Hacker News: gigantaure

New comment by gigantaure in "Anatomy of a Frontier Lab Agent Intrusion: A Timeline of the July 2026 Incident"

gigantaure — Wed, 29 Jul 2026 16:43:12 +0000

I'm not shocked nor surprised by the incident. But I simply don't understand how Hugging Face is advertising this almost to the point of an "achievement". who does a step-by-step visualization to show how they were hacked? (outside of the likes of a Mandiant or Crowdstrike)

Does Hugging Face have a financial incentive in demonstrating OpenAI's model exploit capabilities?

this whole incident, while believable, still seems to me as possibly disingenuous.

New comment by gigantaure in "Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say"

gigantaure — Tue, 22 Jul 2025 14:33:29 +0000

this is barely one year after the CSRB recommended: "...Microsoft leadership should consider directing internal Microsoft teams to deprioritize feature developments across the company’s cloud infrastructure and product suite until substantial security improvements have been made in order to preclude competition for resources. In all instances, security risks should be fully and appropriately assessed and addressed before new features are deployed."

These recommendations followed a review of MS practices following the Exchange online compromise. I highly doubt anything changed at MS since then.

source: https://www.cisa.gov/sites/default/files/2025-03/CSRBReviewO...

New comment by gigantaure in ""Do you not like money?""

gigantaure — Wed, 26 Feb 2025 14:47:12 +0000

a long while ago i was considering a centrally monitored physical security system for my home. that was long before you could easily host your own security cameras with convenient mobile alerts.

The salesman comes to my home. wife and kids are around. He sits at my dinner table and begins with asking me "is your family important to you?"

to which i replied "please leave now". needless to say i didn't buy anything from him.

I have no time with shady sales tactics and manipulation. i can totally relate to this article.

New comment by gigantaure in "Companies ground Microsoft Copilot over data governance concerns"

gigantaure — Fri, 23 Aug 2024 13:34:23 +0000

so much truth in your statement.

I had a recent exchange with Microsoft and a group of CISOs and how it was explained to US by MS is that Copilot relies on existing file sharing security (OneDrive, Sharepoint) to determine what user could receive as feedback from Copilot. While it seems like a reasonable approach to rely on existing controls it honestly sent shivers down my spine. Anyone who had some experience securing MS platforms data sharing knows those become a total mess overtime for large organizations.

New comment by gigantaure in "Montreal’s new rapid transit line saved millions per mile"

gigantaure — Mon, 06 Nov 2023 01:54:53 +0000

the parking is free so of course it's quite popular. Having been there regularly on the busiest weekdays you really have to arrive close to 8:00 to see a full lot. I do agree the REM is sweet and very effective.

New comment by gigantaure in "A cab ride I'll never forget (1999)"

gigantaure — Mon, 16 Jan 2023 20:13:42 +0000

today I'm with my father, he we scheduled for angioplasty which was unsuccessful as he will need heart surgery. His heart is to clogged up. We are now waiting to see the doctor for the next steps.

As I'm seeing him age and become more fragile, I also don't think I've done anything more important that what I'm doing right now.

thank you for sharing this story.

New comment by gigantaure in "Lichess gets a big upgrade. It doesn't go as planned"

gigantaure — Fri, 16 Dec 2022 00:28:16 +0000

that's a great question. I had reviewed the Wikipedia page prior to my comment: https://en.wikipedia.org/wiki/Clickbait

it seems there is no universal definition of clickbait. So I based my comment on this:

1. the article was posted on Thibault's own website that doesn't generate revenue per click. Isn't clickbait associated with the possibility of additional ad revenue?

2. Thibault recently called for help on the issue. This post recaps what he went through. He clearly expressed that the code upgrade process didn't go as planned for him. the post and sub-title feels genuine.

3. Clickbait (to me at least) indicates that there's either intent on generating revenue or self-promotion. I fail to see those conditions here

So that's my logic. So why would this be considered clickbait?

New comment by gigantaure in "Lichess gets a big upgrade. It doesn't go as planned"

gigantaure — Thu, 15 Dec 2022 23:57:11 +0000

Is it clickbait when the top contributor/creator posts on his website? The same website that makes a strong promotion against ad tracking: https://lichess.org/ads

I clearly don't have the same definition of clickbait.

New comment by gigantaure in "Apple introduces end-to-end encryption for backups"

gigantaure — Wed, 07 Dec 2022 19:31:20 +0000

> Apple took away too much of the user's control;

Apple couldn't take away what it never gave in the first place. Anyone using an IOS device should have a basic understanding that Apple highly integrates their devices, OSes and services.

New comment by gigantaure in "[dead]"

gigantaure — Mon, 05 Sep 2022 02:37:13 +0000

A Fortnine analysis on the possibility of AI causing fatal accidents for motorcyclists

New comment by gigantaure in "OpenBSD may soon gain further memory protections: immutable userland mappings"

gigantaure — Fri, 02 Sep 2022 18:39:00 +0000

i just read that page[1] earlier this week. this gives a great view on the amount of work performed by the openssh project after the fork of the last open source version.

[1] https://www.openssh.com/history.html

New comment by gigantaure in "Ford’s electric pickup can power a house for days"

gigantaure — Tue, 31 May 2022 13:56:52 +0000

i'm not a fan of those "true milage no matter what conditions" a half charged EV up north during winter would cut that 150 miles to 75 miles (at around minus 10 celsius which is common in Canada). i wouldn't dare to go very far with that.