anxman - Hackdot

Re:America's Driver's License Breach Is a National Security Disaster on Tuesday September 15, 2026 @01:24PM (#49715749)

Glad to see someone talking about this

Re:FBI looks into dead or missing scientists tied to NASA, Blue Origin... on Wednesday April 22, 2026 @10:55AM (#47864546)

https://www.cbsnews.com/news/us-military-tested-device-that-...

Things have changed. The weapon was acquired by DOD.

Re:Adobe modifies hosts file to detect whether Creative Cloud is insta... on Tuesday April 07, 2026 @12:52AM (#47670902)

I didn't get this warning on MacOS

Re:Apple Business on Tuesday March 24, 2026 @04:58PM (#47509182)

This was a big pain in the ass for me to figure out. I ended up using the free version of Mosyle and hiring someone on Fiverr to help me figure out how to get the licenses assigned to our managed devices.

Re:US SEC preparing to scrap quarterly reporting requirement on Tuesday March 17, 2026 @01:21AM (#47408954)

Cash vs Accrual

Re:It is sweet and fitting to die for one's country (1921) on Wednesday March 04, 2026 @06:27PM (#47255462)

Same. I had to write an essay about it which helped me appreciate it in a new way.

Re:Your Supabase Is Public on Monday December 22, 2025 @10:38PM (#46362175)

https://supabase.com/docs/guides/auth/auth-hooks

These have gotten much less annoying to use now that it’s controlled through the config.toml.

Re:Your Supabase Is Public on Monday December 22, 2025 @10:36PM (#46362169)

The auth schema is intentionally not exposed to the rest api for security reasons. You need to use an auth hook to put data where you need, or an RPC with appropriate privileges, and of course RLS on any tables.

Re:Your Supabase Is Public on Monday December 22, 2025 @01:24PM (#46357008)

Supabase doesn’t make a public users table by default. The user schema is in auth and secured. The problem is that unskilled developers bypass those controls out of convenience and put data into Public without RLS. Even the Supabase docs warn against this.

Re:Ask HN: My mother was scammed out of all her savings. What should I... on Monday December 22, 2025 @01:17PM (#46356909)

It's actually more complicated, but the draining of scam money at scale (ie: billions) is done with the help of collaboration of the Triads and Mexican cartels. IE: Chinese scammers rob the world of billions. They ultimately end up with tons of crypto but still need to launder it. They collaborate with the Mexican cartels to buy USD cash from them paid via crypto. Then the Triads re-launder that cash or sell it to other Chinese nationals in the USA.

Re:Ask HN: My mother was scammed out of all her savings. What should I... on Monday December 22, 2025 @01:14PM (#46356852)

Crypto

Re:Microsoft won't let me pay a $24 bill, blocking thousands in Azure ... on Tuesday December 02, 2025 @10:40PM (#46130047)

If you want to sign Windows binaries, Azure is the best way now.

Re:PayPal/Braintree's new chargeback policy forces merchants to accept... on Thursday November 20, 2025 @05:50PM (#45998961)

Use Stripe?

Re:I have recordings proving Coinbase knew about breach months before ... on Sunday November 16, 2025 @04:45PM (#45948693)

Not sure if the op is reading, but I also detected the same Coinbase hack around the same timeline. From what I can tell, literally everything was compromised because even their Discord channel's api keys were compromised and were finally reset around April or May. This means their central secrets manager was likely compromised too.

Re:Mind-boggling' poker fraud used X-ray tables, high-tech glasses and... on Friday October 24, 2025 @01:28PM (#45696961)

https://www.markedcardsshop.com

This appears to be the / a source for the devices in question. It's worth reading over the technical details of how it all works. It's both terrifying and impressive. Cards can be identified using a barcode encoded on their thin edge from meters away.

Re:Amazon to end commingling after years of complaints from brands and... on Sunday September 21, 2025 @11:55PM (#45328960)

I received counterfeit toothpaste from Amazon during COVID. I got asthma from using it and never had asthma before or symptoms like that. I purchased tubes from Costco to compare and the Amazon ones were clearly fake.

I left a review to warn others on the page. Amazon removed my review and lifetime banned me from leaving reviews again citing “abnormalities.

Re:Cursor CLI on Friday August 08, 2025 @03:21AM (#44834426)

+1 to this. Cursors Agent feels too difficult to wrangle. CC is easier to monitor.

Re:Google spoofed via DKIM replay attack: A technical breakdown on Friday July 25, 2025 @07:05PM (#44689558)

The wildest part about this? The phishing URL is still live on Google Sites! This article came out 3 months ago!

Re:Show HN: Compass CNC – Open-Source Handheld CNC Router on Tuesday July 22, 2025 @06:25PM (#44653696)

Yeah IMO the Compass appears to be a more convenient design

Re:Using MacBook's trackpad as digital weighing scale on Monday July 21, 2025 @04:24PM (#44640014)

But just to note, I believe you can't pass Gatekeeper/Notary if you use these APIs so it's not possible to sign the app

Re:OpenAI Codex Review on Tuesday May 20, 2025 @05:09PM (#44045951)

It really needs container support

Re:Scraperr – A Self Hosted Webscraper on Sunday May 11, 2025 @07:21PM (#43958131)

Pack ad blockers into your containers. They can be loaded into Chrome and help immensely in suppressing popovers while crawling.

Re:Scraperr – A Self Hosted Webscraper on Sunday May 11, 2025 @07:18PM (#43958118)

By clicking the box

Re:OpenAI Reaches Agreement to Buy Windsurf for $3B on Wednesday May 07, 2025 @11:24AM (#43916925)

I’m spending more on Cursor every month. Worth every penny. I’ve never given a dime to Jetbrains.

Re:Evolving OpenAI's Structure on Monday May 05, 2025 @02:21PM (#43897883)

Not according to Microsoft: https://www.wsj.com/tech/ai/sam-altman-satya-nadella-rift-30...

Re:Show HN: Blast – Fast, multi-threaded serving engine for web browsi... on Friday May 02, 2025 @03:04PM (#43873552)

I was a little unclear at first, after looking at the source code, it looks like Blast uses Browser Use which uses your local browser (in dev) under the hood

Re:Supabase raises $200M Series D at $2B valuation on Tuesday April 22, 2025 @01:39PM (#43764532)

We serve thousands of customers off Supabase for $250/month including PITR. It’s a STEAL. Technical support is also responsive and knowledgeable. Outside of the auth SSR upgrade, it’s technically also been great to work with. Supabase is some of the best value we get from any vendor.

Re:Thieves took their iPhones. Apple won't give their digital lives back on Tuesday April 22, 2025 @02:07AM (#43759473)

Bad actors have compromised the government systems already: https://krebsonsecurity.com/2024/11/fbi-spike-in-hacked-poli.... If Apple complies with those, it means bad actors can also use these vectors.

Re:Is it possible to write plain C iOS app in 2025? on Friday April 18, 2025 @08:56AM (#43727627)

Tauri v2 is very good

Re:We Chose Tauri over Electron for Our Performance-Critical Desktop App on Friday April 11, 2025 @01:40PM (#43656401)

Tauri v2 is very good!