Hacker Newsnew | past | comments | ask | show | jobs | submit | egeozcan's commentslogin

Even superpowers started dividing things into "phases".

"I think we can postpone this to phase 2 and start with the basics".

Meanwhile using more tokens to make a silly plan to divide tasks among those phases, complicated analysis of dependency chains, deliverables, all that jazz. All unprompted.


I wonder why Windows Defender has the privilege to alter the system files. Read them for analysis? Sure! Reset (as in, call some windows API to have it replaced with the original), why not? But being able to write sounds like a bad idea.

However, I don't know what I'm talking about so take it with a grain of salt!


AV had traditionally run as SYSTEM on Windows (and, in the past, often had kernel mode drivers too). I've always thought it was a terrible idea. It opens up exciting new attack surfaces. Kaspersky and McAfee both had privilege escalation vulnerabilities that I can recall. There have been a ton in multiple products over the years.

They kind of have to, though.

If malware exploits a privilege escalation vuln, what's the AV going to do about it when it's reduced to the software equivalent of a UK police officer? Observe and report? Stop or I'll say "stop" again?

AV requires great power, which requires great responsibility. The second part is what often eludes AV developers.


The OS should do the SYSTEM-level lifting and scanning processes and behavior analysis should run sandboxed as low priv processes. It would require a clearly defined API and I feel like MSFT was always reticent to commit, leaving AV manufacturers to create hacky nightmares.

Well the OS should do nothing—remember MS was taken to court over that—but better privsep on the part of the AV, sure.

Technically, Defender can be replaced with 3rd party AV.


Windows has separate SeBackupPrivilege for backup software, so why not for AV?

What would this privilege look like that is meaningfully different from SYSTEM while being properly protected from/able to deal with malware that has an LPE?

“Because the remediation component requires SYSTEM, the entire AV needs to run as SYSTEM and we have to unpack malware in the kernel”

Because to get Ring0, you just need signed vulnerable driver.

There are tons of signed drivers to explore ;-)


Some files under Windows are protected as the TrustedInstaller user, which is a more restrictive level of permissions than SYSTEM.

I'm a parent, and all I can think as a solution is devalue nudity. I'm not saying we should all walk around naked, but make sure children understand the human body earlier, any why we wear clothes, the values, customs, without the stigma. Makes it also easier to teach what's okay and what's not, and if someone does something "not okay", they are easier to identify as the ones responsible. Fake or real, a nude photo should give no control to anyone.

It's extremely easy to do all sorts of weird things with AI, all local. Controlling that means controlling the hardware, something none of us wants, and it will get only easier, I suppose. So, doing what I said earlier becomes even easier if these stuff gets automatically devalued by commoditization.

I'm not saying I know better than people who want restrictions, and I'm not trying to offer yet another "ban all bans" opinion, I just don't see any other realistic solution. There are however many other people much more knowledgeable than me in these matters, so, maybe I'll be positively surprised.


It won't work, because if nudity doesn't get the rise those bully crave, they will go toward depicting sexual acts. And you don't want to devalue that, girls have enough trouble reporting SA as it is.

Perhaps they observe being "pure", and "clean" valued too much, and they see again and again the people who had their sex tapes leaked getting bad publicity. Perhaps that's why cannot report it? I remember Sibel Kekilli's German family (of Turkish origin, exactly like me) disowning her because someone found some porn movie of her. Also this:

> In 2017, Kekilli blocked her Instagram account from being accessed in Turkey, saying that users from that country had sent a multitude of abusive and threatening messages.

and this:

> A discussion has been trending on X (formerly Twitter) after a post featuring side-by-side images of Sibel Kekilli from the early 2000s and her later look in the popular series Game of Thrones. The caption read, “She was once a p** star, but HBO gave her the role anyway,” which has garnered close to 10 million views.

from https://www.yahoo.com/entertainment/celebrity/articles/inter...

Why should that even matter? So you can see her naked online... So what?! I'm reading "Sluts" from Beth Ashley, and she identifies these patterns perfectly in todays world even when they're not obvious.

Males too, they value being tough too much so they don't report abuse. One example is Chester Bennington (may he rest in peace):

> Bennington was afraid to ask for help, not wanting people to think he was gay or a liar, and the abuse continued until age 13

I have a son, and I would be devastated if I couldn't give my son the courage to report something like this. I'm thankful that in this day and age, the "gay" stigma is much less pronounced (like 0 in this wonderful country called Germany). That said, we still have a lot to do though!

So how do we solve this without making porn and nudity nothing sacred? I remember first coming to Germany and people being confused because I was too shy to change my clothes in the male changing room together. Then I realized... Everyone is naked, why should I be ashamed?


> blocked her Instagram account from being accessed in Turkey

Wait, you buried the lede here! Instagram can block countries? How can I do that?


I agree. My partner works in schools and recently she was talking about how they now run these classes in schools telling the kids not to send nude pictures to each other because it will ruin their careers and if they get out people will bully them, etc.

Of course I agree with teaching kids that people might have various views about nudity, but I think effectively teaching them that if they take nude photos of themselves it is the end of the world and will inflict permanent damage to their reputation as a means to try to prevent it happening is absurd.

I think if anything the opposite would be the better solution – to teach kids that it's perfectly normal and respectable in this day and age for people to share nudes with each other, but that it's important to trust those you share the nudes with if you don't want them getting out.

Similarly with deep fakes I don't think we should be telling kids how awful it is for them to be deepfaked, and that they are a victim etc, but that this is just something that's likely to happen these days and while it's disrespectful, and while they have a right to be angry, it's also not something to get overly worked up about.

I just think we have to be pragmatic about this.. The only reason there's any shame in any of this is because we have a societal sigma around nudity. You're not going to get rid of deepfakes and nudes being leaked, but you might be able to change attitudes such that it doesn't really matter.


This isn't just nudity.

These fakes are made of young women with what looks like cum all over them or in a pose to give a blowjob or be penetrated. Devaluing nudity does not change how people interpret porn.


Sounds like people here want to outlaw non-physical abuse, but that contradicts the first amendment, doesn't it?

No. The first amendment does not provide unlimited protection for all things that resemble speech. Students have further limited speech protections, and sexual speech by students at school has been expressly found to not be protected by the first amendment. Abusive and bullying behavior is similarly unprotected. And while I don't believe that there has been a first amendment challenge to deepfake revenge porn laws, I'd be stunned if such a law didn't survive strict scrutiny.

Democratize the spank bank

I'm sorry but does this have anything to do with npm? I just skimmed the article so maybe I missed it. So wordpress doesn't use npm, it doesn't even use composer, therefore this comment feels a bit disconnected. Maybe that's why?

This must be a Chrome thing, not an Android thing, no? I didn't test this but I'd be surprised if Firefox behaved the same.

Or Firefox would still be using android's file system / upload process, which probably hands off the photos with geotags stripped already.

I'm pretty sure this is what happens in the iPhone at least, so I'd imagine it is the same in Android.


Just tested with Firefox 149 on Android 13. There are no coordinates when I upload an image to EXIF viewer web sites.

I made Claude build me a web app to come up with anagrams: https://github.com/egeozcan/anagramci

I'm now having immense fun trying to come up with anagrams to whole sentences in Turkish.

I guess you could even automate finding anagrams (there are even web sites which allow you to do so), but Turkish agglutination makes it so much fun, and you can make really creative ones manually.

Once upon a time I even had made a tumblr to share what I found: https://sacmanagram.tumblr.com/ (also Turkish).


This exact thing is happening to me since yesterday. It comes back to life when I throw the whole session away.

But the problem is it used to not need that before. These days, you have to think twice before you summon a subagent.

> But the problem is it used to not need that before. These days, you have to think twice before you summon a subagent.

This is exactly what I (and many others) kept trying to tell the pro-AI folk 18 months ago: there is no value to jumping on the product early because any "experience" you have with it is easily gained by newcomers, and anything you learned can easily be swapped out from under you anyway.


The value is all the things I built with it? Surely, this constant change deteriorates the experience but to be clear, here we're nitpicking on the experience, not questioning the value.

I also don't understand the "pro-AI" phrase. It's a tool, it brings results. I'm not pro-car when I drive to work.


> The value is all the things I built with it?

To be clear, the people I were talking about were not referring to the value, but the experience in using these tools.

> I also don't understand the "pro-AI" phrase.

Would you prefer the phrase "AI-boosters"?


Ah, okay, I must have gotten lost in the conversation. Sorry!

> Would you prefer the phrase "AI-boosters"?

AI-booster folk? :)


> AI-booster folk? :)

Could be; I mean, we differentiate between people who use cars as a tool and call enthusiasts "petrol-heads".

I use AI daily, but I certainly wouldn't consider myself either pro-AI or an AI-booster.

(Naming is hard)


So it's agrued that the modern internet functions as a "brainrot industrial complex" (title of the article), deliberately designed to hijack our attention and degrade our ability to think clearly for profit... My counter-point is, isn't everything so these days? Internet just happens to be the main communication channel. Even the local, in-person meetings I've had in the last 10 years or so, are full of distractions, attention-seeking and misrepresentation.

Yes people should make an explicit effort to reclaim their focus, but maybe not directly with digital tools? "Start in the physical world" would be my humble advice.

I strongly believe the digital world is just a multiplier for everything, including our defects. So we should just start at the source.


Why not up the ante a bit; I'll be impressed when they bio-engineer special humans who don't need a dome to live there. Come on, it's been 60 years!!

We could drop Elon Musk and Mark Zuckerberg and Sam Altman and Marc Andreessen out there to see if they're smart enough to evolve.

My money's on M2c A8n: he claims to be from France, but I suspect he's actually from Remulak.

https://www.youtube.com/watch?v=5DUr929pbZ0


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: