Hacker Newsnew | past | comments | ask | show | jobs | submit | sksxihve's commentslogin

Could be done on switched networks too through arp spoofing


It's a lot harder though, because you can only target a single IP at a time and many switches have preventative measures built in. Back in the day the hub would conveniently send all the packets on the network to you and all you had to do was listen.


not really and not true, back in the day ettercap automated arp cache poisoning a LAN which lets you sniff more than 1 target since they map the gateway with the attackers mac address, switches might protect against this now but even in the early 2000's it was very effective (not that I would ever do it)


Predictably, pushback takes familiar forms. This will slow us down really means “I don’t want to be pinned down.” We need to trust each other, not sign contracts is code for “I prefer commitments I can’t be held to.” This feels like we’re inviting conflict is a fear of exposing leadership weaknesses. We can’t document everything often means “I don’t want a paper trail.” And leaders need room to maneuver is a desire to pivot without owning the cost of disruption.

This hits the nail on the head, I've heard all those excuses almost verbatim from upper management when proposing changes and I've countered all those objections with the answers given in the paragraph that follows. The current C-Suite thinks RTO is going to fix all the company problems and I'm out of ideas on how to effect meaningful change. My team is fantastic but interfacing with other directors/execs is a nightmare.

Do any of you that have gone through this have any advice, short of finding a new job?


> sometimes this "chain of thought" ends up being misleading; Claude sometimes makes up plausible-sounding steps to get where it wants to go. From a reliability perspective, the problem is that Claude’s "faked" reasoning can be very convincing.

If you ask the LLM to explain how it got the answer the response it gives you won't necessarily be the steps it used to figure out the answer.


> The initial funding will be $10 billion, followed by the remaining $30 billion by the end of 2025, the person said. But the round comes with a caveat. SoftBank said in an updated disclosure on Monday that its total investment could be slashed to as low as $20 billion if OpenAI doesn’t restructure into a for-profit entity by Dec. 31.

They might not even get the full $40 billion


> Or perhaps they're trying to make some important customers happy by showing movement on areas the customers care about

Or make important investors happy, they need to justify the latest $40 billion round


Is there anything stopping openai from scraping all the bluesky content without partnering?


Yes, they can. All Bluesky data (and ATProto in general) is publicly available.

It is already happening and nothing can be done against it at a protocol level: https://mashable.com/article/bluesky-ai-dataset-using-one-mi...


Code is law went out the door with the ethereum hardfork after the dao hack.


This makes no sense. I agree with you that code is not law, but the incident you're talking about wasn't law but community-driven consensus.


(realizing that im so old. if this is what i totally forgot, what else of this magnitude of signifince i do not remember anymore. that i was part of/ was involved/ it affected me.)


Funny, because it would never have happened if it was court ordered.


On a side note, does anyone know why banks still rely on sms 2fa codes instead of TOTP? Is there some regulatory issue that makes it more difficult?


Everybody with a phone has SMS baked in. SMS also has a recovery process if you drop your phone in the toilet. Ultimately, this improved user experience outweighs the security benefit to TOTP for many organizations.

TOTP also doesn't stop the biggest threat that SMS faces: phishing. Saving you from sim-swap attacks is just not a particular huge increase in security posture.

My bank at least offers TOTP as an option, but the huge majority of people are going to enroll with SMS.


My two banks require additional approval via push notification to the phone app. No SMS involved.

(In France.)


Some banks in Switzerland give customers a device that generates TOTP codes.


If the AI scrapers respected the robots.txt file then this wouldn't be an issue. A company is allowed to set the terms of service for their service and take action if other companies are abusing that.


The LLM scrapers could publish the ip ranges they use for scraping like google does, but that would make it easier to block them so they probably wouldn't do that.

https://developers.google.com/search/docs/crawling-indexing/...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: