CITIZENDOT

(repost)

there's automatic credibility for the posters here. let's say, two people in the same industry, one is present on this platform, and one is not. It can be seen as the one present on this platform stands on their words (and accountable), and we don't know about the other.

partly yes (with the keys and signing), but added stuff is Blockchain and TSA which is also central to the idea.

I love this too, However I'm getting mixed opinions about it ;)

this is great! thanks for sharing

I didn't know chin/neck are slightly bluish, can we make it more explicit without side effects?

updated my website to use jsdeliver CDN for article images. thanks for pointing out.

> VSCode always first asks you if you trust the author of this code

until we do that, VSCode doesn't let us interact with the codebase, so we end up clicking that trust as soon as we open the directory and move on.

When VSCode detects launch commands in ".vscode", It should be rather explicit about running it, like "Trusting this workspace runs the following command on your behalf"

i wish world is so fair

> C2 interface

do you mean the machine which is connected through the victim's machine? if so, i should put this in a VM, run and see where it's sending/receiving requests from. i'll do that.

everything is hosted on github pages, i'll have to use some cdn for images.

hmm, i don't understand why you think this is suspicious. doing their stuff on their machine is ... fine i guess?

wow

> I maintained a very popular NPM package with 43+M weekly downloads

makes sense why they targetted you, good that you have 2FA enabled.

thanks!

It's either leetcode style interviews or take-home assessments AFAIK

might as well "curl https://citizendot.github.io/articles/fake-job-interview-git..." and read the output :')

> I wonder if vscode would still load the script if you click “don’t trust author”

It doesn't. VSCode dev replied here on it here: https://news.ycombinator.com/item?id=46719712.

But, I don't think anybody pays attention to the workspace trust. When ".vscode" has launch commands, it should rather say, "Trusting this workspace runs the following command on your behalf" or something similar.

i should've highlighted that better, it has more gravitas (https://youtube.com/shorts/LpevGTOP1-A?si=DRJUH4EMujesXiXN)

yea, i'm just lazy

fair point

> they could implement verification using company emails

they added this back in 2023 (https://news.linkedin.com/2023/april/linkedin-s-new-verifica...), but very less people actually bother to verify with their email, so not having it doesn't always mean it's illegitimate.

sorry, i added it to set the mood for my site :') yk, like moving lamps at the top, hanging dementor at the right side (only visible on desktops).

should i remove it?

yea, i had fun looking around, this felt like a ctf challenge lol. if they had any vuln on their server, it would've been even better.

std::accumulate is sequential and guarantes in order traversal. std::reduce is parallel version of it

threejs ?

After getting good at it, there is no "additional" prep time, unlike take homes, where you would need to spend hours for every individual assignment. Is that so hard to understand?