Hacker Newsnew | past | comments | ask | show | jobs | submit | josephcsible's commentslogin

> Brands: JMDHKK, KAXYUYA, JAXTIN, HUYNL, NAVFALCON, SMHAWK, AORDERN, Abyliee, Obsitwy, Suntony, SEVENPARK, PolesNow, MGMCM were tested.

Are there really zero reputable companies who make these products? I did some searching of my own too and all I can find are ones from ones from other trademark loophole alphabet soup brands like these.


You'll have to wait negative six years. https://www.youtube.com/watch?v=BoYBLn9hRqs

If that's good reason to remove Grok and X, then Chrome and Safari should be removed too, since they can be used to access the exact same content.

Chrome and Safari are browser agents, your window to the internet. Where you go is your problem.

X is a curated social network with algorithmic timeline. They’re 100% responsible for what gets posted there. Grok is a service of X, they’re 100% responsible and liable for what it outputs.


Curated means that everything is manually filtered. X is not manually filtered. Just like I can have anything on my domain on the Internet, I can post anything on my timeline and people can access it there.

xAI is actually generating the content, not just hosting it.

When a user is specifically jail-breaking the service to do so, I'll put it on the user rather than the service.

There's no jailbreaking going on here. The filters are all functioning as intended when someone requests transparent, skimpy, impossibly thin, or skin-tone clothing even on posts that explicitly give context that a child is pictured there. It's on the service.

Users just click the "edit image" button on someone else's post, then ask Grok to put a bikini on it. What's the jailbreak?

> Users just click the "edit image" button on someone else's post, then ask for Grok to put a bikini on it.

The user has to click edit. The user has to prompt. Why would you blame the software when these are all user actions?


> Unlike other leading chatbots, Grok doesn’t impose many limits on users or block them from generating sexualized content of real people, including minors, said Brandie Nonnecke, senior director of policy at Americans for Responsible Innovation. Other generative AI technologies, including ones from Anthropic PBC, OpenAI and Alphabet Inc.’s Google, are “giving a good-faith effort to mitigate the creation of this content in the first place,” she said. “Obviously, xAI is different. It’s more of a free-for-all.”

https://www.bloomberg.com/news/articles/2026-01-07/musk-s-gr...


If Photoshop had a "Create Child Porn" button and the user pushed it, we'd blame both the user and Photoshop.

There’s no “create child porn” button. The user has to explicitly ask for child porn. If someone uses GIMP to create child porn, do you blame GIMP?

If GIMP had AI features like this, I'd expect safeguards. It doesn't. All other AI tools have safeguards against this kind of bad behavior that are lacking in Grok.

GIMP doesn’t have AI features, but you can still use it to create nasty stuff and there are no safeguards against that.

As always with AI, the barrier to entry has evaporated. You can create nasty stuff with a pencil but you can't flood the internet mass producing nasty stuff with a pencil.

There are basic, obvious safeguards that are not in place here. That's why the software is to blame. If it was some sort of jailbreaking or circumvention, that'd be one thing. But given the owner himself is amplifying this, this borders on being an intended use case.

Sure, but when I open X, it's literally all over my front page.

Yeah, there is a plethora of images of kids in bikinis on Google search. Reddit and Bluesky have hosted actual child pornography

How is this any better than just storing the value in a password manager, or in YubiKey's "Static Password" mode?

Also, the "ECDSA Public Key Recovery" picture makes me suspect this is AI slop.


How it's better: automatically synced across all a user's devices, not subject to manual interactions with input fields (you can't programmatically request/regen passwords the same way you can with this).

I did use AI for the ECDSA public key recovery diagram, because I wasn't about to spend hours hand rolling that in Lunacy. It's correct in broad strokes, and anyone who wants to understand it more deeply can just look at the code, imo.


IMO automatic sync is a mess with the passkeys, it just muddies the whole guarantees around security based on possession, its not available unless you are signed in on the platform (eg. apple account) making the behavior inconsistent

I think if you are doing it in the browser then you bind the flow to the request origin making it phishing resistant compared to a static, origin agnostic storage

Which brings up another point: the total used disk space of a Windows install with Internet Explorer and Outlook Express used to be way smaller than Gmail alone is now.

Windows 98 and Office 97 in their entirety are less than 700MB combined. How have things gotten so out of hand that a single email client needs more than an entire OS and office suite used to?

Two questions about this:

1. Is it still possible to do a full backup that will let you fully recover from a lost YubiKey?

2. If you set this up and then change your mind and don't want to use it anymore, can you switch back without requiring all of your contacts to go through a rekeying procedure?


Main author here. Sorry for the slow reply, hadn’t realised this had been reposted.

1. Yes 2. Yes

This works because the laptop with a YubiKey will not be the primary device (this should be your smartphone).

So for backup, rollback etc. You just delete Signal on your laptop and relink the device with your primary device.

Disclaimer: the code is PoC quality.


If you think you have all the words filled in properly but nothing is happening, hint: base64(VGhlIGNvcnJlY3QgdHJhbnNsYXRpb24gb2YgdGhlIGFsaWVuIHdvcmQgImN2aXF6dnhxIiBpcyBub3QgIm5ld2hhcnQiLg==), and spoiler: base64(SXQncyAiZXZlcnN0cm9uZyIu). I suspect there may be a bug in the game that it uses the wrong message at one point.

What about Free File Fillable Forms?

Not everyone qualifies. Thanks to tax software company lobbying.

https://www.irs.gov/pub/irs-utl/free_file_fillable_forms_use... says "Free File Fillable Forms has no age, income or residency restrictions".

IIRC if you have other than some basic income types, you cannot use it though.

That's also third party (run by "Free File Alliance, LLC").

> They also remotely wiped my Kindle

I wish the CFAA were used to go after people like whoever at Amazon was responsible for that, instead of people like Aaron Swartz.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: