News for hackers. Stuff that matters.

ofjcihen

Your ability to recognize snark is suspiciously selective too.

Weird.

Seriously? You replied to what I said with no follow up and a hazy premise and now you want me to take your leash and lead you through your own argument?

You have to be the single worst HN celebrity.

What does that even mean?
They are, and again, believe it or not, more goes into it than “RCE bad”.

Ease of exploitation, feasibility do play a part which I’m sure surprises you.

Most goalposts I’ve seen say “bad but clumsy”.

Believe it or not in cybersecurity there are many considerations in how “bad” a vulnerability is.

Sure, but that’s not what OP said is it?
Hah…trust me, I’m old enough.

But not finding joy in anything is an actual sign of depression. Have some media standards declined? Yes, definitely. But by no means is literally everything bad now. You can still find plenty of non-formulaic media on streaming services.

Honestly sounds like you’re just depressed. I don’t even mean that in a mean way.
This is one of the worst legal takes I’ve ever seen. Well done.

I have no obligation to provide accurate or safe material for scraping. Intent is a non-starter here because nothing else is satisfied.

The only obligation here is on the LLM providers.

Re:There isn't an easy exploit for this PHP vulnerability on Wednesday October 21, 2026 @11:19PM (#50190762)
It’s unfortunate but you’re correct.

There are a few “social media famous” cybersecurity folks really worth their salt who didn’t immediately dumpster their morals and skills at the first sign of an ego boost.

People like Krebs, Allison Nixon, Joanna Rutkowska.

Most of them though are just addicted to likes as it’s become a core part of their self worth.

Not stuffing every part of a number space into a sequence?
A group of especially egregious, threat actors.

https://en.wikipedia.org/wiki/The_Com

“Well then it’s a good thing I wasn’t paying a ransom but instead a pentesting fee!”
No honestly, most of the time it’s very formulaic. You can usually tell how it’s going to go once you know who has your data.

For instance, what’s mentioned in the article about not dealing with COM actors is great advice because chances are they’re going to keep your data and sell it or use it for future extortions no matter whether you pay.

Other actors though have a reputation to uphold to get paid and they know it.

An example of the process is something like:

1. Notification by ransom operators Including proof. Negotiations start at some arbitrary number like 6 percent of reported earnings.

2. Negotiators notified.

3. Back and forth begins. “This isn’t really that much data, do you have more? It’s not that damning. Fine, my client is willing to pay 50k. 60k? Okay, but you need to provide proof of how you got I the data so we can close the gap”.

Working in the IR space I’ve had a lot of opportunities to work with negotiators before. Most of them are extremely professional and worth their weight in gold for what they provide to their clients.

Ridiculous that scumbags like this are tarnishing that space.

I’m including all of the images linked in both.

And now that you’ve said that I’ve retried the same image 5 times and gotten AI 3 times and Not AI twice.

Something tells me that tools is about as reliable as Pangram.

That’s not the question. The question is “were they even there” before the “screenshot”.

As an example, I can screenshot your comment and have AI edit it to have you say “I really enjoy misleading people on the internet for money”, post it, and then say “I took this screenshot before they deleted it.”

Unless I’m missing something all of the pictures in the article and on X that it links to return as being AI generated?
“Before they deleted them” aka no way to check if this is BS.
Thank you. This is the typical response from these people when caught red handed.
“Completely disregarding security aspect”

Did you miss the part of my comment where I mentioned this would be the US’s version in your rush to reply as smugly as possible?

Maybe read the content of a response before responding.

Eh I don’t buy it. The framework for a US owned Deepseek is there and easy to put together. What isn’t there is the money.

My assumption is that money has been hitting the right pockets to make that not happen.

Re:DeepSeek just open-sourced its inference engine on Tuesday October 20, 2026 @11:41AM (#50168069)
I mean what’s to argue about really? If the product can do what I need it to do at lower cost and much lower exposure why wouldn’t I use it?

The vast majority of operations don’t need SOTA anyway.

Are you just trolling?

The documents have been provided.

If you don’t believe it go and download the documents and grep through them. You act like 300gb is large. It’s not. The next FPS will probably be that big.

“Here’s the files so you can look for yourself”

“I refuse to and I’m still going to complain.”

Suspiciously large number of comments flooding in to discredit this starting at the same time.
Re:Namecheap just seized and disabled all my domains on Sunday October 18, 2026 @06:03PM (#50145953)
Hilarious because namecheap is the number 1 provider of lookalike domains that we see in our incident response actions.
HN seems to have an incredibly poor understanding of what Mens Rea means or how it’s applied.

You don’t need someone to jump up, wave their arms and scream “I meant to do it!” to establish intent.

It can be established in any way deemed believable by a jury including repeating the same action that leads to a similar outcome multiple times.

It’s even been instructed to juries that they can find intent in the deliberate decision to not seek out the likely outcome of performing an action.

Re:Tesla Roadster on Thursday October 15, 2026 @09:57PM (#50112896)
Reading some of this feels like I’m having a stroke.

>This provides enough suction to hold the vehicle upside down, even when stationary.

Neat car though.

Re:I know why Mathematicians weep on Thursday October 15, 2026 @01:05PM (#50106744)
It’s normal to be one of 10k.

Older »