News for hackers. Stuff that matters.

naturalauction

We had this exact same problem (the key initially wasn’t a secret but became a secret once we enabled Gemini API with no warnings).

We managed to catch it somewhat early through alerting, so the damage was only $26k.

We asked our Google cloud support rep for a refund - they initially came back with a no but now the case is under further consideration.

I’d escalate this up the chain as much as possible.

In my mind, the ideal product would be an account that invest 100% of my assets in funds of my choice - and has immediate liquidity.

One solution could let me withdraw immediately but and retroactively deducts the last few days of returns (or target a withdrawal fee equivalent to said returns).

Do you know if there’s a regulatory reason this product doesn’t exist?

Re:There is no way out of Chicago’s parking meter disaster on Thursday September 07, 2023 @09:42AM (#37418800)
>That’s approximately a 3% annualized return on investment (1.03^75 ~= 10).

That isn’t accurate, the cash flows should according discounted by the period they’re received in (this contract produces some profits in year 1, more in year 2, etc). What you’ve done is treated it as if the 10x payment is received all at once in year 75.

Re:AI bots are now better than humans at decoding CAPTCHAs on Thursday August 17, 2023 @11:18AM (#37163025)
>Get 5 friends to vouch for you

This approach is used by wechat, you can't make your own account and can only be invited by an existing user. I suspect that wechat has reached enough market penetration that this is now worth it.

Not sure if this is the original, but I found this on youtube.

https://www.youtube.com/watch?v=_Y0U4hmHt44

Sure, but his son (who was also killed in a separate strike) was 4 when 9/11 happened and was 16 when he was killed.
Zoho is one.
Tucker doesn’t claim that his signal account was hacked. He says that he was told “the nsa pulled your texts with another person you were texting.”

This could mean that the other person was hacked, or even that they weren’t using signal at all and were using SMS.

Re:What Is the Most Minimal UK Address Possible? on Thursday March 02, 2023 @08:55AM (#34995635)
I know that many constituent colleges at the University of Cambridge are the only address in their post code. For example, Trinity College is CB2 1TQ.

However, hundreds of people live in each college (they just have large mailrooms), so on a practical level you’d likely need to put your name down if you wanted to get mail.

Re:The 90s Were Objectively the Best Time to Be Alive on Monday February 06, 2023 @02:17PM (#34682585)
In the 80s and the 90s, the USDA systematically discriminated against Black farmers (and farmers of other races), leading to some of the largest civil rights settlements in U.S. history [0]. One metric to hit that could suggest that “Jim Crow is over” is for settlements like these to cease to exist or at least become as common a settlements for racial discrimination by white plaintiffs.

[0] https://en.m.wikipedia.org/wiki/Pigford_v._Glickman

The initial takedown request was a DMCA takedown request, it just was from the City of London Police and cited the aforementioned UK laws.

See:

https://github.com/github/dmca/blob/master/2023/01/2023-01-1...

I suspect a lot of it is due to UK customs regulations. In the US importing items under $800 is tax free once person per day (of course this does harm US businesses) [0]. In the UK the foreign seller has to register for, collect, and remit VAT (similar to sales tax) as well as deal with duties above 135 GBP [1].

[0] https://www.cbp.gov/newsroom/national-media-release/de-minim... [1] https://www.avalara.com/vatlive/en/vat-news/uk-post-brexit-v...

One approach on iOS is to store unique identifier in the “Keychain” (or iCloud itself) which is data kept in the cloud tied to a user’s Apple ID account. Of course this is only an impediment to a determined stalker (who could create a new Apple ID). But a determined stalker could also use a fake name and get a new phone number.

See https://stackoverflow.com/questions/25276393/how-to-ban-an-i... for more details.

The article does state that she was fired.

> Amar was fired in October and Javice, in November.

Re:Ask HN: Sites like Hacker News but in other languages on Monday November 28, 2022 @02:16AM (#33770600)
vc.ru has similar content but in Russian. It seems to be a bit more business focused than HN though.
Re:Attach your private rail car to an Amtrak train on Thursday November 03, 2022 @11:08PM (#33461563)
I haven't taken this route specifically, but a lot of Amtrak routes don't follow roads and don't have great cell service.
Re:The layoffs at Klarna on Sunday August 14, 2022 @01:48PM (#32461280)
I think Klarna can charge slightly higher fees to merchants (it looks like they charge up to 6%) as sales increase with buy now pay later. Also they probably think they can make money off of servicing the debt (late fees, interest on balances).
Not sure if it would work well for paying hourly contractors (they were credit cards so can't be used at an atm), but i've had good luck with creating lots of cards with Divvy in the past. They support weekly/monthly/all-time spending limits so you can control how much they spend and while they didn't have an API they didn't have a problem with me automating it myself.
> "something like almost 40% of young people when they're looking for a place for lunch, they don't go to Google Maps or Search, they go to TikTok or Instagram."

That might mean something like looking to see what restaurants friends have posted about, not necessarily searching.

It’s an app - about 200,000 daily active users.
For context our ads are run entirely on mobile (have updated the post to reflect that). We had an initial consultation with them before turning on ads and they even gave us an estimate. Our implementation was pretty simple too, we just sometimes showed the user an ad when before they could chat with a bot.

Banned from Google AdSense – 70k gone, no explanation

I'm working on an app that lets people create and talk to chat-bots (https://chai.ml/). It's pretty expensive to host so we decided to run mobile ads using Google AdMob starting in early June to cover some of our costs.On the 7th of July, we got an email saying "detected invalid traffic or activity on your account." That same day we submitted an appeal and worked transitioning to a new ad...

( Read More... | 19 comments | 36 points | on HN )
While $150m does seem like a lot, I wouldn't be surprised if a lot of that value was in the lease until 2074 that Cedar Fair changed the terms on (they only get a 6-11 year lease now). Since the area is now prime real-estate, it has a lot more value to a land-owner knowing that they won't have to lease it to an amusement park for another 50 years.
I don’t think it’s particularly uncommon in the US and the donation data is public. This is just the first thing I found on Google, Bernie Sanders had over 5 million individual contributions like halfway through his last campaign [0]. Not to mention that campaign donations can also be for local elections.

[0] https://time.com/5757711/bernie-sanders-34-million-q4-fundra...

For those saying just pay them - I was serving ads with google admob and they just put a block on my account out of the blue. We went from pulling in $3k a day in revenue to 0. There was no support contact, no one to talk to.

Luckily someone at Google was able to get our account reviewed by a human - but many businesses wouldn't have that option.

The uk (at least at the moment) has no federal ID card a bit like the US. Much like in the US it’s a point of contention when voter ID requirements are being mooted. That being said they managed to roll out a vaccine passport pretty easily.
Re:World's top graduates get new UK visa option on Monday May 30, 2022 @07:39AM (#31557951)
It has, from the article.

“The scheme follows changes to allow foreign nationals to stay and work in Britain for up to two years instead of having to leave after finishing a degree.”

Older »