HNHacker News
TopNewBestAskShowJobs

Freebytes

574 karma · joined August 28, 2009

77:65:62:6d:61:73:74:65:72:40:73:69:70:65:6e:2e:63:6f:6d
submissionscomments
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
https://powerdmarc.com/gmail-enforcement-email-rejection/
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
Some large companies have started blocking domains that do not have DMARC. It is a simple DNS entry. (Easier than SPF.) You should add it to all of your domains even though it accomplishes very little other than meeting the requirements of some larger companies.
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
SPF did solve an issue. Domain impersonation is no longer as much of an issue if you are strict against SPF failures. DMARC, on the other hand, solved absolutely nothing.
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
One solution would be whitelist only. You must specifically whitelist a domain or email address, and everything else is blocked. If someone wants to send you an email, you must get their email address.

However, if you are using it to sign up for a service online, the domain often does not match the sender. You might sign up at the example.com website, but you get an email from noreply@auth-example.com as the email address.

Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
You are thinking of approved domains only, and perhaps people can vote them out. But, what you are describing is an RBL (in this case a real time whitelist instead). I like the ability for existing members to be able to vote out other members, but you run into the issue of spammers creating a million domains and then being able to vote out all legitimate members.
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
Not to mention that the larger companies are incentivized not to deliver your email due to low volume. If your service does not work, companies will be encouraged to use Google or Microsoft instead.
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
The real reason p=none persists is because people would rather err on the side of email being delivered that is actually junk than having a miss of legitimate mail. (This also the reason for so many soft failure entries in SPF records.)
Freebytes··on DMARC has been public since 2012 but most company domains still don't enforce it
Google is not the only email provider in the world, though. Not all email services are global corporations, and we must be careful never to interrupt the services of independent email providers.
Freebytes··on I tricked Claude into leaking your deepest, darkest secrets
The memories cause issues for me, because when I ask for something unrelated to my current projects, it makes the incorrect assumption that I am always referencing those projects when asking questions.

And, if I tell it, "No, I am asking about Postgresql." then it might update the memory that I am using Postgresql for my project instead of realizing that I am asking two separate (which is why I opened a different chat in the first place). Other times, though, it is helpful not needing to be verbose in my explanation.

Freebytes··on You are not your job
I am often asked "What do you do?" when I meet someone new. I know they are asking about my job, but I throw off the expectations by saying, "Oh, I like to play video games and watch movies primarily." This is usually followed by, "Sorry, I meant what do you do for a living?" I will then, of course, tell them what they expect to hear; however, even the question "What do you do for a living?" implies that we live to work. I play video games and watch movies for living. I work merely to survive and buy the things that allow me to live my life the way I want.
Freebytes··on Don't post generated/AI-edited comments. HN is for conversation between humans
AI has not been used to write any comment that I have ever posted on Hacker News. You can observe my previous comments over the years, even prior to the adoption of modern LLMs, which demonstrate how I communicate.

(While the patterns may be similar, I have a tendency to be more loquacious due to my larger token limit! %)

Freebytes··on Don't post generated/AI-edited comments. HN is for conversation between humans
Using AI to write content is seen so harshly because it violates the previously held social contract that it takes more effort to write messages than to read messages. If a person goes through the trouble of thinking out and writing an argument or message, then reading is a sufficient donation of time.

However, with the recent chat based AI models, this agreement has been turned around. It is now easier to get a written message than to read it. Reading it now takes more effort. If a person is not going to take the time to express messages based on their own thoughts, then they do not have sufficient respect for the reader, and their comments can be dismissed for that reason.

Freebytes··on Banned in California
This is such an impossible to solve problem that every advanced nation on Earth has already solved it, except the United States.
Freebytes··on Design and Implementation of Sprites
I thought this was a post about graphics.
Freebytes··on Design and Implementation of Sprites
There needs to be a way to see how much it is being used then and not simply the life of the Sprite.
Freebytes··on AI coding assistants are getting worse?
Merely choosing lines to copy and paste from one file of your own code to another is a learning experience for your brain. AI is excellent for removing a lot of grunt work, but that type of work also reinforces your brain even if you think you are learning nothing. Something can still be lost even if AI is merely providing templates or scaffolding. The same can be said of using Google to find examples, though. You should try to come up with the correct function name or parameter list yourself in your head before using a search engine or AI. And that is for the moist simple examples, e.g. "SQL table creation example". These should be things we know off the top of our heads, so we should first try to type it out before we go to look for an answer.
Freebytes··on Donut Lab’s all-solid-state battery delivers 400 Wh/kg of energy density
Some models of the motorcycle are available right now and can charge to 80% in 10 minutes and go ~350 miles. Unless it is a scam, and you will not get your motorcycle... However, this seems legitimate.
Freebytes··on Strange.website
This reminds me of the way the Internet was in the past. And the random sites to which this site links. (If you have not seen Neocities, it is another similar place which is the predecessor of Geocities before Yahoo! bought it and killed it.)
Freebytes··on AI will kill all the lawyers
This article talks about martinis about as much as it talks about the careers of lawyers being threatened by AI. The article provides no real justification for its claims outside of anecdotal opinions. The only value of this article is that it results in a discussion in the comments section that provide the actual credence to the claims.
Freebytes··on Radiant Computer
I thought they were talking about redesigning hardware from the ground up. There will always be history and baggage if you are working with the same computer instruction sets. From the very beginning at the level of assembly, there is history and baggage. This is not ambitious enough.
Freebytes··on Frequent reauth doesn't make you more secure
In many cases, it may be to fulfill rules associated with PCIDSS requirements, even if the company never sees the credit card. This all originates from consultants, and the consultants are engaged in security theater.
Freebytes··on Frequent reauth doesn't make you more secure
Yes, it makes sense if the environment has changed, the device has changed, or if the person is logging in from a higher threat source such as a VPN IP address. However, if nothing changed, it is a waste of time in many cases.
Freebytes··on FOSS infrastructure is under attack by AI companies
Along with having block lists, perhaps you could add poison to your results that generates random bad code that will not work, and that is only seen by bots (display: none when rendered), and the bots will use it, but a human never would.
Freebytes··on OpenAI O3 breakthrough high score on ARC-AGI-PUB
This might be because they are referencing single step, and I do not think o1 is single step.
Freebytes··on SpiderBasic
In the past, BASIC was certainly the easiest programming language to use, but ironically, many newer programming languages are now actually easier to learn. Yes, BASIC is easy, but Python, PHP, and C# are actually just as easy as the old syntax when it comes to web based solutions.
Freebytes··on ‘With brain preservation, nobody has to die’
The 'people' that undergo this first will experience the most incredible pain imaginable if we do not figure out a way to block such pain first.
Freebytes··on ‘With brain preservation, nobody has to die’
I consider that I have likely died more than twice in my lifetime already. And before this body gives up, I will have already died more times. Must simply enjoy the present and give gifts to my future self.
Freebytes··on The Coming Technological Singularity (1993)
The LLM will apologize for the mistake, tell you it understands now, and then proceed to make the exact same mistake again.
Freebytes··on Inside the "3 billion people" national public data breach
Is the country wide 2FA implemented by the country or a private company? While rare, what if a person does not have access to the 2FA mechanism, and what mechanisms are permitted to confirm an identity?
Freebytes··on Safe Superintelligence Inc.
You cannot copy a nuclear weapon via drag and drop.
Page 1 of 7Next →