mrkramer

37 ms·

481.
by mrkramer 3y ago
My assumption is that this was state sponsored mass surveillance campaign of some kind but God knows what exactly they were looking for. I think if backdoor was discovered 2 or 3 months later, we maybe could understand better what they want
482.
by mrkramer 3y ago
At first I thought the guy who did this was a lone wolf but now I believe it was indeed state actor. They coordinated and harassed original maintainer into giving them access to the project, basically they hijacked the open source project.
483.
by mrkramer 3y ago
>The contributors to this project are hobbyists so we can't dedicate 40+ hours a week for fast releases of high quality. Thank you for your understanding and if you want to help work on anything you can always submit a patch :) Jia
484.
by mrkramer 3y ago
So did he plan all this from the beginning or somewhere down the line he went full yolo?! I am looking at his mailing chat[0] and he seemed pretty enthusiastic about improving and fixing XZ. [0] https://www.mail-archive.com/
485.
by mrkramer 3y ago
Are we ever going to figure out who Satoshi is? Probably not anytime soon but we can look for clues. Jia was obviously interested in OSS security and fuzzing[0] but my wild guess is that s/he is not a state actor. I would rather assume
486.
by mrkramer 3y ago
At the end of the day, backdoors in the open-source software projects will be caught sooner or later, the problem are backdoors in closed source projects ala NSA backdoors. To this day, I'm not completely sure if my Windows machine is
487.
by mrkramer 3y ago
I think capitalism is. Social media companies are driven by profit and not by well-being of their users.
488.
by mrkramer 3y ago
Anybody is free to contribute if s/he is contributing in a good will but what happens if you don't know who they are and what are their motives? You can look at the their track record for example, that's another way to determ
489.
by mrkramer 3y ago
The whole XZ drama reminds me of this[1], in another words, verify the identity of open source maintainer/s and question their motive for joining the open source project. Also reminded me of the relevant XKCD meme[2]. Speaking of obfus
490.
by mrkramer 3y ago
WebTorrent[0] is also good WebRTC P2P project. [0] https://en.wikipedia.org/wiki/WebTorrent
491.
by mrkramer 3y ago
But what is the end goal of OpenAI? Be a non-profit AI R&D leader, convert to for-profit and then sell(license) its AI tech to other companies or get acquired and then eventually devoured by Microsoft? In this shape and form OpenAI is n
492.
by mrkramer 3y ago
>Well TIL that IA does not respect robots.txt. At least, that's what they say[0]. >What would stop an actor from maliciously complying with a robots.txt file by just going to the internet archive instead. Nothing; as far as I und
493.
by mrkramer 3y ago
>I think this is an interesting situation where “AI” has become just a general term that it has lost so much meaning thanks to things like chatgpt. AI is just a branding buzzword by Big Tech companies....before AI, there were "machi
494.
by mrkramer 3y ago
Internet Archive's crawler is not respecting robots.txt because they want to archive everything not just parts of the Web. But if you are actively breaking robots.txt then your crawler will have a bad reputation and you will have an ar
495.
by mrkramer 3y ago
Bitcoin can also help humanity to get rid off centralized finance and enable humanity, decentralized trust based transparent finance. Btw, there are Filecoin and Namecoin for decentralized storage and decentralized domain names respectively
496.
by mrkramer 3y ago
I had a similar idea but what happens when you stumble upon code, equations, tables, graphs etc.? Can LLM understand that as well? For example; you are listening to the paper with some text2speech model and then it stumbles open code snipp
497.
by mrkramer 3y ago
Cambridge Analytica was Facebook's screw-up on their users' data usage policy; basically Facebook enabled developers through Facebook's API and Social Graph integration siphoning of people's data for nefarious reasons. C
498.
by mrkramer 3y ago
I also use uBlock but my filters are the default ones and I saw it without any problem but tbh this is the first time that I saw some post on the Web have HN as a share option or the first time that I was surprised seeing it. Maybe it has s
499.
by mrkramer 3y ago
>Compare this to the cost of an exploit making into the wild and causing potentially hundreds of billions in value being lost. Hundreds of billions?! What software vulnerability ever caused financial loss even close to that? Although you
500.
by mrkramer 3y ago
If medical provider is privately owned then it is legal but if it is state owned then it is illegal. But this is deeply troubling and disturbing practice.
501.
by mrkramer 3y ago
This is win for Open Web.
502.
by mrkramer 3y ago
"Share this: Hacker News" Noice
503.
Apple will make it easier to move to Android by fall 2025(techcrunch.com)
3 points by mrkramer 3y ago|0 comments
504.
by mrkramer 3y ago
Google's HR: https://www.youtube.com/watch?v=mxD-5z_xHBU
505.
by mrkramer 3y ago
Google is scared of showing trash in Gemini but they are happy to show trash, phish and malware in search results.
506.
by mrkramer 3y ago
Apple always thinks they are right and they know the best, the very same stubborn mindset as Google. And why they keep repeating "Spotify Pays Apple Nothing"?!
507.
by mrkramer 3y ago
Microsoft only invested $16M....lol.....I thought Mistral would demand more but I guess partnership with Microsoft is more valuable than cash.
508.
by mrkramer 3y ago
computer security mailing list groups* sry for mixing up the two
509.
by mrkramer 3y ago
>Would be interested in links to the most personally compelling evidence (in either direction), for those reading. Search for Craig's blog posts and computer security newsletter groups where he was active 15-20 years ago; he talks a
510.
by mrkramer 3y ago
All kind of websites....ecommerce, corporate, government, non-profit etc. I think we need to evolve old-school type web directories and make what I call discovery engine because we already have search engines. For example we should think ho

More ›