zucked
Joined 9 years ago
Karma
1,233
Submissions
318
Member since
Mar 8
Recent submissions
Comment · 23 days ago
Comment · 1 month ago
Turns out you're correct, but this store also has a fair number of negative reviews, too. Fortunately for them (or unfortunately for us) they end up a rounding error in their favor.
Comment · 1 month ago
Yeah, the app-free nature of tunnels was a huge draw. Cloudflare does effectively MiTM your traffic, so that's a risk you have accept but the tradeoff was worth it for me. Between that an the secondary authentication you can put in front of your services, I felt much better about opening my self-hosted stuff to to relative 'public'.
Comment · 1 month ago
This article has some inconsistencies with what I experienced. For example, my label absolutely had tracking before being intercepted. In fact, it made it all the way to my city's distribution center.
https://www.freightwaves.com/news/nullship-selling-counterfe...
Here's the trajectory. Note that the final status has updated to no longer say "counterfeit" it's now just "postage assessment".
----- Delayed for postage assessment, Item in transit to destination
August 13, 2026 5:44 AM
Departed USPS Facility
JERSEY CITY NJ DISTRIBUTION CENTER
August 11, 2026 2:08 PM
Delayed for postage assessment, held awaiting payment
August 10, 2026 9:21 PM
Arrived at USPS Facility
JERSEY CITY NJ DISTRIBUTION CENTER
August 10, 2026 4:53 PM
In Transit to Next Facility
August 10, 2026 6:24 AM
In Transit to Next Facility
August 9, 2026 7:13 PM
Departed USPS Facility
MYTOWN DISTRIBUTION CENTER
August 9, 2026 8:18 AM
Arrived at USPS Facility
MYTOWN DISTRIBUTION CENTER
August 9, 2026 1:28 AM
Departed USPS Facility
MYTOWN DISTRIBUTION CENTER
August 8, 2026 10:30 AM
Delayed for postage assessment, held awaiting payment
August 7, 2026 6:29 PM
In Transit to Next Facility
August 7, 2026 9:14 AM
Arrived at USPS Facility
MYTOWN DISTRIBUTION CENTER
August 7, 2026 7:17 AM
In Transit to Next Facility
August 6, 2026 7:04 AM
In Transit to Next Facility
August 5, 2026 5:53 PM
Departed USPS Facility
OPA LOCKA FL DISTRIBUTION CENTER
August 5, 2026 4:46 AM
Arrived at USPS Facility
OPA LOCKA FL DISTRIBUTION CENTER
August 4, 2026 2:33 PM
Comment · 1 month ago
The redaction is frustrating, but I suspect the approach is still at least partially viable, so they aren't interested in giving a playbook for scammers to exploit.
The tool I bought wasn't what you'd think of as a small, inconsequential item. I'd wager it was ~2lbs and was a automotive brake bleeder in a blowmolded case. Probably the size of an old-timey encyclopedia. Cheaply made of course (almost certainly an aliexpress item). The seller I bought from has what appears to be an aliexpress dropshipping supply chain -- they buy the tool for $, ship from a US warehouse in Florida for $$.
Comment · 1 month ago
There was recently an update report published that gives a little bit more information but is still heavily redacted. I presume some of these vectors are still viable for exploit.
https://www.uspsoig.gov/sites/default/files/reports/2026-09/...
Comment · 1 month ago
This report alludes to (but IIRC stop short) of confirming that there is only validation at the designated ports of entry scans.
https://www.uspsoig.gov/sites/default/files/reports/2026-04/...
My suspicion is that these labels are entering the mailstream somehow circumventing the "first" scan.
Comment · 1 month ago
I am pretty sure I bought from a seller using this (or something similar) on eBay. It sent me down a rabbit hole of reading about this type of scam that exploded earlier this year:
https://www.uspsoig.gov/sites/default/files/reports/2026-04/...
Here's how it went down:
https://www.ebay.com/fdbk/feedback_profile/theperfectpart
Note that they’ve sold so much that even 1k neutral ratings are barely registering - they have “100% positive feedback”
I bought a cheap tool from this seller on ebay. Tracking number was provided showing my town as the destination. About four days later, I get an unprompted ebay message from the seller: “I monitor all my shipments and sometimes there are problems so I’m proactively sending you a new one, here’s a new tracking number.”
The original tracking number showed a message I’d never seen before “Item seized - counterfeit postage”. The new tracking number showed postage that had been bought back in January, but never entered the mailstream. Huh. I suspect that buys them time while they re-ship.
I did eventually get the item after another tracking number was provided.
My suspicion is that the seller uses counterfit USPS postage on 'x' number of packages to juice their margins. If you look at the neutral reviews, you can see a pattern — slow postage, lost package, had to replace, blah blah. Look at the positives — rave reviews at how fast things are arriving. Probably because the seller is “paying” for higher end postage via scamming the USPS.
And only when they get caught by USPS do they need to re-ship an item. They must get away with it enough to make it worthwhile
Comment · 1 month ago
Same trajectory, but I've now migrated a lot of my previous tailscale stuff to Cloudflare tunnels -- it opens up the attack vector a _little_ bit (that can be mitigated) and it's app-free (which made it viable for a lot of my non-tech users). Still love tailscale and use it all the time for remote access to very sensitive stuff (ssh).
Comment · 2 months ago
I've done essentially the same thing before (using my existing Go2RTC and Frigate setup) but the challenge I ran into is that the microphones on my cameras just aren't very good.
Comment · 2 months ago
The second bullet point, down to the comma in the middle of the sentence, is what has been driving me absolutely batty of late. It's a surefire tell that I cannot seem to beat out of my outputs. It CONSTANTLY does it, even when you say not to.
Between that and the insistence on "this, not that" structure makes me want to install the caveman skill and use it even for non-code workflows.
Comment · 2 months ago
This is probably the most pragmatic take here and the overall responses support it. There's a handful of practitioners who are seeing some implementation success. They probably had significant domain expertise and are several iterations deep. Then there's a bunch of people who are experiencing the "AI iS mAgIc" approach where LLMs are being shoehorned into workflows with very little effort given to make the process actually… work (well)… to satisfy investor-driven mania. This growing-pains stage will pass eventually and we'll hit some equilibrium.
Comment · 10 months ago
Years is literally just the plural of a single year. Ergo, years feels like the appropriate word here. What are you suggesting they phase it as instead?
Comment · 10 months ago
Was this with the little turle as your cursor? Seeing the "older" kids who could manipulate that program/language to make stopmotion movies might have been the moment that set me on the path of "technology enthusiast" for the rest of my life. The scene of the dimmed computer lab with a whole group gathered around someone's monitor to watch the newest creation is forever etched in my memory.
Locals like them, too - they're charming, generally well-behaved, polite, and it doesn't hurt that they don't have to pay them very much. I like to think the cultural exchange between the Europeans and the otherwise isolated locals is fantastic for broadening horizons, also.