thenewnewguy

Does anybody have a source for the "actively exploited" part of the HN title?

Technically yes, in practice the odds your local resolver is validating DNSSEC is slim (and if you're intentionally configured it to do so, switch to a provider that isn't Quad9).

If you care about software being closed source or proprietary you probably aren't running Windows.

It's a typo that carried over to the second code example of trying to read the file too? Is the sample code completely untested?

Perhaps partially? I assume that cutting the pages out of the spin makes them easier to scan at least partially. That said I have no insider knowledge of this type of operation so I don't know how much easier that actually makes it.

But ultimately, it's a moot point, because the legal requirement means the books must end up destroyed. Even if the people at Amazon wanted to scan the books in a way that required no destruction at all, it's not currently (legally) possible for them to do so, so they might as well take the easy way out today.

Bias disclaimer: Amazon is my current employer, but I don't work on AI or anything else mentioned in the article.

Yes, this is a result of copyright laws. The other commenters are wrong/uninformed.

If it was up to the companies training LLMs, they wouldn't destroy the books: It's a waste of company resources, it's needlessly destructive/evil, it generates bad PR, etc etc. There are essentially zero advantages, other than it is what is required under US copyright law (or at least, it is what their highly paid lawyers believe is required under US copyright law).

Bias Disclaimer: Amazon pays my salary currently, although my job doesn't have anything to do with datacenter construction.

Maybe I missed it, but the article doesn't seem to say what the "circumvention"/"loophole" that Amazon used was? It seems like Amazon went through the correct city permitting/legal processes years ago, and now residents want to complain about it years later because data centers are this year's culture war hot topic?

Like if Amazon followed the official process here, what's the problem? At some point you have to declare an approval final and allow a company to move forward with construction.

While I agree with you in general, usernametaken29 made a specific prediction about OpenAI's IPO which is an event that will very likely happen in the next year or so.

That said, OpenAI isn't public, so you can't directly short it easily. I guess you could short Microsoft but I don't know if that gives you enough exposure to truly be worth it, even if you do genuinely believe what OOP claims.

Let's be clear and not do this both sides thing - by "they" we mean Republicans. You may not agree with their policies or what they want to spend money on, but Democrats (at least in aggregate) live in the real world where they acknowledge for the government to spend money they will have to raise taxes.

Republicans are the only party that in the 21st century acts as though we can simultaneously cut taxes and increase spending and everything will be fine.

Doesn't roblox use an anticheat that prevents the game client from running on linux? I thought nowadays the way to "run roblox on linux" involved using an android emulator.

Huh? Just to make sure I wasn't missing something, I checked and my GitHub account has only a TOTP app and hardware security key configured, no SMS/phone number.

As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide resistance against phishing attacks, and deliverability can be unreliable."

The article author attemps to make a distintion between "burners" and "aliases" but I don't believe one exists for this usecase. Let's say for the sake of argument that you think blocking burner emails provides meaningful protection (I don't, but services using such a list obviously do). From your perspective, an "alias" is the same as a "burner". Both can be easily generated in bulk by a human or bots, cannot be resolved to an identity, and cannot be compared to determine if two emails are the same person.

This analogy is bad: Nobody is going to die or get food poisoning because their old browser doesn't work on a website.

A better analogy would be a restaurant deciding not to cater to the 1% of the US population that have celiac disease (cannot eat gluten), or the 2% that have issues with dairy.

What if the grocery store has a security camera pointed at the door that records 24/7? Should they not be allowed to do that?

Doesn't the company behind ProxMox sell enterprise support?

You mean the same Brave that's only going to offer "limited MV2 support" for five hand chosen extensions because they aren't able of truly keeping it alive? https://brave.com/blog/brave-shields-manifest-v3/#which-mv2-...

Anything Chromium based is tainted. They will not be able to keep out all of Google's shitty decisions because they are not building a browser, they are building a skin on top of somebody else's browser.

I feel like root cause #2 should be titled "Our API is poorly designed".

If you pass nothing into the API, it doesn't give you an error? Is this even a valid use case - why is it even possible to express this request, should the important inputs not be some kind of required parameter?

If your attempt to use the primary purpose of your API silently broke until your database filled up, that should probably be a big red flag about how likely customers are to make mistakes using your product.

> Same with most people "doing a startup" or "opening a restaurant".

While I mostly agree with your sentiment, I think there is an important difference. Unless you are attempting advantage play (99.99% of gamblers are not, and casinos ban the few that are), there is literally nothing you can do at a casino to make it a positive EV activity. No amount of skill, drive, effort, or anything other than pure luck can consistently generate profit at a casino.

A startup/business, on the other hand, can be effectived by your actions. Luck obviously plays a large factor, but you have some level of control over the outcome.

These AI slop articles about AI are getting especially boring to read.

> Problem 1: It Devours the Context Window

Don't harnesses support progressive discovery these days?

Claude (200K).... GPT-4o..........?

> every MCP server adds a process layer between the LLM and the underlying API

But a CLI doesn't?

------------------

> Measurement: Tool Definition Sizes

> MCP Server: Linear, Notion, Slack, Postgres

Oh, so these are the MCP servers that are examples of context bloat we're going to replace! Later in the article:

> At Quandri we use all three approaches side by side...

> MCP for services without a strong CLI (Slack, Linear, Notion)

I see a bullet point for "1.0 days of 1.3 days", and when I mouse over the previous day (Wedensday 2025-11-19), I see "7.8 hours of 1.3 days".

I haven't actually checked any sources to confirm there really was downtime on those days, but if we assume those numbers are true 7.8 hours + 1 day is about 1.3 days.

Anything on the site? Yes. Anything at all? No - Polymarket themselves make the markets (and I think they have some partners that can make markets as well, but point is some random user cannot make a market).

Do you have a link to the mastodon interaction where they threatened you with legal action?

I ask because I'd be pretty disappointed in GrapheneOS over that kind of thing and it'd probably at least partially change my opinion of them, but it's better to validate these types of serious accusations and get the full context.

Can a theoretical strong enough quantum computer break PFS?

What does "92% of the way" mean? 92% of what? How is that percentage measured?

So we're worried about cops violating civil liberties by not getting a warrant, but we'd rather they go harass random (potentially innocent) civilians to do investigations?

Why dodge the question? Clearly they care today, and I live in today.

If we're doing to defer to industry, does only the opinion of website operators matter, or do browsers and CAs matter too? Browsers and CAs tend to be pretty important and staff big security teams too.

But skills where you tell the LLM to shell out to some random command are safe? I'm not sure I understand the logic.

Would this article not be evidence the part of the industry that makes up the CA/B Forum (i.e. CAs and Browsers) disagree?

Is massive capital expenditure not also required to enforce the GPL? If some company steals your GPLed code and doesn't follow the license, you will have to sue them and somebody will have to pay the lawyers.

I don't know for sure because I don't live in Tampa, but it is generally free (minus the opportunity cost of your time) for these types of tickets, no lawyer or other expense required.