Hacker Newsnew | past | comments | ask | show | jobs | submit | ____tom____'s commentslogin

No mention of modifying existing images, which is more important than anything they mentioned.

I think we all know the feeling of getting an image that is ok, but needs a few modifications, and being absolutely unable to get the changes made.

It either keeps coming up with the same image, or gives you a completely new take on the image with fresh problems.

Anyone know if modification of existing images is any better?

Anything better that OpenAI?


Image editing program -> different versions of the image, each with some but not all of the elements you want, on each layer -> mask out the parts you don't need/apply mask, fill with black, soft brush with white the parts you want back in. Copy flattened/merged, drop it back into the image model, keep asking for the changes. As long as each generation adds in an element you want, you can build a collage of your final image.

There was an Edit button in one of the images in the livestream

How can you sue someone without knowing who they are?

How can you sue someone without serving them?


You'll get thousand of attacks a day (and it's been years since I have done this, so probably worse). They try the list of 1000 or so most common passwords across the whole internet. It works often enough to be cost effective.

Yeah exactly. If your password can be bruteforced in 1000 or so attempts you have bigger problems than not having fail2ban on ssh. The parent comment was suggesting someone was hacked in an hour for leaving ssh on default settings, and it's obviously not true.

You're misreading my point. I didn't recommend 'fail2ban' or claimed any machine without it is as good as compromised. I recommended removing the attack surface entirely by not exposing SSH to the public internet. The point is removing an attack surface completely instead of relying on operator competency.

Relying on a 'sane password' is like seeing the stat '1 out of 10 cars is left unlocked' and commenting 'Yeah, but those people are stupid, I'd never forget to lock mine!'. While maybe true, it's irrelevant. It's objectively safer to keep the car in a private garage (Tailscale) than to leave it on a public street. Feel free to leave your car wherever.


particularly as VPS providers typically auto assign a random character root password, suggests the weak one was specifically changed

The story needs a progress indicator. I didn't know if I was almost done, or had another hour to go. So I quit.

Also, there should be an option to just get the story as text.



Sounds like the tax on recordable CDs.

https://en.wikipedia.org/wiki/Private_copying_levy

Ridiculous, and it didn't take money from the right people or give it to the right people. I would expect the same from an AI tax.


Recordable CDs involved individuals making copies. AI is run by a couple of dozen people who give full access to other people's work, metered by the syllable.

It was never legal for massive corporations to record other people's work on CDs and sell them; that's the opposite of copyright. The comparison is absurd.


And there aren't enough security researchers in the world to review ALL the files from OpenBSD.

And if there were, the cost would be more like $20M than 20K.

Having all code reviewed for security, by some level of LLM, should be standard at this point.


The text is too small to read on a phone, and pinch to zoom is disabled. That's pn the first lesson


And after I typed this comment, I retuned to the site, and it was zoom in to the point where I could see one line of text and i could find no way to zoom back out, and all navigation was off screen.

iPhone.


Don't assume that because you don't connect something to the internet that is doesn't connect to the internet.

Things can use cellular modems to phone home. This is already done.

Walmart could also easily cut deals with cable providers for outbound access via WiFi and cover most of the country.


They could also make agreements with ISP's where their TV's can be whitelisted for access to a public or potentially unlisted WiFi, enabling them to connect that way, without the vast majority of customers ever being aware.

Similarly, these TV's could connect to any open wifi hotspot it can find and phone home/download updates that way. Cox for example proudly boasts how more than 4M of it's residential customers modem+router+ap's can be used for "WiFi Hotspots" by anyone - not just the customer/resident - if they have a cox account. I don't see why Samsung or any other manufacturer may approach said ISP's to use this network to update devices under some guise of "convenience" or "seamless updates" ostensibly for their less tech savvy users.

I don't know if these business deals exists, but "smart devices" will often try to phone home/update anyway they can, even if you don't manually configure it on a private network.

EDIT: Forgot the source on the cox hotspots claim: https://www.cox.com/residential/internet/learn/cox-hotspots....


Mine is a Vizio from Target that's never been online. I've gotten close to cutting its wifi antenna circuit to prevent this but I think I got it before they started programming anything like this in and I should be safe if it stays offline.

But then I still think about cutting it in case I ever have anyone over that would be stupid enough to sign in to the wifi on it. Better for it to have never happened.


Comcast/Xfinity does this as well.


Totally correct and a good call out. I did check this as best as I could for this particular model of TV. But I'd have to do the same in a few years if it was ever to be replaced. I suspect I'll have to desolder the cellular module of my next TV circa 2036...


"N is usually small" might need to be revisited.


Boy is that a terrible website. I tried to find a story and give up.


And that's why I always come to the comments before deciding if the article is worth checking out. Thank you for your service.


To be fair, there is a button right at the beginning saying “Jump to story”. It’s not the most obvious, I agree, but it is there.


That's hilarious.

It's like those recipe sites that have 5 pages of nice photos and background story and side tracks and whatnot as the author waxes verbose, so they need to put a 'Jump to recipe' button in so people don't just click 'Back' immediately.

Except this time for an article.

I can't tell if 'skip the junk' is good (junk can be skipped!) or bad (maybe this means there's too much junk on the page?)


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: