HackerTrans
TopNewTrendsCommentsPastAskShowJobs

Shank

13,020 karmajoined vor 14 Jahren
[ my public key: https://keybase.io/xn; my proof: https://keybase.io/xn/sigs/_19m8p1WLiV4VtmOeX3cnoDL1Itgf1PMn9WNs9hx6bA ]

[email protected]

security person :)

Submissions

The fight over Claude Mythos 5

theverge.com
3 points·by Shank·vor 25 Tagen·0 comments

Storj announces new pricing changes

storj.io
7 points·by Shank·letzten Monat·1 comments

A Comparative Security Analysis of Three Cloud-Based Password Managers

eprint.iacr.org
1 points·by Shank·vor 2 Monaten·0 comments

Apple Expands Age Verification to Singapore and South Korea

reclaimthenet.org
2 points·by Shank·vor 3 Monaten·0 comments

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

aikido.dev
3 points·by Shank·vor 4 Monaten·0 comments

Jazz CRJ9 at New York on Mar 22nd 2026, collision with fire truck on runway

avherald.com
67 points·by Shank·vor 4 Monaten·2 comments

US Customs destroys rare floppy disk

twitter.com
48 points·by Shank·vor 4 Monaten·25 comments

A security incident that may involve your Plex account information

forums.plex.tv
39 points·by Shank·vor 10 Monaten·33 comments

comments

Shank
·vorgestern·discuss
The news articles are real, but the Nambu line brought their departure melodies back played from the cars themselves late in 2025.
Shank
·vor 10 Tagen·discuss
They're Blu-Ray discs.
Shank
·vor 23 Tagen·discuss
Well, it is a Chinese model, maybe it thinks better in Chinese?
Shank
·vor 24 Tagen·discuss
You can set a user preference to open in a new tab. The reverse is not true.
Shank
·vor 26 Tagen·discuss
For the record, those providers already charged a significant premium for the equivalent compute you could get at Hetzner and OVH. The margins have decreased but they've had a profit margin on compute for a long time.
Shank
·vor 26 Tagen·discuss
> Have no clue what's going on in the back

Hetzner and OVH and other bare metal but low cost providers use commodity hardware. When that commodity hardware increases there is simply no other option. The secret to the success of these providers is using common off-the-shelf hardware instead of specialized server hardware, which is now being cannibalized.
Shank
·vor 26 Tagen·discuss
> In one case, investigators in Kanagawa Prefecture found that a Sri Lankan national had set up roughly 600 shell companies. He also allegedly submitted business manager visa applications for at least six Sri Lankan nationals by listing them as company presidents on paper, even though they actually worked manual labor jobs.

It shouldn’t surprise anyone that the government has a problem with this practice. The problem is trying to create a system of requirements that is both feasible to put on paper and also testable. When the issue was raised, the income requirements were changed as an immediate reaction, but the ISA has broad authority to grant or deny based on many circumstances.

Put differently, acts like this were already illegal, but difficult for the ISA to catch. So they changed the base requirements which are theoretically much easier to catch than the actual illegal behavior.
Shank
·vor 26 Tagen·discuss
Of course not. It is clearly a fun toy.
Shank
·vor 27 Tagen·discuss
Liquidity has value too. Many FTX customers needed immediate liquidity. If you need immediate liquidity the value proposition years later is meaningless for most people because most people can’t get any bridge financing to cover the gap.

Mt. Gox also ran a fractional exchange for a long time until the bottom fell out. The trouble is that you simply can’t run an unannounced fractional exchange.
Shank
·vor 27 Tagen·discuss
Is there any information on if this is the same attack vector (orphaned packages that were adopted)? I believe they already locked down adoption, but maybe also a combination of existing maintainers being taken over?
Shank
·vor 28 Tagen·discuss
That's correct, orphaned packages could be adopted seemingly automatically, so someone did and then published malware in bulk.
Shank
·vor 28 Tagen·discuss
Neither one of these did anything on Opus 4.8 / Max.
Shank
·vor 30 Tagen·discuss
I’m on an M1 Max device and the GPU performance drops have not gotten back to Sequoia levels on Tahoe patches. Golden Gate hasn’t changed anything either.
Shank
·letzten Monat·discuss
Automated systems that don’t sleep and are often programmed to aggressively scrape and are limited only by compute capacity outstripped humanity? I am not surprised by this at all.
Shank
·letzten Monat·discuss
> But why is my business software doing the same?

Shopify runs a payment network called Shop Pay, and that network has relationships with the credit card companies like Visa. Honestly how do you expect to transact in goods that almost nobody will do business in? Even if you have the listing, what supported Shopify payment system will do the business?
Shank
·letzten Monat·discuss
For context, Japanese mobile lines for children include net filtering by default. Also, mobile lines require positive ID to get, so you can't simply get a burner mobile line. A phone number that can send or receive phone calls or SMS is tied to a real world identity, and transferring is illegal.

So, a neat way of requiring ID checks is to simply offload these things to carriers with phone number validation.

In contrast, the US is an example of a country where getting a phone number with no stringent ID check is trivial and it can easily do SMS and phone calls without a second glance.

*ID verification was recently tightened to require reading the IC card data from My Number Card (the national identity card) or in-person KYC for non-IC card users (like a copy of family registry).
Shank
·letzten Monat·discuss
I've tried Thunderbird, Kmail, and Apple's client, and maybe I just have too many emails, but these apps completely crumble under my inbox. I don't see any "shine" with these third-party clients. Mimestream, my favorite email client on macOS, "just works" because it uses the Gmail API. It seems like Fastmail made JMAP, but this doesn't seem widely supported.

Are there mail clients that actually support things like priority inbox and categorization that don't simply crumble for large inboxes?
Shank
·letzten Monat·discuss
When China mentioned this to Apple, Apple agreed, and “Everyone” is not the default and also not available for more than 10 minutes now.
Shank
·letzten Monat·discuss
I use a GPD Win Max 2 for this purpose (https://fluctlight.net/gpd_win_max_2) and while it has its quirks, the performance of a Ryzen APU is significantly better than the Chuwi Minibook X.

I think my desire for this kind of product is something lighter, but this set of notes on the Chuwi feels like the compromises GPD gives you but with less power.
Shank
·letzten Monat·discuss
It’s absolutely crazy that the land of GDPR can legally implement a tracking mechanism this invasive. I guess this is legal because it doesn’t use cookies, and they “obtain consent”?