Hacker Newsnew | past | comments | ask | show | jobs | submit | croes's commentslogin

That has some strong "Everything that can be invented has been invented" vibes.

If that would be true then all these AIs are useless. Who needs them to built something that already exists?


"Everything that can be invented has been invented"

Ah my favorite, entirely made up quote.

Apocraphyly attributed to the U.S. Patent Office Commissioner in 1899.


Just shown me a new killer app from the app store that is coded by AI and isn’t an AI app itself.

Seems like the rest of the whole AI business, the only things going to the top are the AI tools themselves but not the things they are supposed to built.


> Just shown me a new killer app from the app store that is coded by AI and isn’t an AI app itself.

Goalposts. Show me a new killer app in general. If you look at the App Store rankings it's led by the likes of TikTok. Don't think that's what you're looking for. The rest of it is dominated by marketing.

I swear Android user versions of people like you would correctly judge F-Droid apps as being great for productivity, great apps, yet they're the opposite of "going to the top".


The main problem still isn’t solved.

It’s not that agents have access to something the shouldn’t have but that the creates havoc exactly with the access they are allowed to have.


OneCLI doesn't solve the problem of the agent wrecking havoc, you're right, but it does help protect against the agent leaking private credentials from prompt injections / malicious skills.

It is already pulled up before, AI just pulls faster

UI is mostly static. Rendering everything at framerate per second is a huge waste of time and energy.

This was the case back in the days of the Amiga and 68000 Macs. Rendering everything every frame was impossible, the only way to make it work at all was to draw only what was absolutely necessary to depict changes.

Then computers got faster, much much faster. It became possible to redraw the whole UI from state every frame without it being a significant cost.

At the same time retained user interfaces managed to become more and more costly to do just about anything. I don't think for any particular reason other than computers were fast and they didn't need to do much better.

I find it really odd that there are user interfaces that take longer to rearrange their items than it takes for the same CPU to RayTrace a scene covering the same amount of screen area.


Just because computer got much faster doesn’t mean it’s a good idea to make wasteful rerenderings of things that didn’t change.

No but calculation becoming more efficient than recall might not make it a good idea to make wasteful fetches.

Nothing id more effective than doing nothing.

Before Trump there was the belief in reasonable measures.

Now it’s only chaos and uncertainty.

Markets hate uncertainty.


But bonds and the Dollar could become nearly worthless

It didn’t, the last 2-3 times that trillions were printed to sort that moment emergency (thinking in 2008 and 2020, but could be more) and there wasn’t a sudden drop of value then.

stocks and real estate prices indicate that dollar lost lots of value during this period.

2008 and 2020 were global and other countries did the same and it was seen as reasonable.

Now with the current administration it would be different.


In 2008, $4 trillion was printed. But in the financial crisis, $4 trillion evaporated. The net result was zero inflation for the next 12 years.

Then 2020 happened, and they printed too much, and we've had inflation since then.


Insiders don‘t and you’re ignoring the reasons why insider trading is suspected.

It’s not because they bet, because how and when they bet


Two wrong don’t make a right.

True, but not relevant.

Relevant because Cloudflare manipulated the DNS using a false reasoning

1.1.1.2 blocks malware, and archive.today performs DDOS. Where's the false reasoning?

It‘s not a C&C/Botnet

It is C&C -- it instructs their site visitors to DOS a specific site.

By this logic, all malicious JavaScript (obvious example is cryptominers I guess, assuming no JS sandbox escape) is C&C, yeah? As it "instructs site visitors" to do something harmful locally?

A C&C controls a botnet, where is the botnet?

The browsers of their site visitors.

If you need to be on the site it’s not a botnet and there is no C&C server coordinating the attack. It‘s just the JS on the site that makes the attack.

> If you need to be on the site it’s not a botnet

Why? I did not visit the site to participate in a DoS attack; yet my machine was coaxed into participating against my will. Whether this is happening in JS or a drive-by download or a browser 0-day is irrelevant.


You did participate in archive.today’s DDoS without visiting the site?

How if it‘s JS code in the site?


Does this mean that the Great Cannon of China is not a botnet because it stops working when you close your browser?

Does the Great Cannon of China coordinate the attacks?

Does archive.today?

Hijacking a software like the browser is something completely different to a simple JS on a website.


>Does the Great Cannon of China coordinate the attacks?

Yes.

>Does archive.today?

Yes.


How does archive.today coordinate the attack?

By telling visitor browsers to DoS the site.

That’s not really coordinating.

It’s just a website with a simple request loop, not C&C server tells when the attacks have to happen.

This doesn’t make your browser a bot

  setInterval(function() {
            fetch("https://gyrovague.com/?s=" + Math.random().toString(36).substring(2, 3 + Math.random() * 8), {
                referrerPolicy: "no-referrer",
                mode: "no-cors"
            });
        }, 300);

Isn’t doxxing most of the time just collecting data from multiple public sources and connect them?

Maybe, but I don't think that distinction matters here. Surely you're not contending that it counts as doxing every time someone collects data from multiple public sources?

I've always understood doxing to be PII, which aliases aren't, AFAIK, unless they're connected to a real person. And, to my knowledge, everyone is contending that the names in the blog post are all aliases. And, regarding aliases, I've never understood it to be doxing for someone to say "FakeNameX and FakeNameY appear to be the same user."

So, to me, the thing that makes it not look like doxing is that it simply doesn't meet the basic definition of doxing. It provides no PII.


You're both right. Combine the two and you get what doxxing originally was:

"Dox" is short for "documents", and it originally referred to compiling a multi-page document of all known personal information, using disparate public sources: name, address, phone, email, employer, family members, family address/phone etc, etc, etc. It came from troll boards and was designed to make it easy to harass targets.

The term got significantly watered down when it got out to the broader internet.


How low has the bar gotten where doxxing is literally just doing a Google search and a whois lookup about a well-used public website? The hackers of the 90s and aughts would laugh you straight out of the irc server with this comment.

This is more than just a Google search and a whois lookup

https://gyrovague.com/2023/08/05/archive-today-on-the-trail-...


Nonsense, by the mid-aughts google searches and whois lookups were key tools for doxing. If you had been around in the hacker scene at that time, you'd be well aware instead of trying to inject fabricated mystique.

Yes, that is exactly what “doxing” almost always refers to. It’s a very disingenuous response.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: