News for hackers. Stuff that matters.

tuxone

Is Cloudflare reporting abuse system flawed?

Disclaimer: NET shareholder since 2019 here.Some days ago a redditor was looking for help after getting his credit card charged on a fraudulent e-commerce website.Fraudulent: hxxps://nestmyhaus[.]com Original: https://www.leroymerlin.it/I did a whois and found that DNS records are managed by CF. I submitted an abuse report via the form which was rejected 20 minutes later. Emails to...

( Read More... | no comments | 2 points | on HN )
Maybe there just not enough interest? After all there is good public transportation (especially rail), increasing biking habits and just loving the driving experience.
Re:A look at Cloudflare's AI-coded OAuth library on Sunday June 08, 2025 @08:54AM (#44216706)
> This is what keeps me up at night.

Same here. For some of the services I pay, say the e-mail provider, the fact that they openly deny using LLMs for coding would be a plus for me.

I am referring to the loss of entropy compared to a (theoretically) fully random 20-chars password.
Right, thanks. So from 160 bits down to 70 bits of entropy (there is also fancy syllables and bad words to take into account).
I just opened the Password app for the first time to look at the generator. It seems like the pattern is: [a-zA-Z0-9]{6}\-[a-zA-Z0-9]{6}\-[a-zA-Z0-9]{6} with exactly only one uppercase char and one digit. I don't want to do the maths but that looks like a lot of removed entropy.
Reasons are actually stated, they explained it is not feasible for the general case.

Once the devs have made clear they don’t plan to do exceptions (as other software do) then users should accept it and move on instead of keep harassing volunteers.

Some things you may want to consider when hosting map tiles in production:

- load balancing and caching. Some tiles are much more popular than others.

- how will you update the tiles (sync from OSM).

- if required, how will you manage customizations (and merges with OSM).

Not on production critical systems where there are human lives at stake. Last Friday is a pretty good example of what comes together with ungoverned ‘autoupdate’.
And in critical production systems AV/EDR upgrades should be first tested on lower environments.
> These companies are so massively large that they price in the risk of databreaches as a cost of doing business.

Just make the fine a % of the annual revenue and that will change.

Re:How to Think in Writing on Sunday July 07, 2024 @04:51AM (#40896138)
If it’s all about thinking then being restricted by the vocabulary of your language[s] might be a limitation. As a bilingual, a common question from friends in primary school was what language I was thinking in. My answer was I don’t think words, I think images. I later read Edward de Bono Lateral Thinking. I might be out of context here but I thought someone might be interested in the book.
Re:Show HN: An app store just for installable web apps on Friday October 06, 2023 @06:48AM (#37789064)
> The fact that the back link is broken on that very page adds yet another level of irony here though.

The original Privacy and Terms links do open in a new tab so the back button is broken on the website but works when deep linked.

Re:Cash payments above €3000 to be outlawed in Netherlands on Wednesday August 23, 2023 @10:24AM (#37236438)
Fun fact, 500 euro bank notes are worth more than 500 euro as they are used to illegally move money (because of their high value/weight ratio). 550 euro 6 years ago, as per Nicola Gratteri https://www.youtube.com/watch?v=wugqeLgOPZM
Re:Where in the USA Is This? on Monday July 03, 2023 @06:27PM (#36579632)
I see it as a combination of distraction and being eager to consume something. Everything in the page (and before that, in the link title) screams “this is a game” yet Start was pressed without reading the 33-words down the bold How to play. A U issue more than UX.
Re:Where in the USA Is This? on Monday July 03, 2023 @06:17PM (#36579534)
Instructions do not show up again after the first visit. Try with incognito mode.
Doesn’t seem to be installable for me on Xr.
Is this the company that craves to install its Store on the most profitable mobile platform? I will try to keep that in mind
Re:Web Push for Web Apps on iOS and iPadOS on Thursday February 16, 2023 @08:12PM (#34829346)
What they are asking would be used as an annoying tool against the user in the same way today sites ask for user location or push notification (on other OSs).

Websites are not randomly asking for mic or camera because that would be creepy and visitors would just run away.

I am not lecturing, I am giving my feedback on the matter, like everyone else here. If your product is good, users will save your site in their home, don’t worry about that.

Re:Web Push for Web Apps on iOS and iPadOS on Thursday February 16, 2023 @06:29PM (#34828279)
I wonder when you people will stop thinking with your marketing/growhacking/SEO/spam brain and start being on the user side. If you want low value visitors just go and buy ad clicks, thanks!
Re:Java Is in Decline, and There's Data to Prove It on Sunday January 01, 2023 @10:05AM (#34206788)
A better data source could be online job listings. With the correct considerations that data may give you some insight on tech trends.
Re:Java Is in Decline, and There's Data to Prove It on Sunday January 01, 2023 @09:26AM (#34206471)
I agree 100%.

Each language shines for specific applications and the provided public data adds little value without clusterization per each application type.

Plus, GitHub is not representative of the real world. As an example, how much Cobol is versioned there compared to the number of LOC in production today?

Also, less new questions on SO may just be a symptom of a mature language instead of a decline.

This is an interesting topic that rarely gets addressed objectively.

I have been using https://visualping.io/ for precisely the problem you are describing.

Alternatively, for a more generic solution to “easy free cronjobs”, you can write some php page on a free php hosting service and point visualping to that page. Cost: 0/year

Re:JPEG XL support has officially been removed from Chromium on Saturday December 10, 2022 @01:25PM (#33935188)
> I think Bluetooth could similarly be useful for e.g. heart rate monitoring apps for sports.

As the op commented, why not leaving the burden of managing/pairing the heart rate monitoring device to the OS? In the same way audio and input devices work? The only real use case that comes to my mind with Bluetooth support is indeed monitoring, but it’s not about heart rate.

Re:JPEG XL support has officially been removed from Chromium on Saturday December 10, 2022 @12:25PM (#33934472)
Not the parent commenter, though one thing is to support a feature that is somehow spread across some browser families and/or versions and another thing is to support a feature that is mostly unavailable on clients. It is probably not worth it form an economical point of view once you factor in the time spent developing/maintaining the feature plus (for this case) the additional required storage.
Re:Apple introduces end-to-end encryption for backups on Wednesday December 07, 2022 @04:41PM (#33900696)
> You must also update all your Apple devices to a software version that supports this feature.

Didn’t want to upgrade my perfectly functioning MBP 15 2015 for Shared Photo Library alone. They found out another way to force the upgrade.

Re:New motorcycle lighting design could save lives on Thursday October 20, 2022 @05:38PM (#33281160)
I am quite happy with the yellow indicators. I had the opportunity to drive in the US and found quite awkward those integrated red indicators (compared to other restrictive/protective laws like edible toys).
Re:New motorcycle lighting design could save lives on Thursday October 20, 2022 @03:31PM (#33279515)
Cyclist, motorist, biker and pedestrian here. I’m not sure what kind of motorcycle you have at your locale, here the mandatory running lights are alone quite visible. When I go by bike I have a Garmin Varia (sorry for the ad) which is quite powerful and also start blinking crazily when something arrives from behind.

We live in a world that has accepted road casualties. What to reduce them? Make people accountable for that, eg. lifetime driving license revocation.

I can’t believe we are talking about going around like a Christmas tree to increase survival probability. Are people driving? Then let’s make sure they are looking at where they are going.

Next time what? Will you mandate LEDs fitted jackets to pedestrians?

Older »