david_shaw
Joined 16 years ago
Karma
3,432
Submissions
562
Member since
Sep 25
Recent submissions
Comment · 9 days ago
I think that's what they're saying.
Assigning the CVE happens much earlier than actually publishing, but it's the latter that ends the embargo.
Comment · 11 days ago
My use case is personal, although I could absolutely see a business use case. Charge a subscription for the enterprise license(s) so you get recurring revenue!
For personal software, though, I am very much opposed to subscription costs without a "lifetime" software purchase model. I think a single active license (transferable but only active on one machine at a time) is totally reasonable.
Comment · 11 days ago
This is a cool project, but I'm not going to install it or invest any time until I better understand the pricing model.
Are you considering a subscription approach? One-time fee? Fee per version? Are you thinking ballpark $9.99 or $99.99?
Comment · 17 days ago
Every time I see a cool new font like this, I want to switch to it.
But, almost always, I end up switching back to DejaVu Sans Mono for just about everything monospaced.
Comment · 17 days ago
Weird flex.
No one really likes the Epic Games store. It's widely known as an inferior competitor to Steam. Who cares how they develop their store?
Everyone is "vibe coding" everything. Most of the projects shown on HN are either written by AI, or about writing with AI. It's almost 2027. "Vibe coding" isn't some weird new fad.
Comment · 17 days ago
For the sake of discussion, I'm not sure it really matters if the agents are going rogue.
Yes, if someone directed them to hack external systems, that would (in my opinion) be a crime similar to a script kiddie pointing Metasploit at a vulnerable server.
If no one directed them to attack external systems and they "went rogue" because they decided it was the best way to accomplish the task, okay, fine -- but, in my opinion, the operator of the agentic swarm is still responsible.
The Morris Worm was famously not meant to wreak havoc on early computer systems -- Morris just wanted to see if it would work. How is this any different?
Morris was convicted for violating the Computer Fraud and Abuse Act.
Comment · 20 days ago
This is a (very long and) well-written treatise against passkeys in their common and disparate forms. It's worth reading, and brings up several interesting and often concerning points.
I don't agree with the conclusion, though.
TOTP is great, flexible, and keeps the user in control; however, using a passkey in a flexible password manager (Bitwarden, keepass, 1Password, etc) really does continue to give the user control. And the user experience is dramatically easier than filling in TOTP codes.
To advocate for TOTP over passkeys, we're already relying on an application to generate those numbers (authenticator apps, password managers, etc). I see no reason to not simply continue using those pieces of software to manage passkeys, too.
Comment · 1 month ago
> Ai farm to be.. I suspect.
I suspect the opposite: a billionaire's escape from a potentially turbulent society.
Comment · 1 month ago
> TLDR: it created program to decypher the string using opensource solutions related to enigma
It seems weird to me that a (relatively) straightforward workflow like that would elude crypto hobbyists for the last 21 years (since 2005 according to the article).
Comment · 1 month ago
At this point it seems absurd to suggest that companies aren't basically letting their agents do this kind of thing as a way to demonstrate their capabilities.
The alternative explanation is that alignment is really so bad that they can't prevent it.
Either way, all of the major AI players should be embarrassed and held accountable. If humans did this kind of thing and got caught, they'd go to jail.
Comment · 1 month ago
A lot of AI safety experts recommend this course of action. I've found https://www.ai-2040.com to be a good overview of some reasons why.
Unfortunately, Trump is passionately opposed to any AI regulation and is actively calling AI risks a "dumocrat hoax."
So it's unlikely that we'll see any real regulation on the US side any time soon. I'm not banking on China to slow down their AI industry, either.
This seems like a great idea, but absolutely not one that will happen in practice. At least not yet.
Comment · 1 month ago
> I like that we are talking about prompt injections from you to your personal assistant. Obviously I know what they are for, but still, it's so funny that we've just normalized building software adversarial to the consumers supposedly engaging with the product.
As you can see in their marketing page, Muse is a personal assistant that reaches out and/or ingests data through apps, the web, your email/messages, etc.
If someone sends you a malicious email or if Muse finds a malicious website by accident, you wouldn't want it to send them all of your photos or to purchase things you don't want (or maybe that aren't even real).
The payment related examples on the page are of particular concern, but I imagine it kicks back to a human to actually pay for things. But who knows?
contact: