odensc

Yep - this is the core issue that made the vulnerability so bad. And if you use a subdomain for a third-party service, make sure your main app auth cookies are scoped to host-only. Better yet, use a completely different domain like you would for user-generated content (e.g. discorddocs.com).

Google is down because Google Cloud is down, Antrophic is down because Google Cloud is down, and OpenAI isn't down but some of their SSO providers are down because Google Cloud is down.

So, not a coincidence.

Not exactly the same, but in the same vein, Reddit has a "Random" button that takes you to a random subreddit. Google has "I'm Feeling Lucky" which gives you a random search. A "random" button seems like a relatively common little easter egg.

> They harvest emails that you punch in for email receipts at checkout for marketing purposes. etc. etc.

Really? I've been using a unique email (i.e. [email protected]) at checkout for the last 2 years and haven't received any emails at that inbox except for my receipts.

> So, it'd be hard to pull off such an attack.

That's what you'd think, but people rarely pay that much attention. The fullscreen prompt only shows up for a few seconds.

For example, recently a family member clicked on a fake YouTube link from an ad in Google's search results. Clicked the search bar and it immediately turned their whole screen into a "call apple support" popup.

They called me up because they thought it was a virus, but really it was just a fullscreen webpage, and being not very technologically inclined, they didn't even try Esc, Cmd+Tab, Cmd+Q, etc.

Some cars use "indirect TPMS," which means instead of a sensor in the tire's valve stem, it measures the speed of each wheel and uses some fancy math to determine if the pressure is low.

I'm not sure if the Kia Ceed is one of such cars, but if it is, there may be some wackiness in their indirect TPMS system. Especially considering the OP says it only happens after prolonged driving at high speeds.

It's not an issue specific to USB-C. There are also plenty of USB-A/Micro-USB cables that don't have the data pins connected. Typically this is only an issue with super cheap electronics that only use USB-C as a connector for power and don't really follow the spec.

I haven't heard of a phone coming with a charge-only cable. Especially because that cable is usually used for syncing to a computer (iOS)/transferring data from an old phone (Android).

They didn't even quote that analysis correctly. It shows that it would take 30 minutes for the average person... big difference there.

Can confirm. A couple years ago, I had a Chrome extension with ~100k users; I was receiving these types of emails every week.

One of them straight up offered $10k, whether that was a real offer or not I don't know because I never replied to any of them.

I've since taken down the extension as I'm no longer maintaining it, but weirdly I still get these emails, albeit less frequently.

Can anyone reproduce this? I don't pay for GPT-4.

I noticed the "shared links" contain this disclaimer:

> This conversation may reflect the link creator’s Custom Instructions, which aren’t shared and can meaningfully change how the model responds.

Perhaps the author either unknowingly or intentionally added something to their custom instructions which causes this behavior?

The article did say that:

> The seeds had to go, too. While poppy seeds might be legal, it is never legal to plant them. Not for any reason.

What is that calculation based off of? The article lists the 4 filters as $70 (which I'd assume you would replace all at once).

The Levoit uses 1 filter "unit", and filters are $55 for a 2-pack on Amazon ($27.5/ea), or half that if you trust the third-party ones.

Levoit recommends to replace the filters every 6-8 months, so you could get 12-16 months of filtration for $55. I can't find any calculation in the article for how long the author estimates their filters would last.

Isn't $100 (the stated cost to make this) the same as a proper air purifier like a Levoit Core 300?