HNHacker News
TopNewBestAskShowJobs

pmlnr

11,649 karma · joined October 13, 2014

Junior web dinosaur.
submissionscomments
pmlnr··on Parley: Federated, decentralised chat that speaks plain IRC
These days complicated and/or complex == hard == bad.
pmlnr··on There are no "rogue" AI agents
This.

Jail the C levels. They are the legally responsible ones.

pmlnr··on There are no "rogue" AI agents
Everything so far is pointing to the conclusion that you can only set ONE goal. Exactly one.

But let's assume not. If you want things like "do not break out of sandbox" - have you defined what the sandbox is? Eg. "never, ever leave the IP range 10.0.0.0/8" would be a bit more precise, but technically using a proxy bypasses that limitation as the system itself never left 10.0.0.0/8.

See, it's a tad bit hard to define the rules properly.

Which is why Wish, the spell, should really be avoided in D&D. It's the same problem: it's up to creative interpretation.

pmlnr··on There are no "rogue" AI agents
Want to? Of course not.

Must you? By all means.

If you can't take the risk, don't use agents. Period.

pmlnr··on There are no "rogue" AI agents
You set a goal. Agent will do goal. The rest doesn't matter: the instructions, the "guardrails" etc. The agents are not smart, they don't reason, they don't think, there are no morals, no ethics. Nothing will prevent not doing the goal because that is the set goal. It's a statistical model that will "justify" anything to do X.

I'm finding it mind bogging how this is not clear for everyone.

pmlnr··on OpenAI agents tried to bruteforce a UN website's API fields
"Regulate what models are allowed"

It's already a "regulation" that one shouldn't steal, enter a private property without the right to do so, etc, yet we have a lot of these crimes.

I could see the UK trying to set a law on ehat models are allowed, only to learn again, that the UK law doesn't apply everywhere, but as long as you can rent compute in a foreign country the whole idea is dead.

pmlnr··on Breaking Up with Google Play: Why Conversations Is Now Free
Given what google search/AI/data tracking is, there should be no shame in using their infra for free. Hell,it should all be free by default.
pmlnr··on Revealing the details of how OpenAI agents hacked Hugging Face
The part I don't understand is how the excess traffic not triggered alarms on the hugging face side, or the url shorteners used, or on anything that was touched in the process.

Nothing got overloaded, no unexpected CPU or IO use? Did it blend into the normal traffic somehow?

pmlnr··on Claude Code reads AGENTS.md only when telemetry is on [fixed]
Urm... no tests caught this? How?
pmlnr··on WordPress: Unauthenticated path traversal leading to conditional RCE
It's wix and squarspace now.
pmlnr··on WordPress: Unauthenticated path traversal leading to conditional RCE
WP won by having a very simple but flexible admin page.

Drupal admin was not for humans back then.

pmlnr··on WordPress: Unauthenticated path traversal leading to conditional RCE
The internet was different when those two were conceived.
pmlnr··on I don't want to read what you didn't write
> Reading a document like this isn’t just difficult—it is punishing.

At this point I can't tell if it's a pun or the anti AI article is AI written as well. This sucks.

pmlnr··on I don't want to read what you didn't write
> For many writing is painful and the machines ease the pain

Along with removing the possibility for them to ever actually learn to write better.

This is not a good thing.

pmlnr··on A restored PDP-11/83 serving this page on 211BSD Unix
I will never understand why, but the story of Reddit Place ( https://web.archive.org/web/20170409173246/http://sudoscript... ) certainly supports this :(
pmlnr··on AI-generated posters don’t have to be horrible
It's the typography. I'm yet to see a single AI generated thing where the typography is not distorted. The examples generated are no exception, everything is just a bit off.

It's not horrible, no: it's off enough to make one feel uneasy looking at it without being able to pinpoint the problem.

pmlnr··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP
Maemo.
pmlnr··on My temporary PHP fix from 2014 has nearly 20M installs. Today I'm deprecating it
Read the linked entry.
pmlnr··on Apple Reference Image: A New Approach for Verified Photography
At this point it'd be easier to return to film.
pmlnr··on “Tweet” and the bird logo apparently enter the public domain
Microblogging.

That's the original term.

pmlnr··on Nitter and XCancel resume service after legal advice
There wasn't anyone there.

I made a site, I put it out there, because as a 14 year old, it was fantastic I could make completely mine and nobody else's at all. That was the drive.

pmlnr··on We have a year to fix security everywhere
> The problem is no one ever built one that works for normal people.

https://getpublii.com/

pmlnr··on GamersNexus and LG: Or why rooting your TV is a bad idea
> True, but rooting the device de-facto means breaking the trust-chain of the OS.

Like every single Microsoft laptop out there does so? Think a bit harder before sentences like this, please.

pmlnr··on GamersNexus and LG: Or why rooting your TV is a bad idea
> Rooted devices make devices unpredictable.

you/we/me not having root while, for example, Google Play Services does on invalidates everything you said.

pmlnr··on GamersNexus and LG: Or why rooting your TV is a bad idea
> If you root or jailbreak your devices, you've, by their very nature, broken their security.

Wow. Please stop spreading things like this.

Not having root means not owning a device you paid for and have in your home.

pmlnr··on We have a year to fix security everywhere
"First step"

Nobody said it's enough, but it's a start.

pmlnr··on We have a year to fix security everywhere
Here's an idea: as a first step, simplify everything, and make sure you're aware how your stack works, and what it imports.

As an example: WordPress is a horrible thing, but the core has been through so much, that it's suprisingly secure. Then plugins and themes come, and whoosh, the security is gone.

We need a new KISS: keep it simple, stupid, secure.

pmlnr··on Nitter and XCancel resume service after legal advice
> What are incentives for the average person? Their logic seems straightforward: they want to be where their friends are at

This is some sort of absolute, fundamental difference between the early web and now, at least how I experienced it as a teen in the late 90s in Hungary. Back then I made a site, because you wanted to make something of my own, in my style, as I wanted. There was nobody else online from my friends, and I made new friends online. I actually found my age people on ICQ, within the same subculture.

This "oh my friends are there" approach is what destroys everything. More precisely the people who can't decide for themselves.

pmlnr··on Nitter has more working instances than before the takedowns
For starts, there's no such thing as Twitter any more, and hasn't been, for years.
pmlnr··on Creepy Crawlies
https://petermolnar.net/article/asn-blocking-freebsd-pf-ngin...

It's not the most sophisticated thing.

Page 1 of 34Next →