Hacker News: bink

New comment by bink in "The $6.3B Binance hack was pulled off in just 20 minutes"

bink — Fri, 30 Oct 2026 19:53:10 +0000

I disagree. Assuming the start of the timer is when they first encountered Binance systems they moved very quickly to make the transfers. It suggests to me either some or all of this was automated or they had prepared in advance with some inside knowledge of Binance architecture.

New comment by bink in "Somebody please stop the spam texts"

bink — Mon, 26 Oct 2026 20:57:20 +0000

Did the deluge stop because you replied "STOP" or simply because the election period was over? If it took several months I'd assume it was the latter.

New comment by bink in "Disney+: New user agreement allows ads before movies in all subscriptions"

bink — Mon, 21 Sep 2026 15:48:29 +0000

Mind sharing them with the rest of the class?

New comment by bink in "Hackers Got Inside a Flock Camera"

bink — Thu, 17 Sep 2026 17:27:08 +0000

There are a lot of theoretical vulnerabilities in various encryption algorithms used by TLS/SSL/DNS. There are also older protocols that have known vulnerabilities but yet don't present a realistic threat to most types of services. I've worked for more than one company that had to decide whether disabling an algorithm and blocking 5-10% of your customers was worth the tradeoff. Having these debates with researchers is tedious.

That said, there are numerous options that should be enabled and several protocols that should be disabled. It just isn't worth the spam you get if you allow submissions for these type of issues.

New comment by bink in "Hackers Got Inside a Flock Camera"

bink — Wed, 16 Sep 2026 19:42:19 +0000

The TLS/SSL and DNS carveouts are pretty normal. There are a million security options for those services and enabling them all would often mean denying access to anyone running a browser/client more than a few weeks old. Documenting them all would be a PITA so most policies simply prohibit them entirely.

Testing against customers is also a common prohibition for obvious reasons.

New comment by bink in "Gateway 2000's hilariously bad ads in the 90s (Part II)"

bink — Sat, 08 Aug 2026 19:57:28 +0000

I think there's "bad" in the sense that it didn't accomplish the goal of selling a product (maybe not the case here) and "bad" in the sense that it made many readers cringe or was seen as stupid/tacky. I'm seeing more of the latter in these ads.

New comment by bink in "Google DeepMind CEO Demis Hassabis is stepping down"

bink — Wed, 05 Aug 2026 16:59:46 +0000

It's just a jump to the left...

New comment by bink in "American Airlines flights grounded nationwide due to IT outage: FAA"

bink — Tue, 28 Jul 2026 23:30:35 +0000

Boy would I love to see the incident report for these types of incidents. It seems to happen once or twice a year for some airline and yet things never seem to get better.

New comment by bink in "I found a WordPress RCEs with GPT5.6 and $25"

bink — Mon, 20 Jul 2026 12:46:37 +0000

I work in the field and I just cannot believe anyone would pay that much for a Word Press exploit. People pay money for iOS or Android because there is valuable information stored on devices running those operating systems. There's absolutely nothing of value on any Word Press site. The only possible reason I can think of is for a watering hole attack, but that would require a second exploit that would be worth far more (and they aren't).

New comment by bink in "A Second-Grade Teacher Revived a Beloved Video Game"

bink — Mon, 13 Jul 2026 22:24:52 +0000

Still has a paywall for me.

New comment by bink in "The shingles vaccine may reduce the risk of dementia"

bink — Sun, 12 Jul 2026 18:58:28 +0000

Not exactly. My doctor wanted to start me on a medicine that would make me more likely to develop shingles so he asked me to get the vaccine series before he'd prescribe the medicine. I guess there's no such thing as a prescription for a vaccine, so I just went to my local pharmacy. I made the mistake of writing on the form that I had no health issues. The pharmacist came out and said because I wasn't 50 and had no health issues they weren't allowed to administer the vaccine. Even after I explained my condition and the doctor's request they still refused. They wouldn't even let me fill out a new form. I had to go to a different pharmacy which conveniently didn't ask about my current health status.

It's stupid too, because the question I answered "wrong" wasn't clear. It basically sounded like they were asking me if I currently had a cold or covid.

New comment by bink in "A peek into Reddit's anti-spam internals"

bink — Fri, 03 Jul 2026 21:49:24 +0000

I appealed a warning I was given for quoting a Simpsons episode (promoting violence, Reddit-wide and not from a sub) and was my appeal was granted.

New comment by bink in "Microsoft 0-day feud escalates as researcher threatens another exploit dump"

bink — Fri, 29 May 2026 23:43:08 +0000

Responding to bug bounty reports is a thankless job. Especially these days it's a flood of AI spam, language barriers, "pay me first", incomplete reports, huge egos, and people who think every find should be treated as a critical vulnerability. The people who handle these reports often do so after-hours or on holidays. In smaller companies they're also often the ones who manage the triage, patching, testing, and security release process. In larger companies they have to find owners for every line of code and convince those code owners of the severity (often knowing that neither or them will be rewarded for doing the work).

All it takes is one wrong person to be assigned as a report comes in, a person who doesn't understand the real value of a bounty program, or one person having a bad day to completely ruin a company's reputation. It seems like that might have happened here (of course MS has done this before so who knows if it'll matter in the end).

Microsoft needs to be completely transparent and to do so immediately. They should, with the reporters permission, release all communications. They can exclude technical details if patches aren't available yet. Doing anything less is going to prevent a lot of people from using their bounty program in the future and we'll all be worse off for it. They almost certainly made a mistake and they need to own up to it.

New comment by bink in "Solving the “Zork” Mystery"

bink — Sat, 23 May 2026 18:23:02 +0000

I had Claude code up a Slack bot so I could play any Z-machine game co-op with friends. We started up Zork 1, wandered the available map, made it to the cellar, walked north, and hit a room that was insta-death. We still haven't gotten back into it.

https://gitlab.com/briann/slork

New comment by bink in "CISA tries to contain data leak"

bink — Fri, 22 May 2026 22:52:06 +0000

Krebs was fired in 2020, not 2025.

New comment by bink in "Waymo pauses Atlanta service as its robotaxis keep driving into floods"

bink — Thu, 21 May 2026 18:55:07 +0000

Now imagine if the power is out and cell service is down. We saw that happen in San Francisco and it was chaos.

New comment by bink in "Incident Report: May 19, 2026 – GCP Account Suspension"

bink — Wed, 20 May 2026 17:59:05 +0000

The absence of any explanation for the suspension does seem intentional. If it were me that's one of the first things I would've asked so that I could make sure it doesn't happen again.

New comment by bink in "New Nginx Exploit"

bink — Thu, 14 May 2026 21:11:23 +0000

The exploit they chose assumes ASLR is disabled for simplicity's sake, but if you read the full writeup they say they could've used the vulnerability to map memory layout. It's nice to have ASLR but some types of vulnerabilities can be used to bypass it.

New comment by bink in "Bitcoin trader recovers wallet with help of Claude"

bink — Thu, 14 May 2026 17:10:13 +0000

The guy also had to plug in an old hard drive for Claude to search. Sounds like he had an idea the wallet was on there to begin with.

New comment by bink in "AWS North Virginia data center outage – resolved"

bink — Sat, 09 May 2026 18:26:21 +0000

I can't believe any town would vote for a paper mill. It smells like a paper mill.