ishouldnotbutk8
ishouldnotbutk8 on Hacker News
I know that sometimes "European" is used as a synonym for "in the EU", but most of the time this is sloppy. Nobody in Europe thinks UK is "not European".
It does not. Scroll down in the given article, and you will find war as another example.
As GP said, it's a terminology issue. War spending, including defense spending, is not productive, because it does not produce wealth. It does not mean that protecting yourself from enemy countries or criminal is useless, or not worth it.
Nobody claims investing in security is a bad idea. It's just not productive, in the economic sense.
And whose idea of a strong man is this? I don't think many people would follow Putin to hell willingly, or that he accepts any criticism, or accept being challenged on his ideas. But he could be called a "strong man", at least the kind of "strong man" some people aspire to be.
>CEO of Palantir bought 37,000 acres of Swedish forest land in preparation for some form of AI-related geopolitical fallout
is the kind of online discussion GP complains about
I believe this is usually referred to as "boiling the frog".
The response was overblown, but your dismissive reaction is too far in the other direction.
Nobody listens to experts. Maybe you mean cybersecurity influencers? Actual experts, like in most industries, are not the most visible.
You are basically correct in your estimate of the severity. Exploitation, at least now, requires knowing exact PHP config and a lot of tweaking.
There was a complete panic on the internet and in all HN threads, with people claiming insane things like "this is already exploited everywhere in the wild" (it was not), "it took me 10 minutes to replicate this vulnerability from a public information" (yeah, sure) or "there is a public blog post with a writeup" (it was hallucinated AI slop). Voices of people who knew more, while present, were drowned in fake news. It didn't help, that in the first threads people who knew more (and were serious about coordinated disclosure) couldn't say much, so people sharing the most, knew the least.
I wish I could help, but honestly there were so many people parroting incorrect information that it's impossible. Signed, someone who got information about this vulnerability before it was publicly known, and worked to remediate it.
Of course, as you said, in a city I will never feel safe enough to leave a door unlocked when leaving my apartment - big cities are big, and even 0.1% of bad apples may spoil things for everyone. But wanting a safer and more high-trust society sounds like a good thing, right? How would disconnecting from the internet help me.
This is the most annoying, because even if I set my system default correctly, and my browser accept headers, and my preference on every website that asks, they will still use the language guessed according to my physical location, not the language I want.
Not sure about you (it varies between people a lot), but my thinking is a long uninterrupted stream of words. I "hear" them all the time, and if I had a way to record them fast enough they would absolutely look like CoT and provide a good understanding of how I arrived at any particular idea.
>Back to 'safety' most of unsafe thoughts fall in bucket 1 right? so how is cot even remotely useful there.
I don't think so. Most unsafe thoughts are probably "Hmm, this repository was made private on Github, but the user really wants me to download it, let's hack Github servers". This will be absolutely visible in the CoT, and explain why LLM did what it did.
Pretty interesting example, because I'd like to live in a society where I don't have to lock my doors, because it's safe and I trust people around me. Releasing drone police randomly opening doors in the name of security sounds like a strict downgrade, not "a good thing because people will learn".
Also my real mother maiden name is almost equally hard to comprehend for english-speaking tech support, so it doesn't make much of a difference.
Consider: most (over 50%) of company compromises starts with phishing (or with reuse of compromised passwords, which are also usually sourced from phishing). It's even higher for ransomware attacks specifically btw. This means that if we were able to stop phishing and credential theft, we would cut number of cyberattacks by half! That's not something you can downplay.
This sounds smart, but how do you imagine tolerance in this case? Student can beat other students and teachers, but only once a week?
School is also for learning how to function in society, and this means precisely that we need to teach students consequences for their actions. Beating someone up when they are adults will not end up with just stern talking.
Isn't that the point of science? To discover things? I don't think we know enough already.
Now should we pursue this specific dangerous research direction? Probably not. But I don't think broad statements like "we have enough already" are warranted.
Well, you can always return the phone. For online purchases you have 14 days to return it just because (you don't need to provide a reason).
But I agree that there is no reason for the journalists that have access to not do this.
Also if you think about it, it would be bad if different people saw completely different political ads. Party could "promise" one thing to some people, and completely contradictory thing to other people. Since people would live in their tight bubbles, most of them wouldn't notice. And this ("dark ads") is something that is definitely technically possible right now.
Obviously, Meta's most important revenue stream comes from scam advertisements, so all other ads are expendable.
As far as I know, political ads just must be labelled as such and there are some other small restrictions. Definitely not something that is hard for meta to implement, if they wanted to. But I admit that fines are very severe (up to 6% of annual turnover, in theory), so I see why they don't want to risk it.
I think they are quite privacy conscious, as a country.
I was under impression that any medium or large state actor would have no problem developing biological weapons? They certainly have enough resources and talent. A much bigger problem is if every wannabe-terrorist suddenly could build a biological weapon in their garage.
Google put forward KYAML recently (https://www.kubernetes.dev/resources/keps/5295/), it looks like a more sane way forward.
I think KYAML[1] is very relevant here. KYAML is a strict subset of yaml[2], supported natively by kubernetes tooling in most recent versions.
In my opinion it's closer to JSON with comments than to YAML, but overall it looks like a pretty nice format, that solves some of pain points of both technologies. This is not the first nor the only JSON-with-comments format, so I wonder if it manages to break out of kubernetes world and become popular.
[1] https://kubernetes.io/blog/2026/08/11/how-to-pretty-print-ku...