Recent submissions

Comment · 2 years ago
So they use lies and deceit instead of anger.
Comment · 2 years ago
Hallucinating about biological threat creation now?
Comment · 2 years ago
I've found that it's useful for explaining things to me, and barely anything else.
Comment · 2 years ago
It matters now because it's easy to do?
Comment · 2 years ago
I work in application/product security and have managed WAFs for multi-billion dollar companies for many many years.

Move DNS to Cloudflare and put a few WAF rules on your site (managed challenge if bot score less than 2 / attack score == x). I doubt you'll even pay anything, and it will resolve a lot of your problems. Just test it before moving it to production please (maybe setup a test domain). Remember, a WAF is not an end-all be all, it's more of a band-aid. If you app isn't hardened to handle attacks, no amount of advanced WAF/bot protection will save it.

Message/email me if you need help.

Comment · 2 years ago
Didn't make enough money off skins this year I guess. Good luck to those impacted.
Comment · 2 years ago
""" The baker, in fact, had unwittingly become a textbook example of how to survive a shipwreck.

First, he delayed immersion; among those who went into the water that night, Joughin was the absolute last to get wet.

Second — and most important — he managed to stay calm and strategize a way out of the water. """

I'll consider this next time I'm in a shipwreck.

Comment · 2 years ago
Do you guys actually share this much locally?

I have my local sync'd to my cloud storage and just pull it down if/when I need it. I'll just email/text people around me if they don't have airdrop compatibility.

Comment · 2 years ago
Fraud is a huge driver of this. The need for high friction is here as more people are issuing chargebacks, hackers are getting more bold, etc.,.

Source: I work in ecommerce.

Comment · 2 years ago
Maybe 5k is the max payout for the bug class?
Comment · 2 years ago
How should one detect this kind of stuff?

Also reverse props to the meta bug bounty program manager for not understanding the finding initially. I know it's difficult managing a program but it's not an excuse to brush something like this off.

Comment · 2 years ago
One of the many applications of chatgpt, I'm not a programmer by trade so any pointers are welcomed!

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton