uean

I have to admit that 3.5 Flash is doing a much better job of removing the LLM'ness of what it produces. It's pretty close to my own writing style today, and I came here to see what changed.

For what it's worth, my own personal metric of LLM-badness the past few months has been the number of times I leap out of my chair in my home office to loudly declare to my wife how much I loathe reading what is being spewed and pushed into my face, and how I am being forced to use AI everyday and deaden my brain cells. Today is like a breath of fresh air.

Not defending this person, but it's obvious that this person used Github as a file-sync. Firefox-passwords.html and firefox-bookmarks.html are what you dump before migrating to a new computer and importing them there. An old school practice before FF sync was around.

This is mentioned in the article but it stood out enough to call it here.

Thanks for saying this. I live in a small, bleak, brown town just recovering from winter, and even despite this, getting out into nature and staring at the water flow past in the local river gives so much benefit.

Reading this article is a great reminder that we all need to disconnect and ground ourselves again. My brain (and likely most of ours) just can't handle 100% up-time all day and needs that break.

Tangent - I used to go cycling a lot, and required a lot less wall/river-staring then. Of the people I knew who I cycled with, 95% of us were coping with some kind of mental health issue in some way and had found our fix on the bike. I miss it.

I just love it. This calms me in a way I can't put my finger on... something about not needing to endless scroll and choose based off a thumbnail and endure an intro and like-and-subscribe please. It's just there. It removes a bunch of stress.

The cybernews article does have some screenshots showing names like “idmb2c” … also that IDMerit was contacted in November and the ports were closed a day later.

Makes sense if the ID verification process involves scanning a driver license or passport.

Edit- rereading this, you’re obviously talking about scale. The original article is much better : https://cybernews.com/security/global-data-leak-exposes-bill...

Thanks for the reply.

"They" is exclusive. "We" is inclusive. One goes with the other. The point I was getting at was that when you use that language in a discussion it comes off as if you are directly involved, rather than commenting from the outside, or having an opinion.

I didn't want you to use "we" either :) Here's your comment, rewritten twice, that fits in better with HN rules and avoids emotion:

The left are also absolutely shameless about lying and feel no obligation to stick to facts or data, but rather appeal to and cultivate ignorance, binary thinking, fear, us-versus-them thinking, and scapegoating. In short, the left's propaganda is more effective because they lean into it being propaganda.

The right are also absolutely shameless about lying and feel no obligation to stick to facts or data, but rather appeal to and cultivate ignorance, binary thinking, fear, us-versus-them thinking, and scapegoating. In short, the right's propaganda is more effective because they lean into it being propaganda.

As you can see, I couldn't tell which side you were talking about. I hope the above example helps. A lot of political discussion denigrates to us-vs-them. It is not helpful.

I really encourage you to avoid the language of "they" and "we." It's a discussion, and it doesn't need to be an attack of which you are putting yourself on a side, or as you put it, binary thinking. As written I can't know if you are talking about either the right or left.

This is part of the game. Many games will not be solvable.

I've seen people say something along the lines of "I am not interested in reading something that you could not be bothered to actually write" and I think that pretty much sums it up.

Amen to that. I am currently cc'd on a thread between two third-parties, each hucking LLM generated emails at each other that are getting longer and longer. I don't think either of them are reading or thinking about the responses they are writing at this point.

Working on the systems/security/infrastructure side, we can already do this. Endpoint management systems already report wifi-ssid, internal-IP, whether you are using a vpn to try and hide info. SASE/ZTNA solutions provide location data, username, device used, connection details. Conditional access policies in the tenant already do checks against all of this anyway.

The roadmap just makes the whole thing user-facing so there's a status in Teams of where you currently are. But IT knew all along. And if IT didn't have tools deployed to get this info already count yourself lucky to work at an immature org security-wise.

Thinking of you tonight, HN friend :(

I disagree. I love and miss this style. Old Car and Driver articles often had the same flair. It’s not always about conveying the information but how we get there. I would love to find more long form, flair writing like this.

My God I havent struggled to contain laughter in a public place like this before. Thanks.

I know this won’t enrich the conversation much, but here’s a Reddit link to the comments showing “normal folk” reactions to a QR code on a door.

https://reddit.nerdvpn.de/r/mildlyinfuriating/comments/1gg37...

Barkley has a time cutoff so I think the point is valid.

It's not intuitive, but you need to click into the box to the right of the text.

I love the analysis. But I hate that the 'fixed' email ends up being wordier for no reason at all.

Brevity has value. Having to bloat content (an email to get past anti-spam; a cooking blog to rank better within Google SEO; ...) brings back memories of high-school english papers, or the modern equivalent ChatGPT.

I shouldn’t speak for Bram or ICCF but can point you to the financial docs which give a great explanation https://iccf-holland.org/iccf.html

From KCFs perspective where I worked, during my time there, I fundraised my salary (expenses) personally “door to door” to keep any funds donated to the organization going direct to the kids and community. I understood this was the case for others as well. I believe Bram paid for flights out of his own pocket.

Personal anecdote: I had lived and worked in southern Uganda with a Canadian organization called Kibaale Children’s Fund (now Kuwasha). One day Bram came by our location. We talked a bit - someone told me he was influential and “worked for google or something” and then I learned his real identity and the software he was a part of. I was just on the brink of beginning a career in IT at the time and later in life as my skills and toolset grew I realized his significance. He never spoke of VIM in person during our time and was an incredibly humble quiet man, dedicating his time to helping children in need through ICCF Holland, which operated out of the same school I was working with as I recall. I found Bram incredibly genuine, and was also highly impressed with the ethics he brought to his efforts in the local work in Uganda (where it is typical to see fundraising dollars sliced and diced with admin-fees - ICCF turned every cent of a dollar back into the community.) He will be missed by many in that part of the world for such a massive impact he was able to have through funds raised through VIM. May he rest in peace.

I don’t really get it. How is this better (or needed) when compared with MilkDrop?

I like the idea. Your description on the website is missing the explanation that the final step is the service provider verified the records via email/sms.

I think one challenge always faced is dns propagation, creating your record and walking away and waiting (sometimes) hours for it to be recognized. Your method gives an ability to create a number of records in advance with different security restrictions so that’s nice, but requires a lot of thought and even more time adding records in your DNS.

So whats the actual verification process look like? You give the SP the subdomain generated and they query TXT records from there? how does the actual verification work here and when/how does the user receive an email?

This is going to change everything for me. Thank you for this software! Exactly what we need for our in house monitoring and alerting.

Hello from Vancouver! I am passionate about movement, but recent injury is preventing that. My new focus is trying to find connection between what I can currently do and what brings joy. It’s a hopeful journey of rediscovery. Thanks for the post and for the real people reading my comment now! I truly hope you all have a moment of happiness tomorrow and know I’ll be thinking of you.

Hmm. Searching “baby” returns nothing but references to Babylon. Not sure why this was my first and only search, less clear why it is doing partial text matching.

I saw the tweet a few mins after it was posted (thanks to the original article here on HN). We are a small startup and made the call to treat this like an exercise in failover process and ripped Okta out from our systems in around an hour. It was satisfying to see the process work. Original emails to staff were to wait for Okta to weigh in with their response before moving back to SSO but… not sure how that’s looking now given how they’re handling things so far.

I came here to say exactly this. A Google of "Conduit" gets every competing dictionary's take on the word. A search on "conduit software" gets you nothing but frustrated posts of people trying to remove conduit malware.

I haven't seen anyone mention this critical part of the flaw - if you disable the root account, then log out and log back in, the root account is active again.

Password change is the only protection until it is patched.

Appreciate this comment and did want to follow up that we are not a Ubiquiti shop but instead have taken over other deployments of it. My deployment experience with Ubiquiti is none, so it's great to hear the actual implementation of Zero Handoff is a hack... nasty, and that should explain the problems we've seen for sure.

We're still in the process of tuning one client with a significant investment in UniFi. ZHO is not enabled in that case and am going down the routes you've described re RSSI tuning and RF mapping, but still see blatant performance issues, and will readily admit that being forced to resort to forums for support and outdated setup articles isn't exactly confidence inspiring and helps fuel my distaste for the product. We're stuck with it though.

Anyway, just wanted to post back to say thanks.

Yes - probably, though our most recent takeover was in August and I didn't see that link. Just knew it was broken and sounds like they're admitting their implementation of an 802.11 standard is broken to me :) The particular link is another gripe I have with Ubiquiti - most of their articles are left up with referral links to new documentation. Here's an example - up until Dec 3rd (from at least October) Ubiquiti marked their only documentation on setting up the UniFi Controller to run as a Windows service (1) as 'Outdated' (2). Dec 3rd they updated it with new instructions

(1) - https://help.ubnt.com/hc/en-us/articles/205144550--Outdated-... (2) - https://community.ubnt.com/t5/UniFi-Wireless/Run-UniFi-as-a-...