robinpie

Awesome!

The author frames this as "either accept this highly counterintuitive result, or take it as a reason to doubt materialism, or find a principled criterion that excludes entities like this" but honestly this doesn't really strike me as highly counterintuitive

claude code feels mildly shitty to use in the way that every other vibe-coded-project-got-out-of-hand project does, which is like, not that bad, but it's fucking ridiculous for a 2 trillion dollar company's main companion product

claude code feels mildly shitty to use in the way that every other vibe-coded-project-got-out-of-hand project does, which is like, not that bad, but it's fucking ridiculous for a 2 trillion dollar company's main companion product

I really appreciate seeing a tempered take that's not literally denialist about current capabilities.

nope, it really is assetnote's intentional testing going to the wrong target

Yeah, I'll try to do this, but I can't find anything better than the generic contact form.

I'm aware how much crap there is on the Internet, I just think the specific nature of this (legitimate commercial vuln scanner thinks I'm Tesla) is funny

pool-ntp.tesla.com --CNAME--> pool.ntp.org --GeoDNS--> thousands of possible servers, biased heavily by user location

Oh absolutely, I just think the specific nature of this (legitimate commercial vuln scanner thinks I'm Tesla) is funny

Oh absolutely, I just think the specific nature of this (legitimate commercial vuln scanner thinks I'm Tesla) is funny

I thought about trying this, but MPIC makes it very very very difficult (the round-robin has some geolocation magic baked in regarding what server it connects you to).

Yes, they should absolutely be using a vendor zone instead of a CNAME under tesla.com.

It's HTTP requests, not NTP requests, and the volume isn't the problem, it's that Assetnote is sending live exploit payloads /at all/ to a stranger on Tesla's behalf

(OOP here). I wonder if switching my replies from 299 to 200 OK would be enough for some of them.

they say on Hacker News

If you interact with Claude like this and ignore legitimate issues it flags, no wonder you have a bad experience.

You can use pretty much anything except hardcoding pool.ntp.org itself, including individual servers in the pool. You don't have to be a specific stratum or anything, and the monitors are comically generous with time accuracy (+-100ms)

funny how we got the ultimate vindication of DWIM

So excited about this. Writing a real new web browser is a titanic project and Ladybird is making amazing progress

Stuff like smart TVs always go in their own VLAN on my home network. Not because I don't trust the manufacturer, but I cannot be bothered to babysit some Android device on my LAN that I'll keep using years after end-of-support.

Yes!! I am a case of this!

I started on Scratch when I was 7 years old, and although I'm not mainly going into programming, I'm very passionate about IT infrastructure and cybersecurity. I absolutely credit Scratch for my interest in computers and systems. I'm one year away from graduating college in IT and am currently working in IT. https://dreamstation.systems/professional/

Feel free to ask me anything

do you think we'll go a full year without a new haiku lol

Wow! Thanks for the note.

Oh yeah absolutely

> A lot of this feels like a requiem for the days when the only people on the Internet were "high-computer-skill" type folks.

FWIW I (writer of blog post) am 21 years old and just a bitch lol

holds up spork

I always thought the entire concept of even password resets was absurd. Email is a huge SPOF for basically everyone.

If you lose your password or 2FA, you should lose your account, too bad so sad.

The network electrically incompatible with Excel:

https://old.reddit.com/r/sysadmin/comments/9si6r9/postmortem...

https://old.reddit.com/r/sysadmin/comments/9si6r9/postmortem...