Hacker News: anxman

New comment by anxman in "FBI looks into dead or missing scientists tied to NASA, Blue Origin, SpaceX"

anxman — Wed, 22 Apr 2026 14:55:43 +0000

https://www.cbsnews.com/news/us-military-tested-device-that-...

Things have changed. The weapon was acquired by DOD.

New comment by anxman in "Adobe modifies hosts file to detect whether Creative Cloud is installed"

anxman — Tue, 07 Apr 2026 04:52:06 +0000

I didn't get this warning on MacOS

New comment by anxman in "Apple Business"

anxman — Tue, 24 Mar 2026 20:58:52 +0000

This was a big pain in the ass for me to figure out. I ended up using the free version of Mosyle and hiring someone on Fiverr to help me figure out how to get the licenses assigned to our managed devices.

New comment by anxman in "US SEC preparing to scrap quarterly reporting requirement"

anxman — Tue, 17 Mar 2026 05:21:15 +0000

Cash vs Accrual

New comment by anxman in "Dulce et Decorum Est (1921)"

anxman — Wed, 04 Mar 2026 23:27:54 +0000

Same. I had to write an essay about it which helped me appreciate it in a new way.

New comment by anxman in "Your Supabase is public if you turn off RLS"

anxman — Tue, 23 Dec 2025 03:38:11 +0000

https://supabase.com/docs/guides/auth/auth-hooks

These have gotten much less annoying to use now that it’s controlled through the config.toml.

New comment by anxman in "Your Supabase is public if you turn off RLS"

anxman — Tue, 23 Dec 2025 03:36:40 +0000

The auth schema is intentionally not exposed to the rest api for security reasons. You need to use an auth hook to put data where you need, or an RPC with appropriate privileges, and of course RLS on any tables.

New comment by anxman in "Your Supabase is public if you turn off RLS"

anxman — Mon, 22 Dec 2025 18:24:20 +0000

Supabase doesn’t make a public users table by default. The user schema is in auth and secured. The problem is that unskilled developers bypass those controls out of convenience and put data into Public without RLS. Even the Supabase docs warn against this.

New comment by anxman in "Ask HN: My mother was scammed out of all her savings. What should I do?"

anxman — Mon, 22 Dec 2025 18:17:40 +0000

It's actually more complicated, but the draining of scam money at scale (ie: billions) is done with the help of collaboration of the Triads and Mexican cartels. IE: Chinese scammers rob the world of billions. They ultimately end up with tons of crypto but still need to launder it. They collaborate with the Mexican cartels to buy USD cash from them paid via crypto. Then the Triads re-launder that cash or sell it to other Chinese nationals in the USA.

New comment by anxman in "Ask HN: My mother was scammed out of all her savings. What should I do?"

anxman — Mon, 22 Dec 2025 18:14:10 +0000

Crypto

New comment by anxman in "Microsoft won't let me pay a $24 bill, blocking thousands in Azure spending"

anxman — Wed, 03 Dec 2025 03:40:55 +0000

If you want to sign Windows binaries, Azure is the best way now.

New comment by anxman in "PayPal/Braintree's new chargeback policy forces merchants to accept fraud <$1000"

anxman — Thu, 20 Nov 2025 22:50:22 +0000

Use Stripe?

New comment by anxman in "I have recordings proving Coinbase knew about breach months before disclosure"

anxman — Sun, 16 Nov 2025 21:45:19 +0000

Not sure if the op is reading, but I also detected the same Coinbase hack around the same timeline. From what I can tell, literally everything was compromised because even their Discord channel's api keys were compromised and were finally reset around April or May. This means their central secrets manager was likely compromised too.

New comment by anxman in "Poker fraud used X-ray tables, high-tech glasses and NBA players"

anxman — Fri, 24 Oct 2025 17:28:11 +0000

https://www.markedcardsshop.com

This appears to be the / a source for the devices in question. It's worth reading over the technical details of how it all works. It's both terrifying and impressive. Cards can be identified using a barcode encoded on their thin edge from meters away.

New comment by anxman in "Amazon to end commingling after years of complaints from brands and sellers"

anxman — Mon, 22 Sep 2025 03:55:33 +0000

I received counterfeit toothpaste from Amazon during COVID. I got asthma from using it and never had asthma before or symptoms like that. I purchased tubes from Costco to compare and the Amazon ones were clearly fake.

I left a review to warn others on the page. Amazon removed my review and lifetime banned me from leaving reviews again citing “abnormalities.

New comment by anxman in "Cursor CLI"

anxman — Fri, 08 Aug 2025 07:21:10 +0000

+1 to this. Cursors Agent feels too difficult to wrangle. CC is easier to monitor.

New comment by anxman in "Google spoofed via DKIM replay attack: A technical breakdown"

anxman — Fri, 25 Jul 2025 23:05:43 +0000

The wildest part about this? The phishing URL is still live on Google Sites! This article came out 3 months ago!

New comment by anxman in "Show HN: Compass CNC – Open-source handheld CNC router"

anxman — Tue, 22 Jul 2025 22:25:11 +0000

Yeah IMO the Compass appears to be a more convenient design

New comment by anxman in "TrackWeight: Turn your MacBook's trackpad into a digital weighing scale"

anxman — Mon, 21 Jul 2025 20:24:57 +0000

But just to note, I believe you can't pass Gatekeeper/Notary if you use these APIs so it's not possible to sign the app

New comment by anxman in "OpenAI Codex hands-on review"

anxman — Tue, 20 May 2025 21:09:12 +0000

It really needs container support