Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
TZubiri
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
91.
▲
by
TZubiri
1mo ago
It's a veeeeery specific artstyle
92.
▲
by
TZubiri
2mo ago
Fun fact, IBM offers a current gen model called granite, also offers a router/compliance type product called watsonX. But I find using watsonX with Meta's Llama models to be better.
93.
▲
by
TZubiri
2mo ago
> If you have to ask "Why?", then the answer probably won't make any sense to you either. Saved to shortcuts
94.
▲
by
TZubiri
2mo ago
I too have glossed over the actual meat of the article and wish to comment with a generic ProAI/AntiAI comment based on the general gist derived from the title, (or the synopsis if I'm a deep scholar that likes to do deep dives)
95.
▲
by
TZubiri
2mo ago
There's this fallacy where one defends a modern idea by citing criticism to an old idea, thus positioning their modern idea as revolutionary as the classical one that survived the filter of time.
96.
▲
by
TZubiri
2mo ago
>Ethical disclosure is a complicated topic, because researchers shouldn't hold bugs for ransom or demand high payment Why not? "Hey, I found a cvss 8.8 bug in chrome that allows arbitrary code execution when loading my http url
97.
▲
by
TZubiri
2mo ago
>Stop Thinking of LLMs as Next-Token Predictors >Strictly speaking, the statement “LLMs are next-token predictors” isn’t wrong, If it isn't wrong, then I will continue thinking of them as such, thank you. Here's a much more
98.
▲
by
TZubiri
2mo ago
>Practical example: I can now ask Claude to grab the new user request that was emailed to me, and create the user and email the client back with details. This sounds 100% absolutely horrible. If we had to reserve some small fraction of r
99.
▲
by
TZubiri
2mo ago
This seems irrelevant as the issue talks about being exploitable with a crafted HTML page, no mention of JS. If true, you would be able to be hit without js enabled.
100.
▲
by
TZubiri
2mo ago
This doesn't affect the score though, the reason there's 1.2 points less than the max is because there is a Required User Interaction. The user needs to visit a specific html page. Even with the sandbox protection layer, the rest
101.
▲
by
TZubiri
2mo ago
Why is this 8.8? It's because User Interaction is Required. CVSS 10 would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a need to
102.
▲
by
TZubiri
2mo ago
Interestingly most people in the comments talk about implementing an MCP server, while few talk about implementing an MCP client (as in actually using MCP for a specific purpose)
103.
▲
by
TZubiri
2mo ago
Oh, I get it, I guess the question is what will Verisign do with the surname.name domains. They could be auctioned individually or by bulk, and somebody could buy them. But in essence they are exercising their right as a 2ld holder (Global
104.
▲
by
TZubiri
2mo ago
I'm aware of that, it's an ad-hoc out of band list maintained by Mozilla, not 'official' or recognized by any process like an RFC, but it does exist. It's safe to ignore altogether, but it can come in handy as a sta
105.
▲
by
TZubiri
2mo ago
Is there any resource you can point towards understanding this? I'm well versed on DNS itself, so it can be a technical document. What I understand would be the following: 1- Verisign manages the TLD registry for .name (and others), wh
106.
▲
by
TZubiri
2mo ago
What language games are we playing?
107.
▲
by
TZubiri
2mo ago
https://itp.cdn.icann.org/en/files/consensus-policies/rsep-2... >2.1. What effect, if any, will the proposed service have on the life cycle of domain names? >None. There will not be any effect on the li
108.
▲
by
TZubiri
2mo ago
I don't get the difference. If I acquire the y domain and make it work as a subdomain broker, it's the same thing no? There is no subdomain/TLD bit
109.
▲
by
TZubiri
2mo ago
I wonder if this could constitute a violationiof article 6 of the UN declaration of human rights. It has been established that national identifiers are protected by it, and a domain works as a sort of international identifier, in this case
110.
▲
by
TZubiri
2mo ago
https://www.youtube.com/shorts/uCMu9MoRwCo This reminds me of this bit on a podcast where a tidbit of learned information so blatantly contradicts basic logic. There's always an explanation, in this case, the tidb
111.
▲
by
TZubiri
2mo ago
What a nightmare, the kind of thing most founders fear, that their tech be used for evil and that they are responsible for aiding in that crime. (a nightmare for the actual victim too, no doubt)
112.
▲
by
TZubiri
2mo ago
I read that in Nigeria (may misremember), the fares set by uber were too low (possibly it was a long-tail country with some incorrect exchange rates), so the drivers and riders had a custom of agreeing to different fees, I believe it came t
113.
▲
by
TZubiri
2mo ago
I think you can do whatever you want with your train set, what would be concerning is training with the test set. I don't think overfitting is separate, the consequence of putting the benchmarks in your training set is not that you &qu
114.
▲
by
TZubiri
2mo ago
They might circumvent this by adding a prompt like "remove PII from this prompt", so I don't think it's a worthwhile route. The issue exists whether PII is input or not, like IP or secrets.
115.
▲
by
TZubiri
2mo ago
What? They dared train on random websites like reddit, training on language inputs from the wild is the name of the game
116.
▲
by
TZubiri
2mo ago
i don't get the legal aspect of this if you sign the contract (click I agree on Terms of Service), and it says that they do not train on the data, by what right can they backtrack on that? Maybe it is assumed that they notified you and
117.
▲
by
TZubiri
2mo ago
>Yes what you describe would be cheating. My approach is the opposite. What I did was "Carry your textbook to the exam and then learn from scratch during the exam" >What I did was "You are born during the exam, given ac
118.
▲
by
TZubiri
2mo ago
Ok, it's probably not a security decision. It's a common pattern with both storage and memory management to push most reservations to initialization, in order to cluster resource insufficiency errors to a specific install-time whe
119.
▲
by
TZubiri
2mo ago
Thanks Obama
120.
▲
by
TZubiri
2mo ago
The license itself may be present in the cache folder. Alternatively, ChatGPT might happily disclose authorship and licensing if asked. I'm not convinced of the argument that the fact that it is not bundled at download or even at insta
More ›