SahAssar

6 ms·

61.
by SahAssar 3mo ago
> Think of it as a similar model to ISRG and LetsEncrypt. In that case it was started by an institution (mozilla) with a lot of heft in the area (mozilla's CA program is one of the most broadly used) and was backed by other orgs (go
62.
by SahAssar 3mo ago
The screenshot clearly says "NOTICE TYPE: DMCA".
63.
by SahAssar 3mo ago
> assuming we're talking just about "safe" Methods That's a pretty big assumption. Any decent webdev should not let GET/HEAD/OPTIONS modify state (joining a meeting is changing state) and additionally PUT&#x
64.
by SahAssar 4mo ago
Rolling release has nothing to do with this. It could just as well be a PPA in ubuntu or any deb repo for debian or similar.
65.
by SahAssar 4mo ago
> The current installation shall already contain one (or more) public keys that it trusts for updates The current installation was fetched via HTTPS, right? Either by you or in the factory. Just saying the "bootstrapping already hap
66.
by SahAssar 4mo ago
Those have been broken again and again. Even if not, how do you distribute the public keys for it, how do you bootstrap that trust?
67.
by SahAssar 4mo ago
> someone compromises the webserver Sure, but that's true for 99% of things. Unless you establish trust outside of the normal distribution channel how would you protect against this? What is your proposed channel that is not bootstr
68.
by SahAssar 4mo ago
Yes. Or you can license it for specific purposes. But in general open data refers to data that is open to use by anyone, for any purpose, without restrictions except in some cases attribution.
69.
by SahAssar 4mo ago
Yes. Just like editing wikipedia will help train models that are used for data classification in north korea or whatever. It's a feature of open data, it's open and usable by anyone .
70.
by SahAssar 4mo ago
Seems like tsx is a wrapper around esbuild, not tsc.
71.
by SahAssar 4mo ago
Ironic that the page says > ... it does have a few small problems, such as not working on modern computers ... When connecting to this site in firefox says > An error occurred during a connection to tom7.org. Peer attempted old style
72.
by SahAssar 4mo ago
But as a percentage of revenue I'd assume those are a lot smaller than Office365 is for microsoft and Workspace is for google. Last I checked I don't think AWS included things like Amazon Prime Video either, AWS is primarily their
73.
by SahAssar 4mo ago
Isn't that including things like google workspace and similar? Both Azure and GCP have sometimes included things that most people think of as unrelated SaaS (office 365, gsuite/workspace) to make themselves look bigger in the clou
74.
by SahAssar 4mo ago
Great Britain is the big island. UK (United Kingdom of Great Britain and Northern Ireland) is a country consisting of several countries and other territories.
75.
by SahAssar 4mo ago
> This means you can keep your palette of color, spacing, and other options fully enumerated in `globals.css` and elsewhere, Why not use native css variables? > Moreover, if you're working within a framework, such as Next.js, thi
76.
by SahAssar 5mo ago
This might help your local mom-and-pop scammer compete with the ScamInc.
77.
by SahAssar 5mo ago
> That is unusual, but I guess for a static website it doesn't really matter. It sorta does matter. Either the actual raspi does nothing of value or the traffic has value that should be protected. Sure, I heard the argument that pub
78.
by SahAssar 5mo ago
It's vastly different to do TLS termination within your own network and to do it on a rando VPS and then send normal TCP over the internet. It's not an argument of it being on the same server.
79.
by SahAssar 5mo ago
Not disagreeing with you, but that makes it even worse.
80.
by SahAssar 5mo ago
> Their internal AI use is exploding, which is a signal that they need to structure for that, and so they’re laying people off as one of the first steps towards actioning that signal. I don't see anywhere where the jump from "s
81.
by SahAssar 5mo ago
Password attempt lockouts where not scoped to anything besides the account itself. By just spamming a few attempts per account you could lock all admin accounts meaning that there was no admin to unlock the other accounts. The only solution
82.
by SahAssar 5mo ago
I'm not discouraging anyone from writing your own auth, but if you have even a little bit higher requirements it becomes more complex. For example I have audited codebases where the TOTP code was enough to get a valid token (without a
83.
by SahAssar 5mo ago
When google starting outputting summaries people asked the same questions. If you supplant the value of the original with the original as input then you probably have some legal questions to answer.
84.
by SahAssar 5mo ago
I think the parent is basically saying that if you can legally pirate a book to train a LLM why can't you legally pirate a LLM model? It's a "rules for thee and not for me" argument.
85.
by SahAssar 5mo ago
The issue is that the trainers have not sought licenses for the data and instead outright pirated it. I don't think anyone thinks that all training is a copyright violation if all the training data is licensed. For example a LLM traine
86.
by SahAssar 5mo ago
The point of these lawsuits is the piracy. My parent comment was about the general situation, not this specific article. Pirating content is illegal, regardless of if it is to train an LLM. Usage of LLMs trained on unlicensed content (basic
87.
by SahAssar 5mo ago
I don't think anyone is arguing that the consumption is illegal. It's the reproduction that is illegal. Read a book, that's fine. Write a book, that's fine. Read a book and then write a book that is 99.9% the same as the
88.
by SahAssar 5mo ago
> "Doesn't" doesn't mean "can't". Someone just needs to do the work Sure, but isn't that the case for any feature of any software?
89.
by SahAssar 5mo ago
Porkbun uses cloudflare as their DNS backend, and has accidentally issued certs for domains hosted on them ( https://news.ycombinator.com/item?id=40455508 was one instance). Since cloudflare is basically the only registrar t
90.
by SahAssar 5mo ago
I'm pretty sure google never used them for their own domains, and the whole markmonitor/squarespace thing was their "google domains" product where they sold registrar services to others. Besides that they also are a regi

More ›