wavemode

lol, reminds me of the common misreading "provably safe" / "probably safe"

Is it?

Cursor's security announcement was posted on Oct 29 and says that the malicious extension was live "between about 2:27am PT and 1:35pm PT today"

This article says the attack took place "on Thursday" (which means Oct 29) and began at 4pm ET (which is 1pm PT)

and Binance has been tweeting that the cause of the hack may be a compromised employee laptop. yikes

> I just spent 10m trying to use this

wow pricing has gone way up

In practice, the money you save long-term by reducing headcount is one or two orders of magnitude larger than the money you pay out in severance. Losing your reputation and a lot of legal fees over (basically) pennies tends not to be sound business.

There's a reason corporations almost always settle lawsuits (if they aren't dismissed).

Because the company wouldn't have the money by that point? Seems unlikely. Or because it was an outright lie? Could be grounds for a lawsuit.

I guess it depends on what you mean by "aware". Does awareness imply that someone simply knows that what they did was immoral, or does it also imply remorse? Psychopaths know that their actions are immoral but are incapable of feeling remorse.

interest rates being low doesn't mean banks stop making money on retail deposits. there is still a spread between the interest they pay to the account holder and the interest they make loaning out that money.

lol the exploit is patched, why are people acting like it's a a zero-day? anyone you attack with this, in any case, has to be someone who hasn't yet upgraded their PHP version. it's worth nothing to hide/sit on.

Banks absolutely make money on retail deposits, and you definitely are doing them a favor by putting your money in.

Banks do spend a lot on marketing to acquire a given customer, and will then upsell that customer on more profitable products like loans and credit cards. But having a high customer acquisition cost and then upselling is not quite the same as being a "loss leader" (which sort of implies that marginal profit is negative, which is definitely not true).

I'm not seeing any source for the claim that OpenAI discovered this in February. The source that the article links (a tweet by OpenAI) doesn't claim that.

When I owned an iPod touch, the advantage of jailbreaking was to give your device certain features that the OS just didn't support. (Hell, I remember early days when iOS didn't even have a concept of wallpaper, the background was just black.)

iOS has come a long way since those days so a lot of the most common use cases of the past are no longer necessary. But the principle is the same - the hardware is a general-purpose computer but the software is locked down unnecessarily in many ways. Jailbreaking lets you do things that are outside of Apple's box.

The point the parent commenter is making is that they want Apple to allow people the freedom to intentionally mod the functionality of their device. Not that they literally want single-click PDF exploits to be a thing.

$25B is the reduced judgment. The state was originally awarded over $200B.