Hacker Newsnew | past | comments | ask | show | jobs | submit | United857's commentslogin

It's sort of like how increased mechanization led to a decrease in physical activity, so people do recreational exercises to stay physically fit. Eventually staying mentally fit by doing projects and exercises (leetcode, Advent of Code, etc) will be similarly normalized.

Also from the article:

> An unattended bag found in the company’s offices contained Alfozan’s wallet and identification, as well as a recording device

It’s almost like he wanted to be caught…


Probably in response to the recent “AI torture chamber” experiment: https://generativeai.pub/github-took-down-an-ai-torture-cham...

There's a difference between automated industrial scale scraping and well-behaved agents acting on the behalf of individuals. Right now there isn't a robust, standard way to distinguish between them, so sites just block known datacenter IPs and throw out the baby with the bathwater.

That's a main advantage of running your own local claw setup using your residential connection -- difficult/impossible to block.

That said, eventually a site blocking all agents would be like blocking all search engines, something that hurts more than it helps as agentic interactions become "the norm". WebMCP or similar support will likely be a basic expectation at some point.


It's worse than that, they will block all agents and specifically make exceptions for maybe 2 search engines per country. Thereby strengthening existing players and weakening all incumbants.

Cloudflare for instance does allow indexing by Google and Bing I think by default, but does challenge other bots. Double check me I am speaking from memory.


> That's a main advantage of running your own local claw setup using your residential connection -- difficult/impossible to block.

https://aws.amazon.com/waf/features/bot-control/


> Right now there isn't a robust, standard way to distinguish between them

There is, it’s called an API


I wonder why this isn't a problem for OpenAI, Google, Meta or SpaceX (they allow users 13 years or older with parental permission)


Aren’t most modern receivers multi-constellation? What is the technical feasibility of jamming every GNSS provider?


They all within same close tied frequency range, so it’s pretty easy. Though L1,L2,L5 need separate jammers if you only target GNSS


Smoking gun should also be there as well.


Wouldn’t it just be much simpler to weigh the hot dog and bun?


Without having done so in 2023, the comparison would not be complete


> less than a minute, that hardware implant can be fitted into a port accessible via a hatch on the exterior of the plane

Just as with computers, as the saying goes, if you have physical access to the device then all bets are off. The tricky part is getting that physical access in the first place...


Of course. Doesn’t mean we should leave the root password written down on a post-it next to the hardware. It sounds strange that such a privileged port has no authentication.


Getting security to work reliably in such scenarios can be hard. And your customer really don't want their up to hundred million in cost pieces of equipment sit there doing nothing because maintenance is unable to do something with it.

Much simpler just to instruct to physically secure the conduit around... Even better if that is already approved and demanded process.


“Make it the customers problem” always works. These days it feels like LLMs are trained to do the same.


At certain price point customers tend to make it also your problem. And expensive jets are certainly beyond that point. They might sue you. Or simply not buy or lease new ones.


Very true. I was actually thinking that telling the customer to secure the physical location where the insecure port is located is making it the customer’s problem while solving the authentication problem is making it the manufacturer’s problem. I guess you may have read it the other way?

Fair to say that everything has tradeoffs, even expensive hardware.


It is not that simple, atleast in the automotive industry _today_. Atleast here in EU.

Every component is analyzed from a cyber security perspective. Many components needs tampering protection - while others need not. This includes replacing components with malicious ones.

It is not logical at all and a stupid regulation. But it is not as simple as you can do what you want if you have physical access.


I have little faith any of it would stop someone who was a) devoted, b) prepared, and c) had physical access for a reasonable time.

It’s still worth doing because the vast, vast majority of people will fail at a or b without even reaching c.

That’s sort of less so with planes, though. You don’t generally decide to take out a plane without being dedicated at the very least.


Well, the EU, being very much dictated by Germany, who have a large car industry, has a vested interest in making sure that if people want to have a better car they pay for a better one new rather than upgrade with an aftermarket chip.


A better car for most people is not just a chip upgrade. Anyone with a lick of sense has no need for more horsepower than whatever a standard EV has. It's beyond plenty for normal driving. I drive an Opel Corsa E which is a cheap EV and it accelerates more than fast enough. Upgrading would be about better safety equipment, better range, more space, better seats, better sound system and stuff like that. None of that can be done with a chip. It would be a different car, which is what I plan to get in a few years.

Paying for a horsepower upgrade chip is something very few people have any interest in doing. Mostly irresponsible assholes who are a danger to others, maybe a few people who need it to pull trailers or something.


I'm talking about ICE cars :) The sorts of car that Germany does extremely well.


Same point though, almost nobody really needs a horsepower upgrade.


I live in Germany. and i wish i lived in an EU that’s dictated by germany, but that is not the EU I live in.

The above statement sounded way more edgy than intended lol


You should try living in Greece or something, and you'll see what the EU (and the Euro) can wreak on a country.


You can take your car to a tuner shop and they’ll do it. Where do you think those 900 bhp m4s come from.


> Just as with computers, as the saying goes, if you have physical access to the device then all bets are off

This is far less true than it used to be, though, and it seems reasonable to expect that aircraft become as secure as Macs.


A huge part of the security of Macs is that the security domain is a single chip. Hard to do with an airplane which is inherently a physically-distributed system.


But what if the device contained an explosive?


Defenders have to think about multiple threats. Explosives are harder to get, conceal from certain types of scans, and are more overtly deliberate. Neither of these is a common threat but that doesn’t mean people don’t harden against low probability/ high damage events.


I mean, if we're going to ignore physical attacks then yeah an airplane can be as safe as a computer I suppose.


About 10% of Meta's ad revenue comes from Chinese companies reaching a international audience. They also manufacture most of their wearable devices in China.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: