News for hackers. Stuff that matters.

krisbolton

Check out The China Syndrome. I went on a never-seen-before 70s binge a while back and watch Colossus, Parallax, China Syndrome and Three Days of the Condor. Odd mix, but good.
Disposable income and being in the 1% are entirely different things.
Re:We Must Pace the Frontier on Saturday September 12, 2026 @03:00PM (#49675917)
This is important to realise and defend. Super intelligence is not a collection of human-level intellect smarter than you. Super intelligence is an intellect surpassing any human. That's a important distinction for AI alignment discussion now and in the future. The books 'Superintelligence' (978-0199678112) and 'The Coming Wave' (978-1529923834) are worth reading.
It would be good to know more about the detection mechanism, if it wasn't computer vision it may well have been audio monitoring - a kid is perhaps more likely to brag / talk about what they're doing, which gets flagged to a live monitor who can intervene in real time.
Lovely. Reminds me of these shorts YouTube started offering up a while back. I believe this is the original creator - https://www.youtube.com/@indiacrawford/shorts
Re:London Underground begins scanning passengers' faces on Tuesday August 11, 2026 @04:05PM (#49263705)
This just isn't true... you've heard of "no comment" right? And the ability for the police to invoke the requirement for you to provide your PIN is behind the tests of specific legislation. You're not automatically required to provide it.
Re:London Underground begins scanning passengers' faces on Tuesday August 11, 2026 @04:02PM (#49263666)
This. It's all within a democratic and legal framework, from GDPR to organisational policies. The source is the police themselves informing the public of the trial. The actual camera setup is bright yellow in the middle of the concourse, it's not hidden. They haven't hidden this technology, a private company hasn't deployed this technology. As citizens you have some control. It's probably not perfect, but there's humans in the loop. You have recourse to complain, to write to your PM, to take a different route (because they are pre-warning you). This IS democracy.
Google and Cloudflare recently moved their PQC migration timelines forward based on recent research papers in the field. Sources: 1. https://blog.google/innovation-and-ai/technology/safety-secu... 2. https://blog.cloudflare.com/post-quantum-roadmap/
I wouldn't categorize it as a panic. Standards and security organizations are recommending moving to PQC based on projections of capability. CloudFlare and Google recently moved their timeline forward for PQC migration based on new data[1][2].

1. https://blog.cloudflare.com/post-quantum-roadmap/ 2. https://blog.google/innovation-and-ai/technology/safety-secu...

Re:Anatomy of a Failed (Nation-State?) Attack on Sunday June 28, 2026 @10:37AM (#48707687)
Fair challenge, you're right that there's nothing sophisticated about this type of activity, but if you look at Lazarus activity this is their ttp. I mentioned TraderTraitor, go look them up (that sounds terse, it's not meant to be). They stole a couple of hundred million dollars in the past 6 months. They're not particularly sophisticated in terms of ttp, but because they're a nation-state actor they it's an entirely different threat model than script kiddie.

Attribution is hard, but if we're talking about defending, there's little cost to assuming Lazarus-style threat actor.

Re:Anatomy of a Failed (Nation-State?) Attack on Saturday June 27, 2026 @07:32AM (#48697340)
100%. I can't find it now, but someone last month posted a similar story on HN. The threat actor had stolen someone's GitHub account and altered their otherwise legitimate looking repo. They'll expend a lot of effort in order to masquerade and trick you. TraderTraitor is another good DPRK example.

Anyone reading - if you're ever a victim, worth reporting to your national CERT and your org. The CERT can provide advice, it's useful for their threat intel, and your org can check their systems. You might not be the end target.

Not to get into an internet argument, but the entire premise of what you say is false -- and I'm not just saying that to argue.

1. The intent was and is categorically not for the review of CCTV or any evidence to be specifically carried out by humans.

2. Law can't - and isn't suppose to - account for specific future technology, that's future prediction which is impossible.

What you mean is you disagree. What you mean is you believe a human should be involved in video evidence review. I'm not sure why, because it's clearly an area of waste. Maybe you have reservations about accuracy. Then what you mean is you want the technology to be at a certain level of accuracy before it is used in practice.

I suspect you do believe the accuracy isn't good enough, but you've forgotten the layered controls in English law. People are tried by other people. An AI tool that speeds up triage isn't the judge or jury.

This wasn't ignored and your source corroborates the fact. It was front page news, there were two IPPC investigations, and an inquest. This is also an example from 2005. An odd choice to reference in a thread about Police use of AI.
Sounds like automation to me rather than 1984. 800 hours of video searched in 3 hours, hardly the destruction of democracy.
It'll be a legal thing. You're reporting on behalf of yourself / a legal entity, so another system or entity can't say for you. I get it, but it really is a waste of time.
I think Apple became much better at security in recent years. One example which I think is indicative of their approach to security - they bothered to add a hardware microphone disconnect when a macbook is closed. Source: https://support.apple.com/en-gb/guide/security/secbbd20b00b/...
Re:Project Glasswing: An Initial Update on Friday May 22, 2026 @04:12PM (#48240987)
This is different though right? He found one (? we don't know who you're referring to - post sources for a higher quality discussion) vulnerability, he already knew it was there, etc. Anthropic didn't claim no other model can find vulnerabilities, nor that it's impossible with smaller models. They're claiming Mythos is a step-change in ability for end-to-end vulnerability discover and exploit creation. And that other frontier models are close behind.
Re:Project Glasswing: An Initial Update on Friday May 22, 2026 @04:06PM (#48240903)
There is independent research out there on frontier model capability. AI Security Institute (UK) put out their paper comparing Mythos to other frontier models in early April. They've been tracking frontier model security capability since early 2023, so it's a decent dataset. https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos...
I read it as the author is / was going through the vulnerability disclosure process with Microsoft and they're annoyed for unclear reasons and decided to publicly disclose, rather than being an insider.
I don't think they "forgot" about processors. It was out of scope. Creating the pipeline to end up with a fully "sovereign" system end-to-end is a decades long process and hundreds of billions of euros. As others have pointed out, in this context "sovereign" meant data processing. This is also a fairly paranoid take. Not to say hardware isn't targeted, but there are other methods. So spending hundreds of billions and several decades to build the fabs to gain assurance... it's a waste of time.
Did that risk materialise? I suppose it would be only the same as credit cards. With a valid warrant authorities can gain access to information. But that's within a legal system designed by an elected parliament. I'm more concerned about ensuring the legal powers are checked and balanced, and stay that way.
Re:NSA is using Anthropic's Mythos despite blacklist on Monday April 20, 2026 @03:42PM (#47839530)
They're referring to Pete Hegseth's decision to designate Anthropic a supply chain risk back in early May.

https://www.politico.com/news/2026/03/05/pentagon-tells-anth...

Not to start an internet argument -- I don't think it is appropriate in this context. A/B testing the features of a web app is not unexpected or unethical. So invoking the memory of cambridge analytica (etc) is disproportionate. It's far more legitimate to just discuss how much A/B testing should negatively affect a user. I don't have an answer and it's an interesting and relevant question.
The framing of A/B testing as a "silent experimentation on users" and invoking Meta is a little much. I don't believe A/B testing is an inherent evil, you need to get the test design right, and that would be better framing for the post imo. That being said, vastly reducing an LLMs effectiveness as part of an A/B test isn't acceptable which appears to be the case here.
Re:How Did the FBI Get Nancy Guthrie's Nest Doorbell Footage? on Wednesday February 11, 2026 @03:53PM (#46980776)
The article even says "[...] some Nest devices record event histories and store them on-device. The third-gen wired Nest Doorbell can save up to 10 seconds of clips, while the first and second-gen wired doorbells can save up to three hours of event history, all without a subscription.".
Nothing to do with sardines, but Economics Explained (YT) has a recent interesting video on the Moroccan economy. It's executed some well-designed policy and become a large automotive and aerospace manufacturer. Video: https://www.youtube.com/watch?v=4YHuaa8Jr2A
Re:Stargaze: SpaceX's Space Situational Awareness System on Friday January 30, 2026 @11:41AM (#46826558)
There's an interesting podcast covering space situational awareness from RUSI (Royal United Services Institute, UK). Link: https://podcasts.apple.com/gb/podcast/eyes-in-orbit-space-si...
Re:Stargaze: SpaceX's Space Situational Awareness System on Friday January 30, 2026 @11:38AM (#46826515)
This article is a short history of anti-satellite weapons, discussing who has demonstrated their capability: https://www.raf.mod.uk/what-we-do/centre-for-air-and-space-p...

I'm sure I read a more recent account of a satellite moving another satellite around in order to degrade its orbit, but I can only find this 2022 instance: https://www.twz.com/44054/a-chinese-satellite-just-grappled-...

No. This a motion within one house of Parliament and hasn't become law, nor is there any guarantee it will be. It's something to be aware of.
What you describe is the representative democratic system. Misunderstanding is the source of any distrust. It is frustrating to write to an MP only to be given boilerplate in return. But setting your expectations and continuing to advocate for your point of views is the only way to participate. One letter won't change anything, and how could it? There are other people writing opposing points of view. It's taken in the aggregate.

Older »