rany_

The 5% of technical users should not bear the brunt of the technical ineptitude of others.

> Computer Fraud and Abuse Act

Meanwhile it's OK for OpenAI, Anthropic and Meta to hack companies all willy-nilly. Mad world!

Blog post: https://blog.cloudflare.com/wallets/

Could this be used to root Android devices? Does Android ship with algif_aead?

The page looks promising but how can I try it out?

Not if it's their own car industry. They'll only throw the book at foreign companies.

There are lots of different scenarios you can conjure up. Another could be that Israel assassinated him after he refused to support their nuclear program OR to silence him.

First thing that came to mind is that he might have been secretly working for Israel's nuclear program but this is all very speculative. It does feel plausible though given that Israel has already assassinated plenty of Iranian nuclear scientists; so there is some precedent for it.

He is a nuclear scientist so he might have been working for some country's nuclear program?

I can't spot anything conspiratorial in that article, though?

> As part of our ongoing work to protect customers using React against a critical vulnerability, CVE-2025-55182, we started rolling out an increase to our buffer size to 1MB, the default limit allowed by Next.js applications.

Why would increasing the buffer size help with that security vulnerability? Is it just a performance optimization?

I've seen lots of weird tricks malware authors use, people are creative. My favorite is that they'd load up a text file with a modified base64 table from Dropbox which points to the URL to exfiltrate to. When you report it to Dropbox, they typically ignore the report because it just seems like random nonsense instead of being actually malicious.

This is a great idea but I'm a bit concerned about your bandwidth costs and illegal/malicious content being hosted used under your domain.

For the second point, you might want to implement some kind of browser warning similar to what Ngrok does.

Huh, my image viewer claimed it's HEIC specifically. My camera also seems to conflate HEIC and HEIF in the settings. It provides HEIF as a format option, when I guess it should be specifying which codec is actually being used. I had no idea HEIF isn't tied to just HEIC though.

The image is actually HEIF not AVIF :)

Of course they would. Regulatory capture.

In my opinion, regulating AI companies/models is the WRONG way to go. Instead, we should regulate HOW companies/major stakeholders use AI.

I tried out NextDNS and this feature doesn't seem to work anyway. Enabling "Bypass Age Verification" has no effect. I tested it out on PornHub and XVideos.

I also can't find anything different in the returned A/AAAA records compared to my standard resolver.

How does this "DNS trick" work? That to me is a much more interesting detail.

I had no idea. It's too late to delete my comment now.

It's a really ridiculous decision though. There's not a lot that goes into a link redirection service.

TIL that keyboard and mouse data is used to identify "bad" humans not just bots. It's a bit freaky but not at all surprising.

I really doubt it was about security/maintenance burdens. Under the hood, goo.gl just uses Firebase Dynamic Links which is still supported by Google.

Edit: nevermind, I had no idea Dynamic Links is deprecated and will be shutting down.

This is really interesting. How can you detect when it's the same person passing a captcha? I don't think IP addresses are of any use here as Anti-Captcha proxies everything to their customer's IP address.

This is exactly why the whole "vaccine causes autism" got started. We need to improve science literacy before we could say things like that to the general public.

When a layperson hears this, they'll think that there's a small but possible chance that vaccines do cause autism; when what the scientist means to say is that "it's highly unlikely that vaccines cause autism."

Sure but your post is completely unrelated.

We are talking about international journalists not being allowed into Gaza. Your comment is about a local journalist being intimidated by Hamas members.

International journalists are generally allowed to report freely. If there was any intimidation they would be airing it nonstop.

The only reason why people don't use AI models to solve captchas is because paying humans is actually MUCH cheaper.

This is not an advert, I only know about them because it was integrated with Invidious at some point: https://anti-captcha.com/

> Starting from 0.5USD per 1000 images