Hacker News: LuD1161

New comment by LuD1161 in "ZCode – Harness for GLM-5.2"

LuD1161 — Thu, 02 Jul 2026 07:05:52 +0000

Might wanna check out https://github.com/LuD1161/agentjail - policy guardrails for coding agents.

shameless self-plug. I've been dogfooding it for the last 3 weeks now.

New comment by LuD1161 in "[dead]"

LuD1161 — Sun, 28 Jun 2026 17:04:04 +0000

Dont trust your production data with a markdown file. Have deterministic guardrails

New comment by LuD1161 in "Show HN: Honest Privacy Policies – We Read the Fine Print So You Don't Have To"

LuD1161 — Sat, 06 Jun 2026 09:10:11 +0000

Thanks !

New comment by LuD1161 in "Show HN: Honest Privacy Policies – We Read the Fine Print So You Don't Have To"

LuD1161 — Sat, 06 Jun 2026 00:30:50 +0000

For now I am parsing the text only. Testing app for real instances would be fun and a dedicated project in itself. I've some ideas, hit me up if you're interested or can collab if you're doing it already.

Show HN: Honest Privacy Policies – We Read the Fine Print So You Don't Have To

LuD1161 — Fri, 05 Jun 2026 22:17:59 +0000

Hi HN, I’m Aseem

Last month, during my commencement for a Master's in Privacy Engineering at CMU, my friends and I were joking about the absurd volume of unreadable privacy policies we’d spent semesters dissecting. What started as a graduation joke stuck with me, and over the last few weeks, it transformed into this actual project.

I’m personally very privacy-conscious—I self-host my NAS, run Immich for my photos, and try to self-host where I can. But completely decoupling from third-party services is nearly impossible. Even with a technical background in privacy and security, figuring out what a SaaS tool actually does with your data telemetry means wading through buried boilerplate that no one has time to read.

I built HonestPrivacyPolicies.org to turn that text into structured, actionable insights.

Would love your feedback. A few questions I've been asking ppl : 1. What would you love to see in a privacy policy (check our pp as well) 2. What questions do you want answers to when you give your data to an org

Cheers!

Comments URL: https://news.ycombinator.com/item?id=48419076

Points: 5

# Comments: 4

Security Engineering Is a Context Problem

LuD1161 — Wed, 06 May 2026 02:02:04 +0000

Article URL: https://aseemshrey.in/blog/security-engineering-is-a-context-problem/

Comments URL: https://news.ycombinator.com/item?id=48031250

Points: 4

# Comments: 0

New comment by LuD1161 in "The Newness Illusion: Why Everything Was Better 'Back in Our Day'"

LuD1161 — Sun, 01 Mar 2026 23:27:05 +0000

wow. this is such an interesting perspective. hadn't thought so deeply about my 'shower thought'. This expands my horizon. Might put this into the update. When I was thinking about it, the fleeting thought was majorly about the 'newness effect' which isn't related to a subjective liking of something but is pervasive across everything, whether it be tech, music, movies etc.

Thanks for sharing this.

New comment by LuD1161 in "The Newness Illusion: Why Everything Was Better 'Back in Our Day'"

LuD1161 — Sun, 01 Mar 2026 19:58:38 +0000

A friend said KubeCon "isn't the same anymore." I asked what got worse. They couldn't answer. Turns out there's a name for this.

Three names, actually: 1. Hedonic Adaptation : Brain's inbuilt boredom machine 2. Rosy Retrospection : Your Memory is a Highlight Reel 3. Declinism : The "Kids These Days" Bias

The Newness Illusion: Why Everything Was Better 'Back in Our Day'

LuD1161 — Sun, 01 Mar 2026 19:58:38 +0000

Article URL: https://aseemshrey.in/blog/the-newness-illusion/

Comments URL: https://news.ycombinator.com/item?id=47210102

Points: 2

# Comments: 6

New comment by LuD1161 in "I hacked India's GST portal–11.8M taxpayers exposed; enabling stock manipulation"

LuD1161 — Sun, 07 Sep 2025 08:30:51 +0000

I found an Insecure Direct Object Reference(IDOR0 security issue that led to leaking GST challans (receipts) of all the 11.8M registered taxpayers. Here's the full story alongwith a video PoC.

Note: No personal data was ever shared or harvested. This was responsibly disclosed to the authorities through proper channels and only after the disclosure timeline (120 days) was it published in the online media.

I hacked India's GST portal–11.8M taxpayers exposed; enabling stock manipulation

LuD1161 — Sun, 07 Sep 2025 08:30:51 +0000

Article URL: https://aseem-shrey.medium.com/manipulating-indias-stock-market-the-gst-portal-data-leak-b5437c817071

Comments URL: https://news.ycombinator.com/item?id=45156441

Points: 6

# Comments: 1

New comment by LuD1161 in "[dead]"

LuD1161 — Wed, 06 Nov 2024 06:03:58 +0000

I've started this series on online privacy to teach people some of the good online cybersecurity hygiene, that can help them keep safe.

New comment by LuD1161 in "[dead]"

LuD1161 — Mon, 20 May 2024 10:16:23 +0000

This is my first attempt at recreating a bug from its test case, feedback is highly appreciated.

RCE in git By cloning a repo - 'git clone --recursive ' , your machine could be compromised. Works on MacOS and Windows Fix - Upgrade git Technical walkthrough and how you can reproduce it

New comment by LuD1161 in "Ask HN: Who is hiring? (April 2024)"

LuD1161 — Tue, 02 Apr 2024 20:04:21 +0000

Not expected this from a security company :P Please fix/update your certs :)

``` https://foundationalsec.com/

Unable to communicate securely with peer: requested domain name does not match the server’s certificate.

HTTP Strict Transport Security: false

HTTP Public Key Pinning: false

```

Screenshot here -> https://postimg.cc/gallery/cdQsCzd

New comment by LuD1161 in "[dead]"

LuD1161 — Thu, 08 Feb 2024 12:55:14 +0000

In this blog we will see a step-by-step guide of what goes behind a successful pentest. This not only includes the technical aspects but also the business and legal aspects of it.

If you’re tasked with the responsibility for getting your organisation's app or website's pentest done, this blog would definitely help you navigate the waters easily.