ArcHound

9 ms·

121.
by ArcHound 10mo ago
AFAIK at least the comet browser uses OCR, so I worry that the "OCR not feasible" argument is sadly wrong.
122.
by ArcHound 10mo ago
Disagree on the method: I recall that bot farms use pre-paid SIM cards for their data connections so that their traffic comes from a good residential ASN. No client compromise required, it's a networking abuse that gives you good reput
123.
by ArcHound 10mo ago
Seems like you're cooking up a solid bot detection solution. I'd recommend adding JA3/JA4+ into the mix, I had good results against dumb scrapers. Also, have you considered Captchas for first contact/rate-limit? If you h
124.
by ArcHound 10mo ago
I agree. No use in breaking yourself over a "top business priority" that'll change next week. Maybe I'd dispute the last point - seems companies with such employees can do rather well.
125.
by ArcHound 10mo ago
As with all issues of power abuse, the real question is: "what are you going to do about it?" If the answer from the workers is an overwhelming "nothing", then there's no reason to change. And I am not blaming worke
126.
by ArcHound 10mo ago
Thanks. I just saw at BBC that it was "for a very good reason". I just thought that I'm missing some context. I guess all that's left to say is to wish you a great day.
127.
by ArcHound 10mo ago
Hello, I am from overseas. Can someone please explain to me why would they do that? What is the goal, what is the plan, what is the intent? Thanks for any comments, I am utterly confused.
128.
by ArcHound 10mo ago
Hello, I am from overseas. Can someone please explain to me why would they do that? What is the goal, what is the plan, what is the intent? Thanks for any comments, I am utterly confused.
129.
by ArcHound 11mo ago
I can imagine, that instead of a text select, they instead take a screenshot. Round trip through recall and OCR, here's your "text" or image for pasting. Sounds dumb. I know.
130.
by ArcHound 11mo ago
Advent is coming! Post your toolkits for AoC. I really enjoyed not having to write/debug 2d map features from scratch every other day. Blog: https://blog.miloslavhomer.cz Repo: https://github.com/ArcHound&#x
131.
Advent of Code CLI and "std" Library(blog.miloslavhomer.cz)
2 points by ArcHound 11mo ago|1 comments
132.
by ArcHound 11mo ago
And to think that a simple API key almost completely solves this problem. And yes, I've double checked that my instance uses wire guard. We'll never learn, will we?
133.
by ArcHound 11mo ago
Hello, security here - I'd highly recommend setting a captcha for registrations. Unless the true intent of the site is to capture any and all hackers that are searching for new plausibly deniable channel for their attacks.
134.
by ArcHound 11mo ago
Good list! I'd add rate-limits. They need to be tested, but once working, it tremendously helps managing the site load, especially with regards to malicious scarpers/crawlers.
135.
Extreme Go Horse Process(gist.githubusercontent.com)
1 points by ArcHound 11mo ago|0 comments
136.
by ArcHound 11mo ago
I remember annoying one of our professors at the university. Whenever he was discussing a problem and found me falling asleep, he called my name. I woke up, said Chinese remainder theorem and with like 90% success rate it solved the problem
137.
by ArcHound 11mo ago
These RAG systems to me are the most interesting applications of LLMs. Maybe one day we'll be able to process all policies, laws and procedures to create a system-wide understanding. Maybe.
138.
by ArcHound 11mo ago
I think that this is imbalanced in favour of wannabe influencers, who want to be consistent and popular. If you really have no metrics to hit (not even the internal craving for likes), then it doesn't make much sense to outsource writi
139.
by ArcHound 11mo ago
Men and women playing single player games only with bots is a different beast, because the primary intent isn't to seek connection and emotional support. To judge men on a bad example one needn't go further than the word "wai
140.
by ArcHound 11mo ago
I disagree. No state "owned" by LLM changed, it only sent a request to the internet like any other. EDIT: In other words, the LLM didn't change any state it has access to. To stretch this further - clicking on search results
141.
by ArcHound 11mo ago
Yes, plenty of other injections exist, I meant to include those. What I meant, that at the end of the day, the instructions for LLMs will still contain untrusted data and we can't separate the two.
142.
by ArcHound 11mo ago
The article addresses that too with: > Given that (1) the Agent Manager is a star feature allowing multiple agents to run at once without active supervision and (2) the recommended human-in-the-loop settings allow the agent to choose whe
143.
by ArcHound 11mo ago
I recall that. In this case, you have only A and B and yet, all of your secrets are in the hands of an attacker. It's great start, but not nearly enough. EDIT: right, when we bundle state with external Comms, we have all three indeed.
144.
by ArcHound 11mo ago
For me the story is that Antigravity tried to prevent this with a domain whitelist and file restrictions. They forgot about a service which enables arbitrary redirects, so the attackers used it. And LLM itself used the system shell to pro-a
145.
by ArcHound 11mo ago
Yes, curated whitelist of domains sounds good to me. Of course, everything by Google they will still allow. My favourite firewall bypass to this day is Google translate, which will access arbitrary URL for you (more or less). I expect lots
146.
by ArcHound 11mo ago
I mean... If they tried, they could exploit some known CVE. I'd bet more on a scenario along the lines of: "well, here's the user's SSH key and the list of known hosts, let's log into the prod to fetch the DB connec
147.
by ArcHound 11mo ago
The sad thing is, that they've attempted to do so, but left a site enabling arbitrary redirects, which defeats the purpose of the firewall for an informed attacker.
148.
by ArcHound 11mo ago
Who would have thought that having access to the whole system can be used to bypass some artificial check. There are tools for that, sandboxing, chroots, etc... but that requires engineering and it slows GTM, so it's a no-go. No, local
149.
by ArcHound 11mo ago
When I read this I thought about a Dev frustrated with a restricted environment saying "Well, akschually.." So more of a Gemini initiated bypass of it's own instructions than malicious Google setup. Gemini can't see it,
150.
by ArcHound 11mo ago
Lol, in this comment chain, I, personally, shall judge all of the quality of human connection based on vibes. Gamifying the needs depends on the intent. If you care about people wellbeing it's a force for good, if you seek to manipulat

More ›