HNHacker News
TopNewBestAskShowJobs

ortekk

286 karma · joined October 27, 2016

submissionscomments
ortekk··on How Trail of Bits helps verify the integrity of Signal chats
They will allow registering without phone number as a paid option soon.
ortekk··on Show HN: We post-trained a model that pen tests instead of refusing
Reminds me of a time when Tailscale cofounder went on a rant about how big bad AWS charges too much for bandwidth, and his solution was to send that money to Tailscale instead
ortekk··on GLM 5.2 Is Out
With deluge of Chinese models popping up recently, I believe there's a few issues one needs to evaluate before deciding to use these models:

- Ethics. As known, ou American frontier AI companies are incredibly ethical. And I have yet to see any interviews or blog posts by Chinese companies where they talk about how they are ethical, or at least credible HN comments about it.

- Safety. Do they covertly sabotage or at least refuse to answer questions that could help cyber- and bioterrorists in their nefarious purposes? What about ML-related questions that could help terrorists create AI models without guardrails?

- Child safety. This is especially important with "free for all" open-weight models, most of which are Chinese (ever think about why that's the case?). How are we going to do age verification and KYC with models that anyone can just download on their computer?

- Intellectual property theft. How can we be sure that no output of our American frontier AI models was used while training these Chinese models?

Frankly, there's a plethora of other issues I don't have time to get into right now. Personally, I believe distribution of Chinese models in the US should be paused until they are required to submit models to the government for review and evaluation, to make sure they are made to Anthropic/OpenAI standards.

We need legal grounds for that.

Write to your congressman, congresswoman or congressperson and urge them to stop proliferation of dangerous non-American intelligence. This is a matter of national security and needs to be acted upon as soon as possible, preferably before IPO.

ortekk··on Next month, saved passwords will no longer be in Microsoft’s Authenticator app
It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation

[0] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

ortekk··on SpaceX is now building a Raptor engine a day, NASA says
Move fast and break things
ortekk··on Remote code execution in cdnjs of Cloudflare
$0. Their page on Hackerone is a "Vulnerability Disclosure Program", not "Bug Bounty Program".
ortekk··on Corsair Gaming S-1
Their keyboards, while pretty, are made of cheapest ABS plastic. One of my keys became stuck just 2 months after the purchase, because of the crack on the keycap fitting. Corsair also refused to replace it.
ortekk··on How Is NordVPN Unblocking Disney+?
Well, I just verified this article's claims with this curl request: curl --head -H "Pragma: akamai-x-get-client-ip" "https://www.disneyplus.com"

It returns different IPs for every request, and these IPs do look like residential ones.

ortekk··on Porting my website to Workers Sites and Zola
You don't have to worry about cache rules, but what about your bill with Cloudflare?

5$/month plan is kinda open ended, you pay for each request above included in the plan (0.5$ for 1 million requests)

With a high-perfomance language like Golang for example, I could write a script that's making 500req/second to your site. That would cost you 20$/day.

With Github Pages it wouldn't cost you anything (or they might disable your page if it costs too much bandwidth, not sure)

ortekk··on OnionShare 2 adds anonymous dropboxes
See also Firefox Send - https://send.firefox.com/

Files are encrypted and then uploaded to Mozilla servers. Links automatically expire after some time.

ortekk··on Problem solving with Unix commands
If you are using python in your pipeline, might as well go all in!

  from pathlib import Path


  all_possible_filenames = {f'{i:04}A.csv' for i in range(1,10)}

  cur_dir_filenames = {Path('.').iterdir()}

  missing_filenames = all_possible_filenames - cur_dir_filenames

  print(*missing_filenames, sep='\n')
ortekk··on Why JWTs Suck as Session Tokens (2017)
Then why not just use "refresh token" as a session token?
ortekk··on I got locked out of my Google account for a month
My AdWords account got locked a few years back. It was my first attempt to try AdWords on my website. I've loaded around $20 and it almost immediately got locked (not a single ad was shown/clicked). I could never unlock it or retrieve my money from it. So Google has my 20 dollars now.
ortekk··on GPUs Are Now Available for Google Compute Engine and Cloud Machine Learning
Out of curiosity, can you... run video games with it?
ortekk··on Launch HN: RankScience (YC W17) – Automated Split-Testing for SEO
That looks great! How do you automate google's rank checking? Do you use proxies/swarm of VPS's?
ortekk··on Introducing ProtonMail's Tor hidden service
I wish ProtonMail would offer more email aliases with its paid plans - credentials reuse is what often allows to snoop on someone's online identity. That would really boost its value in terms of privacy.
ortekk··on Lessons from 3,000 technical interviews
Could you please elaborate? It looks like this program is only for people that already have an CS-related degree.

What courses are you taking?

ortekk··on Google’s former happiness guru's three-second brain exercise for finding joy
Which one would you recommend?