jwally
That should give some hint about how difficult it is to do in real life, at scale.
Show HN: Cross Origin Tracking Safari
So this is a proof of concept to demonstrate how cross origin tracking could work in Safari. Turn consent into a captcha once and silently track the user going forward. Upsides: this could let you complete a captcha on one site, and have its grant carry over to another site seamlessly.Downsides: Cross origin tracking.
Ask HN: Honey Pots in 'who wants to be hired'?
So I put my info into the hackernews 'who wants to be hired' this month, and I've had 5(?) fake recruiters reach out (all rando8374*@gmail.com). It would be awesome to recruit security researchers or law enforcement or whatever to snipe people like this.I think even the _threat_ that the 'job applicant' is a cop seems like it would deter this behavior in a non negligible way. /shrugPutting it...
Dialects and syntax are weirdly fascinating .
Humble Proxy Detection
Obviously, this would be a SAAS -I wouldn't want webmaster at jocokfuel.com or whatever having to roll their own rust stun server and make TCP RTT measurements :-)
Spun up a quick and dirty demo at https://proxy.kyc.red
More detailed description is in there.
I just ran some proxied sessions through your demo - really impressive! FWIW, make the "BLOCKED" text bright red and bold - success/accepted green.
Would love to chat more about what you're doing and how you're doing it.
I'm justin at wolcott dot io
:salute
How to Detect Residential Proxies
I'm feeling pretty depressed right now, and hopefully sharing this little anomaly I discovered in January might help someone make the world a better place, and figure out how to put a dent in online crime. Fuck criminals.Most residential proxy providers that I've seen don't support UDP. UDP is what WebRTC uses and has been part of the browser's "core" since 2021. If someone says they're on...
Remote: preferred
Willing to relocate: No
Technologies: TypeScript/JavaScript, Node.js, AWS, Cloudflare Workers, distributed systems, high-scale data pipelines, fraud/security
Senior technical lead specializing in ambiguous, high-scale systems. I turn messy security, infrastructure, and data problems into pragmatic production systems—recently cutting cloud costs by $200K+/year. Seeking senior/staff engineering or technical leadership roles with real ownership.
LinkedIn: https://www.linkedin.com/in/justinwwolcott
Email: [email protected]
If you're needing to give the model direct and broad access to your SqlServer instance...I don't get it.
Dedicated customer facing API is like whitelisting approved actions; MCP feels like getting an LLM to enforce a complex blacklist.
Ask HN: Why do we need MCP?
Why not just publish your API docs and let the client's bot chain together what calls need to be made.You could even repurpose the MCP so you only ever produce the API documentation as EVERY response. No LLM necessary.
Sam Neil - Gone. Sean Connery - Gone. Tim Curry - (now)Gone.
All the big names from my childhood are starting to die... Damn.
Plus, I can verify for employers that I am a real human with a real employment history snd I can prove it...by giving them my SSN and Mother's Maiden name? What stops a bad guy from speed rushing the dark web, registering these things en masse and selling access to DPRK?
IP Blacklists, no matter how good can't stop this. You have to start using stats or deep-diving telemetry.
You take IP down, you kill the cancer but you also end up killing the patient.
Show HN: Proxy-or-Not, Proxy Detector
https://arcades.click/proxy-or-not
My humble attempt to detect residential proxies while limiting false positives on things like CGNAT.So far, its pretty successful detecting SOAX, BrightData, and a custom proxy app I built for my phone - but I have a pretty limited sample size.Give it a spin!* https://github.com/JWally/sofa-king-bad-box* https://github.com/JWally/sofa-king-bad-box-android
Phillip K. Dick meets Idiocracy.
The analogy du jour for me is describing AI as the iron man suit. If you are tony stark it makes you a god. If you are my grandma, it makes you meet God.
If it were a box of drugs and he triggers an incendiary device - he's in trouble . If agents trip a protective boobie trap and destroy the box- he is fine.
Don't know why but this feels correct to me.
Realistically though, whats worse - this thing going rogue or OpenClaud breaking out of its container and shredding a nation's infrastructure like a platoon of gremlins? Genuine question...
Dedicated Infrastructure > automation > ad hoc scripts > non deterministic llms from a dependability perspective alone. Using an LLM to do something that prettier could have done is analogous to using a 3d printer to nail up a fence.
I created a json like schema/struct/whatever to describe the problem. Maybe adopt something like this and more people will be able to see how they could use your tool:
https://github.com/JWally/jsLPSolver/blob/master/API.md
I need to re go through the docs, but you get the gist.
Here is the Berlin Airlift problem for example:
const model = { optimize: "capacity", opType: "max", constraints: { plane: { max: 44 }, person: { max: 512 }, cost: { max: 300000 }, }, variables: { brit: { capacity: 20000, plane: 1, person: 8, cost: 5000 }, yank: { capacity: 30000, plane: 1, person: 16, cost: 9000 }, }, };
China gets sanctions and stale chips - fine, they just DIY the algorithms through CPU instead of GPU and open source it.
American warships have the latest, coolest, highest-tech tactical weaponry imaginable - which is great until you have to fend off 10,000 consumer/wal-mart/IED grade drones at $2mm/clip.
Money is amazing, but if you lean on it too heavily in lieu of _practical_ innovation, it'll bite you in the ass. The apocryphal story of the Soviet Rocket scientist who suggested using a pencil instead of investing 100k in a space pen that worked in 0g's.