News for hackers. Stuff that matters.

ortekk

Re:Trail of Bits helps verify the integrity of your Signal chats on Saturday September 12, 2026 @02:43PM (#49675708)
They will allow registering without phone number as a paid option soon.
Reminds me of a time when Tailscale cofounder went on a rant about how big bad AWS charges too much for bandwidth, and his solution was to send that money to Tailscale instead
Re:GLM 5.2 Is Out on Saturday June 13, 2026 @01:58PM (#48519737)
With deluge of Chinese models popping up recently, I believe there's a few issues one needs to evaluate before deciding to use these models:

- Ethics. As known, ou American frontier AI companies are incredibly ethical. And I have yet to see any interviews or blog posts by Chinese companies where they talk about how they are ethical, or at least credible HN comments about it.

- Safety. Do they covertly sabotage or at least refuse to answer questions that could help cyber- and bioterrorists in their nefarious purposes? What about ML-related questions that could help terrorists create AI models without guardrails?

- Child safety. This is especially important with "free for all" open-weight models, most of which are Chinese (ever think about why that's the case?). How are we going to do age verification and KYC with models that anyone can just download on their computer?

- Intellectual property theft. How can we be sure that no output of our American frontier AI models was used while training these Chinese models?

Frankly, there's a plethora of other issues I don't have time to get into right now. Personally, I believe distribution of Chinese models in the US should be paused until they are required to submit models to the government for review and evaluation, to make sure they are made to Anthropic/OpenAI standards.

We need legal grounds for that.

Write to your congressman, congresswoman or congressperson and urge them to stop proliferation of dangerous non-American intelligence. This is a matter of national security and needs to be acted upon as soon as possible, preferably before IPO.

Re:Microsoft Will Delete Your Passwords in One Month on Thursday July 03, 2025 @05:24AM (#44453206)
It's sort of happening already. Members of FIDO threatening to block KeepassXC users [0] from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation

[0] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

Re:SpaceX is now building a Raptor engine a day, NASA says on Wednesday November 02, 2022 @02:22PM (#33440566)
Move fast and break things
Re:Remote code execution in cdnjs of Cloudflare on Friday July 16, 2021 @07:21AM (#27855119)
$0. Their page on Hackerone is a "Vulnerability Disclosure Program", not "Bug Bounty Program".
Re:Corsair Gaming S-1 on Saturday August 22, 2020 @09:48AM (#24244102)
Their keyboards, while pretty, are made of cheapest ABS plastic. One of my keys became stuck just 2 months after the purchase, because of the crack on the keycap fitting. Corsair also refused to replace it.
Re:How Is NordVPN Unblocking Disney+? on Friday November 29, 2019 @11:00AM (#21665084)
Well, I just verified this article's claims with this curl request: curl --head -H "Pragma: akamai-x-get-client-ip" "https://www.disneyplus.com"

It returns different IPs for every request, and these IPs do look like residential ones.

Re:Porting my website to Workers Sites and Zola on Friday September 27, 2019 @02:58PM (#21095191)
You don't have to worry about cache rules, but what about your bill with Cloudflare?

5$/month plan is kinda open ended, you pay for each request above included in the plan (0.5$ for 1 million requests)

With a high-perfomance language like Golang for example, I could write a script that's making 500req/second to your site. That would cost you 20$/day.

With Github Pages it wouldn't cost you anything (or they might disable your page if it costs too much bandwidth, not sure)

Re:OnionShare 2 adds anonymous dropboxes on Wednesday February 20, 2019 @09:12PM (#19213970)
See also Firefox Send - https://send.firefox.com/

Files are encrypted and then uploaded to Mozilla servers. Links automatically expire after some time.

Re:Problem solving with Unix commands on Thursday February 14, 2019 @03:01PM (#19165430)
If you are using python in your pipeline, might as well go all in!

  from pathlib import Path


  all_possible_filenames = {f'{i:04}A.csv' for i in range(1,10)}

  cur_dir_filenames = {Path('.').iterdir()}

  missing_filenames = all_possible_filenames - cur_dir_filenames

  print(*missing_filenames, sep='\n')
Re:Why JWTs Suck as Session Tokens (2017) on Thursday August 30, 2018 @02:13PM (#17879179)
Then why not just use "refresh token" as a session token?
Re:I got locked out of my Google account for a month on Friday December 22, 2017 @11:17PM (#15992892)
My AdWords account got locked a few years back. It was my first attempt to try AdWords on my website. I've loaded around $20 and it almost immediately got locked (not a single ad was shown/clicked). I could never unlock it or retrieve my money from it. So Google has my 20 dollars now.
Out of curiosity, can you... run video games with it?
That looks great! How do you automate google's rank checking? Do you use proxies/swarm of VPS's?
Re:Introducing ProtonMail's Tor hidden service on Thursday January 19, 2017 @05:02PM (#13439859)
I wish ProtonMail would offer more email aliases with its paid plans - credentials reuse is what often allows to snoop on someone's online identity. That would really boost its value in terms of privacy.
Re:Lessons from 3,000 technical interviews on Wednesday December 28, 2016 @05:42PM (#13274305)
Could you please elaborate? It looks like this program is only for people that already have an CS-related degree.

What courses are you taking?

Which one would you recommend?