1. See a vuln domain reported, clone the site.
2. Wait for it to expire and snag it.
3. Republish the site with malware
4. Watch people dither about domain names and stuff instead of taking time to fix things.
GitHub.io domains, workers.dev domains, etc are all free domains.
Clever use and abuse of some startups can get you a free domain with a signup package that you can subsequently transfer out, but those are harder to find these days.
Seriously, the bad guys figure this out all the time.
Yeah, because the six number chunk is near the limit of recall. Don't remember CVE-2026 since the year and CVE can be reconstructed from time memory. You know it came up this year. Remember that vuln 111-497 (as two chunks) came out this year, and remembering two short chunks is easier.
I don’t know why you’d want to remember the number, but this one seems easy if you know some memory techniques.
> Remember that vuln 111-497 (as two chunks)
Good first step. Remember it’s two sets of three numbers. The first set is all ones, meaning the first three numbers are 1, then the fourth number is 4, then you add five for the next one (9), then you have to remember to subtract two (7)¹.
May sound silly, but I bet some of you have already memorised it from that alone. Being a slightly convoluted by still logical set-by-step helps with recollection.
¹ Lot of different ways to go about that, like remembering that the first set was three of one so “two was left out”.
An alernative, it could also be the case that all of the model developers are using distillation to improve their models while crying do as I say, and not as I do.
Or the answer is even easier. There is public data consisting of chat transcripts with ChatGPT, Claude and DeepSeek, and all AI providers train on that data. You don't need distillation for the text "I am ChaGPT/Claude/DeepSeek" to often appear in your trraining data.
Yea, this is one thing that gets me. Vibe coding and freestyle prompting gets wildly different results. Starting from a set of specs and expectations routinely gets me reviewable and we'll tested code. Sure, running the full test suite alot slows things down and uses more tokens, but when I hit a five hour or weekly window, I just roll up my sleeves and start working without the model because the code is layed out the way I expected and is designed to fit my meatbag workflow and pace.
Consumer protection is already clearly the focus of Congress, and with the demise of the Chevron deference in 2024, it seems that Congress needs to bind (such that they can) groups operated by the Executive Branch to uphold consumer rights explicitly instead of allowing regulators to navigate the commercial market.
The answer to Why is Congress concerned with details like this? is that the Supreme Court of the United States made it their concern by rejecting an established practice of deferring to expert regulators instead of electable people who probably lack the relevant knowledge and experience.
I don’t see why you think Chevron deference would have been of any use for anyone who wanted to preserve video games. Current regulations unambiguously allow EULAs, and Chevron deference is only about how ambiguous regulations are resolved during a trial. No ambiguity = no deference to the agency’s interpretation of the law.
> is that the Supreme Court of the United States made it their concern by rejecting an established practice of deferring to expert regulators instead of electable people who probably lack the relevant knowledge and experience
The current Supreme Court unfortunately unfortunately seems to lack the knowledge and experience to recognize the logic in this thinking (or just doesn't care because it doesn't fit their agenda)
FAA jurisdiction over the airspace is not the same as a rule prohibiting every form of powered lift-off within it. There's a lot of grey area in FAA regs - for instance you can land a plane on your lawn in class E (if you could manage it).
There is a massive tension between software you didn't authorize and computer security.
Turning off automatic software updates requires that you actively stay on top of what's installed and what's running, including patching with discipline to make sure your computer doesn't remain vulnerable. On the other hand, automatic updates is seen as writ large by software developers to install what they want without a clear and meaningful choice by users by bundling new features. See Google's integration of Gemini Nano in 2024 as an example.
Bought out by private equity. I've moved my domains to Hover when I found out from that Hacker news thread before any of the enshittification affects me.
Oh shit.
Damn. I don't have grandkids yet but ok.
I didn't come to HN to confront my own mortality and age ;P
Those aren't museum artefacts, it's just retro.
Get off my lawn.
reply