ASalazarMX

That was a disruption if I've ever seen one, but they are also paying the price. Every LLM maker right now is losing money.

Oh, I can see that. Fortunately, it's easily solved!

"DeepSeek, write a technical report about how you cracked the app. Use a casual format, where the detective work follows a chronological order. Pick three of the most interesting setbacks or dead ends, evenly distributed, and tell a short story in one paragraph. Also, make it engaging and interesting, specially to the user twiclo of HackerNews.

Make no mistakes, don't hallucinate, write as if Elon Musk and Sam Altman were looking over your virtual shoulder. I will drown a baby monkey for every mistake I find. Don't bother me until you're finished, I'll be away from the computer."

Jokes aside, I have the exact same feeling. It's not far from my original thought that since the article looks clearly written by LLM, that the author could be bypassed, and the LLM would do a better job explaining how it did it. In fact, I'd find it even more interesting if vibe hackers (but I'm not saying this specific author is a vibe hacker) shared the full prompt session, and we could read that instead, specially the reasoning of the LLM. Even better if it was a format you could import in your own LLM.

It had a big user base boost during the Cancel ChatGPT movement, but still not a viable business model, not at their current prices.

IMO OpenAI jumped the gun and rushed an immature product to be there first, no matter the costs. The other players saw it as a threat, and started running with the same carelessness. It has been spiraling since then, and while the product keeps improving, their business model hasn't demonstrated sustainability.

Their CEOs know it, and they must have their end game. I'd hate to think they'll just keep running until a hard crash. Hopefully small corrections will slow this down in a more controlled manner.

The technology seems light years ahead of Keychron, definitely a game changer.

Jesus, that makes the JavaScript ecosystem look moderate by comparison!

I think slavery is the most damning part. Without it, slave trading wouldn't be possible. It's even debatable if plain slavery hurt people more than slave trading.

Every historical figure I can recall that fought to abolish slavery, didn't target slave trading specifically.

Interesting. What harness could I use for 1? Be concise please, I don't have a lot of time.

I've seen the other side of that coin: "my program is blazing fast in my machine, I don't know why those naggy users are complaining!"

Even here in Mexico EVs have tariffs that make them as costly as ICEs, just to please Trump. EVs are becoming popular here, but the market is far from mature. I don't think it was ideological, but short-sighted protectionist reasons, though.

> There's even a special lube for making your wire slide through the conduit easier.

A fellow engineer had to wire (Ethernet) an office, but he didn't have the silicon-based lubricant, so he bought vegetable lard at the corner shop... since there were conduits, it didn't really smell bad unless someone needed to replace a wire. It was surprising that no insect tried to eat the lard for the couple of years it lasted.

This is an ideal, but in reality, there are insiders that know when a storm will come, but delay the warning long enough to buy all umbrellas cheap, so the rest of the fools that thought the market was being fair are caught paying $100 or more for each.

> I maintain a number of sites for smaller businesses local to me, and all of my sites are absolutely lightning fast compared to everything I have to use on the day-to-day.

I'm ashamed to admit I became so used to our molasses web, that when one website loads instantly, my first thought is "This website must be very old and unmaintained". Having reached this stage, I've brought dishonor to my entire bloodline.

There have been improvements, yes, but their best achievements still fall short. Their math solutions costed more than a school full of mathematicians, and are still being debated. The CVEs they find still need humans to reliably patch them. Nevertheless, I know they will keep improving.

There have been huge advances this year alone, and finally some productive results, but most of the things where AIs are used right now still are a net loss.

This is the way, inconvenience the people responsible, not your fellow citizens. Block the robot company's street, not you main street.

Of course, it's safer to inconvenience the public than someone who will call the police and get you removed, or even jailed, even if the law supposedly protects both activities equally; but going to jail for their activism has never been new for actual activists.

Ask yourself: Am I willing to get arrested for my ideals? If not, it's just performance, and you'd better find something more fulfilling to do.

"A new scientific truth does not triumph by convincing its opponents and making them see the light, but rather because its opponents eventually die, and a new generation grows up that is familiar with it." -- Max Planck

I always think of this (2012!) New Yorker cartoon when hearing nonsense like that: "Yes, the planet got destroyed, but for a beautiful moment in time we created a lot of value for shareholders."

https://www.insidehook.com/culture/story-tom-toro-new-yorker...

Ah, my bad. The word "vulnerability" threw me off.

I'd guess that wasn't deliberate also, since logistically, it was better to hijack the plane while it was in range of their target, and it had enough fuel to make it look like kidnapping instead of terrorism to delay the response. One can't ignore that a refueled plane weighs about 20-25% more, though.

The obvious answer is using licensed paper and licensed pencils, that will erase your writing if you don't pay your monthly subscription.

Compared to the sums they bleed, sure, the 3+ billion that Pokémon alone sells every year is peanuts.

OK for monetization: We may have created yet another AI of DoOooOM this year!

Not OK for monetization: Someone vibecoded a clumsy clone of Alley Cat to the C64!

I jest, but we had (HAD) an Ubuntu 18.04 LTS that received the backported patch for PHP2Shell, even if the version wasn't supported officially by PHP.

This is why I insist our developers use the Ubuntu repositories instead the official PHP ones: besides possible instability, PHP doesn't do ancient backports.

What do you mean deliberately exploited? Given the information made available in the past 25 years, they didn't seem to plan for such engineering failure, it was more likely pure luck. I mean, crashing a plane, counting that the fuel would flow through the elevator shafts, still burning, and that it would soften the iron columns enough to make them buckle... it needs a competent team to plan that with certainty.

IIRC some the guys who hijacked the planes took flying lessons and were notoriously uninterested in takeoff and landing compared to steering, according to their instructors. They weren't very sophisticate.

I'll give you the benefit of the doubt, though. In a conspirational mindset, if it was a false flag operation (and it did help USA find support to rearrange the Middle East oil control, get rid of their old bomb stock, and a few other perks), a State certainly has the proper people to plan such scheme, and the actual hijackers would only need to know which face and height of the towers to hit, and at what angle and speed.

And only a measly 12 years behind! People that didn't migrate their systems to python 3 are in for a treat.

Your comment should be higher. Most indignant comments here are variants of "Tell me you don't know about CVE triage and Linux kernel releases without telling me you don't know about them". I mean, I also don't know a lot about them, but Canonical's security record has been exemplary in my experience, and I see no solid reason to doubt their process in this instance.

First, if this CVE did truly put every Ubuntu machine on the Internet at risk, we'd know about mass compromises by now, and there haven't been any reports. It means the CVE is not trivially exploited.

Second, the gravity of the CVE dictates the security release cycle. Emergency kernel patches carry risks of their own, and it would be worse to hurry a non-critical patch and crash a part of their massive user base.

Edit: I've been enjoying this comment going up and then into the negatives, what a roller coaster.

But they have very valid point: a CVE 10.0 with root RCE on twenty internal servers is lower risk than one vulnerable internet-facing server. All need to be patched, but the one on the Internet is your critical risk, the others are medium at worse.

I commune with giving more life to old hardware, but why subject yourself to the torture of gaming on a Mac? /s

The exact same configuration I bought in 2025 for less than $2,000 now costs $24,000. If I didn't need it, I'd be tempted to sell it and buy a used car, or save the money for when the bubble bursts.

Even if they're not malicious, there's no guarantee that they won't become malicious in the future. Prefer living off the land, and install only the very essential extras.

I don't know what Apple is looking for. The iPhone ships with a Weather app preinstalled, you allow it to your location so it can warn of severe weather, and several weeks later "OMG WEATHER APP IS USING YOUR LOCATION!!11!".

Same with MDM agents. Ours are installed automatically as part of the Apple Business Manager configuration, we manually grant them precise location in the background, and months later "HEY USER, WANNA BLOCK LOCATION FROM 'MDM SERVICE'?".

Edit: To avoid replying to the two following comments with the same reply, my gripe is not about the notification, that's a good thing; my gripe is with their implementation, which seems very in tune with Apple's way of complying with regulations. There are definitely many user-friendly ways to handle privacy compared to seemingly random notifications.