bstsb

grrrr, i hate grayscale backgrounds and simple fonts!

would you rather claude-esque purple gradients and glowing borders?

this is absolutely not a given, i've been using canarytokens for years!

blog posts date back to at least 2015: https://leonjza.github.io/blog/2015/09/10/canarytokens---the...

“espionage” would involve a private key shared with the three-letter agencies, not a key anyone could crack in seconds

i just took down all my PHP sites for the last few hours. they’re proxied behind Cloudflare so i know there were mitigations, but infrastructure can’t be breached if it isn’t running!

the interesting element of the article for me wasn't "somebody put malware on a torrent site", it was how the author reverse engineered the .exe to see why the file ended up there

different models are subject to different levels of physical security. for example, the Nano Gen5 is extremely hard to open without some form of physical damage

(https://support.ledger.com/article/4404382029329-zd)

remind me which race makes up 81% of prisoners convicted of a sexual offence in the UK?

remind me what the home office said about which ethnicity “group-based child sexual exploitation offenders” are most commonly?

it’s an article on furthering scientific research from what is arguably one of the top-three AI research labs in the world. i’m unsure what else you expected from HN

it’s alright, they’re making fun of the “security risk” Anthropic’s CEO, not their darling Altman

haven’t been properly rickrolled in years, wasn’t expecting that!

oh come on, i bought my series 11 last week!

i'm going to miss out on all those amazing new features, like... an improved heart rate variability measurement

alternate link, as it seems the site is unresponsive:

https://web.mit.edu/people/dpolicar/writing/prose/text/think...

previous discussions:

https://news.ycombinator.com/item?id=47688678 (2026)

https://news.ycombinator.com/item?id=38420111 (2023)

https://news.ycombinator.com/item?id=24737993 (2020)

https://news.ycombinator.com/item?id=8152131 (2014)

my opinion on things like this (and the previous news about Mullvad) is that companies should be free to use their money for political reasons, and fund who they want, even if i vehemently oppose those views.

however, individual consumers are also free to stop supporting who they want - that’s why I switched to iVPN after my subscription ended

seems like a very similar idea to a site made by walzr, previously posted to HN. i’ll find the link somewhere

for me on chrome (stable), all that’s needed to install my own extensions is enable Developer Mode in chrome://extensions, then load an unpacked folder as an extension

this is wildly complex, way more so than a traditional ClickFix attack. it's fetching JS scripts from a Ethereum/Base contract and executing them - i've never seen something like this before

> Google search is on the way out. I don't know any of my peers who use it anymore.

bear in mind we're on Hacker News. Google's market share is still above 90% - in almost any other market this would be a ridiculous monopoly.

don’t know why you’re getting downvoted, they gave legacy users literal years to migrate

+1 on infisical. brilliant self-hosted offering, i love their CLI and it works well with CI pipelines

different people work in different ways. just because you hate it doesn't mean it won't be helpful for others.

also if you're buying used books, expect them to be used!

the page keeps 301ing to the home page for me - could be a region issue

https://archive.ph/JYC9B

then every casual user would switch instantly to Gemini, or the most convenient alternative

> The default applies only to version updates. Security updates still open immediately, so critical fixes are never delayed.

does this require a real vulnerability report, or CVE? if the package is compromised would they just be able to push a false "critical update" that bypasses this wait?

as far as i remember only the Pro tabs are paywalled (the ones created professionally)? the community tabs are all freely available on web, and carry little restrictions on mobile

people have been mistaking AI conversations with reality since the very first text-based models came into the public view with ChatGPT. i'm sure with each incremental improvement to outputs like this, though, more people will get convinced of its "humanity"

(see https://www.reddit.com/r/MyBoyfriendIsAI/)

can Vercel give any assurance that they won’t add a reliance on their closed-source cloud offering for the package? especially given their ownership of next-auth too

i really loved better-auth’s DX but the nature of their database adapters means it’s relatively easy to switch over to another provider/library

i think the point is that one actually burns disk space, while the other is just a nuisance for people on plans with limited data

i remember making my first HTML app when i was your age - my teacher let me use the computers after i finished my work, and i used JSFiddle to learn the fundamentals. if it weren't for the supportive adults around me i would never have got into the field of computing today!

good luck with making more projects :)

i think honestly it’s the opposite. it still confuses me why meta invested so much in their pointless experiments (think any of their AR ventures) when their main source of revenue was, and continues to be, their boring advertising on consumer apps

wow, this is actually a really impressive attack - a far cry from the obfuscated postinstall hooks seen a million times before.

the only real long-term solution to node-based attacks like this is to run any remote code in a container, or even a VM?