Hacker News: ryanscio

New comment by ryanscio in "Vercel April 2026 security incident"

ryanscio — Sun, 19 Apr 2026 23:11:04 +0000

https://x.com/rauchg/status/2045995362499076169

> A Vercel employee got compromised via the breach of an AI platform customer called http://Context.ai that he was using.

> Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

> We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

> We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

Still no email blast from Vercel alerting users, which is concerning.

I Just Wanted a Storage Bin. I Built a Search Engine Instead

ryanscio — Sun, 15 Mar 2026 15:33:30 +0000

Article URL: https://binsizes.com/blog/story

Comments URL: https://news.ycombinator.com/item?id=47388396

Points: 3

# Comments: 0

New comment by ryanscio in "The TSA's New $45 Fee to Fly Without ID Is Illegal"

ryanscio — Tue, 03 Feb 2026 15:28:19 +0000

I'd agree with this, but TSA scanners do not show anatomical details.

New comment by ryanscio in "The TSA's New $45 Fee to Fly Without ID Is Illegal"

ryanscio — Tue, 03 Feb 2026 01:31:04 +0000

Serious question: why?

Most people I know who object to full-body millimeter-wave scanners either do so on pseudoscientific health claims, or “philosophical” anti-scanner objections that are structurally the same genre as sovereign-citizen or First-Amendment-auditor thinking.

New comment by ryanscio in "US has investigated claims WhatsApp chats aren't private"

ryanscio — Sat, 31 Jan 2026 16:06:40 +0000

It would, just not on new devices without moving keys via already-trusted device. This is what WhatsApp presumably does

New comment by ryanscio in "GPT-5"

ryanscio — Fri, 08 Aug 2025 03:06:23 +0000

Yes, [1] though a bit vague given "Some organizations may already have access to these models and capabilities without having to go through the Verification process."

I never verified but have access to all models including image gen, for example.

[1] https://help.openai.com/en/articles/10910291-api-organizatio... [2] https://help.openai.com/en/articles/10362446-api-reasoning-m...

New comment by ryanscio in "GCP Outage"

ryanscio — Thu, 12 Jun 2025 19:21:33 +0000

Same here with npm

https://status.npmjs.org/incidents/dn5mcp85737y

New comment by ryanscio in "Four years of sight reading practice"

ryanscio — Fri, 23 May 2025 01:04:31 +0000

Agreed. Among pianists Bach's four-part chorales [1] are a widely used practice resource for working on sight reading because of the sheer volume of the catalog.

[1] https://www.bach-chorales.com