Hacker News: helloworld4728

New comment by helloworld4728 in "Apple has locked my Apple ID, and I have no recourse. A plea for help"

helloworld4728 — Sat, 13 Dec 2025 12:29:44 +0000

If Apple has the ability to do this, why don’t they just brick all devices in Russia?

New comment by helloworld4728 in "Bitchat for Gaza – messaging without internet"

helloworld4728 — Fri, 14 Nov 2025 19:43:29 +0000

The user base size is huge. This is actively being used by tens of thousands

New comment by helloworld4728 in "Bitchat for Gaza – messaging without internet"

helloworld4728 — Fri, 14 Nov 2025 19:42:51 +0000

it’s not just chat over Bluetooth, the message is relayed over a mesh so you can chat with people much further than Bluetooth range.

New comment by helloworld4728 in "Automated bank data analysis just leveled up"

helloworld4728 — Sun, 09 Nov 2025 06:16:19 +0000

What does "TTP Plaid grade pipes" mean?

New comment by helloworld4728 in "VisiCalc on the Apple II"

helloworld4728 — Sat, 25 Oct 2025 16:56:09 +0000

I’ve always found it disconcerting that modern SaaS products advertise themselves as “spreadsheet replacements”. Actually, that’s the opposite of what I want.

New comment by helloworld4728 in "When is it better to think without words?"

helloworld4728 — Fri, 24 Oct 2025 05:33:03 +0000

A way that can be walked is not The Way

A name that can be named is not The Name

Tao is both Named and Nameless As Nameless, it is the origin of all things As Named, it is the mother of all things

A mind free of thought, merged within itself, beholds the essence of Tao

A mind filled with thought, identified with its own perceptions, beholds the mere forms of this world

New comment by helloworld4728 in "How to Enter a City Like a King"

helloworld4728 — Mon, 20 Oct 2025 15:57:17 +0000

Jesus and Omar bin Al Khattab entered Jerusalem like that.

New comment by helloworld4728 in "Credential Stuffing"

helloworld4728 — Thu, 16 Oct 2025 16:00:07 +0000

Oh boy this was a major problem at our budding fintech. Here's what DIDN't work:

1. Browser fingerprinting or ip bans. They used advanced fingerprint-shifting browsers and residential proxy ips.

2. Phone number 2FA. Significantly slowed legitimate user access but still didn't fully stop credential stuffers.

What did work:

3. rate limits and carefully tailored scripts that detected usage patterns and autobanned. Eventually they gave up on us guess wasn't worth the trouble. However I'm sure we lost a few legitimate users too in the process.

What I would try in the future:

- Passkeys as 2fa. Most browser automation platforms can't handle passkey auth inside a VM.