Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
vayup
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
5 ms
·
1.
▲
by
vayup
10d ago
Makes sense. Thanks.
2.
▲
by
vayup
11d ago
Hm... not normal in my experience. Not enabling a config is not a vulnerability in itself. If not enabling something means a security guarantee is broken (Eg: videos are accessible) then it is a vulnerability, and typically included in VDP,
3.
▲
by
vayup
11d ago
It's reasonable to not have a VDP for the reasons you mentioned. But not reasonable to have a useless one just so it appears they have a VDP.
4.
▲
by
vayup
11d ago
If you want to know what a "Vulnerability Disclosure Policy" (VDP) would look like if its main purpose is to claim we have VDP and create an appearance of responsible security posture, but not really to learn about vulnerabilities
5.
▲
by
vayup
15d ago
I am a bit confused at people looking at this negatively. If Nvidia believes AI demand is extraordinarily high, and that it requires a large capital outlay to serve that capital, isn't this what they should be doing?
6.
▲
by
vayup
19d ago
Nah, it is probably due to AI agents' love for Libre Office. Codex prefers Libre Office for docs. Other agents may do this as well. People who have never known about Libre Office are now downloading and using Libre Office (often withou
7.
▲
by
vayup
2mo ago
MITM is a feature now.
8.
▲
by
vayup
3mo ago
And yet, Amazon Prime is inspired by Costco membership.
9.
▲
by
vayup
4mo ago
> They've got, ballpark, $5t to $10t to make back in the next 5 years, or the hardware buildouts will start getting written down. Depreciation and write-offs are about accounting models. Hardware will still be running after five yea
10.
▲
by
vayup
6mo ago
gogcli is good for this purpose. You can use it with openclaw or with coding agents like Codex or Claude code.
11.
▲
by
vayup
9mo ago
Same happens to me, but I don't think it's the T-shirts that are shrinking.
12.
▲
by
vayup
10mo ago
We don't want a rebellion sparked by 'Taxation without representation'. Do we?
13.
▲
by
vayup
10mo ago
The strongest arugument made is that hybrid is more complex, more work and therefore more risky. As someone who has been implementing such systems for 20 years, I don't buy this. In my mind, it's equivalent to saying "Seatbel
14.
▲
by
vayup
10mo ago
Especially when anyone can buy the product off the shelf, remove the casing to see what they are trying to redact in these images.
15.
▲
by
vayup
10mo ago
You are absolutely right that it is easy to rule out obviously bad choices, such as 3 of 3. However, determining the actual quorum to use is a qualitative risk analysis exercise. Considering that this is an election for a professional organ
16.
▲
by
vayup
10mo ago
Few lessons to relearn here: - Availability is a security requirement. "Availability" of critical assets just as important as "Confidentiality". While this seems like a truism, it is not uncommon to come across system de
17.
▲
by
vayup
11mo ago
Spot on. Defending simplicity takes a lot of energy and commitment. It is not sexy. It is a thankless job. But doing it well takes a lot of skill, skill that is often disparaged by many communities as "political non sense"[1]. It
18.
▲
by
vayup
11mo ago
Precisely defining what "Intelligence" is will get us 95% of the way in defining "Artificial General Intelligence". I don't think we are there yet.
19.
▲
by
vayup
11mo ago
Something along these lines, as part of the prompt, has worked for me. # User-Defined Dictionary Always use the following exact terms if they sound similar in the audio: ```json
20.
▲
by
vayup
11mo ago
Refers to Conway's law: https://en.wikipedia.org/wiki/Conway%27s_law
21.
▲
by
vayup
11mo ago
I read the title as "massage me", and was very confused for a few seconds.
22.
▲
by
vayup
11mo ago
I agree. I use this approach in my coding agent, and it works wonderfully to keep context across sessions: https://docs.cline.bot/prompting/cline-memory-bank Even though the above link is from Cline, you can use this a
23.
▲
by
vayup
11mo ago
No, it is a known problem. It will get fixed in time.
24.
▲
by
vayup
11mo ago
Quantum is a known threat. There is enough time to fix it. Folks are working on the fixes. Cryptocurrencies would be the last thing I worry about w.r.t Quantum crypto attacks. Everything would be broken. Think banks, brokerage accounts, ema
25.
▲
by
vayup
1y ago
I am sure by AI they mean Apple Intelligence:-)
26.
▲
by
vayup
1y ago
"Momentary masters of a fraction of a dot" - Carl Sagan in Pale Blue Dot
27.
▲
by
vayup
1y ago
Me too. Kudos to the team.
28.
▲
by
vayup
1y ago
Some of the stuff that was extracted from the unencrypted traffic in the link: - T-Mobile backhaul: Users' SMS, voice call contents and internet traffic content in plain text. - AT&T Mexico cellular backhaul: Raw user internet traf
29.
▲
by
vayup
1y ago
> now Google has stopped providing device trees for the newer ones which I therefore won't buy Yeah, that sucks. I don't know if they made any official statement on that. I hope they will continue releasing device trees. It
30.
▲
by
vayup
1y ago
Almost all of the pushback I have seen is on the notion of "developer registration", not the cost. That's what I was responding to. I don't know how much it costs. But if there's any pushback that it costs too much,
More ›