Hacker News: 1B05H1N

New comment by 1B05H1N in "How Inuit Parents Teach Kids To Control Their Anger (2019)"

1B05H1N — Mon, 05 Feb 2024 05:42:54 +0000

So they use lies and deceit instead of anger.

New comment by 1B05H1N in "Building an early warning system for LLM-aided biological threat creation"

1B05H1N — Wed, 31 Jan 2024 19:18:23 +0000

Hallucinating about biological threat creation now?

New comment by 1B05H1N in "Coding on Copilot: Data suggests downward pressure on code quality"

1B05H1N — Mon, 29 Jan 2024 16:45:19 +0000

I've found that it's useful for explaining things to me, and barely anything else.

New comment by 1B05H1N in "X blocks Taylor Swift searches after fake AI videos go viral"

1B05H1N — Sun, 28 Jan 2024 16:36:14 +0000

It matters now because it's easy to do?

New comment by 1B05H1N in "I looked through attacks in my access logs"

1B05H1N — Sun, 28 Jan 2024 16:23:36 +0000

I work in application/product security and have managed WAFs for multi-billion dollar companies for many many years.

Move DNS to Cloudflare and put a few WAF rules on your site (managed challenge if bot score less than 2 / attack score == x). I doubt you'll even pay anything, and it will resolve a lot of your problems. Just test it before moving it to production please (maybe setup a test domain). Remember, a WAF is not an end-all be all, it's more of a band-aid. If you app isn't hardened to handle attacks, no amount of advanced WAF/bot protection will save it.

Message/email me if you need help.

New comment by 1B05H1N in "Changes at Riot Games and the road ahead"

1B05H1N — Tue, 23 Jan 2024 03:58:44 +0000

Didn't make enough money off skins this year I guess. Good luck to those impacted.

New comment by 1B05H1N in "How a baker survived the Titanic by getting drunk (2022)"

1B05H1N — Sun, 21 Jan 2024 16:02:56 +0000

""" The baker, in fact, had unwittingly become a textbook example of how to survive a shipwreck.

First, he delayed immersion; among those who went into the water that night, Joughin was the absolute last to get wet.

Second — and most important — he managed to stay calm and strategize a way out of the water. """

I'll consider this next time I'm in a shipwreck.

New comment by 1B05H1N in "Free and Open Source Alternative to Airdrop"

1B05H1N — Sun, 21 Jan 2024 15:58:18 +0000

Do you guys actually share this much locally?

I have my local sync'd to my cloud storage and just pull it down if/when I need it. I'll just email/text people around me if they don't have airdrop compatibility.

New comment by 1B05H1N in "Passwordless: a different kind of hell?"

1B05H1N — Tue, 16 Jan 2024 16:59:05 +0000

Fraud is a huge driver of this. The need for high friction is here as more people are issuing chargebacks, hackers are getting more bold, etc.,.

Source: I work in ecommerce.

New comment by 1B05H1N in "A supply chain attack on PyTorch"

1B05H1N — Sun, 14 Jan 2024 18:23:28 +0000

Maybe 5k is the max payout for the bug class?

New comment by 1B05H1N in "A supply chain attack on PyTorch"

1B05H1N — Sun, 14 Jan 2024 18:23:05 +0000

How should one detect this kind of stuff?

Also reverse props to the meta bug bounty program manager for not understanding the finding initially. I know it's difficult managing a program but it's not an excuse to brush something like this off.

Supporting Former Colleagues After Layoffs?

1B05H1N — Sun, 14 Jan 2024 18:20:39 +0000

What can/should I do beyond reaching out, and offering practical assistance/support?

Comments URL: https://news.ycombinator.com/item?id=38992879

Points: 2

# Comments: 1

New comment by 1B05H1N in "Generate Readme with OpenAI"

1B05H1N — Sun, 14 Jan 2024 18:15:53 +0000

One of the many applications of chatgpt, I'm not a programmer by trade so any pointers are welcomed!

Generate Readme with OpenAI

1B05H1N — Sun, 14 Jan 2024 18:15:53 +0000

Article URL: https://github.com/1B05H1N/openai-readme-generator-for-scripts

Comments URL: https://news.ycombinator.com/item?id=38992817

Points: 1

# Comments: 1

New comment by 1B05H1N in "Clicks – Physical keyboard for iPhone"

1B05H1N — Thu, 04 Jan 2024 21:16:14 +0000

Long long phone

https://youtu.be/6-1Ue0FFrHY

New comment by 1B05H1N in "23andMe tells victims it's their fault that their data was breached"

1B05H1N — Wed, 03 Jan 2024 17:30:22 +0000

They prioritized earning new business and lowering customer friction over enforcing MFA. They also had no idea 14k accounts were brute forced and cred stuffed, so that's 100% on them. They have enough money to do the security work.

New comment by 1B05H1N in "Omg.lol: An Oasis on the Internet"

1B05H1N — Sun, 10 Dec 2023 22:04:22 +0000

Sorry, why would I pay 20/year bucks for this when I have my own website/infra?

New comment by 1B05H1N in "Building end-to-end security for Messenger"

1B05H1N — Thu, 07 Dec 2023 07:27:52 +0000

Can you still see the meta data (sender, receiver and timedate)?

New comment by 1B05H1N in "23andMe confirms hackers stole ancestry data on 6.9M users"

1B05H1N — Tue, 05 Dec 2023 19:08:29 +0000

How did they not notice 7 million accounts being accessed through credential stuffing?

Do they have 0 fraud prevention? I doubt the attackers cycled IPs.

New comment by 1B05H1N in "23andMe hackers accessed a whole lot of personal data"

1B05H1N — Mon, 04 Dec 2023 21:18:44 +0000

Is credential stuffing even hacking?

It's super lame that the company doesn't enforce 2FA.