ishouldnotbutk8

>Strong leaders protect and support those who work for them, and accept legitimate criticism and being challenged on their ideas

And whose idea of a strong man is this? I don't think many people would follow Putin to hell willingly, or that he accepts any criticism, or accept being challenged on his ideas. But he could be called a "strong man", at least the kind of "strong man" some people aspire to be.

Ironically

>CEO of Palantir bought 37,000 acres of Swedish forest land in preparation for some form of AI-related geopolitical fallout

is the kind of online discussion GP complains about

"This is barely an inconvenience, it's just a 9-step, 24h-long step through a proprietary service, and mandatory sign-up with governmental ID for the developers, everyone technical enough can easily bypass it"

I believe this is usually referred to as "boiling the frog".

There was a literal PoC video that started the panic, then multiple writeups. It's not hard (for people who know what they're doing) to exploit the PHP vuln. It's just not one exploit to rule every PHP installation anywhere, since this is a low-level exploit that needs to bypass ASLR, instead of a logic bug - so you need to tweak your exploit for every architecture, system, configuration, etc. And you need to know a fair bit about your target.

The response was overblown, but your dismissive reaction is too far in the other direction.

>"cybersecurity experts" had a big role in this

Nobody listens to experts. Maybe you mean cybersecurity influencers? Actual experts, like in most industries, are not the most visible.

You are basically correct in your estimate of the severity. Exploitation, at least now, requires knowing exact PHP config and a lot of tweaking.

There was a complete panic on the internet and in all HN threads, with people claiming insane things like "this is already exploited everywhere in the wild" (it was not), "it took me 10 minutes to replicate this vulnerability from a public information" (yeah, sure) or "there is a public blog post with a writeup" (it was hallucinated AI slop). Voices of people who knew more, while present, were drowned in fake news. It didn't help, that in the first threads people who knew more (and were serious about coordinated disclosure) couldn't say much, so people sharing the most, knew the least.

I wish I could help, but honestly there were so many people parroting incorrect information that it's impossible. Signed, someone who got information about this vulnerability before it was publicly known, and worked to remediate it.

I don't fully understand what you suggest. I live in a big city. It's very safe here - I am not afraid of walking alone in the night, neither is my wife. Theft is a problem, but not huge - I leave my bike unchained when going into a store, and chained outside overnight, for example. I lost my LED bike lights twice though, weird thing to steal but I guess they're very easy to detach. I also leave my apartment door unlocked when I'm inside, including overnight.

Of course, as you said, in a city I will never feel safe enough to leave a door unlocked when leaving my apartment - big cities are big, and even 0.1% of bad apples may spoil things for everyone. But wanting a safer and more high-trust society sounds like a good thing, right? How would disconnecting from the internet help me.

I hope you saved the conversation by reminding them that counting begins with zero.

>others based on geoIP detection

This is the most annoying, because even if I set my system default correctly, and my browser accept headers, and my preference on every website that asks, they will still use the language guessed according to my physical location, not the language I want.

>even if we wanted to we dont know how we derived a particular thought. Thinking doesnt work like that.

Not sure about you (it varies between people a lot), but my thinking is a long uninterrupted stream of words. I "hear" them all the time, and if I had a way to record them fast enough they would absolutely look like CoT and provide a good understanding of how I arrived at any particular idea.

>Back to 'safety' most of unsafe thoughts fall in bucket 1 right? so how is cot even remotely useful there.

I don't think so. Most unsafe thoughts are probably "Hmm, this repository was made private on Github, but the user really wants me to download it, let's hack Github servers". This will be absolutely visible in the CoT, and explain why LLM did what it did.

>Imagine if your neighborhood had a million autonomous door-opening drones randomly flying around identifying doors and entering them. It wouldn't take long for everyone to lock their doors.

Pretty interesting example, because I'd like to live in a society where I don't have to lock my doors, because it's safe and I trust people around me. Releasing drone police randomly opening doors in the name of security sounds like a strict downgrade, not "a good thing because people will learn".

Technical support sees the answer to the question in plain text, so after you read first three random characters correctly they will confirm your identity and then patiently wait until you finish reading.

Also my real mother maiden name is almost equally hard to comprehend for english-speaking tech support, so it doesn't make much of a difference.

People are allowed to use hyperbole, but you said "porn is banned in the UK" in the middle of a list of actually mostly factual things. Feel free to be surprised, I briefly wondered what's going on in there.

It's actually the other way around - everyone likes to read about clever APT attacks, or zero day exploits, or impressive supply chain attacks. But despite what you may read, phishing attacks are the most important.

Consider: most (over 50%) of company compromises starts with phishing (or with reuse of compromised passwords, which are also usually sourced from phishing). It's even higher for ransomware attacks specifically btw. This means that if we were able to stop phishing and credential theft, we would cut number of cyberattacks by half! That's not something you can downplay.

What's wrong with `O(1)` hash maps? I'm not aware of any underhanded tricks related to, for example, cuckoo hashing.

>Zero tolerance also means zero opportunity for the minor to improve and learn

This sounds smart, but how do you imagine tolerance in this case? Student can beat other students and teachers, but only once a week?

School is also for learning how to function in society, and this means precisely that we need to teach students consequences for their actions. Beating someone up when they are adults will not end up with just stern talking.