mike_d

Joined 7 years ago

Karma
10,706
Submissions
2,362
Member since
Sep 6
Email: m d @ m - d . n e t

[ my public key: https://keybase.io/miked; my proof: https://keybase.io/miked/sigs/NDka9SDMYHUI-gYuU6qG7FGLznGEAAZU0I15VdBAjAc ]

View on Hacker News

Recent submissions

Comment · 20 hours ago
Cursor is now Grok, so are you really surprised?
Comment · 20 hours ago
> I'd feel a lot better if I knew some red team security researchers were going hard trying to break into critical national infrastructure

They are. Most critical infrastructure providers worldwide have in house or contract red teams. Every western government has an agency dedicated to cyber defense and they all have red team programs.

Comment · 6 days ago
sigh

See, before the cloud, you used to deploy your code to actual physical servers. If your site became really popular you needed more than one server to run it.

Before commercial and open source load balancers became a thing we literally used HTTP redirects to distribute load. You might visit www.example.com and get redirected to www13.example.com, which was an actual box in a datacenter.

I don't think the internet would exist today if websites just randomly fell over once the number of simultaneous users exceeded the capacity of a single server.

Comment · 13 days ago
> is there any definitive evidence of the actual transport mechanism?

I can tell you from first hand experience that moving high value items isn't as exciting as you'd think.

ULDs are the standardized shipping containers of the sky. You can rent ones that have an inner armored layer and tamper evident seals. They fly as commercial cargo, usually on the flag carrier airline if its a government load. No special rituals or armed guards. Shipments are broken up so the loss of a single aircraft is at most $5 or $10 million.

There are some highly specialized aircraft that transport full loads but they tend to be closer to the supply side, moving bulk gold or diamonds from remote mines for processing.

Cash is the interesting exception (most non-US currency is produced by commercial printers) where a country will send its military to go pick up one big shipment.

Comment · 15 days ago
I have access to Claude's "defensive" cyber model and it appears to take no issue with the prompt, but I suspect that is because it uses today's publication as the basis for an answer.

In the past my attempts to work on crypto related problems have been met with needing the higher tier of "offensive" access.

Comment · 17 days ago
Title as submitted is backwards. From the article:

"Apple claims that OpenAI and two former Apple employees, including OpenAI’s now chief hardware officer Tang Tan, stole trade secrets including confidential product designs and proprietary information about its manufacturing processes."

Comment · 21 days ago
Exactly. Professional grade equipment already has extensive shielding to mitigate non-linear junction detectors.
Comment · 24 days ago
> Who made this decision

Nobody. Going back to 1989 every AOL account had a screen name that was used as your login and your identity. Being an employee was just a flag on your account in the database.

In 1993 AOL launched its internet gateway that accepted [email protected] and put it in your AOL Mail box. You could tell that someone was an AOL employee because a banner (I think it was) appeared at the top of the message telling you.

Some of the network engineering folks had real aol.net addresses, but I don't know how that was handled internally. I also think the Netscape folks eventually made enough of a stink to keep their previous email address too.

Comment · 25 days ago
The article did a great job of scooping sand over the huge turd this actually is.

Microsoft is going to be charging you per hour to play GTA 6.

Comment · 1 month ago
I have 2 x ChatGPT Pro 20x, Claude Max 20x, and Kimi Vivace. It's about ~12 months payback for two units and the cable.

The problem is they can't fit any frontier level open models.

Comment · 2 months ago
Celestial navigation requires an accurate clock and an almanac that needs to be updated. It is completely impractical for non-military applications.
Comment · 2 months ago
Comment · 3 months ago
At any large employer you sign an agreement to follow the employee handbook and internal policies. They all say the same thing: don't violate the policies even if directed to by your manager.

In this case Apple's legal department had identified the serials and IMEIs as PII.

This is why the case is in civil court and not criminal (because Apple didn't violate any "laws" as you claim). It is a contract dispute.

Comment · 3 months ago
There should be safety testing, but no guardrails that limit models for cyber or bio research.

Guardrails are not a safety measure, they are a pay-to-play scheme that allows the people with deep pockets to have access to offensive and defensive capabilities first.

Comment · 3 months ago
That was the understanding until the CIA released a bunch of documents in 2017 which revealed that it was such an abysmal failure that they almost called off the entire thing.

The attempted coup brought out a lot of pro Mossadeq protestors. It wasn't until the 19th when clerics organized anti Mossadeq protestors that it took hold.

Might be worth flagging to Wikipedia editors for a review.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton