ferngodfather

Yeah give me a vuln and I can make it anything between a 2 and 8 quite easily. I routinely see 10s that are "Critical 10.0 CVE (but only if you're using X language with X setting changed from default, and the attacker can MiTM your traffic)"

People on my FOSS project couldn't see the issue with their AI slopped documentation contributions.

On one hand I'm like, yeah fair enough it needed writing and something is better than nothing.

On the other I know nobody wants to read it now because it's just word vomit rather than how a human would write something they'd like another human to read.

I hate it so much.

You say this but fact and opinion are very similar and not at all easy to distinguish.

For instance, if I said the grass is green vs if I said the grass looks nice vs if I said the grass is doing well and looks how it should vs if I said in my opinion the grass is healthier than its ever been.

> To submit a claim you do not need a lawyer, but the process is (intentionally?) vague and very complicated, so it takes a lot of effort to figure it out yourself.

I'm not sure there's quite accurate. The form is really not that difficult to complete.

It's basically: Party details, type of claim, particulars, damages

Obviously knowing these details requires some legal knowledge but I actually think ET claims are easy enough to bring if you've got the time to do a little research and build your case. Almost all ET judgments are public so there isn't the usual difficulty with research as you get with law reports being restricted either.

https://assets.publishing.service.gov.uk/media/65bcbd214a666...

Doing similar-ish things with Claude, it's helpful to have something to ground it.

For instance, if you can say:

"Refer to the database schema in x.sql as your source of truth for the database structure we want to import into*. Do not invent data, tables or columns that do not exist. Carefully match all output against this database schema and do not create output that doesn't exist if it does not match the schema, simply skip it."

You will end up with a far better result in my experience.

Gotta treat it like a child.

The POS are still XP last I checked haha

No fire suppression and wooden ceilings?

1 "data center" built from a shipping container is one too many.

And, did you look at the photos you linked lol.

You should see the pricing of Azure web apps lol

My issue with OVH is the support is God awful and half French. Someone made a complaint about my server and their default stance was to nuke me from orbit and ask questions later.

Oh and their "data centers" are just shipping containers that are prone to the occasional fire.

Much happier with Hetzner, even though it's more expensive.

I mean, bridge tolls are absolutely a thing.

If only they had a parent company that specialised in search

But they can't process the commit until I push it?

They saw it commented on another thread.

This is not real life.

I had both setup previously and constantly ended up in my recipients spam. When I'm trying to sort my life admin with local council/government/landlord/utilities, it's one thing to have a 'cool' custom email, but it's another to say "oh yeah, sorry, it's probably in your spam".

Haven't had an issue since I moved to 365. Costs a little more but so much less hassle. I don't like it but I also need people to actually receive my emails.

It's the semicolon and the phrasing together. I can't explain but after you use AI a little you just notice the way it 'writes'.

It's not about receiving spam, it's about legitimate messages you send getting filtered as spam.

> The domains didn't disappear; they moved.

I stopped reading at this point. I cannot emphasize how much I HATE this AI writing style.

Most countries have these no call lists but they are fairly useless as there is no enforcement.

I've even heard stories of some scammers exclusively using such lists, as they are pre-verified!

It's not "security theatre", it's blocking the absolute worst, most painfully obvious bots that. These bots also happen to account for a good 85% of bot traffic, so it makes sense to block them.

Yes, of course, if a real threat actor is doing things properly they'll be using residential proxies and legitimate user agents, but we're talking here about blocking "some of the bots" - mainly the script kiddies.

> Blanket IP range bans, in this day and age? Basically a proclamation of incompetence.

I disagree. If I'm getting problematic traffic from even a few of your IPs and they're in a DC/VPS range, I'm blocking it and moving on with my day.

But I suppose none of my clients services typically ever need to be accessible from such countries anyway.

That's fair enough.

I think it's a great article to be fair. We need more of this cheap and quick bot blocking. The fact the solution to unwanted traffic is often "use Cloudflare" is _not_ great for the internet, and nobody really actually likes deploying or managing ModSecurity. Its a nice middleground.

> Obvious proxy is obvious.

> if ($http_x_forwarded_for) {....

This may block schools and libraries that use content blockers. Often the internal client is left to make abuse tracking easier (or because the overworked admin didn't know they could turn it off).

It really depends on the term they're trying to rely on. We have the "red hand rule" in England and Wales that means that unusual and onerous terms will not be incorporated unless it can be expressly shown they were fairly brought to the parties attention.

That's a great idea. What do you use as your family password?

I had the exact same experience. Never used Facebook. Wanted to create a page for a product. Suspended. Did the face scan. Now they have my face and I'm still suspended. Absolute joke. Zuckerberg can go suck a fat one.

So much this. Everyone has their own idea of that the project should do and it's hard to explain that whilst that implementation is great for their specific use case, it's pretty shit for everyone else.

AI has just made this so much worse.

> My brain is melting because I can barely keep up with learning how to figure out if I'm even doing what I'm trying to do.

This is not a good thing. You should understand what your code does. Writing code nobody can understand is not a flex.

Except spellcheck is a reasonably foreseeable part of a word processor. An AI model isn't really a common component of a typical web browser.