News for hackers. Stuff that matters.

WelcomeShorty

Just checked and my account was created (and last used) in 2013...

So at least they get some old accounts to become active again :D

Your remark made me laugh, but..:

"Oct 20 3:35 AM PDT The underlying DNS issue has been fully mitigated, and most AWS Service operations are succeeding normally now. Some requests may be throttled while we work toward full resolution."

https://health.aws.amazon.com/health/status

Re:Can you smuggle data in an ID card photo? on Tuesday May 06, 2025 @09:37AM (#43904974)
In Switzerland we're one step ahead: ID photos get taken at the counter where they're issued.

You get 2, 3 takes and pick the best. Efficient and secure.

We've had people warn for the spam avalanche when we wanted to implement it company wide (about 500 domains).

After 3 years: ZERO spam

Re:I hate online Lorem Ipsum Generator so I made my own on Saturday May 04, 2024 @04:52AM (#40256028)
With an expired certificate?
- May not require a membership. Must accept credit cards. May not charge more without a membership. Must display price per KwH before charging. Phone-based and car-based payment interfaces allowed but must not be required of the customer.

Cries in European. It'd solve some of my absolute pet peeves with charging: no membership, no over charging without membership AND display price BEFORE charging.

The "bill shock" experience is real here. It happens I pay 2x the average price at random locations without any possibility to see that before I'm finished.

Re:So you want to abolish time zones (2015) on Thursday March 14, 2024 @01:29PM (#39706710)
> "What time does the work day start in Australia?"

Is a really bad example, since Australia has 6... or 9, depending how you look at it.

https://www.timeanddate.com/time/zone/australia

I am "forced" to allow "our" domains to be DNSSEC because... an auditor suggested it as a possible improvement and some manager thought it a good idea to do whatever said auditor proposes.

The argument that absolutely nothing that the world relies on, is not being singed (google Facebook reddit Cisco MicroSoft etc) holds no clout with the believers, unfortunately.

Re:RSS is still pretty great on Monday February 12, 2024 @04:45AM (#39343134)
https://theoldreader.com/

Just toss in a site you like, it'll (try to) find the RSS feed, and you're done.

I have about 50 sites added in the old reader, and it makes following them easy.

I used to track all of this as well. Now I drive an EV and there is absolutely nothing left to track.

The only thing I get to "spreadsheet" with is the ever disappointing km/KW. Which is something I try to avoid to not trigger my range rage.

Re:Ask HN: How to find time to learn after full-time job? on Tuesday February 06, 2024 @05:09AM (#39272692)
Priorities.

We all have 24 hours, there is no "finding time", it is just prioritising one thing over the another.

In the mids of my booming (cough) career, I was blessed with 4 children within 5 years. My prios shifted and still I was able to progress in my job, maintain social contacts and sleep :)

Turns out I was maxing my work hours to the absolute max before, and with far less pure time spend doing my job, I reached the same quality & respect. I had been spending my energy / time wrong / sub optimal.

Since that "revelation" I can do soo much more, that I deem important. Including spending very serious quality time with my children & partner. Much more than I was able before.

This really made my day, what a fantastic blast from the past.
Re:One-Pedal Driving Explained on Monday January 22, 2024 @07:55AM (#39088976)
Simply because I've been driving TVs for a while and "in the beginning" when there was no rules for brake lights to be turned on when regenerative breaking, I got into trouble (German highways) with cars driving behind me and not being able to anticipate / react fast enough when I used it.

I quickly learned to force the break lights and started to follow this issue closely. That's how I became aware of the number.

How the EU saddled for 1.3 and not 1.2 or 1.4 is beyond my knowledge.

Re:Please don't make me use another QR code restaurant menu on Monday January 22, 2024 @07:50AM (#39088935)
With the (ATM) highest version of QR codes and the minimal error correction, you're limited to 4,296 bytes(0).

And V40 is not something I've seen(1) in the wild :)

0: https://www.qrcode.com/en/about/version.html 1: https://commons.wikimedia.org/wiki/File:Qr-code-ver-40.svg

Re:One-Pedal Driving Explained on Friday January 19, 2024 @01:39AM (#39052261)
The European Union has a regulation that requires EVs to illuminate their brake lights anytime the regenerative-braking system’s deceleration rate exceeds 1.3 meters per second squared, or about 0.13 g.
Re:Bing Gained Less Than 1% Market Share Since Adding Bing Chat on Thursday January 18, 2024 @10:39AM (#39043055)
And my prediction, based on a pool of 3, is that this 1% will be gone a day later.

Have you tried co-pilot? It is the worst. My 3 year old gives more coherent answers and paints better images.

Re:Live proxy and VPN detection on Monday January 01, 2024 @03:51AM (#38830502)
Cloudflare's Warp:

Proxy Score: 55/100 - Very likely a Proxy VPN Score: 15/55 - Could be a VPN (But Unlikely) Client Score: no client threat

And ipinfo gives me:

privacy: Object, vpn: false, proxy: false, tor: false, relay: false, hosting: true, service: "",

Re:Donkey Kong: A Record of Struggle on Thursday December 14, 2023 @05:27AM (#38639816)
Being from that time: it was't.

We spend much "downtime" learning, reading and writing (pseudo) code. Remember, coding was new, access to existing "examples" close to zero, so we had to figure a lot of stuff out.

Paper (no whiteboards either) was an excellent way to tinker, show off and bounce off ideas.

I still find myself writing / drawing a lot before I actually touch a keyboard.

I had the pleasure to deal with both authorities and the business side of securing platforms that handle the container checks & harbour access.

The forces who are, let's call it "not happy" with any form of security (access control, logging, monitoring, malware, RATs etc.) is insane.

At times I felt nearly half of all involved parties were corrupt. Top to bottom. Commercial and governmental.

Sold absolutely zero solutions and decided to never again deal with the whole industry.

Nicely written and I can only hope that some young, tech savvy person reads it and realises how persistent "law enforcement" can be and how scary it is to be targeted by them.
Re:Canned Food Went from Military Rations to Fancy Appetizers on Thursday November 16, 2023 @07:40AM (#38288847)
TIL!

I had to check and yes, the cans sold here (Switzerland) have the same code. Now I have a new hangup and that's buying those within the right range :)

Re:Signal Public Username Testing (Staging Environment) on Thursday November 09, 2023 @06:02AM (#38203495)
I have no idea either since:

"you’ll need to install and run a new build (links below), and register for a new account with a phone number (you can use the same one you’re using in Production)."

Re:No dogs were harmed in the making of this app on Saturday November 04, 2023 @11:37AM (#38142022)
> "Engineer" is the protected term, and you have to be licensed to use it.

The IEEE documented that a little different:

It is the IEEE-USA position that:

• Individuals who have graduated with an engineering degree from an ABET/EAC accredited program of engineering education should not be prohibited from using the title “Engineer.”

• The protected titles “Professional Engineer,” “Licensed Engineer,” “Registered Engineer,” and variations thereof, should be reserved for those whose education and experience qualify them to practice in a manner that protects public health, safety and welfare -- and who have been licensed to practice engineering by a jurisdiction.

From: https://ieeeusa.org/assets/public-policy/positions/workforce...

Re:Security Vulnerability of Switzerland's E-Voting System on Wednesday October 18, 2023 @10:55AM (#37929595)
Once the "install malware" card has been drawn, you can forget security. Hell, with his argument, you can't even be sure you read what he wrote.

To all experts here: Give it a shot!

https://yeswehack.com/programs/swiss-post-evoting

https://gitlab.com/swisspost-evoting/e-voting/e-voting

For those interested in more on the same topic, there is a decent list of blogs at the end of this:

https://www.cve.org/CVERecord?id=CVE-2023-44487

(and yes, that includes this article here as well).

To be effective, you need to either be prepared to hide behind google, Cloudflare or AWS, OR you need some pretty expensive deal with you (large) ISP who can (quickly) filter on their edge.

Sitting at the end of whatever network, you will not be able to do anything against a sufficient volume attack.

But these ISPs that give something and inform and even isolate their infected customers are few and far between.

Shout out to Dutch ISP XS4ALL who was (is?) very very strict and active in this space.

Re:Bounties Damage Open Source Projects on Monday September 18, 2023 @06:26AM (#37554356)
The "99% of reports were incoherent garbage" is exactly what I become from unsolicited sources. They come mainly in via our (security.txt) email.

Since (2019) we have an externally managed bug bounty program (they have and manage the platform the initial triage of reports and paying the bounties (we decide what is accepted and how high the bounty is), our success rate (actionable reports) has sky rocketed.

Our devs love the reports since these are verified to be 1: documented so well, everyone can reproduce them, 2: scored reasonable (much less in house fighting if it's a low or a critical), 3: simple interaction with the individual who triaged | filed the finding (and eliminating the horrible interaction via 3 or more steps).

The money we spend on the bounties AND the service are easily offset by the quick turnaround times and saved internal struggles & meetings.

Older »