Hacker News: aryan14

New comment by aryan14 in "The newest Instagram “exploit” is the goofiest I've seen"

aryan14 — Tue, 02 Jun 2026 04:41:46 +0000

You can view the recent activity on your Microsoft account @ account(dot)live(dot)com/Activity

Would show any logins or security info updates etc

New comment by aryan14 in "The newest Instagram “exploit” is the goofiest I've seen"

aryan14 — Tue, 02 Jun 2026 04:37:38 +0000

It’s just incorrect

It’s true that existing sessions are revoked; because the password was reset

The reason the target wouldn’t get any notifications at all would be in the case they never setup any additional verification methods to receive these notifications to, since this only worked on accounts w/o 2FA

You can test this on your own account, if you have 2FA enabled and reset your password, you’ll receive notifications to whatever option you have enabled

Also, if you reset the password, it doesn’t remove all 2FA methods on the account (you can test this)

So assuming a threat actor reset the password, they would attempt to login with the correct password but would still need the 2FA code or approval

New comment by aryan14 in "The newest Instagram “exploit” is the goofiest I've seen"

aryan14 — Tue, 02 Jun 2026 03:59:37 +0000

> “In case you're wondering, because the system treats this high-privilege recovery flow as a total account reset by the "true" owner, the original 2FA gets thoroughly bypassed in the process.“

This is false.

Important to note this did not work if your account had 2FA of any kind

e.g if you had a time based authenticator enabled, after the AI gave you the code to reset the password, it had no notable privileges beyond that

Tldr; if you had 2FA this wouldn’t work on you

New comment by aryan14 in "The newest Instagram “exploit” is the goofiest I've seen"

aryan14 — Tue, 02 Jun 2026 03:55:48 +0000

This is actually what microsoft does for microsoft accounts

If you recover a microsoft account / submit a ticket to recover it and provide correct information, the active email gets an email letting them know about the request

You can deny it, or if you ignore it for 30 days the request goes through

Seems to be the best system IMO

New comment by aryan14 in "Get your passwords out of Bitwarden while you still can"

aryan14 — Thu, 21 May 2026 17:20:03 +0000

You can host your keepass db file anywhere you like, whether that’s google drive or on a hard drive.

New comment by aryan14 in "Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare"

aryan14 — Tue, 12 May 2026 20:18:10 +0000

How is this not bigger news?

New comment by aryan14 in "Thief of $90M in seized U.S.-controlled crypto is gov't contractor's son"

aryan14 — Tue, 27 Jan 2026 22:59:17 +0000

And he has been and continues to make fun of the investigators, publicly mocking investigators and sending small amounts from the fraudulent wallets to investigators.

Crazy world

New comment by aryan14 in "That Secret Service SIM farm story is bogus"

aryan14 — Wed, 24 Sep 2025 16:42:36 +0000

Was thinking about this the entire time, not sure why they’re saying it has to be govt sponsored threat actors for a bunch of SIM cards

Didn’t understand how it’d be used for espionage either, doesn’t even make sense

New comment by aryan14 in "PureVPN IPv6 Leak"

aryan14 — Wed, 17 Sep 2025 16:42:45 +0000

You could run wireguard thru CLI directly instead of jumping through the mullvad app itself

Bitcoin Surpasses $123,000 USD

aryan14 — Mon, 14 Jul 2025 07:54:31 +0000

Article URL: https://www.reuters.com/business/bitcoin-crosses-120000-record-high-2025-07-14/

Comments URL: https://news.ycombinator.com/item?id=44557475

Points: 6

# Comments: 0

Trump Is Losing Patience with Musk's Outbursts over Megabill

aryan14 — Thu, 05 Jun 2025 16:23:56 +0000

Article URL: https://www.wsj.com/politics/policy/elon-musk-trump-tax-spending-republicans-5b779d6b

Comments URL: https://news.ycombinator.com/item?id=44193150

Points: 13

# Comments: 1

New comment by aryan14 in "Show HN: hcker.news – an ergonomic, timeline-based Hacker News front page"

aryan14 — Fri, 23 May 2025 21:59:59 +0000

Doesn’t look good on mobile, difficult to use

New comment by aryan14 in "We identified a North Korean hacker who tried to get a job"

aryan14 — Thu, 01 May 2025 21:08:40 +0000

Cross checked known malicious mail list with applicants, found a match and made a blog about it lol

New comment by aryan14 in "Briar: Peer to Peer Encrypted Messaging"

aryan14 — Fri, 14 Mar 2025 20:20:19 +0000

Are the typos on purpose for opsec reasons?

New comment by aryan14 in "Moscow-based global news network has infected Western AI tools"

aryan14 — Fri, 07 Mar 2025 19:29:01 +0000

This has probably been happening since the beginning of modern media.

The only reason this is an article is because of “AI” and Russia VS The US

New comment by aryan14 in "Revolt: Open-Source Alternative to Discord"

aryan14 — Thu, 06 Mar 2025 20:34:14 +0000

This isn’t fair to say.

Any platform that’s popular will have its share of undesirable users, out of the company’s control.

Discord has very good moderation in contrast to other platforms (Constant banwaves on illegal/shady servers, terminating accounts frequently, etc)

New comment by aryan14 in "Apple takes UK to court over 'backdoor' order"

aryan14 — Wed, 05 Mar 2025 18:40:33 +0000

How well it’ll do in court is debatable, could go for either side, but regardless of the outcome it’s always good to see resistance and pushback

New comment by aryan14 in "Apple takes UK to court over 'backdoor' order"

aryan14 — Wed, 05 Mar 2025 18:34:40 +0000

As they should. You can’t throw an ultimatum for something that benefits nobody but the govt. and kick everyone around.

Would like to see other companies who were affected by similar situations also take this to court

New comment by aryan14 in "Apple pulls data protection tool after UK government security row"

aryan14 — Sat, 22 Feb 2025 07:04:07 +0000

Absolutely mental the kind of people that have power. Dealing with this like immature children.

“We don’t get what we want? We ruin it for everyone.”

Trying to backdoor a privacy feature for no real reason, just for the sake of having a backdoor. Pathetic

uBlock Origin Has Been Disabled

aryan14 — Wed, 19 Feb 2025 07:06:20 +0000

Article URL: https://ublockorigin.com

Comments URL: https://news.ycombinator.com/item?id=43099417

Points: 31

# Comments: 40