lschueller
lschueller on Hacker News
Posted by
lschueller on Tuesday August 18, 2026 @01:39PM
from the theregister.com dept.
Firstly, very cool to stay curious and to aks around publicly. I think, starting with ARP spoofing is a great way to dive into the topic. There are a bunch of youtube videos, explaining this and I made the experience, that there are channels I like way more than others in terms of how they present those concepts. David Bombal, and in this case, Certbros is always worth a visit. Than get a package tool like wireshark or for a more easy-to-start-with-alternative Sniffnet and undetstand how traffic flows and how the things explained in videos and article actually happen in real life. Then level up and get your hands on the actual tools for arp poisoning. But be aware, stuff like that is very easy to track back, if used on people or devices, who would call the cops. Like wifi hacking in general. Easy to do, tempting to try it at your neighbors, but almost certain to get very fast in real trouble with your isp and the police. So, stick to experiments at home.
Posted by
lschueller on Friday August 14, 2026 @07:22PM
from the namecheap.com dept.
Nicely put together. As mentioned in the article, HR might not be a help at all. I for myself would even make the stronger point, that hr in almost every case doea not have any interest in getting involved in such things.
My experience is in general, sooner or later there is an opportunity to talk with the problematic colleague and this is very often the moment, where relationships change to a better. Avoidance looks easy, but often makes things worse in the long run.
Posted by
lschueller on Saturday August 08, 2026 @07:09PM
from the bigthink.com dept.
Splendid, thank you. the european-alternatives.eu is exactly what helped! Appreciate it!
Thank you. Sure. In Europe the "euro stack" approach becomes more and more relevant. So, the issue is more a compliance topic in the way of making use of service provides, who are best-case "eu-headquartered", but at least with a guarantee that processing on my side stays within the european realm. Doesn't mean very little in a technical understanding of security, I agree.
If what you need is a guarantee that your data remains only in the EU, we don’t have that, and we’d rather tell you directly than let you assume otherwise.Is there an alternative that really keeps data in the EU? (And not only in the sense it serves a sales promotion)
Posted by
lschueller on Friday August 07, 2026 @04:30PM
from the heise.de dept.
Posted by
lschueller on Friday August 07, 2026 @12:08PM
from the johnhorgan.org dept.
Posted by
lschueller on Friday August 07, 2026 @11:45AM
from the quantamagazine.org dept.
Some cool ideas. But do you have actual numbers by any chance? Like, wp login attempts per month, ssh connects etc. Just curious, what actually worked and how the measures compare
Wouldn't be super surprised if their ip lawyers already sent a legal title about trademark violations... Some big companies are very fast in tracking such similarities and enforce 800 to 2000 in restitution per violation.
Posted by
lschueller on Wednesday August 05, 2026 @01:20PM
from the securelist.com dept.
Posted by
lschueller on Tuesday August 04, 2026 @04:59PM
from the theregister.com dept.
I'd guess someone in the us fat-fingered ip ranges and mixed up 2.144.0.0/14 (Iran) with 2.148.0.0/14 (Norway)
Posted by
lschueller on Monday August 03, 2026 @08:48AM
from the unit42.paloaltonetworks.com dept.
I do think, there is. But just software, which is only used by the person who vibed it. And which never gets out to a broader public.
Beyond that, you are right.
Posted by
lschueller on Sunday August 02, 2026 @04:36PM
from the aikido.dev dept.
An API for reporting would be nice. Besides that: hope this page came to stay. It's nicely done. Couple of years ago there was a very similar project here on hn, which came to a halt after only a couple of days it got posted
I'm afraid not. My impression is, most are just prompting for the tool they need right now, accept bugs and maybe even security gaps, but save time and pain not searching for an established tool. Which is fine and understandable for private things. But I wonder, how often this happens in professional environments. But maybe I'm just wrong... I have not seen any resarch or evaluation for this claims. Would be interesting, though
Posted by
lschueller on Friday July 10, 2026 @07:29PM
from the en.wikipedia.org dept.
Yes, but this is the perfect circle of slop: generate an ai landing page, throw it into cloudflare drop, ai adopts it, start all over again. For genuine, professional content, I would assume, almost no one uses cloudflare drop, as they already have something in place to test and quickly host some page. Moreover, I expect that scammers and phishing campaigns will have a use for it to quickly up some landing page without leaving a large footprint.
I agree. This is nothing new. And I would even state, that this applies to every sort of idea. Not only coding projects. AI makes an idea life cycle only a bit faster in some cases.
The idea is cool. But the mobile view is slightly off. Mapping of ttp would be nice though.
This includes titles like "End of Watch" and "The Shameless"
There are established ways / protocols to hold and provide cryptographically valid proof of a verification process, without any need to keep the actual id images in any storage. And to my knowledge there is no requirement for compliant KYC (Know your customer) to provide their ID as a proof as long as the verification process itself is compliant and audited in accordance to certain criteria.
You can compare this in a certain way to file hashes. A successful verification with a predefined minimum level of credibility can be encrypted to a special string for later being used, if a service needs to verify the person again. It doesn't matter then, that the original passport images or video ident has been deleted the second after id verification has been completed.
Oh, and what I think is missing, are the fees for the mandatory membership in the industry and trade chamber (IHK) and of course the Berufsgenossenschaft. Especially the IHK is one of a kind... They are absolutely useless and a big bloated mess of self-governance, chaotic and really badly organized internally, but great at billing. When I've dealt with an attempt of fraud couple of years ago, I called them and asked if they have some kind of blacklists, guidelines or someone there, who could help in the case you get an business inquiry you suspect of being fraudulent. Thought, when i pay a yearly fee to them, maybe they have some experience with similar cases from other companies, who might reported attempta of fraud or fraudulent billing. Basically, one perso told me, they don't have a legal department, then I called the legal department directly, they forwarded me to the particular office, who again told me, he never heard of fraud attempts and he doesn't know if there is someone.. And this was the IHK in Hamburg. One of the largest chambers. Absolute joke.
Luckily, it seems you do not plan to import physical goods... This would be a next round of applications, fees, registers and id numbers. There are several countries out there, offering to set up a company legally and in accordance to european legislation within a couple days.
The fees you paid, seem quite high tbh. In particular for notary and court reg. I have the impression that the rates in Berlin are quiet above average.