Hacker Newsnew | past | comments | ask | show | jobs | submit | MuffinFlavored's commentslogin

Reprogramming/repairing/recoding the gateway and/or the immobilizer/anti-theft-relevant parts is like... super exclusive?

On the latest models, yes. 2023+ Chrysler vehicles have a "rolling pin code" that the immobilizer requires before it allows enrolling fobs. Chrysler will only hand these out to registered locksmiths (and they charge a fee for doing so).

Now, people have been hacking the RFHUB for a while but it's been a fairly exclusive thing. I also doubt that software updates to the RFHUB are actually signed. I suspect that the next couple of years will see any remaining nonsense worked around by LLM-aided reverse engineering.


> How does "a compromised laptop" lead to a $6bn wipe in a matter of minutes?

I wonder what could happen if somebody compromised Jamie Dimon's laptop?


Honestly I wouldn’t expect anything to happen. At my company and all previous ones, everyone knows our CEO would never legitimately email or DM us on slack to ask us to real quick wire a few thousand/million/billion to the Caymans, or buy BTC, and he doesn’t have some global root on our servers either. Even people who have more technical access don’t tend to stay logged into elevated production accounts except at the exact time it’s needed.

Jamie Dimon does not have credentials to log into back office systems at JPMS. I’d be surprised if he even had access to execute wire/asset transfers via front-end tools.

Best a hacker could probably achieve is sending some sketchy emails or messages, but even there people are just going to confirm by verbally communicating with him.

Banks are actually the worst analogy for this sort of thing because there is a ridiculous amount of system federation and ultra-conservative system controls. It can take a month to get a simple route or firewall port opened on controlled networks (god I hate change committees).


hopefully their hashed/salted passwords, right? not plaintext?

Internally, sure. But the application that was (probably) compromised was an FTP client, so it would have received the plain text of those passwords from users as they logged in.

> the application that was (probably) compromised was an FTP client

Thank you, this actually makes some sense. It's disturbing to get these emails with zero explanation what's going on, and very frustrating that user community has to guess. But PHP vuln in a web client intercepting user logins is the only thing that makes sense, otherwise that would mean passwords in the clear or some other 1990s-era nonsense.


For those customers who are still logging in with FTP…

As a precaution they reset everyone’s email passwords, presumably from an assumption people use the same ones for both.

I’m surprise they still let people use FTP.


I came across such a thing recently. The counterparty was a bank, and they point blank refused to update their processes so the people I talked to had no choice but to continue to use something they knew was hopelessly outdated. SFTP was released what, 3 decades ago or so? There is a good chance that whatever was on the other side of that upload was not capable of any kind of secure connection.

I dont really see a problem with ftp over TLS. The protocol might be dated, but it still works fine.

> For less than the cost of this plan, you can get ChatGPT Pro 200, Claude Max 5x, and Kimi Code.

Be a better friend to yourself. Value your time more.


Yikes. I'm not the poster you're responding to, but

1. In this absolutely wild era of model progress, with frontier and near frontier models leapfrogging themselves seemingly on a weekly basis it's good to get experience with a variety of providers

2. This isn't exactly hard with OpenRouter!

3. I've had very good results having models from one provider critique plans and code written by models from another provider. Can't do that without subs to at least two providers


    > Qwen 3.8 27b is the supervisor
    > 
    > Qwen 3.5 4b are the 6-15 minions it controls
    > 
    > Gemma 4 e4b is the validator for the supervisor.

I just use Opus 5.5 and don't think about it?


These are self hosted for learning experience, I could have built an agent swarm in the cloud, but I'd never have learnt the fundamentals.

- Cold starts impact, context length issues, task lifecycle management

- Inefficiencies in delegation, necessitating workflow patterns for small projects (big AIs hide this problem until you scale and they hit the same issues).

- Limits of the AI would be harder to find or notice (e.g. where time - and cost - is being spent needlessly).


Or just use a more capable local model like Qwen3.8-Flash-Next?


Or Kimi K3? /s

Some people are resource constrained.


If the CursorBench 4.0 score diagram is the headline, I read it as "Grok 4.7 xHigh is almost the same as Fable5.1 on low".

Is there a metric for like... time taken when comparing these two? I see score and cost.

If Fable5.1 can knock it out more quickly on low but Grok4.7 might take twice as long to stumble through a problem (and leave behind a bunch of yucky comments or un-needed extra unit tests), are they really comparable?

Or like... the "quality" of the solution? "It works" versus "it's unmaintainable/very messy/hacky".


What is it "inflation adjusted" or is that cyclical because inflation itself measures/is a measure of the cost of diesel (which bleeds into the cost of goods and services)?


It's up 60% from a year ago, so adjusted for inflation, it's actually only up about 57% from a year ago.


> up 60% from a year ago

Inflation is high ... but not that high


Diesel was over $4/gallon in 2005. Please run inflation against that, not last years prices. (I remember 2005 prices I'm not old enough to remember diesel prices in the 1970s, but that would be an interesting place to run inflation from as well)


Have you ever worked corporate before?

It is better to ask forgiveness than permission.


Downside: Finding a seat at an already crowded gate just got harder.

Upside: loved ones get to hang out with loved ones for longer.


> Produce working product first, validate the idea, stabilize the business, start generating profit,

not everybody is so lucky to be able to go in that order? The first part requires upfront capital/investment?


So obviously you start at optimization


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: