News for hackers. Stuff that matters.

nothasan

The tech is really hit or miss sometimes. I have a pump that used to panic error out on a misused bluetooth connection, forcing you to set it up again.

Eventually the app developers fixed it but, for something that’s supposed to run 24/7/365 without fail it really rubbed me the wrong way.

On a slightly tangential note, I am interested in working on something better although not hardware inclined, so please reach out to me at my username @tutamail.com if you are interested.

"Just another 5 years for a cure"
Re:Ask HN: How would you re-design Hacker News? on Sunday August 20, 2023 @07:01AM (#37197978)
I’d remove flagging or hiding on mobile unless you click on the post because it’s easy to accidentally do it.
Re:Ask HN: What is your preferred domain registrar? on Saturday August 12, 2023 @08:31PM (#37105462)
Have used both Porkbun and Infomaniak, neither with any issues.
- Resell concert tickets and/or other sought after goods on a larger scale?

- Get a few remote jobs?

There’s plenty of inefficiencies around us, you just have to look hard enough.

Re:Google removed my Yubikeys “Just to be safe” on Monday December 26, 2022 @03:52PM (#34141735)
Yep I don’t know what’s going on here. OP posted another reply with the time they added their keys and they aren't recent.
Re:Google removed my Yubikeys “Just to be safe” on Monday December 26, 2022 @03:42PM (#34141633)
I think Google needs to add a better way to secure old / previously inactive accounts. My guess is because your account was old, and your current device, IP and overall fingerprint was different it decided you were an intruder.
Off-topic but what do you think they used here to render the UI. Qt?
I thought a great talk around this area was Engineering You by Martin Thompson [1]. He used the phrase the "era of Software Alchemy."

[1] https://m.youtube.com/watch?v=S4LzzuMTqjs

Re:How to Bypass Cloudflare: A Comprehensive Guide on Sunday September 18, 2022 @11:31AM (#32888369)
Some impressive documentation on how to get around this BM solution.
Pretty sure they analyse TLS handshakes for their Bot Management product and probably other things.
Re:Scraping data from an app: real world example on Sunday September 04, 2022 @10:47PM (#32719954)
I have worked with the site mentioned in the article’s API previously. I am not sure why they used the overhead of a "scraping framework" when it was just JSON they needed to parse.
Re:Kanye West's Stem Player – An engineering disaster on Saturday August 06, 2022 @12:36AM (#32364864)
I remember downloading the stems from their API and the serial number checks were just length check of the parameter. Surprised that Donda 2 is still not available on any streaming platform.
Reducing the amount being injected is still having to live with it.
There was two stages for that sale (possession requirement + public). And someone was still able to automate and purchase 1% of the entire supply.
Pretty easy to automate this
Re:How Telegram Messenger circumvents Google Translate's API on Friday December 31, 2021 @06:55AM (#29747199)
If they used cronet, they could get past these checks.
Re:Ask HN: How to start learning embedded systems? on Wednesday July 14, 2021 @12:13AM (#27829649)
RISC V is an option I guess
Re:Amazon.com product pages are down on Monday July 12, 2021 @03:33AM (#27807969)
A CDN is a reverse proxy with the ability to cache. They are not very different.
Re:Amazon.com product pages are down on Sunday July 11, 2021 @11:54PM (#27806845)
Pretty sure they use CloudFront
It’s not just cybercriminals who want to MITM. There are nation states who have been tapping fiber optic cables for a long time.
They were acquired by VF Corporation last year.

https://www.vfc.com/investors/news-events-presentations/pres...

Re:Amazon insiders sound alarm over security on Thursday February 25, 2021 @12:28AM (#26260006)
And how does this solve the problem of information security?
Re:Mold: A Modern Linker on Tuesday February 23, 2021 @02:21AM (#26234672)
Would emulsifier roll off the tongue better?
Re:Common security issues with crypto websites and APIs on Tuesday December 22, 2020 @08:04AM (#25505827)
Couldn’t you also avoid rate-limits and such with setting your own X-Forwarded-For header? I guess the site operator should have been a bit more vigilant and used the Cf-Connecting-IP header in that specific case.
I don’t think this would really count as CLI, you still load up a full browser.
Re:Java is better than C++ for high speed trading systems on Thursday November 26, 2020 @07:26AM (#25219365)
Not sure whether this counts but someone did post their experiences of it on reddit.

https://www.reddit.com/r/rust/comments/bhtuah/production_dep...

Older »