gigantaure

I'm not shocked nor surprised by the incident. But I simply don't understand how Hugging Face is advertising this almost to the point of an "achievement". who does a step-by-step visualization to show how they were hacked? (outside of the likes of a Mandiant or Crowdstrike)

Does Hugging Face have a financial incentive in demonstrating OpenAI's model exploit capabilities?

this whole incident, while believable, still seems to me as possibly disingenuous.

this is barely one year after the CSRB recommended: "...Microsoft leadership should consider directing internal Microsoft teams to deprioritize feature developments across the company’s cloud infrastructure and product suite until substantial security improvements have been made in order to preclude competition for resources. In all instances, security risks should be fully and appropriately assessed and addressed before new features are deployed."

These recommendations followed a review of MS practices following the Exchange online compromise. I highly doubt anything changed at MS since then.

source: https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewO...

a long while ago i was considering a centrally monitored physical security system for my home. that was long before you could easily host your own security cameras with convenient mobile alerts.

The salesman comes to my home. wife and kids are around. He sits at my dinner table and begins with asking me "is your family important to you?"

to which i replied "please leave now". needless to say i didn't buy anything from him.

I have no time with shady sales tactics and manipulation. i can totally relate to this article.

so much truth in your statement.

I had a recent exchange with Microsoft and a group of CISOs and how it was explained to US by MS is that Copilot relies on existing file sharing security (OneDrive, Sharepoint) to determine what user could receive as feedback from Copilot. While it seems like a reasonable approach to rely on existing controls it honestly sent shivers down my spine. Anyone who had some experience securing MS platforms data sharing knows those become a total mess overtime for large organizations.

the parking is free so of course it's quite popular. Having been there regularly on the busiest weekdays you really have to arrive close to 8:00 to see a full lot. I do agree the REM is sweet and very effective.

today I'm with my father, he we scheduled for angioplasty which was unsuccessful as he will need heart surgery. His heart is to clogged up. We are now waiting to see the doctor for the next steps.

As I'm seeing him age and become more fragile, I also don't think I've done anything more important that what I'm doing right now.

thank you for sharing this story.

that's a great question. I had reviewed the Wikipedia page prior to my comment: https://en.wikipedia.org/wiki/Clickbait

it seems there is no universal definition of clickbait. So I based my comment on this:

1. the article was posted on Thibault's own website that doesn't generate revenue per click. Isn't clickbait associated with the possibility of additional ad revenue?

2. Thibault recently called for help on the issue. This post recaps what he went through. He clearly expressed that the code upgrade process didn't go as planned for him. the post and sub-title feels genuine.

3. Clickbait (to me at least) indicates that there's either intent on generating revenue or self-promotion. I fail to see those conditions here

So that's my logic. So why would this be considered clickbait?

Is it clickbait when the top contributor/creator posts on his website? The same website that makes a strong promotion against ad tracking: https://lichess.org/ads

I clearly don't have the same definition of clickbait.

> Apple took away too much of the user's control;

Apple couldn't take away what it never gave in the first place. Anyone using an IOS device should have a basic understanding that Apple highly integrates their devices, OSes and services.

A Fortnine analysis on the possibility of AI causing fatal accidents for motorcyclists

i just read that page[1] earlier this week. this gives a great view on the amount of work performed by the openssh project after the fork of the last open source version.

[1] https://www.openssh.com/history.html

i'm not a fan of those "true milage no matter what conditions" a half charged EV up north during winter would cut that 150 miles to 75 miles (at around minus 10 celsius which is common in Canada). i wouldn't dare to go very far with that.