Sephr

Joined 17 years ago

Karma
4,474
Submissions
1,384
Member since
Mar 10
primary payload (run as admin for best experience): https://dangerous.link/virus.exe
View on Hacker News

Recent submissions

Comment · 3 months ago
Apple has degraded privacy online through Safari's cookie-preferential storage partitioning (i.e. site capabilities are penalized for using private localStorage instead of cookies), requiring sites to occasionally leak data over the network for multi-subdomain same-site web applications. These applications can privately share local state offline in Firefox and Chrome but usually serve the lowest common denominator, so many webapps use cookies to support Safari.

They're pro-privacy when it serves them financially.

Comment · 4 months ago
I hope that AI labs aren't going to wait for widespread distribution of malware encoding novel CBRN & AI info in its fundamental execution architecture (wholly preventing analysis by these safetymaxxed 'frontier' models) to care about dealing with this problem at an architectural level
Comment · 4 months ago
I make privacy tooling and Fable 5 rejects the vast majority of my prompts to analyze and improve the software that I've written. It's bleak.
Comment · 5 months ago
Manual string replacement with a hardcoded list of cases for escaping as suggested by the article isn't good advice for the use case of 'support inserting arbitrary text'.

Do use CDATA nodes, but only work on XML with an actual XML DOM library instead of string manipulation. Browsers have these built-in (DOMParser).

Comment · 6 months ago
Judging by the graphics used in the launch event, it may actually be miniLED. Perhaps they aren't mentioning this so people don't compare their max 700 nits full screen brightness to other vendors' >1000 nits full screen brightness.
Comment · 6 months ago
Where are you getting that this doesn't have a unified memory model? This laptop uses an iGPU with shared memory.
Comment · 6 months ago
My main gripes:

- There's zero mention of the display technology, just "2.8K Touchscreen Display"

- The optional HDMI ("3rd Gen") adapter is only 4K 60hz, when the host chip has integrated Thunderbolt 4 which can output 4K 240Hz

Comment · 7 months ago
Going to be interesting to see how this affects Uber prices in Colorado. afaict Uber heavily engages in surveillance pricing but claims otherwise, deferring to 'discount' terminology.
Comment · 8 months ago
You're off by a factor of a trillion. It's 6.6 TFLOPS/W.
Comment · 8 months ago
Discord would have never gotten to where it is today if not for the Mumble community never shipping a decent fully-featured web UI. There were multiple efforts throughout the years but iirc they were not coordinated and didn't gather much momentum.

It's not too late to make another tool that can fit this niche. There's currently nothing that checks every box for me, especially when it comes to UX and security/privacy. I started designing an open source comms framework with a friend to fit this niche a decade ago and feel somewhat motivated to try again in the future.

Comment · 9 months ago
I'll post about the repo and more on my blog once I'm ready.
Comment · 9 months ago
I'm planning to eventually launch an open source platform with the same name (peerweb.com) that I hope will be vastly more usable, with a distributed anti-abuse protocol, automatic asset distribution prioritization for highly-requested files, streaming UGC APIs (e.g. start uploading a video and immediately get a working sharable link before upload completion), proper integration with site URLs (no ugly uuids etc. visible or required in your site URLs), and adjustable latency thresholds to failover to normal CDNs whenever peers take too long to respond.

I put the project on hiatus years ago but I'm starting it back up soon! My project is not vibe coded and has thus far been manually architected with a deep consideration for both user and site owner expectations in the web ecosystem.

Comment · 9 months ago
My other canonical link is https://hacker-news.addon.download/account-takeover-xss-poc

Unfortunately I can't guarantee fully automatic processing

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton