1
www.theguardian.com 5y ago

MI6, the coup in Iran that changed the Middle East, and the cover-up

sanbor
50pts0
news.microsoft.com 6y ago

Chevron and Microsoft Announce Collaboration

sanbor
1pts0
matthewrayfield.com 7y ago

Animating URLs with JavaScript and Emojis

sanbor
2pts0
fonts.google.com 7y ago

Google Fonts Analytics

sanbor
1pts0
en.wikipedia.org 8y ago

Cydia turns 10 years 4 months

sanbor
1pts0
es.wikipedia.org 8y ago

Spanish Wikipedia also shuts down in protest at proposed EU copyright law

sanbor
272pts96
medium.com 8y ago

How the NSA Identified Satoshi Nakamoto (2017)

sanbor
5pts0
github.com 8y ago

Meltdown PoC for Reading Passwords from Google Chrome

sanbor
3pts0
www.nsa.gov 8y ago

NSA page asking to install root cert to access info

sanbor
2pts0
github.com 8y ago

Multi-platform transparent client-side encryption for files in the cloud

sanbor
2pts0
www.dailydot.com 11y ago

Hackers released an enormous cache of 13,000 passwords and credit cards

sanbor
4pts1
github.com 11y ago

Show HN: Printable customizable calendar in JS/HTML/CSS

sanbor
1pts1
austinkleon.com 12y ago

Something small every day

sanbor
2pts0
rt.com 13y ago

‘America has no functioning democracy at this moment’ – Jimmy Carter on NSA

sanbor
262pts125
www.guardian.co.uk 13y ago

Edward Snowden calls meeting with Amnesty International and HRW at airport

sanbor
6pts0
gist.github.com 13y ago

Argentinian President Cristina Fernandez's tweets translation from last night

sanbor
143pts51

Good point! Regarding C being the language of choice for mission-critical systems, probably you want to avoid memory bugs that might result ruining the mission. I understand many projects have large C codebases or interact with other projects in C, but migrating to Rust when possible (like replacing lead pipes as you find them for plastic pipes) sounds like a smart choice to build mission-critical low level systems.

I pay for LittleSnitch major releases. I’m kind of forced to, in order to keep up with macOS major releases.

Maybe they can sell the hardware which includes 1 major upgrade release.

Maybe they can have a Kickstarter campaign to fund new releases.

Good point. I currently choose to give money to Anthrophic rather than OpenAI because they align a tiny bit more with my values and the product is good. Perhaps releasing an open source model every year could be a differentiator from competitors, where enterprise and individuals choses the lab not because is the best model out there but because gives autonomy in case something happens to the organization providing the models.

Because other countries are starting to use AI for military purposes, other countries are also looking into it to asses and learn. Here in Europe there is the EU AI Act to limit harm everyday harm to citizens caused by AI systems. However, it currently excludes military. The new legislation is just started to be enforced to high risk uses (employment filtering, biometrics, etc.) in august 2026, and full rollout in august 2027. In April 2025 there is a report from EU this legislation may help pave the road for military AI usage conventions [1]

[1] https://www.europarl.europa.eu/RegData/etudes/BRIE/2025/7695...

I would be totally willing to pay $50 per month to support an open source AI lab, rather to get open source models as byproducts of corporations.

It is very important to have the time and freedom to be idle.

In our modern society, however, we hear the phrase "time is money". So, if you are idle, you are not making money. Instead of being idle, you should be busy. "business" is good.

I learn this play of words in Spanish. Idle in Spanish is "ocio". Business in Spanish is "negocio". Thus negocio is the combination of words "negación" and "ocio". The phrase "negación del ocio" translates as "idleness denial/negation".

An incoherent Rust 4 months ago

Tangent to the topic: One of the great things about Go is that the Go team goal is to have a great developer experience. As a result, they try to bundle common third party libraries (mux, zap) into the standard library. For example, they offered an http server, but due to lacking features community packages offered convenience. The Go team used those libraries as a reference to what people wanted, and addrd a performant and simple http routing in the standard library[1].

From that link:

We made these changes as part of our continuing effort to make Go a great language for building production systems. We studied many third-party web frameworks, extracted what we felt were the most used features, and integrated them into net/http. Then we validated our choices and improved our design by collaborating with the community in a GitHub discussion and a proposal issue. Adding these features to the standard library means one fewer dependency for many projects. But third-party web frameworks remain a fine choice for current users or programs with advanced routing needs.

[1] https://go.dev/blog/routing-enhancements

Good question. I find law in general quite ambiguous and full of edge cases and exceptions.

My basic understanding is that self-determination is the right of a nation to choose their own way of government.

[1] Self-determination includes the right of a people of an existing State to choose freely their own political system and to pursue their own economic, social, and cultural development. As such it does not, in light of the current state of international law, impose on all States the duty to introduce or maintain a democratic form of government, but essentially refers to the principle of sovereign equality of States and the prohibition of intervention which are already part of international law

[1] https://opil.ouplaw.com/display/10.1093/law:epil/97801992316...

Why it’s not similar at all?

I want to make an ajax request using jQuery. I look up an example in StackOverflow. I use a very similar code to the example given in the post and by not giving any attribution I just claim ownership.

Same with Spring in action books or looking up Java class references. Many times I look something up and use it as reference just tweaking the examples given.

Millions of programmers have done this.

LLMS in principle use the training data to generate an answer to the prompt, similar to the process I described.

Isn’t similar to looking up/copying code from stack overflow, Google or books? Use it as reference to write the code and claim ownership. My little understanding is that the whole copyright free ride for LLMS is because it is similar to the process of humans using content under copyright as reference to create something new and claim ownership.

I recommend activating "Show Illuminating Sun Beam" under "Explanatory tools" by clicking the graduation cap icon in the top right corner.

I have a different point of view. This was a test to see if the AI could perform a specific task. Asking AI to draw a pelican riding a bike is another test. I find the experiment interesting because it proves that currently LLMs are not able to perform a simple task reliably for a long period of time.

If the journalist was not asking the right questions, or was too obvious the article was PR it’s another thing (I haven’t read WSJ’s piece, only the original post by Anthropic)

I tried to reproduce the situation described in the post by Googling "ps/2 model 280". I refreshed the page about 15 times and gives a very similar answer every time. For example:

    The IBM PS/2 Model 280 was a low-end PS/2 model, often associated with the earlier IBM PC/XT and PC/AT models.
    It featured an 80286 CPU, a smaller hard drive, and a proprietary 3.5-inch floppy drive. While it used ISA slots for expansion, its proprietary RAM and other components made it less attractive for retro computing compared to the Model 30 286

I tried again after 10 minutes and I got the "The IBM PS/2 Model 280 was not a model in the original Personal System/2 family".

It seems the AI response is cached for a few minutes.

I tried in Kagi "ps/2 model 280?". This is the first response:

```

While a specific "PS/2 Model 280" is not definitively documented, here's what can be gathered:

    - It seems that AI models sometimes make errors regarding the PS/2 Model 280, describing it as an ISA-based 286 system. 12
    - The IBM PS/2 (Personal System/2) was a line of personal computers from IBM, introduced in 1987 3.
    - PS/2 computers had two BIOSes: ABIOS (Advanced BIOS) and CBIOS (Compatible BIOS). 4
    - One source mentions "CHIPS/280" including undocumented IBM PS/2 Model 80 address recovery logic. 5
    - The PS/2 Model 30, released in 1987, used an Intel 8086 processor and had an 8-bit ISA bus. 6
    - The PS/2 Model 30 286 had a 10MHz 286 CPU and could have 2 MB of RAM. 7
    - The PS/2 Model 80 offered enhanced performance for commercial and compute-intensive tasks. 8
References
    AI Responses May Include Mistakes | OS/2 Museum www.os2museum.com
    OS/2 Museum | OS/2, vintage PC computing, and random musings www.os2museum.com
    List of IBM PS/2 models - Wikipedia en.wikipedia.org
    IBM PS/2 - Wikipedia en.wikipedia.org
    Technology ardent-tool.com
    IBM PS/2 Model 30 - Wikipedia en.wikipedia.org
    IBM PS/2 Model 30 286 - Computers of Significant History - Userlandia www.userlandia.com
    IBM PS/2 (Model 80) - Technical specifications ardent-tool.com
```

I waited a few minutes and this is the response now:

```

While information on the IBM PS/2 Model 280 is limited, here's what is available:

    - There is mention of the PS/2 Model 280, with claims that it "was a significant step forward in IBM's personal computer line" 1. However, it's also noted that claims about the PS/2 Model 280 being an ISA-based 286 system may be inaccurate 2.

    - The IBM PS/2 series included a variety of models in different form factors like desktops, towers, all-in-ones, portables, laptops, and notebooks 3. Some notable models include:
        Model 30: Featured an Intel 8086 processor at 8 MHz and an 8-bit ISA bus 4.
        Model 80: A high-end desktop with a 32-bit Intel 386 processor, initially running at 16 MHz, housed in a tower case 5.
References
    AI Responses May Include Mistakes | OS/2 Museum www.os2museum.com
    OS/2 Museum | OS/2, vintage PC computing, and random musings www.os2museum.com
    List of IBM PS/2 models - Wikipedia en.wikipedia.org
    IBM PS/2 Model 30 - Wikipedia en.wikipedia.org
    IBM PS/2 Model 80 - Wikipedia en.wikipedia.org
```

I find the way Kagi gives references superior to the way Google does. Anyway, in the second answer Kagi's AI started to get a bit confused by stating "it's also noted that claims about the PS/2 Model 280 being an ISA-based 286 system may be inaccurate" missing the conclusion of the post.

Taking the “organic certification” approach, there could be a “ad-free certification” for products and companies. This could be a first step towards an ad-free world.

In the post or the comments here nobody mentions end-to-end encryption. Obsidian Sync offers multi-user sync withe2e encryption. An open source general tools solving the same problem would be great.