Hacker Newsnew | past | comments | ask | show | jobs | submit | sumedh's commentslogin

Were the OpenAI board members qualified to board members, they seemed like thay had no idea what they were doing.

I asked Claude to scan my network and check if LG tv is sending data, it said yes. Some domains were blocked by my router some were not, now Claude blocked all lg related tracking/ad domains on my router.

Domains which are blocked now.

prov-lg.alphonso.tv au.info.lgsmartad.com kic.cdpbeacon.lgtvcommon.com au.nextlgsdp.com kic.tv.wiselg.com kic.wiseconfig.lgtvcommon.com kic.homeprv.lgtvcommon.com kic.recommend.lgtvcommon.com au.elastic.lgwebostv.com


I have AdGuard running in my home lab and pointed the router to the AdGuard DNS resolver. I have some general block lists and a special Smart TV block list.

I asked DeepSeek to do the same scan, but given everything goes through AdGuard it’s much simpler to sift through it’s logs. This is what I got:

  * br.rdx2.lgtvsdp.com, br.lgtvsdp.com — 1,200 hits: LG’s ad/content-delivery platform (SDP)
  * br.info.lgsmartad.com — 64 hits: LG Smart AD advertising network
  * aic.cdpsvc.lgtvcommon.com — 141 hits: LG customer-data platform (CDP)
  * aic.cdpbeacon.lgtvcommon.com — 34 hits: CDP data-collection beacon
  * aic*.lgtviot.com, *.lgthinq.com — ~410 hits: LG ThinQ / IoT cloud
  * lgtvonline.lge.com — 350 hits: LG online services / telemetry
  * br.lgeapi.com, ngfts.lge.com, aic-gfts.lge.com, snu.lge.com — ~210 hits: LG APIs + telemetry

Of those, these were already blocked:

  * rdx2.lgtvsdp.com (600/600) — LG ad platform
  * cdpsvc.lgtvcommon.com (~370) — LG customer-data platform & beacons
  * info.lgsmartad.com (78/78) — LG Smart AD
  * ibs.lgappstv.com (86/86) — LG app store
  * aic-ngfts.lge.com (36/36)

General list also catches: Netflix logs (6k), Amazon telemetry.insights.video.a2z.com (700), Datadog (600), Conviva (410), Google DoubleClick (98)

Though some domains still are going through, which are now blocked :)


DNS over HTTPS stuff wouldn't be caught by this would it?

Yknow, admitting you have no idea what you’re talking about and coming up with a solution that doesn’t actually work used to be free.

What?

Apparently, nearlyepic is trying to deliver two veiled insults and a critique of judgement or perhaps of the current state of broader affairs. I'll attempt to translate:

- "no idea what you’re talking" = "you have outsourced expertise to an LLM"

- "solution that doesn’t actually work" = "piecemeal blocking leaves many problems still active"

- "used to be free" = "you / others in general now pay LLM services for the outsourcing leading to poor solutions while in the past poor solutions came for free"


Thanks, I’ll work on accommodating the reading-comprehension-impaired in the future.

I like how you've piecemeal blocked the same subdomain 4 times. Will you do the same for the other 4-component subdomains? In fact, I'm curious what it means to "block a domain at a router".

Really? Did you give Claude the credentials to your managed switch so it could set up a mirror port? Did Claude enable promiscuous mode on your Ethernet interface? Did Claude get a master-mode WiFi AP to intercept all the frames, or did it use SDR? Tell us more about how Claude scanned your network. I am HN-curious about this!


I gave claude ssh access to my router, the router has a block list where you can block domains. It monitored the network traffic from the router.

So in trying to get one big corp from spying on you, you gave another the keys to the castle?

I really don't understand how people give models run on somebody else's server these wide-reaching permissions. Do you really trust Anthropic that much? The government that's hosting Anthropic?


"Giving the keys" doesn't necessarily mean outright cat the private key to Claude. You setup the key, configure SSH config to use it and you can just SSH to the machine without ever seeing the keys. Stop fear mongering unnecessarily.

I wasn't talking about the literal key files, I was talking about the metaphorical keys to the kingdom.

No matter how you set it up, you're giving a cloud service the ability to SSH into your private network.

Surely you must see the glaring security risk this creates?


That is a fair point I should have done with a local LLM instead of Claude.

But not exactly sure what the main issue, how can claude even access the router from the internet. Its not accessible.


> Surely you must see the glaring security risk this creates?

Enlighten me.



I don't see how that's isolated to using harnesses?

Are you going to stop using your browser? It probably has note vulnerability than you can count


How is that any different from calling Claude from any device in your local network? Or is 2 devices that much worse than 1?

You know you can monitor/reject things it attempts to do, right? For anything important I have it write scripts for what it wants to do, then I can review them for anything troubling.

> I gave claude ssh access to my router

Jesus.


> It’s really not that complicated.

You can do that no the average joe.


The "average joe" can absolutely do that...

It's as simple as buying a TV, never hooking it up, and then buying something like an Apple TV that you do hook up to the internet.


If Google's ad revenue is going up he is keeping the shareholders happy.

Just got access to it on Plus plan in Australia. 2 Banked resets as well.

> Biking is almost always accompanied by helmets

Isnt Netherlands the leader in bike riders and they dont wear helmets.


Entire towns got decimated when their jobs went away, such people fill their lives in drugs and vote for politicians who promise to bring back jobs.

So its either work or drugs? No wonder people choose drugs then.

Care to share the problem?

Not OP but here's a problem just today:

I was using an AI to help me set up a container to be used as the Nix build environment for another AI. This build environment would not have Internet access. I was having it base its approach off a previous container used for a Stack build environment.

In its initial analysis of my proposed strategy, it insists as its premier point /against/ the strategy, "you will have to rebuild the container every time your flake.nix changes."

Two head-slapping errors of judgement in saying something like that:

(1) The Stack solution is identical. Change stack.yaml, the container must rebuild. (2) It is not physically possible to do better than this while insisting on an internet-free environment.

So on this point, it was just parroting advice irrelevant to the context at hand. LLMs always have such a bizarre mix of technical knowledge and lack of good judgment.


Not the person who asked, but yes, that sounds like a small lack of judgement, but hardly a huge problem. You just correct it and move on.

I work on some reasonably sophisticated stuff (not inventing a new form of compression sophisticated, but still) and I just don't seem to encounter so many of the issues people talk about with these models.

It's really hard to say why, everyone uses them differently. I generally start complex tasks with a "here is what I am trying to achieve as a high level, here is a file that lists the technical constraints, here are my initial thoughts, here is where I am uncertain, what am I missing, lets have a deep back and forth discussion about it with the aim of ...."

Not always the same prompt, definitely not when the task is simpler, but this usually gets me to a good place before it I get it to write any code.

And our repo has very strong opinions and guidelines for how testing is done - we're lucky enough that we write mostly single threaded low latency code, so testing it end to end is very easy.


> Big companies always seek to buy fast growing startups

Didnt the US go through a antitrust phase phase where they ordered big companies to be broken up.


Will this project make it easier to performance test Apps on the virtual iPhone?


Ya totally, it's real hardware.... I mean, the PCC machines are actually m5's but ya.


I don't really think it is a super accurate performance simulator


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: