barnas2

I ordered from JLPCB like 2 weeks ago and didn't need to give my SSN.

> I was impressed, just had the standard talk about how you have to assume everything you put out on the internet never goes away and that you really have no idea who is on the other side of the screen, never share personal information, etc

This feels pretty level headed. My parents seemed to be of the opinion that the internet consisted entirely of pedophiles and me. Talking to anyone for any reason got me in a ton of trouble. All it meant was that I got really good at hiding stuff from them as a kid.

That's what I did. Just an esp32 relay board with a tiny screen and a knob. Then I put more esp32 sensors in each room to get individual temps, with HA logic to select which room the thermostat pays attention to. If HA dies for some reason it falls back to a local control and I'm back to the same situation as before, a thermostat that only pays attention to the temperature in the hallway it's installed in. All the boards were flashed with ESPHome.

I built a portable meshtastic terminal using Claude and a Pico 2. It's written 100% of the code in MicroPython and it works great. It even wrote the driver for the E-ink screen I'm using. I built a jig to hold a webcam and the e-ink screen, then had Claude write a script/MCP that takes a photo and crops just the screen out. Then I asked it to figure out a driver, and after a 20 minute loop of taking photos and updating it's driver, it was done.

> Flux.ai offers a PCB design solution

"solution" is an interesting choice. I haven't talked to anyone who tried it and actually got anything useful. It completely failed when I tried using it.

Clear procedures are the entire point of incident response plans. You follow them because of the fact that your judgement can be compromised in the moment. They re-triggered the malware payload because they decided to just dive in and handle it on their own in the "fog of war". Which would have been avoided entirely if they'd been following the standard advice to quarantine the machine and contact security so that they can investigate properly, with the developer if necessary.

Your final sentence is completely irrelevant. Blind rule adherence can be an avenue for exploit in certain scenarios, but this wasn't a case of a developer being tricked into following a bad rule. They didn't follow a real and very well justified standard practice.

The takeaway is "wow, we got lucky, we should have security people to loop in for this next time" not your weird life philosophy about how rule followers are a problem.

As someone who works in security, it's really neat that you were able to discover this with the help of Claude. That being said the "I just opened Cursor again which triggered the malicious package" message is a bit eye opening. Ideally the instant you suspected malware that machine should have been quarantined and your security personnel contacted.

Isn't the entire argument for these based on the fact that people don't have an expectation of privacy in a public place? Not that I'm sure they won't try to make an excuse as to why it's different, but as far as I'm aware, you're allowed to just film in public.

>Poker players have intuitive sense of the statistics of various hand types showing up, for instance, and that can be a useful clue as to which build types are promising.

Maybe in the early rounds, but deck fixing (e.g. Hanged Man, Immolate, Trading Card, DNA, etc) quickly changes that. Especially when pushing for "secret" hands like the 5 of a kind, flush 5, or flush house.

> You could make the argument that Patreon isn't much more than a banking app.

Don't give them any ideas.

I'm curious if you tried binwalk? That's usually my goto for mysterious files.

I don't smoke/vape, but I saw some pretty absurd models available recently that really piqued my interest. One had a touchscreen, could run some basic apps, and had wifi/bluetooth support. The other had a d-pad + buttons built in and a few ripoffs of classic games you could play. I bought one of each to start ripping them apart on my work bench and playing with the firmware. Unfortunately I got busy and haven't done much more than look at the internals. They're using some sort of cheap smart watch SoC. It's wild you can get a battery, touchscreen, charging circuit, and a microprocessor for like $12.

> We can only hope the firmware vendors are on top of their game.

You should go into comedy, this would kill at an open mic!

Manufacturers still may not go for it, due to the potential bad publicity. To go back to the toaster example, if some fancy open source software alternative has a critical issue and causes fires, the news will not report it with nuance. "SmartCo Toaster Fires on the Rise!" will be the headline, not "Niche Modding Community Sets Toasters On Fire, And The Manufacturer Had Nothing To Do With It".