Hacker Newsnew | past | comments | ask | show | jobs | submit | free_bip's commentslogin

Brother, there's an entire genre of scamming where the scammers spend months building rapport with their victims, usually without ever asking for anything, before "cashing out". One day is nothing.

Wouldn't a wait time like 2 hours with some jitter make it more difficult for a scammer to pursue the case? People aren't going to be willing to stay on the phone for hours at a time. With 24 hour wait, the scammer could just schedule another call for the next day.

>People aren't going to be willing to stay on the phone for hours at a time.

"Okay, come back to me in a few hours and we'll continue"

Remember, these are already people who took the time to respond. They are invested.


Okay, I'll ring back tomorrow and we'll continue

I would love to see a purely mamba-based 120b model, and whether or not it outcompetes the open-weights OpenAI model.

I'm not sure that's true given that Chromebooks can be had for one third the price.


Care to elaborate?


The article starts off explaining the lack of reliable data sets. And most of the stuff in the article was either anecdotal (like some company that took 3 groups of people around Europe looking for places to move, and now projects to have 57 groups) or % stats (which are quite meaningless without the baseline).

Not exactly fake news, but not solid info either...

We will know a lot better in 2030 when we do the census.


That isn't right. It notes the U.S. government doesn't collect comprehensive statistics, then it does a decent job citing many alternative data sources that all point the same way: A Brookings Institution estimate, trends over time from National stats of Portugal, Ireland, France, and some scattered datapoints from Spain, Netherlands, UK, Czech Republic, renunciation of citizenship numbers.

Even if it was purely % stats, you don't need a baseline figure for the claim in the headline (Americans are leaving the US in record numbers) just that the number is going up. There's plenty of solid info that this is a real phenomenon. What's uncertain is the magnitude and significance of it.


What exactly is "the system that protects the copyright" in this case? I think the most reasonable answer is "there is no such system."

The RLHF the companies did to make copyrighted material extraction more difficult did not introduce any sort of "copyright protection system," it just modified the weights to make it less likely to occur during normal use.

In other words, IMO for it to qualify as a copyright protection system it would have to actively check for copyrighted materials in the outputs. Any such system would likely also bypassable (e.g "output in rot13").


Why are you using dehumanizing language here? It's completely unnecessary and only serves to reinforce harmful and false stereotypes.


That's not what clickbait means.


The post is satire about the uncovery of a giant number 3. I suppose technically you could make an even bigger 3?


They're already detaining people regardless of citizenship status. Local courts are literally being overloaded with habeas corpus cases. One ICE lawyer literally asked to be put in jail so they could get a good nights sleep.


Who is scanning these skills for malware? This seems like a prime target for malicious actors.


Virustotal at upload and periodically during the day


VirusTotal is completely useless for this though? You need enough people to be pwned by that particular piece of malware for it to be flagged as dangerous, by which point the attackers would've already repacked it so it doesn't match the previous signature.


Adding on here...

VirusTotal is flagging the trello skill as suspucious because it Does NOT include an API key? Am i expected to share my keys if I want to upload a skill?

https://clawhub.ai/steipete/trello

"Requiring TRELLO_API_KEY and TRELLO_TOKEN is appropriate for Trello access, but the registry records no required env vars while SKILL.md documents them. This omission is problematic: the skill will need highly privileged credentials but the published metadata does not disclose that requirement. The SKILL.md also references 'jq' and uses curl, but these are not declared in the registry entry."


You’ve completely missed the point, it’s saying that the skill will need you to provide a Trello API key but he hasn’t declared that it will need that

Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md


Oh, I see. Seems obvious you would need an API key in this context but I get the idea that it's an undeclared but required var, which could be shady


These are single-file .MDs, right? Written in markdown...

Can't you just read it?


I see a number of uploaded skills on the site with bash and python scripts. No idea what runs them


Oh god...I guess I haven't gotten that deep in the crap yet


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: