ack_inc

The socket.dev deconstruction of the worm (https://socket.dev/blog/shai-hulud-strikes-again-v2) suggests that the destructive actions on GitHub were not part of the malware itself.

"The simultaneous activity from US and India confirmed we were dealing with a single attacker using multiple VPNs or servers, not separate actors."

Did it really? It's not clear to me why the possibility that the exfiltrated credentials were shared with other actors, each acting independently, is ruled out.

I would like to know why this comment seems to have been down voted. It's true AFAIK.

"... resent SO and Reddit trying to gatekeep": Am curious why you felt they were gatekeeping your content. They are free websites, and anybody who wants/needs to read your content, can.

"... not giving them free money if they're notnpassing some of the benefits ..." - Could you expand on the specific benefits you wanted them to pass on to the community? As a user, being able to find other people's content that is relevant to my current need is already a pretty solid benefit.

Let's say you start wearing a mushroom as an extra sensory input, and you started doing a dab every time you sensed something from the mushroom

Would you describe that situation as the mushroom learning to dab?

Hi, could you mention a use-case or two where these things made a real difference?

Not certain I agree about the payment part. Why not leave it up to the DM receiver to decide whether / not they want to charge for their time, and to respond accordingly?

Yes, and a few rare users do that.

However, I don't know that users that don't do it are 100% against being contacted by other HN users.

It's possible they're just hiding their email to prevent the usual marketing spam (my own position).

Does the LDL cholesterol do anything useful when it's on the walls of arteries?

Sarcasm?

I'd say your math is wrong. Only a small % of the 11,000 people are going to agree they were scammed.

I don't disagree with your take, but I'd say that's not the only valid take.

One could argue this is an extension for a breaking-news browsing platform.

Hah, didn't even know Twitter had a dark mode.

I've updated the extension to use a dark-mode-friendly highlight color when appropriate. The update should pass the web store review process in a couple days (hopefully).

You're right. I had to reload the extension, then reload the page to get my content script changes injected into it.

How interesting. I experience this problem on both Chrome and Firefox (v121.0.1 on Ubuntu 22.04).

I am mildly curious about why only a subset of Firefox users are experiencing this. Do you mind sharing your Firefox version and OS?

Not sure. I just found myself noticing the scroll-position loss repeatedly over a few weeks of browsing Twitter, and figured I didn't have to wait for an official fix.

Twitter loses your scroll position when you go from a Tweet thread to a reply thread, then come back. This is what the extension fixes.

Twitter does keep your scroll position when you go from a "top-level" view ("For you", "Following", ...) to a Tweet thread, then come back.

Does middle-clicking the tweet not open it in a new tab?

Not in India

I thought it looked great. In fact, I was inspired enough to spend several minutes trying to figure out how the author had done it.

Your comment made me curious: what kinds of insights have you seen BE folks miss due to not working closely with PMs and designers?

Hi mdeeks, could you please expand on where the 1 hour saved per engineer per week figure comes from?

What made you assume the GP has no friends that go back 20 years?

Do you think a person that makes new friends easily necessarily lets old ones go, instead of holding on to them?

Couldn't "proving to them that the LLMs are far from perfect" be accomplished by showing a few examples of LLM hallucination? This does not seem very difficult.

The post says there are no legitimate use-cases for browser push notifications, but I disagree.

I'm building a niche social media PWA (eschewing native apps to save time), and use browser push notifications to let my users know when someone has DM'ed them.