leftbehind

Sorry, english is not my first language. Itss disabled on our work API instances so my use is strictly personal because it was available on Cursor (my account is pre-acquisition). I have extensive AI experience across nearly all models, open weight and frontier and closed, I am very aware of how they talk or output. This is high/xhigh, via Cursor, not via X Grok/UltraGrok if that make different.

Grok 4.6/4.7 feel like you are less tokens because Cursor gives you double the quota subsidising Grok specifically - there is a separate Grok/Cursor model quota bar in addition to non . Its actual token drain if you are paying API rates is generally far higher than Fable, Astra et al. You are not using less tokens.

It is weird in some reward way, it will frequently, at least for me, complete the task in the laziest way possible,Technically it is done, but that's about it.

For example a user registration system ended up with users being able to log in as anyone because the authn was a cookie set with the user's pkey id, unsigned. Nearly anything it outputs technically works but if you give it a GLM or DS pass you will find dozens to hundreds of vulnerabilities of varying hilarity (Fable refused, Opus refused).

I have seen it write SQLI-vulnerable code, asked it to review a file without saying what's wrong and it did not catch it (fresh session, single file @-tagging in harness). Again, technically, the code works and does what the prompt asked, its just handing in some of the laziest copied homework I have ever seen.

If you specifically call out to use prepared statements it will typically put a plaster over this however I have also seen Grok 4.6 use prepared statements by concenating the user input raw into a statement then executing it with no ? or named replacements, rendering it somehow a SQLI-vulnerable prepared statement. One med it added a OR 1=?, replaced the ? with another 1, then said OK you are using prepared statements now.

We received repeated, constant heads up to move our data by the first AZ much less second. The problem is that nobody is storing data in Bahrain unless there are data residency requirements for it.

nobody wakes up one morning and chooses to launch instances, CDN or S3 and would choose Bahrain as that without a requirement to, we were contractually and legally forbidden (in the middle as a vendor) to copy even encrypted data where we don't have the key out for redundancy, so the best we could do was tell our subcustomers to download all of their buckets to their office or some employee laptops at their office

Did you get appropriate consent before adding them to your lead spam database?

Looks correct to me - from output look in you are doing it on TAR which is wrong. You do it on TAR.GZ file.

sha256sum openjdk-23.0.1_macos-aarch64_bin.tar.gz

Article says Chicago.

You say AI-Powered Keyword Suggestions with no other detail, are you running local models or sending what is being typed to third parties?

No content available or demo at all without creating account?

Where is the advertised "AI" in this? What are you using instead of just the buzzword "AI"?

I think the confusion comes from the fact that the linked page is not a text article, its actually an AUTOPLAYING VIDEO for a small news station. There is not actual text content

:)

> Looking at digicert[1], if a revocation request is submitted, the owner must approve it. What happens if I just don't approve it?

So in this case, this is the happy-case where you as the owner wish to simply realize the cancellation a cert that you are no longer using.

A different workflow applies, such that you have the private key you instead send a POST to 'https://problemreport.digicert.com/api/keys/compromised' with the private key in the JSON body and it will be queued. It is mandatory Baseline Requirements wise to cancel the certificate within 24 hours in the compromised case - usually instant if the pk matches cert - with the expectation that of course the owner will not go this route.

IIRC, if you have a private key you can be able to force a revocation regardless of what the owner wants. In some such as Let's Encrypt it is fully automated.

If this is a repo private, you should be realize it with a private CA that you import or is on every corp machine.

Baseline Requirements force a revocation within x hours on key disclosure.

We enroll them as standard fido/webauthn - I hate the other modes.

I agree it requires significantly more work when you can't just call the locksmith for a new one -- IT -- if you lose one on your personal account you can only go get the spare key hidden under the doormat, a printed code in your safe, or lose the account.

We haven't had any issue getting all of our staff -- nontechnical users alike -- on yubikeys. As part of education we skip the PKI portion and just point out that it is "like your physical house key. You plug it in and touch it to turn the key to unlock"

The site does not use CF. It is not CF ! Its intentional blocking users with an fake captcha by presenting page that looks like CF branding

The Tesla owner in the article intentionally rammed his car repeatedly into a Waymo then publicly said Waymos kept hitting his car???

How stupid do you have to be to do this when both your vehicle AND the other vehicle continuously record at all times from every angle and stream it to the cloud?

up here, US