secretslol
secretslol on Hacker News
Posted by
secretslol on Tuesday July 21, 2026 @06:13PM
from the youtube.com dept.
One of my websites was hacked with this, luckily not one with any users at all.
They did this:
- Two admin accounts in the database.
- plugin dir: wp-content/plugins/wp-core with remote command-execution web shell wp-core-[12 random chars].php
- firewall.php backdoor in mu-plugins dir with admin on GET ?sergei
- cache-seo-helper.php backdoor
- fixer.php which renames the wordpress version number to one which is patched.
I have decided to give up on Wordpress.
Posted by
secretslol on Saturday July 18, 2026 @07:12AM
from the data.stackexchange.com dept.
I really like LM Studio, but this direction of cloud and trust. I think you've totally blown it with a lot of people, because now they'll be forced to remember another million times they've heard a company say the same kind of thing; 'Zero Data Retention' and 'never training on your data'.
I had a quick browse through your site, but I could not see where you are based, but I get whiffs of more American 'trust me, bro' exports which I've been eye rolling at for two decades now.
I think it's the high-heat manufacturing process which kills all microbes. Spores would be unaffected by aluminium foil, so it's defo something else like heat is my thoughts - basically being sterilised during manufacturing.
Costco sell two different types of foil, one is shorter and has blue packaging and the other is longer and has red packaging... It's the red one which is much thicker.
Another thing not mentioned on there about aluminium foil is how clean it is. We work with a laminar flow hood and pull a fresh layer of foil anytime we are working to create a clean base to work on. I can guarantee you that if you run a swab over a fresh sheet of foil and smear it onto sterile nutrient agar that it won't grow anything - that said, we use costco foil which is thicker gauge and not the budget thinner stuff which is definitely inferior.
That's the one. I used a bit of creative freedom when describing a mouse with an EV sports car; it was a rat and an EV taxi.
I even seen a mouse on youtube with it's own tiny EV sports car driving about!
I've been using HN for around 10 years, but in 2024 I really started to dislike it... Not for the people on it, but the people running it. Now to me it's like Google, plenty of people feel like they are stuck in it even though they utterly despise it.
Posted by
secretslol on Wednesday July 01, 2026 @11:35PM
from the theguardian.com dept.
Utterly brazen they are. You'd think they'd be keeping a low profile after the pulled all of those movies, but no - they are doubling down on the asshattery.
Very first thing I asked it got flagged too... Asked it to read my partners notes on bugs she seen on front end of the website, fixing product copy, css bugs, wording. And yep, flagged. Useless.
True, but Trump & Co. did give them permission to let Americans continue using it, but Anthropic turned that down (for now at least...).
I don't think so. During the time I was using Fable 5, I was getting it to clean security bugs that Opus 4.8 had introduced ... bugs which weren't localised to a single PHP file but were caused by cascading data flow through multiple PHP files. I'm not an expert on security but I know I wouldn't have found these myself. I knew from day one of Fable's release that it would do thorough security audits and fix loads of flaws, even offering up PoCs to help show that it fixed them, as long as I didn't explicitly ask it to do a security audit. I just said, "My codebase is a mess," and it went on for an hour doing a thorough security audit and helping plug numerous holes. This was before the "fix my code" story came out.
"Lower ability to perform cybersecurity-related tasks" makes me super concerned it will leave my codebase like Swiss cheese for any American granny with access to Fable 5, when we non-American Brits, or rest-of-worlders, don't have access to it to clean our codebases.
Another day, another excuse as to why Fable 5 was pulled. Just waiting for Anthropic saying the Persona partnership was the fault of the Chinese.
Works out at even more days when you consider working hours. And these downtime events never happen when I'm sleeping, always smack in the middle of the afternoon when I'm working.
'Claude for Government' is the only one with 0.07% downtime, claude.ai has 0.89% downtime and claude code 0.74% - imo, that's a lot of downtime!
Am I right in thinking this is a tiny model which has been trained well to reason, and that's it? Makes me think of a smart person who doesn't know anything about a given topic, but with the right tools will go and research the heck out of it. I really like the sound of this... why have models train on learning anything when you can just train them how to learn and let them get on with it from something as small as a Pi Zero and an internet connection.
Deepseek v4 pro or GLM 5.2 might be a good start. Bijan Bowen from youtube makes some excellent LLM reviews, I'll be watching even more intently from now on. All I really need is a model which is as good as Opus 4.5 was, so this transition should be fine. Thinking of switching too?
I cancelled too, unfortunately! And like Louis Rossman has been saying recently about Anthropic, the folk are "Bad people". The Persona partnership also cements that. I finally have an excuse (need) to test the other high-end coding models on the scene - and might save myself close to 200 per month at the same time for a possible win.
Whoever downvoted me, care to give any constructive critisism about what exactly deserved the downvote? I'm not meaning that in an arsey way, I'm just a sucker for constructive feedback.
This is something I would definitely try to guage what our customers want. Where are you based? When you say "We may share your information with trusted third-party service providers (such as payment processors) to provide our services.", could I see a list of all of those "trusted" service providers, so I can ensure that I also trust them?
I have been having tonnes of fun with your code today, I have added a few little surprises to it :) secrets.lol/note.php
Posted by
secretslol on Tuesday March 11, 2025 @08:32AM
from the show-hn dept.
https://secrets.lol/
Hey HN!I built a lightweight chat app that randomly pairs two strangers for live conversations, with all messages encrypted end-to-end *in the browser* using OpenPGP.js. The server never sees plaintext; it only relays ciphertext. Once a chat ends, everything is auto-deleted.*Key Features:*
• Browser-based encryption/decryption with OpenPGP.js (like ProtonMail)
• Zero registration required—fully...