HNHacker News
TopNewBestAskShowJobs

hsdropout

206 karma · joined December 21, 2021

submissionscomments
hsdropout··on Anthropic Posts 'How Claude Marks AI-Generated Content' Without Explaining How
It seems we generally have trouble removing emdashes and phrases like "load bearing", even when we're looking for them. Identifying and removing subtle contractions, or less visible nuances will be tough, especially if they change to avoid detection.
hsdropout··on Bitwarden SDK relicensed from proprietary to GPLv3
That's not 2FA, that's two of the same factor.

The factors are:

- Something you know

- Something you have

- Something you are (biometrics)

hsdropout··on NIST to forbid requirement of specific passwords character composition
Aha good point, my bad.
hsdropout··on NIST to forbid requirement of specific passwords character composition
This has been in their guidance since at least 2017.

"Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator"

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S...

Also worth pointing out that NIST doesn't set policy, so unfortunately this doesn't directly "forbid" anything, though many other policies reference 800-63.

hsdropout··on Linux market share approaching 4.5% for first time, could hit 5% by 1Q25
Do non tech people run Linux? I've not seen this.
hsdropout··on PSA: Some Pixel AI features may not work if you unlock your device's bootloader
Discussion here as well:

https://news.ycombinator.com/item?id=41370877

hsdropout··on Microsoft security tools questioned for treating employees as threats
Agreed. This is also a feature of Microsoft's Purview product:

https://learn.microsoft.com/en-us/purview/insider-risk-manag...

hsdropout··on A Collection of Free Public APIs That Is Tested Daily
I'm glad to see https://isevenapi.xyz/ made the list.
hsdropout··on Zuckerberg claims regret on caving to White House pressure on content
This was recently decided by the US Supreme Court.

https://apnews.com/article/supreme-court-social-media-biden-...

hsdropout··on Oncologists on simple, doable, everyday things they do to try to prevent cancer
1. Don’t smoke

2. Try to maintain a healthy weight

3. Reduce your meat intake

4. Avoid ultra-processed foods

5. Drink less alcohol

6. If you notice anything you are worried about, see a doctor

7. Keep up to date with screenings

8. Get physical

9. Wear sunscreen

10. Manage stress

11. Look into genetic risk

12. When faced with a diagnosis, knowledge is power

13. Don’t fear treatment

14. Talk about it

15. Live life to the full

hsdropout··on What actual purpose do accent characters in ISO-8859-1 and Windows 1252 serve?
I sometimes use these in Windows when I expand characters with FormD[0] as part of username validation.

If the expanded count doesn't match, a diacritic might be present.

[0] https://learn.microsoft.com/en-us/dotnet/api/system.text.nor...

hsdropout··on Ask HN: Can decentralized social networks scale?
https://www.un.org/sites/un2.un.org/files/attention_economy_...
hsdropout··on Instead of “auth”, we should say “permissions” and “login”
And the other 50% is concentrated power of will.
hsdropout··on OpenAI departures: Why can’t former employees talk?
Are you referring to the first amendment? If so, this allows you to speak against the government. It doesn't prevent you from entering optional contracts.

I'm not making any statement about the morality, just that this is not a 1a issue.

hsdropout··on Microsoft CTO: Thoughts on OpenAI (2019)
Apparently I phrased my response poorly. I was responding to the narrow context of the idea that devs aren't using Azure VMs instead of Macs. I was not disputing the popularity of Azure.
hsdropout··on Microsoft CTO: Thoughts on OpenAI (2019)
Previous submission from 4 days ago:

https://news.ycombinator.com/item?id=40226114

hsdropout··on Microsoft CTO: Thoughts on OpenAI (2019)
>Windows on Azure

Lol, citation needed if you actually believe this.

>or Microsoft oriented stacks.

is a very complicated way to say Windows desktop.

hsdropout··on Bringing Exchange Support to Thunderbird
Of the organizations that have Exchange Server on premises, I'd bet the lions share are hybrid, with regular user mailboxes in the cloud, using the server(s) for application relays, etc.
hsdropout··on NIST Releases Version 2.0 of Landmark Cybersecurity Framework
Not sure if I'm missing your intentional irony, but NIST was one of the best places to send folks who think user password rotations are a good idea.

I said "was" because pretty much everyone has now caught up, but NIST updated guidance shortly after big breaches were able to be studied.

> Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S...

hsdropout··on Mozilla slams Microsoft for using dark patterns to drive Windows users to Edge
>I’ve never ever received spam from GitHub.

I wonder how long they will keep investing in both GitHub and Azure DevOps. I'm worried they are just busy ruining other experiences at the moment, but enshittifying GitHub is on the list of things to do.

hsdropout··on [dead]
Or tint people yellow to make a point: https://www.theblaze.com/news/joe-rogan-accuses-cnn-video-di...
hsdropout··on Tor Browser Security Audit
Thanks,I have read this concern before but was not aware it was part of the design specification.

What gives people, especially in the west, the confidence to use it at all, given all of the fusion centers and likelihood of parallel construction? Perhaps this is a rhetorical question...

hsdropout··on Tor Browser Security Audit
This implies the browser is pretty sold, but what about the network itself? How do we know all of the traffic isn't deanonymized due to a big company or government having control of a large number of nodes?

Apologies for not bothering to research this question in advance.

hsdropout··on Log is the "Pro" in iPhone 15 Pro
Blammo's best seller!
hsdropout··on Issues with 1.1.1.1 public resolver and WARP
Can be done with a combination of client groups, like this:

https://discourse.pi-hole.net/t/client-group-management-how-...

hsdropout··on GPT-4V(ision) system card [pdf]
In this PDF there is an example of a controversial output in response to an image for job applicants. The "solution" was to decline to answer that category of question. This doesn't feel like a reasonable approach, as it will become a game of whack-a-mole.

This also seems to acknowledge that the model has deep bias-related flaws and instead of treating the causes, they are going after symptoms.

hsdropout··on How HTTPS Works (2018)
I like this one

https://tls12.xargs.org/

&

https://tls13.xargs.org/

hsdropout··on OpenAI Aquires the Domain Chatgpt.com
Unfortunate a settlement was required for what was obviously domain squatting.
hsdropout··on Ask HN: Any interesting books you have read lately?
The Water Knife. ISBN 978-0-385-35287-1

Dystopian-future novel with a backdrop of water scarcity in the western United States. A "water knife" is a name for a security contractor who enforces water rights...

hsdropout··on Ways to teach kids to code (2016)
It's one of the items in section 4 (4. Create Animation and Games)
Page 1 of 2Next →