HackerTrans
TopNewTrendsCommentsPastAskShowJobs

arwt

no profile record

Submissions

Use digests, not tags, in your Dockerfiles

interrupt.sh
2 points·by arwt·5 ay önce·0 comments

Discovering Domains via NS Correlation

interrupt.sh
2 points·by arwt·5 ay önce·0 comments

Show HN: Killer Crossword

killer-crossword.interrupt.sh
4 points·by arwt·5 ay önce·1 comments

1-Click RCE to steal your Moltbot data and keys

depthfirst.com
178 points·by arwt·5 ay önce·72 comments

Show HN: PopTogether – A calm game where strangers work together to pop bubbles

poptogether.club
1 points·by arwt·6 ay önce·0 comments

Inside PostHog: SSRF, ClickHouse SQL Escape and Default Postgres Creds to RCE

mdisec.com
110 points·by arwt·7 ay önce·35 comments

comments

arwt
·4 ay önce·discuss
You can. See: https://docs.astral.sh/uv/reference/cli/#uv-run--exclude-new...

How you use it depends on your workflow. An entry like this in your pyproject.toml could suffice:

  [tool.uv]
  exclude-newer = "5 days"
arwt
·5 ay önce·discuss
You can check the benchmarks here: https://github.com/tempestphp/100-million-row-challenge/blob...

A "good" run seems to be around 20-40s mark.
arwt
·6 ay önce·discuss
There are hundreds of shady crypto projects in the world right now, each one shadier than the last.

World order is out of the door, and has been for a while -- they are all probably fighting amongst themselves to get her onto their board ASAP.
arwt
·6 ay önce·discuss
Reminds me of the Tailwind situation.

I feel bad for Jeff and more importantly all of the staff members who are now out of a job. Laracasts was the first ever sort of online course I paid for, and I got immense value out of it at that time.

But times change. This is more true now than ever.

It is a brutal world. Good luck to them.
arwt
·6 ay önce·discuss
I implemented something similar a while back (exists just as a portfolio demo now: subpinger (dot) interrupt (dot) sh).

If you want go for that sort of "live" feeling, you should consider implementing websocket streaming instead of HTTP polling, it will feel a lot nicer for users.

Are you actually ingesting certificates or are you just showing a stream of entries from different logs? I figure the former as nothing seems to be searchable -- and ingesting this data can get very expensive very quickly.

Nevertheless, cool project! I am constantly thinking about ways to turn CT log data into meaningful, actionable streams for others. If you'd be up for working on something together, give me a shout!
arwt
·6 ay önce·discuss
Is there anything stopping you from transferring it to a different registrar before renewal, who might not charge you as much?

Or is the renewal price for "premium" domains controlled by the registry (e.g. Verisign)?
arwt
·8 ay önce·discuss
You raised some red flags with the information you provided. This doesn't happen to everyone. A support rep from Hetzner has spoke a bit more about this process on WebHostingTalk before[1], although they don't get into which specific heuristics may result in flagged accounts for obvious reasons. I'd imagine it's a combination of things like unpaid balances on previous accounts, IP address reputation, uncommon e-mail domains and so on.

[1] https://www.webhostingtalk.com/showthread.php?t=1810197&p=10...