bstsb

i think honestly it’s the opposite. it still confuses me why meta invested so much in their pointless experiments (think any of their AR ventures) when their main source of revenue was, and continues to be, their boring advertising on consumer apps

wow, this is actually a really impressive attack - a far cry from the obfuscated postinstall hooks seen a million times before.

the only real long-term solution to node-based attacks like this is to run any remote code in a container, or even a VM?

> […] the publisher posted a blank white page with the cryptic phrase, “This article has been withdrawn due to article violation.” Springer Nature is nevertheless still selling the empty PDF for $39.95.

completely unsurprised, given the state of online papers publishing. if you don’t have an subscription or aren’t an organisation member, the fees are insane

the actual base64 email itself is an HTML document, with a bunch of filler text about metal magnets!

> Hi there, A magnetic domain is a region within a magnetic material in which the magnetization is in a uniform direction. This means that the individual magnetic moments of the atoms are aligned with one another and they point in the same direction [...]

they sign off the email with a zero-width space set to "font-size: 0" for some reason

interesting - this looks quite promising. anything that reduces captchas or client blocks while using a VPN is welcome in my books.

i’m not sure what they mean about agents, however. would this mean a human generates legitimate traffic, and that goodwill can then be utilised by a browser agent? and will it be possible to host your own Moderator?

what does that even mean in this context??

> This conversation was initially just a phone call, but was so powerful that we decided to turn it into a blog and share the audio via YouTube

i can tell - it looks like the blog post doesn't really add anything over a direct transcript of the call itself. it's just a bland summary of the really interesting story Dalton told

> I'm amused that it made me accept the terms and conditions without any indication of who I am

as far as i’m aware, that’s fully binding and often an accepted practise - take Minecraft’s server software, where you must accept the EULA with a text flag before running

for the first time in a while on HN, i disagree with the characterisation as AI-generated. at most it was drafted with an LLM, but the final output is pretty human to me.

they used the wrong it’s/its, made But. its own one-word sentence, didn’t capitalise HTML, and used “okayy” in parenthesis. all of this isn’t to criticise the writer - i enjoyed it more seeing these little imperfections that make up a blog post

ironically that guide is AI-generated

it’s referring to the page available at /newest - the “new” link leads to it

the Claude-produced website alongside its excessive hyperbole makes me much less likely to believe this “expose”, even if there is an element of truth to it. if you want to call out a company for being “AI slop”, don’t vibe code a website to do so.

to be fair, the fact they show precise revenue data through their public API is interesting: https://polsia.com/api/public/live/dashboard

always trust a vibe-coded website which uses a Discord bot as its backend

(i'm sure there are countless bypasses out there, but please don't use something like this)

hermitcraft's official website features world downloads for S1-10, as well as modded seasons

https://hermitcraft.com/

that is quite funny, tbf. looks like the person who opened is friends with eva, a member of "server scanning inc" [1] so they thought it was worth a shot

[1] https://eva.ac/

much anonymity provided by VPNs is through how many people use their exit nodes, “disguising” your traffic among others. also if you hosted your own VPN it would be trivial for one to find its host from an ASN, and from there subpoena your billing information

> Get Outlook for Mac

this bit made me laugh. was the email drafted in Outlook? was it sent to some sort of forwarding mailbox, or did they just BCC every customer in?

apple didn't "make up" this vulnerability, it was an external team reporting an issue

while there are some tools available for the web UI, like building small React apps or making diagrams, it doesn't have the same loop as Claude Code in terms of iteratively building or fixing

alternate link: https://archive.ph/rsC6e

it’s a fake Cloudflare interstitial, actually using reCAPTCHA. seems like the owner has some sort of vendetta against Cloudflare after the DNS stuff

i would agree if it weren’t for his presence on live TV! at that point it seems too awkward and late to mention something

in other news, Digicert's Secure Site Pro certificates are down to only $5,880.00 yearly for one wildcard domain!

i hate this method of installation:

  iex (curl.exe -L https[://]systalyze.com/utilyze/install.ps1 | Out-String)

it gives you absolutely no insight into what you’re about to run - even worse when the README instructs you to disable Defender on the install directory!

the original creator calls everyone implementing their standard a “scumbag” for having any form of analytics, which seems a bit of an overreaction

i can't think of a single CLI that is possibly collecting analytics for ads

> CLI builds were affected [...]

> Bitwarden’s Chrome extension, MCP server, and other legitimate distributions have not been affected yet.

yeah lots of these are used by AI because they're good. i use Space Grotesk for headings on my current project, rotheme, with Instrument Sans in the body, and my link shortener project uses Geist.

maybe i'm an LLM too

this won't actually change anything right?

> the operators of the site remain unidentified. The judgment [...] orders Anna’s Archive to file a compliance report within ten business days, under penalty of perjury, that includes valid contact information for the site and its managing agents

if you can’t access the page through region blocks:

https://archive.ph/I5cAE