Hacker News: ahoog42

System over Model: Zero-Day Discovery at the Jagged Frontier

ahoog42 — Sun, 26 Apr 2026 10:55:21 +0000

Article URL: https://aisle.com/blog/system-over-model-zero-day-discovery-at-the-jagged-frontier

Comments URL: https://news.ycombinator.com/item?id=47909248

Points: 2

# Comments: 0

AI threats in the wild: The current state of prompt injections on the web

ahoog42 — Thu, 23 Apr 2026 23:05:31 +0000

Article URL: https://security.googleblog.com/2026/04/ai-threats-in-wild-current-state-of.html

Comments URL: https://news.ycombinator.com/item?id=47883385

Points: 4

# Comments: 0

New comment by ahoog42 in "Qwen3.6-27B: Flagship-Level Coding in a 27B Dense Model"

ahoog42 — Wed, 22 Apr 2026 17:53:57 +0000

at what point do model providers optimize for the "pelican riding a bicycle" test so they place well on Simon's influential benchmark? :-)

Token-efficient access to all your data sources

ahoog42 — Thu, 26 Mar 2026 12:10:30 +0000

Article URL: https://max.cloud

Comments URL: https://news.ycombinator.com/item?id=47529497

Points: 2

# Comments: 0

New comment by ahoog42 in "Litestream v0.5.0"

ahoog42 — Fri, 03 Oct 2025 18:40:58 +0000

any notes or pointers on how to get comfortable with k8? For a simple nodejs app I was looking down the pm2 route but I wonder of learning k8 is just more future proof.

New comment by ahoog42 in "Show HN: Dayflow – A git log for your day"

ahoog42 — Thu, 25 Sep 2025 11:56:08 +0000

if you are on a Zoom/video call, does anyone know if you would have to declare that your "recording" it? I'm thinking more from the legal perspective of wiretapping/consent laws. If you have live transcripts/subtitles does that change any legal requirement.

New comment by ahoog42 in "Do not download the app, use the website"

ahoog42 — Sat, 26 Jul 2025 10:36:05 +0000

regarding data collection, both android and ios provide multiple ways to review, approve/deny, and manage access to data. it's certainly not perfect but is being constantly improved. And for the HN crowd, you can always run mobile security/privacy tools like mobSF to inspect the app. I'm not suggesting we should have to do this but we can and frankly browser fingerprinting is opaque, also constantly evolving and quite good at tracking and data collection. i'm not sure avoid the better ux of a native app is much worse and given the privacy tools and data available, I generally prefer the native app

You Are Reading Reddit a Lot More These Days

ahoog42 — Tue, 22 Jul 2025 11:12:54 +0000

Article URL: https://nymag.com/intelligencer/article/why-you-are-reading-reddit-a-lot-more-these-days.html

Comments URL: https://news.ycombinator.com/item?id=44645467

Points: 6

# Comments: 5

Apple devices offer speech to text transcription in developer betas, shows test

ahoog42 — Wed, 18 Jun 2025 11:46:53 +0000

Article URL: https://9to5mac.com/2025/06/18/apple-devices-offer-amazing-speech-to-text-transcription-in-developer-betas-shows-test/

Comments URL: https://news.ycombinator.com/item?id=44309030

Points: 4

# Comments: 0

New comment by ahoog42 in "Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom"

ahoog42 — Fri, 16 May 2025 11:15:44 +0000

If you want to be alerted to new/updated SEC cybersecurity filings, you can subscribe to my free alerts [1] or see the full index of cybersecurity incidents [2] on my tracker (I check SEC EDGAR every 5 mins).

[1] https://www.board-cybersecurity.com/alerts/

[2] https://www.board-cybersecurity.com/incidents/tracker/

New comment by ahoog42 in "108B Pixel Scan of Johannes Vermeer's Girl with a Pearl Earring"

ahoog42 — Thu, 01 May 2025 16:33:40 +0000

Jonathan Sawday’s 2023 book “Blanks, Print, Space, and Void in English Renaissance Literature: An Archaeology of Absence.” [1] explores this phenomenon as well across multiple mediums.

It also won the Modern Language Association's top award — the James Russell Lowell Prize for the most outstanding book published in 2023.

[1] https://academic.oup.com/book/46695

French Competition Watchdog Fines Apple $162.4M over App Tracking Transparency

ahoog42 — Mon, 31 Mar 2025 11:08:10 +0000

Article URL: https://www.wsj.com/tech/french-competition-watchdog-fines-apple-162-4-million-over-app-tracking-transparency-2cd07cdc

Comments URL: https://news.ycombinator.com/item?id=43533569

Points: 6

# Comments: 1

New comment by ahoog42 in "Fast Cash vs. Slow Equity"

ahoog42 — Mon, 24 Feb 2025 13:42:11 +0000

This is exactly how we built viaForensics in 2009. For the first five years, we performed mobile forensic investigations and gave trainings based on the Android and iOS forensic books we wrote. We were able to self fund software development for the first five years. When we moved from forensics to mobile app security, we required more capital to build our automated software which led to our Series A.

Having an established business with customers in revenue, obviously significantly helps in the fundraising process and evaluation. The other huge advantage is you can benefit significantly from the Qualified Small Business Stock statute which provide an exemption/shield on federal taxes when you sell that is the _greater of_ either $10m or 10x times your valuation at the time of funding.

New comment by ahoog42 in "South Korean regulator accuses DeepSeek of sharing user data with ByteDance"

ahoog42 — Wed, 19 Feb 2025 12:40:29 +0000

Despite their goal of enforcing in 2017, it is still not a hard requirement. Back then, about 80% of the apps we tested disabled ATS either partially or fully [1]. It’s rare to see Apple walk something back [2], but here is a blog at the time that talked about it [3].

[1] https://www.nowsecure.com/blog/2017/12/29/enable-ios-app-tra...

[2] https://developer.apple.com/news/?id=12212016b

[3] https://www.klundberg.com/blog/app-transport-security-delay/

New comment by ahoog42 in "South Korean regulator accuses DeepSeek of sharing user data with ByteDance"

ahoog42 — Wed, 19 Feb 2025 01:00:54 +0000

We analyzed the iOS app[1] and observed similar traffic as well as a number of basic security issues (hardcoded encryption keys, use of 3DES and some traffic over HTTP).

[1] https://www.nowsecure.com/blog/2025/02/06/nowsecure-uncovers...

New comment by ahoog42 in "Grok3 Launch [video]"

ahoog42 — Tue, 18 Feb 2025 14:53:10 +0000

Any example code or blogs/docs that demonstrate making graphs/diagrams and/or hooking it up to a local code base?

New comment by ahoog42 in "Multiple Security and Privacy Flaws in DeepSeek iOS Mobile App"

ahoog42 — Fri, 07 Feb 2025 03:12:57 +0000

agreed the 3DES is a difficult choice to explain. To top it off the encryption key was hardcoded in the .ipa, the IV was null and then reused.

New comment by ahoog42 in "Multiple Security and Privacy Flaws in DeepSeek iOS Mobile App"

ahoog42 — Fri, 07 Feb 2025 03:10:00 +0000

Yes, the Android app has multiple vulnerabilities but we focused this report on iOS (it took nearly 40 hours to write the report). Our recommendation is people avoid using the mobile apps. If you want to test the model, I'd suggest Hugging Face/ollama or a hosted solution (multiple companies are now offering that).

Multiple Security and Privacy Flaws in DeepSeek iOS Mobile App

ahoog42 — Thu, 06 Feb 2025 23:24:59 +0000

Article URL: https://www.nowsecure.com/blog/2025/02/06/nowsecure-uncovers-multiple-security-and-privacy-flaws-in-deepseek-ios-mobile-app/

Comments URL: https://news.ycombinator.com/item?id=42967527

Points: 17

# Comments: 6

New comment by ahoog42 in "Launch HN: CamelQA (YC W24) – AI that tests mobile apps"

ahoog42 — Thu, 21 Mar 2024 13:11:20 +0000

Congrats, very exciting. Do you support configuring things like usernames and passwords? How do you handle MFA?