john_strinlai

>"Russian equivalent of HHS is now denying there was any accident at the lab at all."

ive seen this movie before

they don't get @ mentions, you're better off emailing hn@ycombinator.com

i am not sure why that analogy is more apt, but in any case, it doesn't change the point i was making.

it is not good to feel embarrassment about things you cannot control, provide no input to, and do not benefit from.

the more ive looked at this uceprotect site, the more i see how unhinged they are.

for example: "People with a brain would simply fix their systems after getting listed for abuse. Stupid losers are different." http://www.uceprotect.org/cart00neys/index.html

or

"This time, however, we have a premiere: A Woman. Actually, it reads more like a brat than a woman [...] If we were as emotional as you are and report you to our authorities, the handcuffs might click the next time you move your ass off the British Isles. [...] This means that they have heared that bullshit you spammed to them at times when you still slipped across the floor with your shit diaper. :-) [...]

Grow up and also try to grow a brain before you make a fool out of yourself, again next time.

Claus von Wolfhausen

Technical Director" http://www.uceprotect.org/cart00neys/2021-001.html

their main page has an iamverybadass quote, too: "WARNING: Do not play around here. You have no idea who we really are, and what will happen to you!"

i'm adding context to your comment.

the scale of the issue is significantly different and the resolution is significantly different (both in time and in money). that's important when comparing the situations.

highlighting those differences does not mean i think either situation is "good". one of them is "less bad" though.

i have no idea how that link relates to what i said or the part you quoted

i didn't make, consult, or otherwise have any input on that site. i do not use the site. i do not make money from the site. so i am not going to be embarrassed about it.

i think what they are doing is awful. but again, embarrassment implies some form of guilt, shame, mistake, or self-consciousness.

>I'm thoroughly confused on why someone would type this into a chatbot.

many people are using chatbots as personal therapists, a friend to vent to, a diary that provides feedback, etc.

>Difference is AI involves offloading most thinking.

i dont really think ai should be in most schooling, but calculators and computers also offload thinking. books offload memory.

i am angry at parts of the industry, and agree it can be healthy to express that frustration (in appropriate ways).

but i think taking on personal embarrassment for things you had zero involvement and get zero benefit from is not good.

0% of my comment is defending the industry.

i dont like a lot of stuff going on in tech. but it is not healthy to feel personally embarrassed about stuff i had literally no input and no control over, and receive no benefit from.

i dont know, this comes across as a bit self-important. when i cook or eat bad food, i am not embarrassed on behalf of the chef industry.

we all can only do so much. do the best you can and be proud of that. there's no need to take on the embarrassment or shame of a whole industry.

>Sustained releases cut a wild Aedes aegypti population in the Cayman Islands by 80 percent, and in a field trial in Juazeiro, Brazil by about 95 percent.

>At one time quite recently, Cloudflare was on Spamhaus's "Don't Route Or Peer" list.

it was only 2 /23's (only 1024 IPs, ASN14061 is 3,140,680 IPs), and was resolved without a monthly subscription in ~24 hours after being posted to the NANOG mailing list

https://lists.nanog.org/archives/list/nanog@lists.nanog.org/...

right now, they can apparently just spend $108/year and keep on spamming.

the whole process is talked about here (and the companion posts): http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignmen...

but no, in linux cve id is assigned "on a one to two week delay from when the fix has landed in a released stable kernel version."

severity on cve is a crapshoot most of the time, but especially with linux cna. i would not advise relying on them for decision making.

"We can not assign severity

[...]

So any group that attempts to give a “severity score” to a Linux CVE is lying to you, UNLESS they know exactly your use case.

ALWAYS ignore any attempt that groups such as NIST/NVD that purport to assign things like CVSS scores to a vulnerability. Those numbers are false and give companies a “fake sense of security”."

http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignmen...

note that _any_ bugfix is assigned a cve, which makes for big numbers.

>“Due to the layer at which the Linux kernel is in a system, almost any bug might be exploitable to compromise the security of the kernel… Because of this, the CVE assignment team is overly cautious and assign CVE numbers to any bugfix that they identify.”

https://docs.kernel.org/process/cve.html

"number of cves" is a useless metric, especially when it comes to the kernel.

it will be $x + $y, never $x - $y.

>If a parent can't give consent for marriage, they shouldn't be able to consent to gender-affirming care, right?

my comment was about you incorrectly saying minors can "decide that they want to have sex change surgery" (later changed to puberty blockers), which they cannot just decide to do.

>How about puberty blockers?

an under-18 can not unilaterally decide to go on puberty blockers either.

i think its the sex part that results in kids, not the marriage part.

you have to draw the line somewhere, and 18 (or 21) is a common place to draw the line.

>but old enough to decide that they want to have sex change surgery.

an under-18 can not unilaterally decide to get sex change surgery in california.

>That being said, the law makes an exception for married couples.

okay, so we're back to marriage != rape.

if its not statutory rape before they get married, it doesn't suddenly become it afterwards.

and, as far as i am aware, it requires judicial approval right now. presumably, if it were a case constituting statutory rape, the marriage wouldn't be signed off.

this isn't about 9 year olds getting married to 30 year olds.

>I mean, it's still rape.

im not in support of under-18s getting married, but, what?

i've seen this exact comment before too.

imagine how nice the front page of HN would be if we just flagged the ai-generated articles instead!

>Do people normally report it or not?

if you are reporting it for moral/ethical reasons, but are worried that the company will have a shitty response, report it anonymously to the company and any relevant regulatory bodies.

but most companies, even without a bounty program, are happy to receive reports. a lack of a bounty program isn't really an indicator of how they will treat reporters, as most companies are ill-equipped to have a proper bounty program.

otherwise, and i know this is an unpopular opinion here, but i'm a big advocate of just posting the exploit publicly when a company makes it hard/scary to report it to them.

"backup camera", no hyphen or space, is at least popular enough to have a wikipedia entry.

https://en.wikipedia.org/wiki/Backup_camera

it is also used very regularly elsewhere, like government sites: https://www.nhtsa.gov/vehicle-safety/driver-assistance-techn...

or legal advice sites: https://thelegalguide.org/are-backup-cameras-required-all-ca...

or news sites: https://abcnews.com/US/cars-us-now-required-backup-cameras/s... https://www.reuters.com/article/business/consumer-groups-sue...

or automotive magazines: https://www.autoweek.com/news/a1892066/feds-backup-cameras-a... https://www.caranddriver.com/car-accessories/g44411856/best-...

it's safe to say that "backup camera" is perfectly acceptable.

i think the answer is simple: they're a kid, and microsoft bullied them.