Hacker News: j027

Unauthenticated Root Access to the Enphase IQ Gateway

j027 — Tue, 11 Aug 2026 22:50:29 +0000

Article URL: https://j027.net/enphase-rce/

Comments URL: https://news.ycombinator.com/item?id=49265567

Points: 2

# Comments: 0

New comment by j027 in "Residential Proxies Are a National Security Threat"

j027 — Tue, 28 Jul 2026 06:09:14 +0000

I don’t understand this being a “national security” threat.

Besides, mobile proxies exist which work differently. All you need is a mobile data plan that you run a proxy server on. It allows for easy IP rotation and since it’s a pool shared with other customers you cannot easily block it. This is because of things like CGNAT.

IP rotation is easy because reconnecting to the network gives you a new IP address.

Static residential proxies also are a thing, even if they are less effective sometimes.

New comment by j027 in "An update on residential proxies and the scraper situation"

j027 — Sat, 11 Jul 2026 14:47:30 +0000

Depending on the IP reputation as well as the kind of IP address you have, this can happen.

Google also prefers if you have a Google account logged in.

New comment by j027 in "Anthropic says Alibaba illicitly extracted Claude AI model capabilities"

j027 — Fri, 26 Jun 2026 04:00:50 +0000

Phone verification services exist to give you a real number for the purpose of passing this kind of verification.

They even have APIs for these services. They make money since they can use the same number to verify different things.

New comment by j027 in "Exit IP VPN servers mitigation rollout"

j027 — Mon, 25 May 2026 20:17:30 +0000

This sounds like some LLM to me

New comment by j027 in "Google broke reCAPTCHA for de-googled Android users"

j027 — Sat, 09 May 2026 02:06:17 +0000

To add onto this, cloudflare switched away from recaptcha a while ago. https://blog.cloudflare.com/moving-from-recaptcha-to-hcaptch...

I think they now use their own Cloudflare turnstile if I remember correctly, but back then they switched to hcaptcha.

New comment by j027 in "Google broke reCAPTCHA for de-googled Android users"

j027 — Sat, 09 May 2026 01:20:53 +0000

You can still use the audio captcha, but I’m not sure how long that’ll be around.

New comment by j027 in "Canvas is down as ShinyHunters threatens to leak schools’ data"

j027 — Thu, 07 May 2026 23:51:52 +0000

Canvas seems like it’s not that great. But if you then use Blackboard Ultra it makes canvas look amazing.

New comment by j027 in "Hunting AitM Phishing Infrastructure Using Certificate Transparency"

j027 — Thu, 29 Jan 2026 14:52:24 +0000

OP here. My university was targeted by a recent phishing attack, and these are my findings. I hope this helps others, but this was my first experience with an Adversary in the Middle (AitM) attack.

Hunting AitM Phishing Infrastructure Using Certificate Transparency

j027 — Thu, 29 Jan 2026 13:58:11 +0000

Article URL: https://j027.net/hunting-evilginx/

Comments URL: https://news.ycombinator.com/item?id=46810268

Points: 1

# Comments: 1