Indeed, they also just discounted every PhD currently in progress in their program by demonstrating academic nonchalance and potentially even past ones. Let’s shut it down and cash our tenure’s worth out.
How does that relate to e.g. have I been pwnd? If the obligation to be a white hat is to protect the owners of the information then is it not also to inform the persons who have been impacted a valid white hat activity? From my perspective the classification of someone as a black hat should be if they use it for something malicious. And if anything disclosure limits any potential use. On the other hand our big LLM companies Hoover over everything, have access to it, occasionally go rogue with their knowledge and access, but I don’t see many people calling them black hats.
You'll notice that the person that built have I been pwnd has been extremely careful in how the data comes into their possession, I highly doubt they would ever go so far as to breach a site themselves. It would go completely against their mission to do so.
> On the other hand our big LLM companies Hoover over everything, have access to it, occasionally go rogue with their knowledge and access, but I don’t see many people calling them black hats.
I'll be more than happy to call them criminals and I've warned very publicly about their resetting configuration switches to allow them to pretend that they have your consent to use your data for training purposes.
That’s a good point. A new CEO never wants a slow unwinding, they go for quick pain to set the baseline of their bonus assessment into something workable.
Not aware of specific system, but critical infrastructure systems have a quality assurance system that replicates production albeit not perfectly. You may replicate the core system but not all its interfaces, you might replicate it but scaled down etc. There are ways for solid tests to fail. For systems with downtime, a test on production is useful iif you have solid rollback procedures. There’s lots of art in the operation of these systems.
I am sure it’s all so good that these incidents should not take more than 5 minutes to resolve. Don’t get me wrong, I am one of the people who would look at you suspiciously a year ago and only in the last year “saw the light”. You were ahead. But that doesn’t mean that at some point you will not overshoot. What we witness today we haven’t witnessed in some time. People also made horrible software but they enriched it with hole plugging hacks that made it run, mostly. AI may build better software but who is plugging the holes. At least today no one. In 1 or 5 years maybe AI. In the meantime, we need to plug some holes and they are not as easy to spot when we are not the ones who left them there.
So health checks were correct… this solution of silencing the first symptom is probably just adding to the problem. I am afraid they may be opening the door for the fire trucks and getting some other kind of intrusion instead. Better they shut it down for day and do proper fix.
I don’t know who votes these things up, but I am glad they do. Can we have a new x_HN, with all the things with potential to open your mind in unspecified ways?
There's also a guy who has been curating a newsletter of all the best posts of the week. Been doing it for years now (it's on newsletter 817 this week!).
reply