News for hackers. Stuff that matters.

emedchill

Re:The end of Star Trek is now official on Saturday April 11, 2026 @11:38AM (#47731502)
Not true. "Star Trek: United" is in production (just not with Secret Hideout).
Re:YouTube Down for Firefox? on Wednesday April 30, 2025 @10:15AM (#43845581)
Is anyone else getting a javascript error on Firefox? It is causing the whole site to not work for me.

"Uncaught SyntaxError: missing ) after argument list"

left, right, up, and down?
so... there would only be 4 possible choices for a bot to make to guess correctly?
Having special characters is a good idea but having a comma just to break a CSV is dumb. This would only happen if the hacker used a bad exporter or created their own (very poorly).
No. Driving requires a fast reaction time and with remote having an inherent lag in the feed -- count me out.
Re:Does Your Website Really Need HTTPS? on Wednesday February 14, 2024 @08:48AM (#39369681)
If ISP's could do it, couldn't some bad actor?
> don't let the end user know that you were able to send an email.

I need to stress this is a very important point. If you happen to state the email they entered already exists in the system, the attacker now knows that is a valid account then use a known password linked to that email to gain access.

- use CSRF tokens

- route throttling to something high since if they are new users they shouldn't need to hit that form more than once

- don't let the end user know that you were able to send an email. Keep it vague like "if your email exists, you should receive an email soon."

- don't use a personal email server; something like sendgrid can give you a server that is in good/neutral standing

- if you have to handle your own emails, keep up with any bounce backs and always keep an eye your server being on any blacklists to get it cleared out as soon as possible

- honeypots can be useful if the spammer(s) isn't keeping a close eye on their scripts

- put your site behind a DDoS service

I've used Swagger before.
Have you looked into hardware keys? like Yubikeys or the Google Titan?
If you don't want someone/something from seeing your content, don't put it on the internet but if that isn't enough:

- add a disallow in your robots.txt (many people say the bots ignore this anyways)

- somehow have your pages so far down in SEO rankings that bots would deem it incorrect/irreverent

- put your content behind a login; this too has it's issues since the bot handler can just get some login credentials to crawl anyways or a user can copy the content elsewhere

- you could also try gaming the system by making your content so offensive that the current AI censorship fad blocks it

- you could try not linking a domain name to the IP, making it harder to find

- sue any AI developer that you think crawled your content

They offhandedly mention 101 Dalmations and say it wasn't a success but it was profitable enough to get a squeal.
Looks like they strip out the query strings.
It's rated PG-13...
Ex Machina is rated R. It's a great movie but the language, nudity, and sexual content might not be appropriate for a 12 year old.
The Martian, Men in Back, Jurassic Park, Stargate, Minority Report
According to a leak to Business Insider[0], they are still "employed" but are not allowed to work.

[0] https://www.businessinsider.com/read-blunt-email-telling-twi...

Re:Elon Musk buying Twitter is our prompt to leave on Wednesday November 02, 2022 @09:25AM (#33435368)
The article was not about The Washington Post leaving Twitter; it was suggesting everyone to leave it.
Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? on Saturday October 08, 2022 @12:40PM (#33133773)
It could also be that your phone has some sort of MITM or packet sniffing program that is doing an insecure redirect, capturing your intended destination then sending you to it.
Re:Ask HN: Why mobile Chrome says HTTPS site is not secure? on Saturday October 08, 2022 @12:36PM (#33133720)
Without you proving an example, my best guess is that the site is using weak ciphers or old SSL/TLS versions. Technically, it has some security but not good enough by today's standards.

If you run into that issue again, try running it though https://www.ssllabs.com/ssltest/

Re:Ask HN: What websites do you visit for fun? on Thursday September 29, 2022 @08:03PM (#33029048)
pixelplanet
Re:Ask HN: Is changing my job too much frowned upon? on Monday September 19, 2022 @10:24AM (#32898759)
It always depends...

If you are worried about it, just don't put every job experience on your resume; only keep the ones that you think would be a benefit. And if that creates some glaring spots in your work timeline leave dates off too. And if asked in an interview for a timeline you can explain a lot of it. But as always, I would recommend you leave out the negative aspects as to why you left (like the racism and such). It is usually a red flag to future employers when you bad mouth previous workplaces -- justified or not.

Re:Child Porn Allegations at Patreon After Security Team Fired on Wednesday September 14, 2022 @12:16PM (#32839305)
SubscribeStar is also one.
Contact a lawyer
Re:Gab Is Down on Monday January 11, 2021 @07:32PM (#25740540)
yeah, if you're using Firefox's DoH go to about:preferences and at the bottom click Settings for "Network Settings" and change the provider. When I changed it to NextDNS, the site came up
Re:Ask HN: Fast Ecommerce Platform? on Thursday December 31, 2020 @10:44AM (#25593664)
Properly configured, it is less about the platform and more so about the server and your connection to it. Servers with SSD hard drives have a faster seek time. Your cable internet will be faster than a data connection in the middle of nowhere.

PHP platforms are the most abundant in the ecosystem, such as Magento, WooCommerce, Opencart, etc. Meaning it will be easier to setup a sever that would run it. These tend to lean on caching their data/pages to make their page loads faster.

You could go the route of a precompiled language like python and use Django which has several e-commerce platform options. It may take more effort to find and setup a server for it though.

Speed also will depend on how visually heavy the pages will be. If you don't use images/css/js it will be faster.

Older »