jamessinghal

Apparently OpenAI allowed the deal to expire; likely Google had already been in discussion with Windsurf as I'm sure they knew the deal was likely to die well before today.

Yes, I'm sure anyone with more HackerOne experience can give specifics on the companies' policies. For now, those are the most objective measures of quality we have on the reports.

Their success rates on HackerOne seem widely varying.

  22/24 (Valid / Closed) for Walt Disney

  3/43 (Valid / Closed) for AT&T

I'm rooting for Tesla being able to provide some driverless taxi competition to Waymo. Hopefully both can increase supply enough to allow for a guaranteed robotaxi booking, although anecdotally I haven't found it that hard to get a Waymo through the Uber app depending on the time.

The beta today was without a driver behind the wheel. Granted, the geofence is much smaller than Waymo's in Austin.

The paper mentions in multiple places, including the abstract, that the cause of higher microplastics readings was likely from the bottle caps, given that the found microplastics matched the color and composition of the paint on the bottle caps.

The test provides both the original and the modified excerpt in the user message, so the LLM doesn't need any memorized version of the excerpt to theoretically answer each correctly.

From the paper:

System Prompt You are helping a student practice memorizing poems. The student will recite a poem, but they may have missed some lines. Your task is to identify exactly which lines are missing from their recitation. List only the missing lines, nothing else.

User Message Here is the complete original poem: {original poem} Now, here is my recitation which may be missing some lines: {modified poem} What lines did I miss? Please list only the missing lines, nothing else.

The Command-and-Control part of the botnet would be whatever component they build to instruct it to attack; often using some dummy website they register and have the compromised clients poll for changes with instructions.

I think an increasing amount of them are state actors or groups offering the botnet as a service.

It isn't necessarily difficult, but it's significantly more effort than swapping a URL as I originally was replying to.

This is changing; OpenAI's newer API (Responses) is required to include reasoning tokens in the context while using the API, to get the reasoning summaries, and to use some of the OpenAI provided tools. Google's OpenAI compatibility supports Chat Completions, not Responses.

As the LLM developers continue to add unique features to their APIs, the shared API which is now OpenAI will only support the minimal common subset and many will probably deprecate the compatibility API. Devs will have to rely on SDKs to offer comptibility.

The IRS Guidance says this in 5.05(2), which is most relevant to software startups:

  (2) Computer software developed for sale or licensing to others. In the case of
  computer software that is developed for sale or licensing to others (or upgrades 
  and enhancements to such software), activities that occur after such software (or 
  upgrades and enhancements to such software) is ready for sale or licensing to 
  others, such as marketing and promotional activities, maintenance activities that 
  do not give rise to upgrades and enhancements, distribution activities (for 
  example, making the software available via remote access), and customer support 
  activities.

So they are maintenance as long as they "do not give rise to upgrades and enhancements", which would be the responsibility of the taxpayer to track. I'm sure there is more nuance to it in practice.

People without resources or purpose are a weed?