odensc · HackerTrans

7 maanden geledendiscuss

Yep - this is the core issue that made the vulnerability so bad. And if you use a subdomain for a third-party service, make sure your main app auth cookies are scoped to host-only. Better yet, use a completely different domain like you would for user-generated content (e.g. discorddocs.com).

odensc

10 maanden geledendiscuss

Pretty simple fix: require more data to look up a citation, like the number, issue date and plate/VIN (this is how my city does it). Technically doesn't make the scraping impossible if you wanna try every permutation of a license plate, but makes it mostly infeasible.

Currently it just requires the sequential citation number [1], which is how the data is being scraped so easily.

[1]: https://wmq.etimspayments.com/pbw/include/sanfrancisco/input...

odensc

vorig jaardiscuss

Google is down because Google Cloud is down, Antrophic is down because Google Cloud is down, and OpenAI isn't down but some of their SSO providers are down because Google Cloud is down.

So, not a coincidence.

odensc

2 jaar geledendiscuss

Not exactly the same, but in the same vein, Reddit has a "Random" button that takes you to a random subreddit. Google has "I'm Feeling Lucky" which gives you a random search. A "random" button seems like a relatively common little easter egg.

odensc

2 jaar geledendiscuss

> They harvest emails that you punch in for email receipts at checkout for marketing purposes. etc. etc.

Really? I've been using a unique email (i.e. [email protected]) at checkout for the last 2 years and haven't received any emails at that inbox except for my receipts.

odensc

3 jaar geledendiscuss

Visually, it looks a lot less like a copy of a BlackBerry keyboard, so that helps.

The first patent quoted in that lawsuit article has expired [1]. The second patent is still active [2], but is related to a "ramped-key keyboard" (essentially curved), which this new product is not AFAICT.

The third, a design patent [3], is still active, but would appear to only apply to a complete handheld device that includes an attached keyboard, not a separate accessory... Not a lawyer or patent expert by any means though.

I guess we'll see - none of that stops anyone from suing them.

[1]: https://patents.google.com/patent/US7629964B2/en?oq=7%2c629%...

[2]: https://patents.google.com/patent/US8162552B2/en?oq=8%2c162%...

[3]: https://patents.google.com/patent/USD685775S1/en?oq=D685%2c7...

odensc

3 jaar geledendiscuss

> So, it'd be hard to pull off such an attack.

That's what you'd think, but people rarely pay that much attention. The fullscreen prompt only shows up for a few seconds.

For example, recently a family member clicked on a fake YouTube link from an ad in Google's search results. Clicked the search bar and it immediately turned their whole screen into a "call apple support" popup.

They called me up because they thought it was a virus, but really it was just a fullscreen webpage, and being not very technologically inclined, they didn't even try Esc, Cmd+Tab, Cmd+Q, etc.

odensc

3 jaar geledendiscuss

Some cars use "indirect TPMS," which means instead of a sensor in the tire's valve stem, it measures the speed of each wheel and uses some fancy math to determine if the pressure is low.

I'm not sure if the Kia Ceed is one of such cars, but if it is, there may be some wackiness in their indirect TPMS system. Especially considering the OP says it only happens after prolonged driving at high speeds.

odensc

3 jaar geledendiscuss

It's not an issue specific to USB-C. There are also plenty of USB-A/Micro-USB cables that don't have the data pins connected. Typically this is only an issue with super cheap electronics that only use USB-C as a connector for power and don't really follow the spec.

I haven't heard of a phone coming with a charge-only cable. Especially because that cable is usually used for syncing to a computer (iOS)/transferring data from an old phone (Android).

odensc

3 jaar geledendiscuss

They didn't even quote that analysis correctly. It shows that it would take 30 minutes for the average person... big difference there.

odensc

3 jaar geledendiscuss

Can confirm. A couple years ago, I had a Chrome extension with ~100k users; I was receiving these types of emails every week.

One of them straight up offered $10k, whether that was a real offer or not I don't know because I never replied to any of them.

I've since taken down the extension as I'm no longer maintaining it, but weirdly I still get these emails, albeit less frequently.

odensc

3 jaar geledendiscuss

Can anyone reproduce this? I don't pay for GPT-4.

I noticed the "shared links" contain this disclaimer:

> This conversation may reflect the link creator’s Custom Instructions, which aren’t shared and can meaningfully change how the model responds.

Perhaps the author either unknowingly or intentionally added something to their custom instructions which causes this behavior?

odensc

3 jaar geledendiscuss

The article did say that:

> The seeds had to go, too. While poppy seeds might be legal, it is never legal to plant them. Not for any reason.

odensc

3 jaar geledendiscuss

What is that calculation based off of? The article lists the 4 filters as $70 (which I'd assume you would replace all at once).

The Levoit uses 1 filter "unit", and filters are $55 for a 2-pack on Amazon ($27.5/ea), or half that if you trust the third-party ones.

Levoit recommends to replace the filters every 6-8 months, so you could get 12-16 months of filtration for $55. I can't find any calculation in the article for how long the author estimates their filters would last.

odensc

3 jaar geledendiscuss

Isn't $100 (the stated cost to make this) the same as a proper air purifier like a Levoit Core 300?

comments