stuffoverflow

Glad to be proven wrong but as far as I can see there are no reports of it currently being exploited in the wild at the scale you are implying. It genuinely takes a lot of time to weaponize even with the assistance of frontier LLM models and it is way more difficult when you don't control the server.

I largely agree with the author and it is a common annoyance in cyber security discussions where people make strong claims but have nothing to back it up with.

For me the problem is usually finding older videos. Youtube's search heavily favors newer videos to the point of completely hiding older ones even if using the exact video title. They've also removed the possibility of sorting results by date somewhere within last 6 months.

Yorhel was also the creator/developer of ncdu among many other open source projects. He was a big open source advocate. The sites he hosted (vndb.org and manned.org) have automated database dumps and source code fully available. Recommend to check out his website https://dev.yorhel.nl/

Archive.today's attack on https://gyrovague.com is still on-going btw. It started just over two months ago. Some IPs get through normally but for example finnish residential IPs get stuck on endless captchas. The JS snippet that starts spamming gyrovague appears after solving the first captcha.

I recently had the idea of somehow integrating Everything's folder size index to explorer and after failing to do it with claude code, I found out that Windhawk + Better file sizes does just that. I would have expected at least some performance degradation but in fact it was the opposite and made it feel much snappier. A huge QoL improvement to explorer that I've now installed to all my Windows PCs. Note that you need the alpha version (1.5) of Everything for best performance.

Yes I have Finnish IP and just before I wrote that post I tested it to make sure it was still happening.

I assume it must be a blanket ban on Finnish IPs as there has been comments about it on Reddit and none of my friends can get it to work either. 5 different ISPs were tried. So at the very least it seems to affect majority of Finnish residential connections.

The weird thing is that there was nothing new in that blog post. And on top of that it couldn't conclusively say who the owner of archive.today is, so no one still knows.

I've not seen any evidence of them editing archived pages BUT the DDOSing of gyrovague.com is true and still actively taking place. The author of that blog is Finnish leading archive.today to ban all Finnish IPs by giving them endless captcha loops. After solving the first captcha, the page reloads and a javascript snippet appears in the source that attempts to spam gyrovague.com with repeated fetches.

Sanctions in this context mean visa restrictions (travel ban to US). So not financial sanctions. Just thought it would be a good thing to clarify.

This seems like a massive improvement for openly available local ASR. Even the 300M model outperforms whisper-large-v3 according to the paper's benchmarks.

I can't tell if anthropic is serious about "model welfare" or if it's just a marketing ploy. I mean isn't it responding negatively because it has been trained that way? If they were serious, wouldn't the ethical thing be to train the model to respond neutrally to "harmful" queries?

VibeVoice-Large is the first local TTS that can produce convincing Finnish speech with little to no accent. I tinkered with it yesterday and was pleasantly surprised at how good the voice cloning is and how it "clones" the emotion in the speech as well.

Academictorrents has monthly dumps of all reddit submissions and comments even after the API restrictions.

Archiveteam did a full site crawl[1] when Anandtech announced they were stopping. You can browse the warc.gz files like a regular web page using https://replayweb.page

Alternatively you could use solrwayback[2] to index and browse the warc files.

1: https://archive.fart.website/archivebot/viewer/job/202409012...

2: https://github.com/netarchivesuite/solrwayback

That 27C limit seems to have been due to the energy crisis in 2022 and restrictions were lifted in 2023.

The last source you cited is AI slop and is not even related to your message.

This whole case is even more stupid when you take in to account how NYT's paywall is implemented. Anyone can bypass it just by refreshing the page and stopping it immediately after contents become visible.

I don't know what ChatGPT uses to browse web but it wouldn't surprise me if it repeated stuff from those paid articles because it uses wget or something similar that doesn't support js and therefore the paywalls weren't effective.

I assume it will be implemented on DNS level and yeah it is possible to use a different DNS.

Google AI studio, ChatGPT and Claude all support this. Google AI studio is the only one that let's you branch to a separate chat though. For ChatGPT and claude you just edit the message you want to branch from.

I have yet to see concrete evidence that disabling Windows update and windows defender would elevate risk of having the system compromised in any meaningful way.

I installed Windows 10 2016 ltsc on a VM at the end of last year out of curiosity to test that. Disabled wupdate and defender before letting it access the internet so that it was basically 8 years behind on any updates. I tried browsing all kinds of sketchy sites with Firefox and chrome, clicking ads etc. but wasn't able to get the system infected.

I would guess that keeping your browser updated is more important.

Playwright supports Firefox, chromium and webkit

There definitely are tools for scraping basically any site by using the browser itself to make sure all dynamically loaded stuff gets intercepted correctly. Browsertrix[0] is probably the most well known and complete scraper for that. They offer it as a paid service for convenient setup but its open source and can be self-hosted as well.

0: https://webrecorder.net/browsertrix/

Ukraine has retained its independence. That's a big achievement on its own.

Since the system prompt tied to the artifacts feature seems to be the reason for it having a preference for react, seems like the solution would be to use the API instead. Plenty of front ends available nowadays that let you use your own API key. I've been using typingmind since I paid for it over a year ago but I'd be interested to know if some good open source alternatives have popped up more recently.

As a non-American I don't think Jan 6 was overblown. It had some real potential for escalation had Pence given in to Trump's demands. At the same time I do think the prosecution was too harsh, though that can be said from just about any crime in the US. Morally Trump is way more responsible for Jan 6 than any of the protestors.

Since the article only mentioned 5 countries, the full list of the 18 countries with unlimited access to chips is: Australia, Belgium, Canada, Denmark, Finland, France, Germany, Ireland, Italy, Japan, the Netherlands, New Zealand, Norway, the Republic of Korea, Spain, Sweden, Taiwan, and the United Kingdom [0]

[0]: https://www.ecfr.gov/current/title-15/subtitle-B/chapter-VII...

To me it feels like Claude is more rigid in following the instructions in system prompt which would explain why claude.ai can be a bit annoying at times due to the things you mentioned.

On the flipside if you explicitly permit it to do "bad" things the system prompt, claude is more likely to comply compared to openai's models.

I mainly use only the API version of claude 3.5 and gpt4o. I find no system prompt at all to be preferable over claude.ai / chatgpt.

It is still possible to register Gmail accounts without a phone number. I suppose they primarily use IP reputation to determine when they allow it but device seems to matter too.

In the past you could use BlueStacks android emulator to register Gmail accounts without sms verification even with VPN IPs. This year I've created a few Gmails without sms verification, once on desktop chrome (with Firefox they would've required sms) and a couple of times using the Gmail app on an Android phone.

I'm pretty sure I've used some tool in the past to convert a HAR in to WARC which can then be browsed with https://replayweb.page/

Since OP didn't want the Google account on the pixel to be associated with their personal google account, it is possible no recovery phone number or email was set on it which can make reseting password difficult / impossible without someone at google actually looking in to it.

Yandex already does. Bing has cache as well.