Hacker Newsnew | past | comments | ask | show | jobs | submit | nawgz's commentslogin

> kernel level AC hasnt even solved the problem

> There are far better ways to detect cheating, such as calculating statistics on performance

Ask any CS player how VAC’s statistical approach compares to Valorant’s Vanguard and you will stop asserting such foolishness

The problem with what you are saying is that cheaters are extremely determined and skilled, and so the cheating itself falls on a spectrum, as do the success of various anticheat approaches. There is absolutely no doubt that cheating still occurs with kernel level anticheats, so you’re right it didn’t “solve” the problem in the strictest sense. But as a skilled player in both games, only one of them is meaningfully playable while trusting your opponents aren’t cheating - it’s well over an order of magnitude in difference of frequency.


i searched "hacking in valorant" and found hella complaints about aimbotting and wallhacking. I can give you a simple way to make that work right now in a way that completely bypasses KLAC. Vanguard hasn't meaningfully solved the problem, and so my point stands. Something as simple as a webcam, a virtual controller, and a cnn can be used to construct a fully isolated aimbot. No memory inspecting anticheat will get that, klac or otherwise. Don't need to go that far though, since streaming means you can simply capture video output realtime, and better than realtime vision/action models exist. Its a project a skilled and motivated highschool student could easily finish in a weekend, in fact, im sure if you search something along these lines you'll find someone doing a video series on exactly this.


What an analysis, “hella complaints”


As opposed to your more high brow verbiage equally low brow take? Come now, engage with the core critique.


Help me understand why you would delete your AWS account if the company and email address are unchanged - I can’t see the motivation.

And on the flip side I can easily see why not allowing email addresses to be used again is a reasonable security stance, email addresses are immutable and so limiting them only to one identity seems logical.

Sounds quite frustrating for this user of course but I guess it sounds a bit silly to me.


This was a secondary AWS account in use by the company that had been in place for quite some time and that secondary account was just no longer needed. So to consolidate things down, it was deleted. Also at that time, SSO wasn't being used for anything with the company - and they were on a completely different email provider.

I'm not arguing that it was impossible to know the long term outcome here, but it doesn't mean it isn't frustrating. If you've spent any length of time working in AWS, you know that documentation can be difficult to find and parse.

I can certainly understand why the policy exists. What I think should be possible is in these situations to provide proof of ownership of the old email address so it can be released and reused somehow.


>Help me understand why you would delete your AWS account if the company and email address are unchanged - I can’t see the motivation.

Have you ever worked in a company of any size or complexity before?

1. Multiple accounts at the same company, spun up by different teams (either different departments, regions, operating divisions, or whatever) and eventually they want to consolidate

2. Acquisitions: Company A buys Company B, an admin at Company A takes over AWS account for Company B, then they eventually work on consolidating it down to one account


In our case, this is exactly what happened. An acquisition of a company where their AWS accounts that were inherited were no longer needed.


It's such a common case, especially in tech with startups and small software companies getting gobbled up all the time I can't see how you WOULDN'T consider it a possible reason


> email addresses are immutable

1. Use "admin@domain.com"

2. Let the domain registration lapse

3. Someone else registers the domain and now can't create an AWS account.

Rare but not impossible.


Sure they can. Use any other email address at domain.com to register.


Yes. There are solutions to all of these issues, but what often happens is these situations come about through the natural course of companies changing over time - different people managing accounts, different providers, etc. The happy path is easy, but the happy path is rarely the one we find ourselves walking down when we inherit a previously made decision.


It’s not hard to imagine a case where maybe there’s 2 offices that had their own separate aws accounts and they closed one.

AWS has been around for quite a while now. It’s also not impossible to believe that there are companies out there that might have moved from aws to gcp or something, and maybe it’s time to move back.


I did something similar.

When I started, AWS was in its infancy and I was just some guy working on a special project.

Now that same account is bound into an AWS Organization.

AWS Changed. My company changed. the policies change out from under you.


> And on the flip side I can easily see why not allowing email addresses to be used again is a reasonable security stance, email addresses are immutable and so limiting them only to one identity seems logical.

If they aren't actually deleting the account in the background and so no longer have a record of that e-mail address, then they must allow re-activation of the account tied to that e-mail address using the sign-up process.


And in this case, it’s actually less secure for this one user and the account if as a workaround I’m required to create an IAM user for them (even though I can limit their use of the system).


what if you stopped using AWS for a while, then came back?


Religion is and always has been about control… it strikes me as exceedingly naive to be surprised the church is backing a pedophile, have you literally ever read any history of any kind?


I am the last person to be surprised at the corruption of any large organization.


Source?


I don’t think it’s actually going to be a big deal. Anthropic’s response to Pete Kegsbreath basically said the only limitation they expect is DoD contractors can’t use it on DoD missions, not a general ban. Now that’s not nothing but there’s a whole business world hungry to generate insane amounts of code for no reason, they’re ready to collect the token tax


Wow, seeking international financial infrastructure development for $80k a year and no benefits is bold!


We detached this comment from https://news.ycombinator.com/item?id=46860117. Please see the rules at the top.


Kind of a weird take given they are one of the strongest AI providers who are the most vertically integrated. Sure, maybe the company isn’t as healthy as it once was, but none of them are - late stage capitalism is rotting most foundations


I saying this as a big, but dimming, Google-stan

Their poor product decisions have driven me away, that doesn't mean I'm still very impressed with everything under that. I'm building my custom agent on their open source Agent Development Kit and the Gemini family.


Is your ignorance intentional? The FBI raided the ICE agents home to remove incriminating paraphernalia and blocked normal investigative processes. Heads of various agencies staffed by Trump loyalists called the victim a domestic terrorist while a video showed him being shit kicked and not meaningfully resisting before being executed by an agent who I would be doing a service to by calling undisciplined.

The entire fact that ICE is in Minnesota instead of a border state with heavier illegal immigration on patrols performing illegal 4th-amendment violating door to door raids is already a complete abomination in the face of American’s rights and their constitution.

And you disapprove of outrage over an innocent man being extrajudicially executed in the face of all of this?

Let me know how the boot tasted so at least I can learn something from this


> The FBI raided the ICE agents home to remove incriminating paraphernalia and blocked normal investigative processes

Can you share what source you’re using for this? I don’t really know how we could definitively know this happened, and I’m extremely skeptical of most media outlets at this point because I have observed them lying nonstop for years.

> The entire fact that ICE is in Minnesota instead of a border state

I believe the official reply to this is that border states such as Texas are cooperating with ICE so there hasn’t been much drama there. That sounds plausible to me. As far as I know they are actively removing people from border states also, and I’m not aware of the people being removed from Minnesota being greater than those removed from Texas relative to state population or number of illegals. Have you seen that actually quantified somewhere?

> And you disapprove of outrage over an innocent man being extrajudicially executed

The police make mistakes sometimes. They always have. As long as the process to hold the individuals accountable is followed, I don’t really see what the big deal is, relative to any other time in history. Of course it is a big deal for the people involved and their families and friends, I’m just speaking from the perspective of third parties such as myself and the people I’ve observed in hysterics over this and various other events in the past years.

> Let me know how the boot tasted

I’m not in any proximity to whatever boots are or aren’t coming down, unless we buy into the “every mean-feeling action is a slippery slope to fascism” angle, which personally I do not. We are very far in the direction of permissiveness on immigration and rule of law generally. If we just rolled back to the laws and culture of 1900 for example, this would be tremendously further than anything Trump has hinted at doing. Like for much of American history most people being deported wouldn’t have been allowed to be citizens, at all, no matter how long they were here. It was only about 100 years ago that there was a Supreme Court case testing whether Indians were white for the purposes of citizenship. They weren’t, and they were deported. It’s like people’s view of American history starts in the 1960s. If we reverted to 1850 laws it wouldn’t be some kind of insane totalitarianism, even though that would be going miles and miles and miles further than we are today. It’s like everyone has been led to believe that our own history is evil.

One hint that things are weird is that if you think about the views of the average American man from 1940, the people in hysterics now would regard him as a fascist, which is obviously ahistorical, particularly since everyone’s fascism benchmarks come specifically from that era. The culture has shifted in ways that really don’t make any sense.


A tank is designed for war. Infrastructure is designed to serve some other utility. Claiming it should also be hardened against (cyber) war is acknowledging that there is an aggressor performing an attack of war, not that the infrastructure is failing the utility it was designed for.

It's fine to have this view that software should be defect free and hardened against sophisticated nation-state attackers, but it stretches the meaning of "defect" to me. A defect would be serving to fulfill that utility it had been designed for, not succumbing to malicious attackers.


okay, so you think just attaching PLCs to an rs485-to-ethernet adapter and connecting it straight unauthenticated to the internet, and then calling it a day is simply perfectly reasonable, since "well.. cant expect to harden against cyber warfare!! no defect!!!" ?

because this is the kind of stuff infrastructure things do, along with MANY other things. Im sure not all infrastructure does it, but plenty do.

This is not hardening, its BASIC security. any scriptkiddie from same country could find it and cause problems.

How far would you say they should go to stop domestic script kiddies from messing with it? and if script kiddies from other countries mess with it, is it now cyber warfare?


Well, your unsourced assertions sound dramatically incompetent, but the linked article says the Russian cyberattack on Ukraine in 2015 was the first malware caused blackout, and the titular event of the article failed to cause harm, which kind of paints a different picture.

I’ll therefore decline to comment on your assertions. I will acknowledge it’s time to consider Russian interference as expected if you are designing an internet connected system, fine, but it looks like it’s non trivial to fatally compromise these systems already.


depends on what you mean by fatally compromise, much infrastructure across europe, and I would strongly think the US aswell(allthough here I am only familiar with 1 example), it is absolutely trivial to atleast temporarily disable and possibly bring some harm for anyone unauthenticatedly.

I am not saying whether russians are doing it or not, im just saying that its not just victim blaming, and that anyone operating with this level of security is grossly negligant and should be severely punished as criminals


> I'm talking about obvious abusive behavior, akin to griefing other users

Right, but we're talking about a private isolated AI account. There is no sense of social interaction, collaboration, shared spaces, shared behaviors... Nothing. How can you have such an analogue here?


Plenty of reasons: Abusing private APIs, using false info to sign up (attempts to circumvent local regulations), etc.


These are in no way similar to griefing other users, they are attacks on the platform...


Attempting to coerce Claude to provide instructions to build a bomb


virtually anything can become a bomb if you can aerosolize it. even beef jerky, i wager.


You can also die from eating 10,000 pounds of beef jerky, but that doesn't mean that it's as dangerous to eat as arsenic.


I was thinking more of Mr. Wizard's demonstration of flour blown through a plastic tube into a funnel containing said flour (or whatever) with a flame above it made a "whoosh" type flame ball.

or places that mill anything that don't clean their rafters, who then get a tool crashing into a work piece, which shakes the building, which throws all the dust into the air, which is then sparked off by literally anything. like low humidity.

see also another example; Domino Sugar explosion.


Hot dogs if you really overdo it on the nitrate salts


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: