esnard

Nice article! Thanks for experimenting and writing it.

I'm curious if some of the animals / vehicules might force the models to use more tokens than others, and I could not find the token counts in the shared data, is it possible to publish it please? :)

Could this be the correct link?

https://arxiv.org/abs/2412.06056

Also discussed here: https://news.ycombinator.com/item?id=48307237

Nice find! Have you contacted the vendor to check if they're planning a fix?

I missed that, thanks!

Wow, is it related to the "make me a sandwich" XKCD?

https://xkcd.com/149/

No more vulnerabilities then I guess!

I spoke to a few people living in Iran, and they definitively confirmed that 100+ people died. They obviously don't have the exact number, so that 36,500 figure might be exaggerated, but there are more than enough videos online to verify the 100+ claim if you really want to.

If you're using the same domain for each of your email address, HIBP has a domain-wide search feature which is free (but you need to register to validate your domain)

5894 means that the password appeared 5894 times in the dataset.

5894 is not the password associated with the hash.

Link for anyone willing to contribute: https://github.com/bagder/http3-explained

Looks unmaintained, though.

I know nothing about the Ruby ecosystem, but I really do appreciate that someone cares that much to mediate this mess. Thank you.

> This feature is available in English for users in the US, Canada, UK, and Australia, and is being introduced gradually to ensure great performance and quality.

Not available in Italy yet.

Weird. The file was cracked in May 2024, while the password had appeared in a database leak which was added in HIBP (and thus pretty much public) back in October 2017.

Unsure why it took the community so long to crack the file.

Note: one of the founders of the World app is Sam Altman.

Related links:

- Vulnerability Disclosure FAQ ( https://googleprojectzero.blogspot.com/p/vulnerability-discl... )

- Reporting Transparency ( https://googleprojectzero.blogspot.com/p/reporting-transpare... )

Cloudflare publishes a "crawl-to-refer" ratio, which can be used to estimate the traffic from LLMs:

https://radar.cloudflare.com/ai-insights#crawl-to-refer-rati...

Do you have a link talking about those Facebook's recent tricks? I think I missed that story, and would love to read an analysis about it

It's actually 100 microyears!

If anyone else is confused, a microcentury is apparently around 52.6 minutes long.

I've updated (Firefox 138.0) and the feature doesn't seem to exist in my browser, even when carefully reproducing the steps in the video / tutorial.

From the support page: https://support.mozilla.org/en-US/kb/tab-groups

> This feature is experimental and is being introduced to the Firefox user base through a progressive rollout. It may not yet be available to all users.

I'll wait a few more days then I guess?

This sounds like good news, thanks!

Do we already have an ETA for the ENISA vulnerability database?

Announcement post: https://blog.cloudflare.com/d1-read-replication-beta/

Is this the VPN you're talking about?

https://www.reddit.com/r/Windscribe/comments/1jovk03/weve_he...

Yes. I didn't escape the asterisks before posting, and HN replaced ** with \* without me noticing.

Just tested up to 2 * 1000000, and it indeed looks like that's all of them.

To be fair, the article doesn't even contain the word "prove".

Back in 2018, I was wondering how that paper was still relevant, considering all the new security features added to web browsers.

The consensus seemed to be that it wasn't that impactful anymore (if it ever was).

https://security.stackexchange.com/q/185435/76718

Just scripted something to find them all:

    U+01C5: Dž (lower dž, upper DŽ)
    U+01C8: Lj (lower lj, upper LJ)
    U+01CB: Nj (lower nj, upper NJ)
    U+01F2: Dz (lower dz, upper DZ)
    U+1F88: ᾈ (lower ᾀ, upper ἈΙ)
    U+1F89: ᾉ (lower ᾁ, upper ἉΙ)
    U+1F8A: ᾊ (lower ᾂ, upper ἊΙ)
    U+1F8B: ᾋ (lower ᾃ, upper ἋΙ)
    U+1F8C: ᾌ (lower ᾄ, upper ἌΙ)
    U+1F8D: ᾍ (lower ᾅ, upper ἍΙ)
    U+1F8E: ᾎ (lower ᾆ, upper ἎΙ)
    U+1F8F: ᾏ (lower ᾇ, upper ἏΙ)
    U+1F98: ᾘ (lower ᾐ, upper ἨΙ)
    U+1F99: ᾙ (lower ᾑ, upper ἩΙ)
    U+1F9A: ᾚ (lower ᾒ, upper ἪΙ)
    U+1F9B: ᾛ (lower ᾓ, upper ἫΙ)
    U+1F9C: ᾜ (lower ᾔ, upper ἬΙ)
    U+1F9D: ᾝ (lower ᾕ, upper ἭΙ)
    U+1F9E: ᾞ (lower ᾖ, upper ἮΙ)
    U+1F9F: ᾟ (lower ᾗ, upper ἯΙ)
    U+1FA8: ᾨ (lower ᾠ, upper ὨΙ)
    U+1FA9: ᾩ (lower ᾡ, upper ὩΙ)
    U+1FAA: ᾪ (lower ᾢ, upper ὪΙ)
    U+1FAB: ᾫ (lower ᾣ, upper ὫΙ)
    U+1FAC: ᾬ (lower ᾤ, upper ὬΙ)
    U+1FAD: ᾭ (lower ᾥ, upper ὭΙ)
    U+1FAE: ᾮ (lower ᾦ, upper ὮΙ)
    U+1FAF: ᾯ (lower ᾧ, upper ὯΙ)
    U+1FBC: ᾼ (lower ᾳ, upper ΑΙ)
    U+1FCC: ῌ (lower ῃ, upper ΗΙ)
    U+1FFC: ῼ (lower ῳ, upper ΩΙ)

I just discovered that they discontinued their VPN back on June 20th.

Somehow, I am not surprised.