john_strinlai

the whole process is talked about here (and the companion posts): http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignmen...

but no, in linux cve id is assigned "on a one to two week delay from when the fix has landed in a released stable kernel version."

severity on cve is a crapshoot most of the time, but especially with linux cna. i would not advise relying on them for decision making.

"We can not assign severity

[...]

So any group that attempts to give a “severity score” to a Linux CVE is lying to you, UNLESS they know exactly your use case.

ALWAYS ignore any attempt that groups such as NIST/NVD that purport to assign things like CVSS scores to a vulnerability. Those numbers are false and give companies a “fake sense of security”."

http://www.kroah.com/log/blog/2026/02/16/linux-cve-assignmen...

note that _any_ bugfix is assigned a cve, which makes for big numbers.

>“Due to the layer at which the Linux kernel is in a system, almost any bug might be exploitable to compromise the security of the kernel… Because of this, the CVE assignment team is overly cautious and assign CVE numbers to any bugfix that they identify.”

https://docs.kernel.org/process/cve.html

"number of cves" is a useless metric, especially when it comes to the kernel.

it will be $x + $y, never $x - $y.

>If a parent can't give consent for marriage, they shouldn't be able to consent to gender-affirming care, right?

my comment was about you incorrectly saying minors can "decide that they want to have sex change surgery" (later changed to puberty blockers), which they cannot just decide to do.

>How about puberty blockers?

an under-18 can not unilaterally decide to go on puberty blockers either.

i think its the sex part that results in kids, not the marriage part.

you have to draw the line somewhere, and 18 (or 21) is a common place to draw the line.

>but old enough to decide that they want to have sex change surgery.

an under-18 can not unilaterally decide to get sex change surgery in california.

>That being said, the law makes an exception for married couples.

okay, so we're back to marriage != rape.

if its not statutory rape before they get married, it doesn't suddenly become it afterwards.

and, as far as i am aware, it requires judicial approval right now. presumably, if it were a case constituting statutory rape, the marriage wouldn't be signed off.

this isn't about 9 year olds getting married to 30 year olds.

>I mean, it's still rape.

im not in support of under-18s getting married, but, what?

i've seen this exact comment before too.

imagine how nice the front page of HN would be if we just flagged the ai-generated articles instead!

>Do people normally report it or not?

if you are reporting it for moral/ethical reasons, but are worried that the company will have a shitty response, report it anonymously to the company and any relevant regulatory bodies.

but most companies, even without a bounty program, are happy to receive reports. a lack of a bounty program isn't really an indicator of how they will treat reporters, as most companies are ill-equipped to have a proper bounty program.

otherwise, and i know this is an unpopular opinion here, but i'm a big advocate of just posting the exploit publicly when a company makes it hard/scary to report it to them.

"backup camera", no hyphen or space, is at least popular enough to have a wikipedia entry.

https://en.wikipedia.org/wiki/Backup_camera

it is also used very regularly elsewhere, like government sites: https://www.nhtsa.gov/vehicle-safety/driver-assistance-techn...

or legal advice sites: https://thelegalguide.org/are-backup-cameras-required-all-ca...

or news sites: https://abcnews.com/US/cars-us-now-required-backup-cameras/s... https://www.reuters.com/article/business/consumer-groups-sue...

or automotive magazines: https://www.autoweek.com/news/a1892066/feds-backup-cameras-a... https://www.caranddriver.com/car-accessories/g44411856/best-...

it's safe to say that "backup camera" is perfectly acceptable.

i think the answer is simple: they're a kid, and microsoft bullied them.

it still seems exceptionally dishonest to claim that 3 sentences is 1/4 of the article.

>Microsoft had editorial control over this post, cutting sections and figures and reshaping how the impact is described before publication.

that is... not great. shame on microsoft.

its actions like that which shed light on why we get the nighmare eclipses of the world. pressuring a kid into handing over full editorial control of a disclosure is gross.

>then the last 1/4 go to talk about Tailwind's layoffs

how are you measuring length?

because tailwind is not mentioned until the very last paragraph, 1900 words into a 2000 word article. and it is talked about for 3 whole sentences.

it wouldnt be an HN thread without an immediate accusation of ai usage.

(ai or not, hn is supposed to be about curiosity and engaging conversation. reading a hundred of the exact same comment every day is not curiosity-piquing, nor does it facilitate good conversation)

i'm enjoying it enough that i would read more, do you have a recommendation of what i should pick up from him next? this was the first book of his ive read.

the fionavar tapestry by guy gavriel kay.

nearing the end. i've found it a bit complicated to follow in some spots (there are several 'main' protagonists and it switches between them without much warning or introduction) but overall it's scratched the fantasy itch.

(i suppose it's actually 3 books, but i have the omnibus version)

that was my understanding. i guess maybe they have evidence pointing to 5 distinct counterfeiting runs (of ~1MM stamps each) or something.

i know they like to throw more at the start for a better plea negotiation position, but 5 just seemed rather random here.

>Akram is charged with one count of conspiracy to defraud the United States and to make and sell counterfeit postage stamps, five counts of making and selling counterfeit postage stamp labels, and four counts of wire fraud.

i would love more insight into how they come up with the number of charges. why five counts of making/selling counterfeit postage stamp labels instead of 1 charge that covers all 5 million, or 5 million charges, etc.

you left out the best example of having no ability to shop around: internet.

do you want comcast or comcast?

im crying and throwing up everywhere. everything i use must be brutalist.

even seeing the linux penguin makes me want to punch my monitor and commit sudoku

i somewhat agree with you.

at the same time, it's really not cool for billions of dollars to be spent on research of how to best influence susceptible people (who would otherwise not piss it all away,) to piss all their money away.

ban the predatory advertising and maximally addictive interfaces and most people will be happy. you can still piss your money away if you want to. but it really shouldn't be one poor sap with an addiction vs. a trillion dollar industry trying to exploit that addiction.

>Not once has any of these predictions come true, the pace of progress has continued on it's exponential trajectory since ChatGPT first came to the public's attention.

do you think it will be exponential forever?

>I hear he can't drive; driving the boonies far from civilization is not that easy in the winter. He needs to buy a big shovel for the winter.

that's what helicopters are for.

-zillionaires, probably

>Anyone can burn/bomb a company and cause millions in damages. Doesn't mean they are worth that much

yes, that's my point.

and it absolutely extends to unexpectedly leaving. there have been plenty of times in my career that simply leaving without notice would have cost my company many times my salary.

mongodb ceo is not worth 6 billion dollars.