Top
Best
New

Posted by gregnavis 8 hours ago

OpenAI bots knew about the RubyGems caching vulnerability(tenderlovemaking.com)
263 points | 232 commentspage 4
sschueller 6 hours ago|
The press wants to make it sound like these things are sentient and are committing crimes on their own now.

Highly disingenuous and borderline criminal to spew such disinformation to the public that does not understand what an LLM really is.

Especially incredibly unethical behavior by those spewing this that understand the tech and are doing it for profit motives to get open weight models under control.

novia 2 hours ago|
We've moved on to LRMs now. Get with it.
sschueller 1 hour ago||
That doesn't make them sentient.
veyrnox 48 minutes ago||
[flagged]
toasty228 7 hours ago||
Wait until a blue one does it
driggs 4 hours ago||
I appreciate the minimalist HN aesthetic, but without some context I'm not willing to click a mystery link to "Tender Lovemaking dot com".
bliteben 4 hours ago||
I miss when the internet was fun
emerongi 4 hours ago|||
What’s with the fear of tender lovemaking? Not your thing?
wiremine 3 hours ago|||
It's the personal blog for a well-known Rubyist (i.e., a person who programs in the Ruby programming language). Rubyists teld to be a bit more colorful than your typical software developer (in a good way... most of the time).
saxonww 4 hours ago|||
Don't worry! It's actually "Tenderlove Making," going by how the site header is constructed. Definitely a maker/hacker site, and not whatever you were thinking. Hope this allays your concern.
BowBun 3 hours ago|||
You should learn who the author is, then. Part of learning about our ecosystem.
rietta 4 hours ago|||
The site is safe. It has been a trademark of Aaron Patterson a core Ruby on Rails contributor for decades.
layer8 4 hours ago|||
You get some context by clicking on the “(tenderlovemaking.com)” in parentheses after the title.
tenderlove 2 hours ago|||
You can use this link instead: https://tenderlove.dev/2026/09/11/what-a-time-to-be-alive/

Hope that helps!

ecshafer 2 hours ago|||
Its the personal blog of https://news.ycombinator.com/user?id=tenderlove aka Aaron Patterson, core member of Ruby and Ruby on Rails.
wing-_-nuts 4 hours ago|||
This made me laugh. I too, browse like corporate security is sitting at my desk.
ultrarunner 3 hours ago||
Pretty incredible how much humans can be conditioned, isn’t it?
AdamH12113 4 hours ago|||
It's about OpenAI's RubyGems hack. Totally safe for work.
pelagicAustral 4 hours ago|||
Firefox has got some kind of feature to take a peek at at a link by hovering or something... Now I understand the usecase.
suslik 4 hours ago|||
… a feature which, at least for me, is rendered almost entirely useless by massive cookie banners that always cover the entire field of view of the hover. But, surprisingly, not in this specific case.
bigmattystyles 3 hours ago||||
From an infosec/networking stand point, aren’t still actively loading the site? Whether it’s in a preview window or not?
InitialLastName 4 hours ago|||
Presumably the browser still has to fetch the page in that case, right? From a "surveilled net traffic" perspective, how is that different than clicking the link?
marcosdumay 3 hours ago|||
What kind of esthetic alteration would make you more comfortable clicking on that link?
SenHeng 4 hours ago|||
Based on the thumbnail I think it’s actually tenderlove making dot com, though I agree with your sentiment.
madaxe_again 4 hours ago||
Oh but you’ll go to expert sex change dot com?
maschiojv 3 hours ago||
[flagged]
ekorondy 7 hours ago||
[flagged]
rougehuh 7 hours ago||
[dead]
ur-whale 7 hours ago|
> As long as they’re not vert

Well, at least they weren't nucular.

josefritzishere 4 hours ago||
[dead]
ur-whale 7 hours ago|
Are "rouge" and "rogue" interchangeable words in American English?
inanutshellus 6 hours ago||
No. It's a typo.
philipwhiuk 7 hours ago||
The fact that both are valid from a spelling and grammar perspective makes it an easy human mistake.
gowld 3 hours ago||
Also, the fact that both are very unusual from a spelling perspective makes it an easy human mistake.
More comments...