Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
ofjcihen
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
8 ms
·
151.
▲
by
ofjcihen
3mo ago
Yes. You factor this in when creating environments for malware research. Defense in depth is one way. Logical blocks on the network is another. Just claiming “0-Day” isn’t really an excuse.
152.
▲
by
ofjcihen
3mo ago
I’m honestly impressed that they managed to screw this up somehow. Setting up defense in depth, gaps, logical blocking etc is a standard practice for malware sandboxing. The entire purpose is to prepare for what you can’t foresee. This isn’
153.
▲
by
ofjcihen
3mo ago
I don’t know if the initial “incident” was purposeful but I can tell that if I were in this position that would be my pivot.
154.
▲
by
ofjcihen
3mo ago
Right? Complete speculation on my part but that makes this feel desperate.
155.
▲
by
ofjcihen
3mo ago
Absolutely not. > Did you get mid-high 5 figures for a serverside vulnerability? I hear the Russians are paying $300k for Postfix! But the UAE might pay $400k through Crowdfense. These numbers are definitely real. How could they not be?
156.
▲
by
ofjcihen
3mo ago
I did explicitly answer your question, yes. This is how all of these sites work. You would not get 500k for every exploit obviously. You would get that (or more) for great exploits. I’m noticing you haven’t addressed anything I mentioned at
157.
▲
by
ofjcihen
3mo ago
They can be and they can not be depending on what you’re selling. But that’s besides the point. You straight up argued that one isn’t real in the most asinine way you could. Even if you were right that would be ridiculous. The fact that you
158.
▲
by
ofjcihen
3mo ago
Why are you constantly responding to people like this? What makes you think you’re above the rest of HN?
159.
▲
by
ofjcihen
3mo ago
Why would you reply with something completely unsubstantiated that anyone in security at that time worth their salt would be able to call you out on and then in subsequent comments call people liars for insisting it did, in fact, exist? I’m
160.
▲
by
ofjcihen
3mo ago
Well, anecdote, but I’ll chime in. I’m the only person in my friend group able to afford a house in the foreseeable future and that’s been because of various strokes of luck (and some hard work of course). My wife’s situation is the same. W
161.
▲
by
ofjcihen
3mo ago
The investment wreath grows another branch. Does anyone have a diagram of these going?
162.
▲
by
ofjcihen
3mo ago
Who here wants to put on tinfoil hats and wildly speculate that the government gave them another impossible roadblock? Ah, just saw that it’s still available but requires credits now. False alarm, remove tinfoil.
163.
▲
by
ofjcihen
3mo ago
I’m excited for this specific brand of survival horror.
164.
▲
by
ofjcihen
3mo ago
This right here is going to be considered one of the first major signs of the downfall of closed models years from now. And look, if you disagree with me PLEASE tell me why. What moat do these companies have? I genuinely want to know becaus
165.
▲
by
ofjcihen
3mo ago
There are a hundred small things like this that seem to be popping up in what used to be simple and reliable systems and as much as I know they aren’t ALL because of vibe coding I can’t help but wonder how much is.
166.
▲
by
ofjcihen
3mo ago
These are great questions
167.
▲
by
ofjcihen
3mo ago
The issue we’re dealing with is that the tool is as likely to write confident sounding, well-written but completely wrong everything and if you don’t know the difference you might accidentally give it a gold medal. Like a chainsaw: yes the
168.
▲
by
ofjcihen
3mo ago
For anyone dooming I’ll just leave you with this bit. It still takes quite a bit of knowledge to get it going: >After the release of GPT Sol 5.6, I used a very long prompt, 10 pages long in my paper
169.
▲
by
ofjcihen
3mo ago
Oh definitely. Personally, I think it will get to the point where we have local good enough models. I’m just incredibly confused how these companies and investors don’t see the writing on the wall UNLESS the point is to just extract as much
170.
▲
by
ofjcihen
3mo ago
I know Ed Zitron is a dirty word on HN most days but having recently read some of his (highly editorialized) work… it seems like he’s right and the numbers just aren’t making sense. Combine that with the fact that “good enough” is a real th
171.
▲
by
ofjcihen
3mo ago
Yeah I don’t get it. These are legitimate questions to ask considering what happened recently. Being nice, maybe Tomhow is just unaware?
172.
▲
by
ofjcihen
3mo ago
Honestly a great question. I mean if it’s open source someone will check (I don’t use xAI but believe me I would be checking first if I did).
173.
▲
by
ofjcihen
3mo ago
Is this the moat?
174.
▲
by
ofjcihen
3mo ago
No worries :)
175.
▲
by
ofjcihen
3mo ago
I think you have my argument backwards
176.
▲
by
ofjcihen
3mo ago
That’s the beauty, you can do both. In practice I usually just let the AI know what chapter I’m on and then ask questions or have it ask me questions based on the chapter.
177.
▲
by
ofjcihen
3mo ago
I know that the common refrain is “think of yourself as a manager now” but I’ve actually taken the opposite approach and have been telling anyone I train the same. Diving deeper into technical understanding makes more sense to me at this po
178.
▲
by
ofjcihen
3mo ago
Unnecessarily snide remark for someone just commenting on their interpretation.
179.
▲
by
ofjcihen
3mo ago
*at your current job
180.
▲
by
ofjcihen
3mo ago
These days when you accept salaries that low you’re effectively locking yourself into them for a good long time.
More ›