HNHacker News
TopNewBestAskShowJobs

pluto_modadic

756 karma · joined December 26, 2022

submissionscomments
pluto_modadic··on Tailscale SSH: Investigation and remediation update
no, it is not enabled by default.
pluto_modadic··on Tailscale SSH: Investigation and remediation update
isn't the other part of this that you'd have to enable the SSH part per node? it's not like the tailscale control plane can uniformly turn that on.
pluto_modadic··on (Post-Quantum) Cryptographic Right Answers
Okay - so... they're saying... don't use p384? :3
pluto_modadic··on Talorys – A self-hosted personal AI agent on Cloudflare's free tier
my line for "self hosted" isn't "must be on my own hardware", but "must be on my own linux VPS"
pluto_modadic··on Unikernels were hard. key word: were
if you enforce user input to specific shapes... and only have certain system calls... I think a unikernel version of a hackernews style site really wouldn't have RCE... especially if you build in KSLR / memory tagging in the unikernel security model...
pluto_modadic··on I Found a $90k Remote Code Execution Vulnerability in Google
handing clients access to an LLM gets them beginner level code, easily. same with beginner level exploits. an RCE against google is not a "beginner level exploit". If you've seen AI generated code, I can tell you that AI generated security findings also have that "beginner" smell. an expert who knows what they're doing has to drive them to look at the right places, and use the experts preferred method.
pluto_modadic··on SNL Weekend Update: Anthropic CEO Dario Amodei on A.I.'S Threat to Humanity [video]
the idea of a caricature is to exaggerate the features someone is most insecure about. That's what Spitting Image is.
pluto_modadic··on AI Driven Testing
Some assembly required.
pluto_modadic··on Google is making private AI practical with homomorphic encryption
they could have gone with an oblivious transfer approach (where it's working on what looks like multiple problems at once, you don't know which)
pluto_modadic··on Text AI watermarks will always be trivial to remove
1. score by the past paragraph (this is also how the verifier checks without needing a GPU, it takes the previous length of text)

2. same answer

3. no, it just needs the previous text, private key, and the matrix math (CPU is fine)

4. no, see above.

pluto_modadic··on Zed DeltaDB
Seems like Zed needs to clean up shop and fix their IDE first.
pluto_modadic··on Trusted URLs via Cryptographic Signatures
what was the hardest part about this project?
pluto_modadic··on 'VPNs are lawful technical tools,' says EU Court in landmark copyright ruling
by rolling your own they don't mean write a VPN from scratch, but host a VPN on a VPS.
pluto_modadic··on Europe's fires are just the start
well I have good news! normal people don't have to sacrifice, fossil fuel companies do. if the govt mandates something (like with the ozone layer, or with lead acid battery recycling), something that was once impossible becomes possible.
pluto_modadic··on Disrupting supply chain attacks on NPM and GitHub Actions
the bare minimum award, for the only language and only registry where this regularly happens.
pluto_modadic··on Donate to GrapheneOS
:) nice, topical
pluto_modadic··on Substack writers, you need a website
oh it's more than the org. IIRC, it's also the founder.
pluto_modadic··on Kimi-K3 Technical Report [pdf]
being able to replicate it in the open means that there's nothing special about frontier models.

Frontier models would have to do something extraordinary or unique, or unreplicatable, because clearly there is no moat, and US companies are sitting on huge nvidia valuations and get surprised when competitors beat them.

pluto_modadic··on US citizen charged after GrapheneOS phone wipes during airport search
there already is an app for that. https://f-droid.org/packages/net.oblivion.wipe/
pluto_modadic··on Good Tools Are Invisible
this reminds me of some programmers' blog where he talked about the line between when software does something helpful automatically for a user, vs the line of where it nags you to make decisions it could have made itself.
pluto_modadic··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
it's definitely a cool esoteric thing :) I bet some other features would make it gain traction.
pluto_modadic··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
codeberg's one job gets interfered with by freeloaders hammering expensive views (like git blame) inconsiderately.
pluto_modadic··on The Wholesale Plagiarism of Obscure Sorrows
Disney and Nintendo's very litigious and successful lawyers have entered the chat
pluto_modadic··on Show HN: We post-trained a model that pen tests instead of refusing
IIRC tailscale is directly P2P, sidestepping a large part of the infra costs...
pluto_modadic··on Systemd 261 released with systemd-sysinstall, IMDSD, and storagectl
so - sometimes systemd's build is reliable, sometimes it causes problems. Are these good additions and do they solve real problems, or are they just for cohesion of systemd itself or introduce problems?
pluto_modadic··on AI is slowing down
I think he doesn't need to understand the technology to point out the books are cooked. a business can sink in either way: the technology flops or the finances flop. he's arguing the /finances/ would flop. he doesn't argue that the /technology/ would flop, only that they can't come up with the money to pay their debters.
pluto_modadic··on Age verification for social media, the beginning of the end for a free internet?
I think the earlier commenter is right. If a parent fails to... well... "parent" that's on them. Locking down the internet to republican-approved sites only is not the answer.
pluto_modadic··on Ask HN: Is Claude Opus 4.8 broken?
it may be a harness bug, based on the github issues.
pluto_modadic··on Going full AI engineer, not touching code anymore
this seems like a strawman... of /course/ you'd use the IDE to do ref renames?? AI isn't for that...
pluto_modadic··on Anthropic raises Claude Code usage limits, credits new deal with SpaceX
musk's public image is well known, and the statement is reflecting a useful heuristic / business sense; some customers really would use claude less knowing that it's buddies with musk now. Your own immaturity leaks through. I would say that the one weakness for OP is that people okay with using claude but not okay with grok might be a different size overlap than expected (either more people fine with both, or more people disjoint, or it just doesn't factor in for people).
Page 1 of 12Next →