Hacker Newsnew | past | comments | ask | show | jobs | submit | brutusurp's commentslogin

Quite sure I reported this JS vulnerability to Google in of December 2022. I also detailed it in a report to SEC. And I kept reporting the issue to Google teams, to which they responded for me to "check their privacy and security docs." See also https://news.ycombinator.com/threads?id=burna_aws_acct, where I commented about it on HackerNews.

But yea, give credit to Clement Lecigne of Google's Threat Analysis Group (TAG), Google's own team. This isn't the first time they've done this either.

Just lost even more respect for that entire operation at Google. So whack.

Off to make another HN account, since I just burned this one...


Pretty sure this is not a new thing (e.g., https://www.pcgamer.com/war-thunder-fan-says-tank-is-inaccur...)


Love to see it.


"I've worked with some of the leading AI practitioners and thought leaders to create a framework that outlines a new regulatory regime that would prevent potentially catastrophic damage to our country while simultaneously making sure the US advances and leads in this transformative technology."

Who are the leading AI practitioners and thought leaders?

'Finally, for the protect part, developers would have to demonstrate their AI systems are aligned with American values and that "AI developers deliver on their promise to create a better world."'

How are "American values" defined? IMO, it is especially important to have a clear understanding of what American values are moving forward, as grey area leads to interpretation "loopholes" in the audit, test, and review phases.

The article also mentions NTIA issuing a formal request for comment on "AI Accountability Policy"[1]. Deadline is 12 June 2023.

[1]https://ntia.gov/issues/artificial-intelligence/request-for-...


I'll just use Signal.


Wow. The zero glyphs are superb. The differentiation in shape between "O", "o" and "0" increase readability. The ligatures, while expressive, are intuitive and not over the top. Satisfying simplicity and style.

I didn't need to spend $75 on a typeface, until now.


Just tested it out. The Kandinsky 2.1 model does render high-quality images accurate to input prompt. Each iteration of a prompt produces more robust interpretation; exciting. Still working through the relationship between the positive and negative prompts.

There is a bit of a gap in understanding metaphor and reverse polarity. For instance if I include in the prompt "move away from negativity" Kandinsky produces images of sad faces (e.g., mouth curved down, downward-focused eyes). However I expected there to be an inferred "towards positivity" interpretation (e.g., eyes closed/looking forward or upward, and mouth relaxed/smiling). Trying to see how much this outcome can be achieved leveraging the negative prompt field.

Overall I'm happy with the results and will continue to use it. Thanks for sharing!


Lots of errors in this article. Was it AI-generated?


IMO this is to drive adoption. Without customers using your product, it doesn't how much anything costs; there's no revenue. Give it away, increase usership, get feedback, improve performance, and then put a price tag on it. Per usual, Amazon is tardy to the party, and must now compete against an established Copilot product (and GPT).


Exactly this.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: