supriyo-biswas

Joined 3 years ago

Karma
5,522
Submissions
1,561
Member since
Dec 10
Opinions expressed are in a personal capacity and not supported or shared by my past or current employer(s).

Email: [email protected]

View on Hacker News

Recent submissions

Comment · 7 hours ago
I'm a little surprised that I didn't find any TLS cipher ordering in this project, which I'm sure is something that CF uses as a line of defense.
Comment · 6 days ago
> power trip they get from making people waste time on crap that has no relevance to the user.

In my experience, this has been senior engineering leaders and project managers more than anything.

Comment · 6 days ago
The more likely thing is that we'll see people use the sandboxing and security tools that people already have. After all, it's quite easy to get LLMs to write a seccomp profile, a Kubernetes manifest, or a systemd unit with the minimum required privileges and permissions, and for insecure C code, we'd probably see mainstream use of Fil-C and similar.
Comment · 20 days ago
Should likely share https://status.yandex.cloud/en/timeline as well, though it only shows two of them being hit, not three.
Comment · 20 days ago
Comment · 1 month ago
> What I mean by this is a CDN consists of nodes that are horizontally replicable and don't really talk to each other, and thus are easy to run even at scale.

They do though! They mostly try to avoid it since hitting the network to serve any kind of latency would unacceptably increase latency, but you wildly underestimated the amount of complexity there is to running a CDN.

Comment · 1 month ago
I've used MacPorts on macOS versions that don't support the latest OS, which per homebrew policy seems to be versions upto N-2.

Apart from the issue of having to compile the downloaded software leading to spinning fans, I'm not too concerned.

Comment · 1 month ago
This article should really be renamed to "Allegations of dishonesty against OpenAI in proving Navier-Stokes blowup".
Comment · 1 month ago
They do show using https://github.com/raws0kil/jsbro-autoroot to get root access. For anyone interested, that pointer is enough, I guess.
Comment · 1 month ago
When a post receive a number of flags and downvotes higher than some configured threshold, they're marked as "[dead]".
Comment · 1 month ago
> If LLMs get better at writing—which I think is extremely likely—will you switch positions and say that now using LLMs without disclosure is A-OK?

If LLM writing improves to the point where they can infer the business (or other real world) context and serves the functional purpose of informing others as opposed to being an intellectually lazy piece being produced only for the purpose of being produced, then I’d be fine. It’s likely the author would need to spend some effort on the said piece of writing, regardless of how good the LLMs get good at writing.

Comment · 1 month ago
This is a marketing exercise, nothing more.

The thing that gives it all away is that they claim that the IP addresses are from Azure, and then proceeded to redact the IP addresses, as if they belong to individual users. It's laughable.

The IP addresses are the most interesting part of this experiment, as it would have provided researchers a way to understand the distribution of IP addresses used for the spam operation within the ASN.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton