Hacker Newsnew | past | comments | ask | show | jobs | submit | halifaxbeard's commentslogin

https://www.priv.gc.ca/en/opc-actions-and-decisions/investig...

Non consensual adult content, at that.

Truly makes me wonder if xAI/Cursor will honour the spirit of enterprise agreements around data retention.


Do children that are the product of sexual assault count?


> Fixed: HTTP request smuggling attack vector

> Fixed: missing bounds check in maliciously-crafted Blob deserialization

> Fixed: integer overflow in IPC advanced serialization mode with malicious input

Where are the CVEs, Jarred?


Any plans to issue a CVE for this HTTP request smuggling attack vector fixed in the latest bun release?

https://github.com/oven-sh/bun/issues/29732


https://github.com/oven-sh/bun/security

Surprisingly, they appear to have not disclosed any vulnerabilities whatsoever. It's likely there have been numerous vulnerabilities in the past, but they are all being ignored.

https://x.com/DavidSherret/status/2031432509301428644


This is really poor form given that Anthropic is going around getting all kinds of public goodwill for finding CVEs in other people’s products.


Yeah! Why would the company that stands to make themselves look better in front of an IPO do such a thing?! Next thing you're going to tell me was that this whole rewrite was another marketing ploy to help potentially turn themselves in multi-millionaires!


Yes, it is helpful for a company to be very clear that in a choice between the safety and integrity of their customers, and profit, they are choosing profit.


maybe you should ask on the issue directly?


Wow, I was spoiled building firmware for my ARM boards then (building, not developing).

Marvell has a source available DDR driver that actually takes care of training on a few of their platforms! https://github.com/MarvellEmbeddedProcessors/mv-ddr-marvell


> 8 lets me refresh weekly and have a fixed day of the week to check whether there was some API 429 timeout

There’s your answer.

6 days means on a long enough enough timeframe the load will end up evenly distributed across a week.

8 days would result in things getting hammered on specific days of the week.


> 6 days means on a long enough enough timeframe the load will end up evenly distributed across a week.

people will put */5 in cron and result will be same, because that's obvious, easy and nice number.


I'd have it renew Monday and Thursday to avoid weekend outages.


If they put */5 in cron, a single error response will break their site and the beginning of March will also break their site.


and they will replace it with * and just do it every day just in case


Running an update script every day is good. Certbot defaults to running twice a day. Just use something with similar logic, waiting to renew short-lived certificates until halfway through their validity period. That way the actual load is nice and spread out. And you should get that logic by default if you do a normal setup.


I’d expect most will do this. I wouldn’t be surprised if LE expects this.


If I would use short-lived certs I would make sure to choose an ACME client that has support for ARI (ACME Renewal Information). Then the CA will tell the client when it’s time to renew.


ACME doesn't renew certificates when there's enough time, so it'll always renew around 6 days, even if you check more aggressively.

Currently ACME sets its cron job to 12 days on 90 day certificates.


Which ACME client are you referring to?


I thought people generally run it daily? It’s a no-op if it doesn’t need renewal.


so now people that want humans around will now renew twice in a week instead of once?


Oh definitely not. They don't want humans doing any renewals.


At this point I’m not convinced that Gemini 3 Pro was post-trained on data Google had permission to use, going by the myriad of issues on the Gemini CLI tracker around Google AI/Google One/Google Cloud/Google Workspaces.

https://github.com/google-gemini/gemini-cli/issues/12121

It is far too easy to accidentally end up under the wrong privacy agreement, to the point of where some workplaces are banning use of the Gemini CLI!


I think OP is wrong in their hypothesis based on the logs they share and the root cause AWS support provided them.

I think the promotion fails to happen and then an external watchdog notices that it didn’t, and kills everything ASAP as it’s a cluster state mismatch.

The message about the storage subsystem going away is after the other Postgres process was kill -9’d.


How would you propose we address the therapist shortage then?


Who ever claimed there was a therapist shortage?


The process of providing personal therapy doesn't scale well.

And I don't know if you've noticed, but the world is pretty fucked up right now.


... because it doesn't have enough therapists?


People are so naive if they think most people can solve their problem with a one hour session a week.



i think most western governments and societies at large


It's a demand side problem. Improve society so that people feel less of a need for theapists.


Oh, so you think we should improve society somewhat, eh? But you yourself live in society. Gotcha!


I think therapists in training, or people providing crisis intervention support, can train/practice using LLMs acting as patients going through various kinds of issues. But people who need help should probably talk to real people.


Remember that a therapist is really a friend you are paying for.

Then make more friends.


>Remember that a therapist is really a friend you are paying for.

That's an awful, and awfully wrong definition that's also harmful.

It's also disrespectful and demeaning to both the professionals and people seeking help. You don't need to get a degree in friendship to be someone's friend. And having friends doesn't replace a therapist.

Please avoid saying things like that.


outlaw therapy


I don't know why you're being downvoted. Denmark's health system is pretty good except adult mental health. SOTA LLMs are definitely approaching a stage where they could help.


something something bootstraps


If the universe is closed and knowable, free will can't exist. Fortunately, Heisenberg left the door open.


I don’t think non-commuting observables really helps much in the “free will existing” department.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: