bstsb
bstsb on Hacker News
for claude, did you have to use Opus 4.8? my experience of opus 5.5 or fable is really high rates of [cyber] blocks.
indeed i found i couldn’t even give Opus my origin IP a few days ago - i had to give it access to an MCP tool that just returned the IP address!
grrrr, i hate grayscale backgrounds and simple fonts!
would you rather claude-esque purple gradients and glowing borders?
“espionage” would involve a private key shared with the three-letter agencies, not a key anyone could crack in seconds
i just took down all my PHP sites for the last few hours. they’re proxied behind Cloudflare so i know there were mitigations, but infrastructure can’t be breached if it isn’t running!
the interesting element of the article for me wasn't "somebody put malware on a torrent site", it was how the author reverse engineered the .exe to see why the file ended up there
remind me which race makes up 81% of prisoners convicted of a sexual offence in the UK?
remind me what the home office said about which ethnicity “group-based child sexual exploitation offenders” are most commonly?
it’s an article on furthering scientific research from what is arguably one of the top-three AI research labs in the world. i’m unsure what else you expected from HN
it’s alright, they’re making fun of the “security risk” Anthropic’s CEO, not their darling Altman
haven’t been properly rickrolled in years, wasn’t expecting that!
oh come on, i bought my series 11 last week!
i'm going to miss out on all those amazing new features, like... an improved heart rate variability measurement
my opinion on things like this (and the previous news about Mullvad) is that companies should be free to use their money for political reasons, and fund who they want, even if i vehemently oppose those views.
however, individual consumers are also free to stop supporting who they want - that’s why I switched to iVPN after my subscription ended
seems like a very similar idea to a site made by walzr, previously posted to HN. i’ll find the link somewhere
for me on chrome (stable), all that’s needed to install my own extensions is enable Developer Mode in chrome://extensions, then load an unpacked folder as an extension
looking at the source code, the entire phishing page is an iframe created through `srcDoc`. the script itself has no command for Mac users to run, so in my case it just copies "Oops..." to my clipboard - the iframe only loads the first time a user visits the page, after which only a tracking script remains.
it also sets some interesting scripts to your LocalStorage, which are evaluated upon each page load.
the first sends an object to another remote server, { c: <contract address>, e: encrypted base64 blob of basic device info }.
the second calls an API to make said smart contract run the function whose selector is 0xca3348d9, with no parameters, and return the result. the address is 0x58460d0b3d4d6b03761c89120393c0c676676496
edit: this is wildly complex, way more so than a traditional ClickFix attack. it's fetching JS scripts from a Ethereum/Base contract and executing them - i've never seen something like this before. it's got a kill switch too and a cooldown, so i'm no longer experiencing the initial malware dropper on my device "fingerprint"
> Google search is on the way out. I don't know any of my peers who use it anymore.
bear in mind we're on Hacker News. Google's market share is still above 90% - in almost any other market this would be a ridiculous monopoly.
don’t know why you’re getting downvoted, they gave legacy users literal years to migrate
+1 on infisical. brilliant self-hosted offering, i love their CLI and it works well with CI pipelines
different people work in different ways. just because you hate it doesn't mean it won't be helpful for others.
also if you're buying used books, expect them to be used!
then every casual user would switch instantly to Gemini, or the most convenient alternative
> The default applies only to version updates. Security updates still open immediately, so critical fixes are never delayed.
does this require a real vulnerability report, or CVE? if the package is compromised would they just be able to push a false "critical update" that bypasses this wait?
as far as i remember only the Pro tabs are paywalled (the ones created professionally)? the community tabs are all freely available on web, and carry little restrictions on mobile
people have been mistaking AI conversations with reality since the very first text-based models came into the public view with ChatGPT. i'm sure with each incremental improvement to outputs like this, though, more people will get convinced of its "humanity"
(see https://www.reddit.com/r/MyBoyfriendIsAI/)
can Vercel give any assurance that they won’t add a reliance on their closed-source cloud offering for the package? especially given their ownership of next-auth too
i really loved better-auth’s DX but the nature of their database adapters means it’s relatively easy to switch over to another provider/library
i think the point is that one actually burns disk space, while the other is just a nuisance for people on plans with limited data
i remember making my first HTML app when i was your age - my teacher let me use the computers after i finished my work, and i used JSFiddle to learn the fundamentals. if it weren't for the supportive adults around me i would never have got into the field of computing today!
good luck with making more projects :)
i think honestly it’s the opposite. it still confuses me why meta invested so much in their pointless experiments (think any of their AR ventures) when their main source of revenue was, and continues to be, their boring advertising on consumer apps