varenc

8 ms·

91.
by varenc 5mo ago
> Don't read and act on my sms messages without me asking you to! Doesn't that just turn a 0-click exploit into a 1-click exploit? It's unlikely the user can make an informed decision to not process a potentially malicious
92.
by varenc 5mo ago
This perspective is more cut and dry when its someone like OpenAI scraping the whole internet explicitly for LLM training purposes. But Google has already been scraping the entire internet for 25+ years. At what point did building a smarter
93.
by varenc 5mo ago
Are you worried about Google's response to this? Google reportedly reacts to distillation attempts " with real-time proactive defenses that can degrade student model performance ". So if they detected you, they could have int
94.
by varenc 5mo ago
Looks like their Reddit post has a formatting error? ...as computing shifts from operating systems [to intelligence systems](TKTK)... `[text](link)` is the syntax used to create a link. But since `TKTK` isn't a valid URI, it
95.
by varenc 5mo ago
They make a very fast "AI powered" turret shotgun. It automatically selects, aims, and shoots down targets. I imagine this is great for shooting down swarms of small fiber optic or autonomous drones impervious to electronic attack
96.
by varenc 5mo ago
great spot! I noticed that his server also doesn't accept URLs ending is a single `/`: https://chrismorgan.info/no-query-strings/ But instead of the banned query strings message, it just returns a very sassy
97.
by varenc 5mo ago
I have a good friend who doesn't own a cell phone. He's a math professor. Every year he keeps living life without a smartphone, I continue to be more impressed. Things like this makes me feel like he might have to eventually give
98.
by varenc 5mo ago
This still doesn't seem very economical for the bot farm. For a device to look legit it has to only use its hardware identifier about as often as a real human would. This massively changes the economics. If you have 1 bot farm custome
99.
by varenc 5mo ago
The readme absolutely buries the features that are actually non-trivial: It runs a proxy to switch models mid-session, and does combined cost tracking between Anthropic and other models you might be using. The LLM that wrote the readme neve
100.
by varenc 5mo ago
The more interesting part of deepclaude is the local proxy it runs to switch models mid-session and do combined cost tracking. Though these features seem quite buried in the LLM-generated readme. Looking at the history, it appears they were
101.
by varenc 6mo ago
One trick to evade some of LinkedIn's detection: A big part of its detection relies on finding known extension resources at URLs of the form `chrome-extension://{extension_id}/{file}` An extension installed from the Chro
102.
by varenc 6mo ago
> For non-Canadian vehicles, you may reach out to Rivian Service to request that we disable the eSIM card in the vehicle through a service appointment. I certainly appreciate that disabling network connectivity is even possible, but a
103.
by varenc 6mo ago
But a user's email isn't always forbidden. The API endpoint which turns UUIDs into a user email presumably also has use cases where you do want to expose the user email. For example, when seeing a list of people you've alread
104.
by varenc 6mo ago
I'm guessing it's not trivial to fix without breaking other things? The weakness seems to be that anyone can turn UUIDs into details like email. But I assume this functionality is necessary for other flows so they can't just
105.
by varenc 6mo ago
I don't think that's how the 30 day timer works. Once a file is replaced by a new one, the old copy should persist for 30 days. So if it was overwrote 2 days ago, should have 28 days to recover it. But don't know about this
106.
by varenc 6mo ago
I keep a bookmarklet handy that blocks all keypress listeners to disable this stuff. Agreed it's quite annoying! Can share if desired, though pretty straightforward.
107.
by varenc 6mo ago
I thought you said Dropbox overwrote a file, meaning that file was also being synced by Dropbox, and that Dropbox sync was working. So likely the older file version would also have been synced by Dropbox, which it then overwrote. Dropbox it
108.
by varenc 6mo ago
Dropbox itself should already keep version history of files for 30 days with the free plan, or more if you pay.
109.
by varenc 6mo ago
I do some light juggling adjacent activity, and I think it's absolutely improved coordination in other ways. When things randomly fall unexpectedly now I feel like my hands snap out and catch them so much more deftly than before. And w
110.
by varenc 6mo ago
This sounds very cool! AI really seems like it should enable smart, real-time, and fully private on-device parental safety controls. Would be eager to try out a macOS or Windows client. Also a bit a of feedback: the "view on github&q
111.
by varenc 6mo ago
How are you able to track all screen time on an iOS device? I had thought the APIs to do this aren't available.
112.
by varenc 6mo ago
Extracted all the raw pardons here: https://gist.githubusercontent.com/varenc/cb2e2dacf1c92d36bc... I wanted to do some stuff with this data so need a raw format. (process was so easy since its included on a single pag
113.
by varenc 6mo ago
consider a colorblind mode that uses patterns instead of colors for those of us that are color-challenged
114.
by varenc 6mo ago
Realistically, they can likely prevent the majority of this sort of use. You're right that's it's impossible to prevent 100%, but they can likely stop most of it. Particularly because each user is linked with an account which
115.
by varenc 6mo ago
It is depressing how robust it is! I can beat it, but only be changing my IP. Since I'm not using a shared IP like a university/company might, my IP is giving them a lot of bits about me since I'm the only entity using it...
116.
by varenc 6mo ago
By 'stream US TV' I assume they just mean using popular streaming services like Netflix. If that's the case, than UDP multicast packets aren't involved at all, since it's all unicast. Your advice would apply if the
117.
by varenc 6mo ago
> Actually one of the tools that you could use to admin your mum & dad computer I do exactly this! I keep Tailscale running my family's shared iMac, making it easy for me to remotely connect to it and screen share if necessary t
118.
by varenc 7mo ago
> A few years ago, intentionally fingerprinting or tracking your users without disclosure was spyware and unethical. Alas, here we are. For over 15 years reCAPTCHA has relied on browser fingerprinting to help distinguish humans from bots
119.
by varenc 7mo ago
I always change my screen resolution to avoid the notch on my Mac. It's non-obvious how to do this but you end up with a slightly shorter resolution than the default. I know this means I'm wasting potential pixels, and wasting all
120.
by varenc 7mo ago
An Apple account also isn't required on an iPhone. They certainly encourage you create or link one on device setup, but it's not required to use the phone. Though one IS required to download apps, so you could argue it functionall

More ›