HN user
We do not sell IDP software and we are not paid by any vendor named here.
The vendor list contains your own product and you, as in the company you co-founded, pretty clearly sells IDP software. https://idp-software.com/vendors/konfuzio/
chrome://on-device-internals reports "Model Name: v3Nano Version: 2025.06.30.1229 Folder size: 4,072.13 MiB" on a random Windows machine I just checked.
https://cacm.acm.org/research/the-tail-at-scale/ (hedged / tied requests)
SSRN is a preprint server and that is the only published version.
I clicked on a few red team "scenarios" if you want to call them that, a few of the tiles look like output of regular tools vaguely related to each but the rest - including the main "terminal" thing - seems more on the fictional side to the point I don't see this being educational.
There's plenty of training material out there these days actually using these tools in contained but realistic environments, if education is the goal just go for those.
How are you tackling users that don't read AI generated output before posting it somewhere?
Would he have not disclosed it if they offered hush money? We won’t know, for his case I hope not. In any case - what was he expecting?
A bog-standard responsible disclosure that any tech CEO should either be familiar with or have someone at hand that is, as is clearly communicated in that e-mail.
Both e-mails are OP reaching out to help this company out, the first fixing the vulnerability, the second giving them a chance for compliance / potential regulatory aspects they might want to follow. It's not on random people reporting security vulnerabilities to tutor random companies on this and both behaviors (non-responsiveness, then hostility) of this CEO, despite being sadly common, are actively harmful if you want to get productive security reports in the future. (And the company unilaterally signing up for bug bounty programs is rather irrelevant for independent researchers as well if they have no interest in participating in those.)
Their accompanying website [0] says mobile phone data comes from teralytix while car movement data is sourced through inrix [1], which appears to gather data through navigation apps of some sort (vague as can be expected but the linked paper [2] claims that).
[0] https://mcc-berlin-ariadne.shinyapps.io/dticket-tracker/
[2] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4526796
As far as I'm aware this type of data does not meet the requirements [0] for a GDPR violation and there was a bit of initial litigation around Google's street view data gathering which left this part out as well (e.g. [1] for a somewhat recent discussion).
In terms of landing page it certainly worked, got me to check out the linked demos until I hit the signup nudge. Some of them don't seem to be available in English which might be a negative depending on your target audience.
Loading those exposes the e-mail of the account used to create the application (in [0], data->userInfo->email) and those "blocks" downloads contain the entirety of the prompts / applications, which is nice I guess but surely those are only required on the serverside?
[0] https://docs.trickle.so/api/nge/public/tao/objects/-/associa...
This is exclusively other people's content that's badly credited (if at all) to push Amazon affiliate links.
related https://news.ycombinator.com/item?id=41232621 "The new PostgreSQL 17 make dist" 3 points, no comments
Nothing, the whole repo and that post are spam intended to drive people to that e-book repository linked in the readme (which in turn is just a bunch of fake updates and likely engagement as well).
Maybe add a reference to DementiaBank as required by the dataset.
"Crowdstrike Update: Windows Bluescreen and Boot Loops" https://news.ycombinator.com/item?id=41002195 1260 points, 1008 comments
The Linux version of CS sensor defaults to being installed as a kernel module as well.
There's no such thing as a best language that only depends on what year it is, what do you want to do with it and are you proficient with any language ecosystems already?
Not sure what the e-mail confirmation flow does but your upload leaks the fileId that can be used to construct the target URI without it.
Since my test e-mails from a throwaway don't seem to go through: What checks does this perform? Since the policy pages don't name third parties like virustotal I assume it runs some OSS tools on your side?
Regarding the privacy policy and ToS: How do you see people using this in a corporate setting vs. something local? Most suspicious e-mail I encounter can't just be sent to random third parties.
sidenote: Some of the text is gray on gray and barely visible, e.g. on the main overview page when logged in and your policy pages.
That depends on the language pair(s) and sometimes the domain of texts you're translating.
Assuming you want to stick with the big cloud providers just sign up and test them on your content, they all have straightforward libraries.
Terribly sorry to harp on what the others in this thread have said but it seems like you've either been negligently briefed (due to the implausible scenarios you're describing and that you're posting this tied to your real identity, their first name on your website - assuming that's more real than the ChatGPT Ph.D. and other random entries there -, and your previous HN submission) or you're being lied to.
I meant your website and resume that you linked there. If this is not some weird thought scenario, pointing her to the public forum you use to discuss alternatives to her simply talking to whoever's responsible for her comsec doesn't seem like the greatest idea. If this is an actual problem it's not yours to solve and certainly has solutions that aren't this... convoluted.
What problem? Just clicking on your profile, your number is public information she can find in plenty of places without taking anything anywhere.
This is from 21, not really news, and the paper version on arxiv and published at NeurIPS have quite a few citations. No one's suppressing this, people that don't reflect on their datasets or how they use them just either don't care or fail to acknowledge they're actual issues.
Would you please refrain from creating new accounts to post duplicates of this? That's in the guidelines as well. HN has an e-mail address down at the bottom if you want to get in touch with them to potentially get this one changed.
There are only official persons/entity accounts on that instance, if you're thinking about the global feed that's just a composition of people those accounts follow.
https://mackinstitute.wharton.upenn.edu/2023/would-chat-gpt3...
This seems to describe the MBA exam part of that paragraph.
https://news.ycombinator.com/item?id=35771104 previous discussion here (915 points, 1135 comments)
It's not, especially on the weekend. The freight delays might be somewhat of an issue over the next few days but on the passenger side it's a mild inconvenience at best. It disrupted the rail network country-wide to some degree but the public rail infrastructure in Germany isn't really known for it's reliability anyway.