Hacker News: tercmd

New comment by tercmd in "Infinite Craft"

tercmd — Thu, 01 Feb 2024 15:44:30 +0000

The state can be re-imported like this: ``` a = (insert JSON output here) window.$nuxt.$root.$children[2].$children[0].$children[0]._data.elements = a.elements; window.$nuxt.$root.$children[2].$children[0].$children[0]._data.discoveries = a.discoveries; ```

New comment by tercmd in "A decade of Have I Been Pwned"

tercmd — Wed, 06 Dec 2023 07:55:46 +0000

The k-anonymity API makes it such that the password doesn't have to be sent to HIBP, but the first 5 characters of its SHA1 hash.

This returns a list of possible suffixes which can be checked for the actual password to see how many have been breached.

For example, a search for "abc" with the hash "a9993e3...89d" becomes:

`curl -s https://api.pwnedpasswords.com/range/A9993 | grep -i e364706816aba3e25717850c26c9cd0d89d`

which returns `E364706816ABA3E25717850C26C9CD0D89D:226273` indicating that the password has been seen 226,273 times

New comment by tercmd in "A decade of Have I Been Pwned"

tercmd — Wed, 06 Dec 2023 07:43:51 +0000

The Pwned Passwords lookup returns just the number of breaches without any hashes or plaintext passwords. This would not make such an attack possible.

What's Phishing Like in 2023?

tercmd — Mon, 20 Nov 2023 16:54:24 +0000

Article URL: https://www.tercmd.com/posts/phishing-analysis-2023/

Comments URL: https://news.ycombinator.com/item?id=38350420

Points: 2

# Comments: 0

Show HN: AI Memory Overflow – testing AI model context lengths with long prompts

tercmd — Wed, 24 May 2023 11:20:44 +0000

Article URL: https://github.com/terminalcommandnewsletter/ai-memory-overflow

Comments URL: https://news.ycombinator.com/item?id=36056445

Points: 2

# Comments: 0

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Fri, 24 Mar 2023 14:30:05 +0000

(Creator of the repo here) The repo now has some client-side JS (unminified). https://github.com/terminalcommandnewsletter/everything-chat...

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Fri, 24 Mar 2023 09:09:55 +0000

If you block the `/backend-api/moderations` endpoint, that (as expected) doesn't block the AI from not giving you an answer.

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Fri, 24 Mar 2023 04:25:12 +0000

Turns out, this actually does work.

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Thu, 23 Mar 2023 15:30:56 +0000

(Creator of the repo here) Likely ONLY due to HN, the stats for the repo have BLOWN UP in the last day. It went from ~200 unique visitors and visits in one day to 8,689 unique visitors with 10,000+ total visits!

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Thu, 23 Mar 2023 15:25:07 +0000

I've not tested it further, but I wondered what happened when I saw a "Plus subscriber login link" input field - resulted in that. In fact, I wonder if one could automate the request to the API endpoint (all headers, authorization and everything) when the browser sees a "ChatGPT down" message. (Of course, you have to click the link in the email, but if you grant the tool access to your email to automate that, that probably isn't the best thing for "principle of least privilege")

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Thu, 23 Mar 2023 15:19:29 +0000

In some of the ChatGPT client-side JS (visible in the Debugger tab of DevTools), I could see references like `\triangle`. However, asking ChatGPT to print either as it is just prints the text itself.

New comment by tercmd in "Everything ChatGPT – under the hood of the ChatGPT web app"

tercmd — Thu, 23 Mar 2023 15:17:46 +0000

(Creator of the repo here) That is somewhat present in the `/backend-api/moderations` endpoint where the app sends your question + ChatGPT's response to (first time just your question, second time both)