HackerTrans
TopNewTrendsCommentsPastAskShowJobs

arwt

no profile record

Submissions

Use digests, not tags, in your Dockerfiles

interrupt.sh
2 points·by arwt·vor 5 Monaten·0 comments

Discovering Domains via NS Correlation

interrupt.sh
2 points·by arwt·vor 5 Monaten·0 comments

Show HN: Killer Crossword

killer-crossword.interrupt.sh
4 points·by arwt·vor 5 Monaten·1 comments

1-Click RCE to steal your Moltbot data and keys

depthfirst.com
178 points·by arwt·vor 5 Monaten·72 comments

Show HN: PopTogether – A calm game where strangers work together to pop bubbles

poptogether.club
1 points·by arwt·vor 6 Monaten·0 comments

Inside PostHog: SSRF, ClickHouse SQL Escape and Default Postgres Creds to RCE

mdisec.com
110 points·by arwt·vor 7 Monaten·35 comments

comments

arwt
·vor 4 Monaten·discuss
You can. See: https://docs.astral.sh/uv/reference/cli/#uv-run--exclude-new...

How you use it depends on your workflow. An entry like this in your pyproject.toml could suffice:

  [tool.uv]
  exclude-newer = "5 days"
arwt
·vor 5 Monaten·discuss
You can check the benchmarks here: https://github.com/tempestphp/100-million-row-challenge/blob...

A "good" run seems to be around 20-40s mark.
arwt
·vor 6 Monaten·discuss
There are hundreds of shady crypto projects in the world right now, each one shadier than the last.

World order is out of the door, and has been for a while -- they are all probably fighting amongst themselves to get her onto their board ASAP.
arwt
·vor 6 Monaten·discuss
Reminds me of the Tailwind situation.

I feel bad for Jeff and more importantly all of the staff members who are now out of a job. Laracasts was the first ever sort of online course I paid for, and I got immense value out of it at that time.

But times change. This is more true now than ever.

It is a brutal world. Good luck to them.
arwt
·vor 6 Monaten·discuss
I implemented something similar a while back (exists just as a portfolio demo now: subpinger (dot) interrupt (dot) sh).

If you want go for that sort of "live" feeling, you should consider implementing websocket streaming instead of HTTP polling, it will feel a lot nicer for users.

Are you actually ingesting certificates or are you just showing a stream of entries from different logs? I figure the former as nothing seems to be searchable -- and ingesting this data can get very expensive very quickly.

Nevertheless, cool project! I am constantly thinking about ways to turn CT log data into meaningful, actionable streams for others. If you'd be up for working on something together, give me a shout!
arwt
·vor 6 Monaten·discuss
Is there anything stopping you from transferring it to a different registrar before renewal, who might not charge you as much?

Or is the renewal price for "premium" domains controlled by the registry (e.g. Verisign)?
arwt
·vor 8 Monaten·discuss
You raised some red flags with the information you provided. This doesn't happen to everyone. A support rep from Hetzner has spoke a bit more about this process on WebHostingTalk before[1], although they don't get into which specific heuristics may result in flagged accounts for obvious reasons. I'd imagine it's a combination of things like unpaid balances on previous accounts, IP address reputation, uncommon e-mail domains and so on.

[1] https://www.webhostingtalk.com/showthread.php?t=1810197&p=10...