Hacker News: kevcampb

Mathematicians want proof OpenAI didn't use their work

kevcampb — Thu, 10 Sep 2026 11:18:58 +0000

Article URL: https://www.theverge.com/ai-artificial-intelligence/993263/where-does-openai-get-mathematics-training-data

Comments URL: https://news.ycombinator.com/item?id=49641792

Points: 77

# Comments: 89

Incident with Github.com

kevcampb — Mon, 17 Aug 2026 13:40:55 +0000

Article URL: https://www.githubstatus.com/incidents/zkxwbgr0cnmx

Comments URL: https://news.ycombinator.com/item?id=49330684

Points: 719

# Comments: 2

New comment by kevcampb in "Atlassian Rovo Exfiltrates Data, Bypassing Controls"

kevcampb — Thu, 06 Aug 2026 08:43:43 +0000

Any recommendations for alternatives for just Confluence and JIRA?

I've been looking at switching to Notion and Linear, but just haven't had the time to complete evaluation.

New comment by kevcampb in "Atlassian Rovo Exfiltrates Data, Bypassing Controls"

kevcampb — Thu, 06 Aug 2026 08:41:05 +0000

Worth reminding everyone of previous discussion when Atlassian opted-in all customers by default for their data to be used for model training.

https://news.ycombinator.com/item?id=47833247

This goes live on August 17. If you haven't switched it off your company IP will be used to train their future models.

New comment by kevcampb in "New Nginx Exploit"

kevcampb — Mon, 18 May 2026 08:54:29 +0000

They've just been released

https://security.snyk.io/vuln/SNYK-DEBIAN13-NGINX-16732761

https://security.snyk.io/vuln/SNYK-ALPINE323-NGINX-16722461

So it seems that Snyk is taking almost a week to get advisories out for an RCE

New comment by kevcampb in "New Nginx Exploit"

kevcampb — Fri, 15 May 2026 13:38:56 +0000

It seems that Snyk isn't picking this up on our docker images. They have a vulnerability published for the nginx binary itself.

https://security.snyk.io/vuln/SNYK-UNMANAGED-NGINX-16679754

But they've not released any vulnerability for the Alpine or Debian packages.

Does anyone know what's happening here? Seems concerning that there's a 2 day old RCE not being picked up.

New comment by kevcampb in "Chrome removes claim of On-device Al not sending data to Google Servers"

kevcampb — Fri, 08 May 2026 09:48:06 +0000

That's on Google apps, that's not on Chrome. That's not Chrome sending your browsing data or content from inside webpages to Google.

New comment by kevcampb in "Chrome removes claim of On-device Al not sending data to Google Servers"

kevcampb — Thu, 07 May 2026 21:30:57 +0000

This seems somewhat specious - it's also quite possible that they just altered the wording to make it less verbose. Does anyone have access to the link "Learn more about on-device AI"?

If Chrome starts sending data from the browser back to Google, that's going to be a huge compliance issue. If you work for a company that processes customer data in the browser, you're going to need to ban Chrome.

New comment by kevcampb in "Atlassian enables default data collection to train AI"

kevcampb — Mon, 20 Apr 2026 14:45:05 +0000

"Your available data contribution settings will be available no later than May 19, 2026."

So let me guess, they're hoping that we forget about this by then, so that they can scoop up our data? I can't think any other reason for it.

New comment by kevcampb in "Atlassian enables default data collection to train AI"

kevcampb — Mon, 20 Apr 2026 14:02:05 +0000

Unfortunately that one has a subheading of "From August 17, the outfit will collect customer metadata by default unless you pay for the top tier"

It's not just metadata, it's all "in-app data"

New comment by kevcampb in "Atlassian enables default data collection to train AI"

kevcampb — Mon, 20 Apr 2026 12:30:40 +0000

I really wish I could find a better source to link to for this. By default, all free and paid customers are being opted-in to their data being used for AI training.

All your Confluence pages, Jira tickets, etc.

https://support.atlassian.com/security-and-access-policies/d... describes how to disable this, but it also appears that the setting to disable this doesn't exist (it's not visible on any of our instances).

Atlassian enables default data collection to train AI

kevcampb — Mon, 20 Apr 2026 12:23:39 +0000

Article URL: https://letsdatascience.com/news/atlassian-enables-default-data-collection-to-train-ai-f71343d8

Comments URL: https://news.ycombinator.com/item?id=47833247

Points: 604

# Comments: 136

Hackers exploiting Acrobat Reader zero-day flaw since December

kevcampb — Thu, 09 Apr 2026 13:21:09 +0000

Article URL: https://www.bleepingcomputer.com/news/security/hackers-exploiting-acrobat-reader-zero-day-flaw-since-december/

Comments URL: https://news.ycombinator.com/item?id=47703398

Points: 12

# Comments: 0

New comment by kevcampb in "Show HN: Sheet Ninja – Google Sheets as a CRUD Back End for Vibe Coders"

kevcampb — Sun, 29 Mar 2026 12:23:15 +0000

Which works out at $100 USD / year. You might think that's trivial, but when you start provisioning multiple environments over multiple projects it starts to add up.

It's a shame that Google haven't managed to come up with a scale to zero option or serverless alternative that's compatible.

New comment by kevcampb in "Updates to GitHub Copilot interaction data usage policy"

kevcampb — Sun, 29 Mar 2026 06:03:50 +0000

This is terrifying. Github was the one provider I did not expect to make such an action. We're now playing whack-a-mole with vendors to try and ensure that our company IP doesn't end up being used to train a model.

New comment by kevcampb in "Mixpanel Security Breach"

kevcampb — Thu, 27 Nov 2025 08:48:59 +0000

That's a mixpanel breach if the unauthorised access was mixpanel staff accounts.

If someone phishes your gmail account, there is no gmail breach.

New comment by kevcampb in "Mixpanel Security Breach"

kevcampb — Thu, 27 Nov 2025 08:08:31 +0000

Possibly because OpenAI have just made a post stating there has been a breach https://openai.com/index/mixpanel-incident/ and implicating Mixpanel as the cause

New comment by kevcampb in "Mixpanel Security Breach"

kevcampb — Thu, 27 Nov 2025 07:22:01 +0000

The title here is misleading. The original article does not state breach and at no point have Mixpanel used that term.

Pixnapping Attack

kevcampb — Wed, 15 Oct 2025 06:05:51 +0000

See also Hackers can steal 2FA codes and private messages from Android phones - https://news.ycombinator.com/item?id=45574613

Comments URL: https://news.ycombinator.com/item?id=45588594

Points: 311

# Comments: 72

New comment by kevcampb in "Gmail will no longer support checking emails from third-party accounts via POP"

kevcampb — Thu, 02 Oct 2025 13:40:53 +0000

Google converted my mum's Gmail account to a workspace account automatically. Now she can't use her bedroom alarm clock because it's connected to my dad's Gmail account and you can't share access to workspace accounts. It's stupidly maddening.

And yes I realise that an IoT alarm clock is ridiculous, but that's not the point.