News for hackers. Stuff that matters.

tastroder

> We do not sell IDP software and we are not paid by any vendor named here.

The vendor list contains your own product and you, as in the company you co-founded, pretty clearly sells IDP software. https://idp-software.com/vendors/konfuzio/

Re:The Prompt API on Monday April 27, 2026 @01:25AM (#47917995)
chrome://on-device-internals reports "Model Name: v3Nano Version: 2025.06.30.1229 Folder size: 4,072.13 MiB" on a random Windows machine I just checked.
SSRN is a preprint server and that is the only published version.
I clicked on a few red team "scenarios" if you want to call them that, a few of the tiles look like output of regular tools vaguely related to each but the rest - including the main "terminal" thing - seems more on the fictional side to the point I don't see this being educational.

There's plenty of training material out there these days actually using these tools in contained but realistic environments, if education is the goal just go for those.

How are you tackling users that don't read AI generated output before posting it somewhere?
> Would he have not disclosed it if they offered hush money? We won’t know, for his case I hope not. In any case - what was he expecting?

A bog-standard responsible disclosure that any tech CEO should either be familiar with or have someone at hand that is, as is clearly communicated in that e-mail.

Both e-mails are OP reaching out to help this company out, the first fixing the vulnerability, the second giving them a chance for compliance / potential regulatory aspects they might want to follow. It's not on random people reporting security vulnerabilities to tutor random companies on this and both behaviors (non-responsiveness, then hostility) of this CEO, despite being sadly common, are actively harmful if you want to get productive security reports in the future. (And the company unilaterally signing up for bug bounty programs is rather irrelevant for independent researchers as well if they have no interest in participating in those.)

Their accompanying website [0] says mobile phone data comes from teralytix while car movement data is sourced through inrix [1], which appears to gather data through navigation apps of some sort (vague as can be expected but the linked paper [2] claims that).

[0] https://mcc-berlin-ariadne.shinyapps.io/dticket-tracker/

[1] https://inrix.com/

[2] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4526796

Re:Wigle.net: All the Networks. Found by Everyone on Tuesday October 08, 2024 @02:17AM (#41774286)
As far as I'm aware this type of data does not meet the requirements [0] for a GDPR violation and there was a bit of initial litigation around Google's street view data gathering which left this part out as well (e.g. [1] for a somewhat recent discussion).

[0] https://academic.oup.com/idpl/article/1/3/149/688705

[1] https://news.ycombinator.com/item?id=27517547

Re:Ask HN: Can you roast my landing page? on Friday September 20, 2024 @08:04AM (#41601156)
In terms of landing page it certainly worked, got me to check out the linked demos until I hit the signup nudge. Some of them don't seem to be available in English which might be a negative depending on your target audience.

Loading those exposes the e-mail of the account used to create the application (in [0], data->userInfo->email) and those "blocks" downloads contain the entirety of the prompts / applications, which is nice I guess but surely those are only required on the serverside?

[0] https://docs.trickle.so/api/nge/public/tao/objects/-/associa...

Re:AI Helped Me Build My DIY App – DIY-It on Friday September 20, 2024 @01:33AM (#41599068)
This is exclusively other people's content that's badly credited (if at all) to push Amazon affiliate links.
Re:make dist using git archive on Tuesday August 13, 2024 @03:44AM (#41233232)
related https://news.ycombinator.com/item?id=41232621 "The new PostgreSQL 17 make dist" 3 points, no comments
Re: on Sunday August 04, 2024 @09:39AM (#41153464)
Nothing, the whole repo and that post are spam intended to drive people to that e-book repository linked in the readme (which in turn is just a bunch of fake updates and likely engagement as well).
Maybe add a reference to DementiaBank as required by the dataset.
"Crowdstrike Update: Windows Bluescreen and Boot Loops" https://news.ycombinator.com/item?id=41002195 1260 points, 1008 comments
Re:Ask HN: What is in C-00000291*.sys? on Friday July 19, 2024 @07:07AM (#41004932)
The Linux version of CS sensor defaults to being installed as a kernel module as well.
Re: on Thursday July 18, 2024 @06:02AM (#40994089)
There's no such thing as a best language that only depends on what year it is, what do you want to do with it and are you proficient with any language ecosystems already?
Re:Show HN: Upload your PDF and get a shareable link on Thursday July 11, 2024 @02:20AM (#40934087)
Not sure what the e-mail confirmation flow does but your upload leaks the fileId that can be used to construct the target URI without it.
Since my test e-mails from a throwaway don't seem to go through: What checks does this perform? Since the policy pages don't name third parties like virustotal I assume it runs some OSS tools on your side?

Regarding the privacy policy and ToS: How do you see people using this in a corporate setting vs. something local? Most suspicious e-mail I encounter can't just be sent to random third parties.

sidenote: Some of the text is gray on gray and barely visible, e.g. on the main overview page when logged in and your policy pages.

Re:Ask HN: What's the best paid translation API? on Thursday March 28, 2024 @04:51AM (#39848958)
That depends on the language pair(s) and sometimes the domain of texts you're translating.

Assuming you want to stick with the big cloud providers just sign up and test them on your content, they all have straightforward libraries.

Re:Tell HN: How would you solve my telecom problem? on Monday September 25, 2023 @11:53AM (#37645901)
Terribly sorry to harp on what the others in this thread have said but it seems like you've either been negligently briefed (due to the implausible scenarios you're describing and that you're posting this tied to your real identity, their first name on your website - assuming that's more real than the ChatGPT Ph.D. and other random entries there -, and your previous HN submission) or you're being lied to.
Re:Tell HN: How would you solve my telecom problem? on Monday September 25, 2023 @03:58AM (#37640753)
I meant your website and resume that you linked there. If this is not some weird thought scenario, pointing her to the public forum you use to discuss alternatives to her simply talking to whoever's responsible for her comsec doesn't seem like the greatest idea. If this is an actual problem it's not yours to solve and certainly has solutions that aren't this... convoluted.
Re:Tell HN: How would you solve my telecom problem? on Monday September 25, 2023 @03:37AM (#37640630)
What problem? Just clicking on your profile, your number is public information she can find in plenty of places without taking anything anywhere.
Re: on Wednesday September 20, 2023 @09:07AM (#37583643)
This is from 21, not really news, and the paper version on arxiv and published at NeurIPS have quite a few citations. No one's suppressing this, people that don't reflect on their datasets or how they use them just either don't care or fail to acknowledge they're actual issues.
Would you please refrain from creating new accounts to post duplicates of this? That's in the guidelines as well. HN has an e-mail address down at the bottom if you want to get in touch with them to potentially get this one changed.
Re:Official Mastodon server of the Dutch government on Wednesday July 12, 2023 @12:40PM (#36697351)
There are only official persons/entity accounts on that instance, if you're thinking about the global feed that's just a composition of people those accounts follow.
Re:The AI revolution already transforming education on Sunday May 21, 2023 @03:43AM (#36018773)
https://mackinstitute.wharton.upenn.edu/2023/would-chat-gpt3...

This seems to describe the MBA exam part of that paragraph.

https://news.ycombinator.com/item?id=35771104 previous discussion here (915 points, 1135 comments)

Older »