paxys

19 ms·

301.
by paxys 3mo ago
I agree with the message, but I'm not going to accept it from this particular crowd. Microsoft, NVIDIA, Meta, Palantir, IBM...They have all been actively hostile to open source for decades, and have a history of embracing it only when
302.
by paxys 3mo ago
Every new framework gets buzz on HN and is forgotten a day later. Meanwhile 99% of developers never left node + npm + vite in the first place.
303.
by paxys 3mo ago
Wouldn't be JavaScript without a new flavor of the month runtime or framework.
304.
by paxys 3mo ago
The people who maintain these ICBM silos and spy satellites will themselves tell you that their infrastructure is decades out of date and woefully underfunded.
305.
by paxys 3mo ago
I don't see a scenario where a company would be liable for the employee's actions unless they had specifically been told/encouraged to break the law. If your boss tells you to fix a bug and you go kill the customer which one
306.
by paxys 3mo ago
So you have a copy of every software package in the world in your home lab?
307.
by paxys 3mo ago
The safety classifiers aren't all that advanced. It's more likely that something in your code triggered a random chain of thought that had the word "pentest" or "malware" or something of that sort in it and it
308.
by paxys 3mo ago
If Hugging Face and the feds are one step away from discovering your attack what other option do you have but to come clean?
309.
by paxys 3mo ago
There's no such thing as a "deterministic" guardrail. Such a tool is as likely to be exploitable as an LLM is to break out of its probabilistic conditioning. Have you never driven past a destroyed guardrail on a highway? Thes
310.
by paxys 3mo ago
From reading all these threads there's clearly a large number of software developers on HN who can easily set up complex infrastructure and make it provably 100% bug and exploit free. Weird that they aren't all billionaires from s
311.
by paxys 3mo ago
I can’t think of a jurisdiction where it would not be illegal. The “I was only testing your security, in fact I should get rewarded for it” defense never works outside of nerd fantasies.
312.
by paxys 3mo ago
I still don’t get the argument. Say I call your bank and convince them to give me full control of your account. Are you going to go “well the bank didn’t publish my account number anywhere, so they are in the clear”?
313.
by paxys 3mo ago
Hundreds is better than billions.
314.
by paxys 3mo ago
People are (rightfully) concerned about superintelligent AI but social engineering continues to be by far the biggest attack vector for digital infrastructure. And it’s being made worse by companies continuously cutting costs in areas like
315.
by paxys 3mo ago
How is domain privacy relevant here? That only hides your email from public records. What if the attacker already knows it (as they did in this case)? Email address is quite literally something you are meant to share publicly. It is not a p
316.
by paxys 3mo ago
I know people have opinions about Cloudflare but why not use it here, at least as a stop gap? Stopping bot traffic is one thing it does very well.
317.
by paxys 3mo ago
Moreover there’s no guarantee that eventual AI profits (if any) will go to the companies investing all this cash. If the worst case scenario of Chinese labs building and serving frontier-level models on 2nd tier nvidia hardware comes to be
318.
by paxys 3mo ago
Go live a few months as an average middle class person in Western Europe and then do the same in the US. You can argue in favor of US superiority based on GDP and stock market and number of billionaires a hundred other similar metrics, but
319.
by paxys 3mo ago
There’s a broader issue here that goes beyond OpenAI and Anthropic. In the last couple of years US economic growth has been driven almost entirely by AI and data center spending. It may not be too outlandish to claim that we are in a recess
320.
by paxys 3mo ago
How much did Google spend to get that increase?
321.
by paxys 3mo ago
These alarms have been going off for a long time now. Everyone is already in too deep to admit that there’s a problem.
322.
by paxys 3mo ago
If you have to ask you don’t want to know
323.
by paxys 3mo ago
Ryzen AI Max Plus Pro 495 How does a CEO read this and not immediately fire their entire marketing team?
324.
by paxys 3mo ago
If you are waiting 40 minutes for a prompt on a Ryzen max+ you have no idea what you are doing.
325.
by paxys 3mo ago
Why would investors not be aware of the risk? OpenAI isn’t hiding its corporate structure. Read their S-1 and other IPO documents before investing.
326.
by paxys 3mo ago
They’ve used a pretty good filter for the human slop - prestigious awards.
327.
by paxys 3mo ago
He doesn’t seem the kind who would sell his credibility for a few bucks.
328.
by paxys 3mo ago
Aka /goal
329.
by paxys 3mo ago
Very neat site and write-up, but I found this part amusing: > There is really nothing “AI” about this aside from the tool that collected the data and coded it, and, crucially, semantic search […] So really, everything about it is AI. A
330.
by paxys 3mo ago
Even if the attempt is legit, going to the company’s website/careers page to try and reach them is pointless. You application will just get lost among the thousands of others. Your best bet is to ask the recruiter to email you and chec

More ›