HackerTrans
TopNewTrendsCommentsPastAskShowJobs

ShowalkKama

no profile record

comments

ShowalkKama
·mese scorso·discuss
>If you want a robot to do your chores

you mean like a dishwasher or a washing machine?
ShowalkKama
·2 mesi fa·discuss
>I, for one, like streaming apps enough that I don't want to go back to locked-down, expensive DVD players. The alternative to DRM isn't "no DRM", it's "no content".

that's a false dichotomy since piracy exists. Stop giving them money until their behavior changes. If it doesn't... oh well, you still get a better service.
ShowalkKama
·2 mesi fa·discuss
I may be silly but why would you ever want to validate the structure of an opaque authentication key? Couldn't you just hit an harmless endpoint (e.g. /rate_limit) to see if it returns 401 or not?
ShowalkKama
·2 mesi fa·discuss
Fascinating perspective.

In today’s fast-paced scientific landscape, it’s crucial to recognize that innovation is not just about ideas — it’s about access, infrastructure, and thought leadership.

Einstein disrupted the status quo, but today’s emerging researchers must first navigate a robust ecosystem of grants, incentives, and legacy stakeholders before they can move the needle.

Food for thought.

/s
ShowalkKama
·2 mesi fa·discuss
Kiwifarms back in 2022: https://news.ycombinator.com/item?id=32706673

"Our decision today was that the risk created by the content could not be dealt with in a timely enough matter by the traditional rule of law systems."
ShowalkKama
·2 mesi fa·discuss
because unless they are remarkably stupid they didn't pay with their own credit card. That doesn't mean that the information is necessarily useless but I'd not expect them to kick a door down any time soon.

(Moreover since cloudflare has a free tier you could use their service while handing over only a single email)
ShowalkKama
·3 mesi fa·discuss
to """"""""""prevent piracy""""""""""
ShowalkKama
·3 mesi fa·discuss
you can already gather the same information by searching online.

Do you want to know how to kill yourself? forums are for nerds. Here is wikipedia: https://en.wikipedia.org/wiki/Suicide_methods#List

Do you want to make a bomb? the first thing that came to my mind is a pressure cooker (due to news coverage). Searching "bomb with pressure cooker" yields a wikipedia article, skimming it randomly my eyes read "Step-by-step instructions for making pressure cooker bombs were published in an article titled "Make a Bomb in the Kitchen of Your Mom" in the Al-Qaeda-linked Inspire magazine in the summer of 2010, by "The AQ chef"." Searching for a mirror of the magazine we can find https://imgur.com/a/excerpts-from-inspire-magazine-issue-1-3... which has a screenshot of the instruction page. Now we can use the words in those screenshots to search for a complete issue. Here are a couple of interesting PDFs: - https://archive.org/details/Fabrica.2013/Fabrica_arabe/page/... - https://www.aclu.org/wp-content/uploads/legal-documents/25._...

the second one is quite interesting, it's some sort of legal document for nerds but from page 26 on it has what appears to be a full copy of the jihadist magazine. Remarkable exhibit.

What else do you want to know? How to make drugs? you need a watering can and a pot if you want to grow weed. want the more exotic stuff? You can find guides on reddit.

Do you also want to know how to be racist? Here are some slurs, indexed by target audience, ready for use: https://en.wikipedia.org/wiki/List_of_ethnic_slurs
ShowalkKama
·3 mesi fa·discuss
>There's literally no reason whatsoever to hide the metadata unless he is the one.

privacy?
ShowalkKama
·3 mesi fa·discuss
knowing and thinking / assuming are two different things. Saying that "that's why people have done it" is simply and categorically wrong.

It is no doubt something that could prove interesting if shared when presenting the research (e.g. I went down this route, find this weird thing here, that unusual story there) but this article does accompany you through that process, it just presents the findings which makes the inclusion of this fact quite questionable.
ShowalkKama
·3 mesi fa·discuss
the fact that more tokens = more smart should be expected given cot / thinking / other techniques that increase the model accuracy by using more tokens.

Did you test that ""caveman mode"" has similar performance to the ""normal"" model?
ShowalkKama
·3 mesi fa·discuss
step 1) use a password mamager step 2) forget your own password step 3) witness the password mamager NOT autofill on phishing sites
ShowalkKama
·3 mesi fa·discuss
>I don't care about google pay/wallet

and if you did you could use curve pay instead. Basically the same thing with more features, the only catch is that they charge FX fees after surpassing a limit (but that can be mitigated by paying with the same currency of your linked card, thus never executing a change in the first place)
ShowalkKama
·4 mesi fa·discuss
you can get a seedbox with 1T of storage for about 6€/month. That gives you access to basically all popular movies and tv series in 4k, most media in 1080p and spotty access to older/niche releases you'd not be able to watch on mainstream streaming platforms.
ShowalkKama
·4 mesi fa·discuss
https://www.pornhub.com/blog/age-verification-in-the-news

Over the past year, Pornhub had to make the difficult decision to block access to users in the following American states due to Age Verification laws:

    Alabama
    Arizona
    Arkansas
    Florida
    Georgia
    Idaho
    Indiana
    Kansas
    Kentucky
    Mississippi
    Missouri
    Montana
    Nebraska
    North Carolina
    North Dakota
    Oklahoma
    South Carolina
    South Dakota
    Tennessee
    Texas
    Utah
    Virginia
    Wyoming
ShowalkKama
·4 mesi fa·discuss
> You can use them for whatever protocol you want.

the two most commons protocols used for proxying traffic support arbitrary tcp traffic. socks is quite self explanatory but http is not limited to https either!

Of course most providers might block non https traffic by doing DPI or (more realistically) refusing to proxy ports other than 80/443 but nothing is inherent to the protocol.

edit: this is also mentioned on MDN: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/...

> Aside from enabling secure access to websites behind proxies, a HTTP tunnel provides a way to allow traffic that would otherwise be restricted (SSH or FTP) over the HTTP(S) protocol.

> If you are running a proxy that supports CONNECT, restrict its use to a set of known ports or a configurable list of safe request targets

> A loosely-configured proxy may be abused to forward traffic such as SMTP to relay spam email, for example.
ShowalkKama
·4 mesi fa·discuss
under the doctrine that software "trust" is needed YOU are the attacker. It's entirely about stripping your control (thus ownership) from the hardware you paid for (see the safetynet shitshow).
ShowalkKama
·4 mesi fa·discuss
wer impact?

Just because you have root it doesn't mean it's a vulnerability. Can he read the data of other customers? Can he interact with the internal network? Do you want to know how you can get code execution on microsoft's servers? Easy, go to github and spin up a github action.

The SSRF section does NOT prove SSRF, just because you can make a server interact with attacker supplied urls it doesn't automatically mean it can reach internal things and it does not automatically mean it's exploitable, far from it.

The user location leak is also not a leak since it's fair to assume that the user already knows his own physical location. It'd be interesting if there was a way to reveal the location of other users but alas that isn't mentioned, let alone proved.
ShowalkKama
·4 mesi fa·discuss
Uber could ask for it but the customer does not have more information
ShowalkKama
·4 mesi fa·discuss
No, that's a question. I imagine it's not that since the rest of my comment is dedicated to pointing out how that'd be racist. I was trying to make you explain what exactly the difference is since you didn't clearly define it in your reply.