HackerTrans
TopNewTrendsCommentsPastAskShowJobs

odensc

no profile record

comments

odensc
·7 माह पहले·discuss
Yep - this is the core issue that made the vulnerability so bad. And if you use a subdomain for a third-party service, make sure your main app auth cookies are scoped to host-only. Better yet, use a completely different domain like you would for user-generated content (e.g. discorddocs.com).
odensc
·10 माह पहले·discuss
Pretty simple fix: require more data to look up a citation, like the number, issue date and plate/VIN (this is how my city does it). Technically doesn't make the scraping impossible if you wanna try every permutation of a license plate, but makes it mostly infeasible.

Currently it just requires the sequential citation number [1], which is how the data is being scraped so easily.

[1]: https://wmq.etimspayments.com/pbw/include/sanfrancisco/input...
odensc
·पिछला वर्ष·discuss
Google is down because Google Cloud is down, Antrophic is down because Google Cloud is down, and OpenAI isn't down but some of their SSO providers are down because Google Cloud is down.

So, not a coincidence.
odensc
·2 वर्ष पहले·discuss
Not exactly the same, but in the same vein, Reddit has a "Random" button that takes you to a random subreddit. Google has "I'm Feeling Lucky" which gives you a random search. A "random" button seems like a relatively common little easter egg.
odensc
·2 वर्ष पहले·discuss
> They harvest emails that you punch in for email receipts at checkout for marketing purposes. etc. etc.

Really? I've been using a unique email (i.e. [email protected]) at checkout for the last 2 years and haven't received any emails at that inbox except for my receipts.
odensc
·3 वर्ष पहले·discuss
Visually, it looks a lot less like a copy of a BlackBerry keyboard, so that helps.

The first patent quoted in that lawsuit article has expired [1]. The second patent is still active [2], but is related to a "ramped-key keyboard" (essentially curved), which this new product is not AFAICT.

The third, a design patent [3], is still active, but would appear to only apply to a complete handheld device that includes an attached keyboard, not a separate accessory... Not a lawyer or patent expert by any means though.

I guess we'll see - none of that stops anyone from suing them.

[1]: https://patents.google.com/patent/US7629964B2/en?oq=7%2c629%...

[2]: https://patents.google.com/patent/US8162552B2/en?oq=8%2c162%...

[3]: https://patents.google.com/patent/USD685775S1/en?oq=D685%2c7...
odensc
·3 वर्ष पहले·discuss
> So, it'd be hard to pull off such an attack.

That's what you'd think, but people rarely pay that much attention. The fullscreen prompt only shows up for a few seconds.

For example, recently a family member clicked on a fake YouTube link from an ad in Google's search results. Clicked the search bar and it immediately turned their whole screen into a "call apple support" popup.

They called me up because they thought it was a virus, but really it was just a fullscreen webpage, and being not very technologically inclined, they didn't even try Esc, Cmd+Tab, Cmd+Q, etc.
odensc
·3 वर्ष पहले·discuss
Some cars use "indirect TPMS," which means instead of a sensor in the tire's valve stem, it measures the speed of each wheel and uses some fancy math to determine if the pressure is low.

I'm not sure if the Kia Ceed is one of such cars, but if it is, there may be some wackiness in their indirect TPMS system. Especially considering the OP says it only happens after prolonged driving at high speeds.
odensc
·3 वर्ष पहले·discuss
It's not an issue specific to USB-C. There are also plenty of USB-A/Micro-USB cables that don't have the data pins connected. Typically this is only an issue with super cheap electronics that only use USB-C as a connector for power and don't really follow the spec.

I haven't heard of a phone coming with a charge-only cable. Especially because that cable is usually used for syncing to a computer (iOS)/transferring data from an old phone (Android).
odensc
·3 वर्ष पहले·discuss
They didn't even quote that analysis correctly. It shows that it would take 30 minutes for the average person... big difference there.
odensc
·3 वर्ष पहले·discuss
Can confirm. A couple years ago, I had a Chrome extension with ~100k users; I was receiving these types of emails every week.

One of them straight up offered $10k, whether that was a real offer or not I don't know because I never replied to any of them.

I've since taken down the extension as I'm no longer maintaining it, but weirdly I still get these emails, albeit less frequently.
odensc
·3 वर्ष पहले·discuss
Can anyone reproduce this? I don't pay for GPT-4.

I noticed the "shared links" contain this disclaimer:

> This conversation may reflect the link creator’s Custom Instructions, which aren’t shared and can meaningfully change how the model responds.

Perhaps the author either unknowingly or intentionally added something to their custom instructions which causes this behavior?
odensc
·3 वर्ष पहले·discuss
The article did say that:

> The seeds had to go, too. While poppy seeds might be legal, it is never legal to plant them. Not for any reason.
odensc
·3 वर्ष पहले·discuss
What is that calculation based off of? The article lists the 4 filters as $70 (which I'd assume you would replace all at once).

The Levoit uses 1 filter "unit", and filters are $55 for a 2-pack on Amazon ($27.5/ea), or half that if you trust the third-party ones.

Levoit recommends to replace the filters every 6-8 months, so you could get 12-16 months of filtration for $55. I can't find any calculation in the article for how long the author estimates their filters would last.
odensc
·3 वर्ष पहले·discuss
Isn't $100 (the stated cost to make this) the same as a proper air purifier like a Levoit Core 300?
odensc
·3 वर्ष पहले·discuss
Agree with your take, but in this case it was pretty easy to find the ruling on Google. Here's the case page [0] and the PDF [1]:

[0]: https://www.nlrb.gov/case/03-CA-285671

[1]: https://apps.nlrb.gov/link/document.aspx/09031d45839c9e8e (file download warning)
odensc
·4 वर्ष पहले·discuss
I bank with a local credit union, and their online banking originally only supported SMS. I wrote to them about the many security issues with that, and an executive responded and acknowledged my concerns.

A few months later they added TOTP support. Not sure if I influenced that at all, but it's just another reason why I will only ever use a credit union as my main bank.
odensc
·4 वर्ष पहले·discuss
Makes you wonder if the actual article is AI-generated as well. That blog has a lot of articles about GPT-3 :)
odensc
·4 वर्ष पहले·discuss
Not to mention the impacts on the people who live in the communities on the coast that these cables often land at. See what has happened with Facebook's new cable in Oregon: https://oregoncoastalliance.org/facebook-proposes-undersea-c...
odensc
·4 वर्ष पहले·discuss
I would suggest adding information about the display panel on your website. I could not find anywhere whether it's IPS or not.