ghxst

Depends on the type! Generally might be true for SSRIs but not always for TCAs or lithium which can have the opposite effect. https://pubmed.ncbi.nlm.nih.gov/8788508/ (just one example)

Potentially? Typically nowadays if you have some application on the host and a browser component (like a password manager) you would use a native messaging host and extension. There's also deep links / intents type communication. But if neither of those fit your use case I guess you would be able to have something running on localhost, maybe for something like an FTP server it would be more common. The ports that these scripts typically scan are those of known automation tools as well as malware, example is port 9222 for Chrome Devtools Protocol.

Edit: Also any local network equipment probably uses local ips a lot, they often have web UIs that have legitimate use cases for this.

I should probably have rephrased it a little, I don't disagree with you at all, was just adding more context on localhost and some of the nuances with it when it comes to browser behavior.

Localhost is typically uniquely trusted, generally speaking, even when loading a localhost page on HTTP it behaves like a page served over HTTPS would (in terms of the browser APIs you have access to for example). Also for a port scan it's not all that unusual since you can do it without loading any resources, so CORS alone wouldn't protect you from it. Maybe an extension that injects / modifies CSP rules could protect from this but it might also end up breaking websites.

One of the areas LLMs has been most helpful to me personally has to be getting over naming choices lol, whether it's repos, variables or structs for some reason I tend to have a hard time coming up with names :').

Nice I can see this being useful. It would be nice if you could add an example of how it looks in the readme.

Worked for me, seems to be case sensitive (?) I'll post these incase I just got lucky and it still doesn't work for you.

https://hn-wrapped.kadoa.com/Philpax?share

> You explain WebAssembly memory management with such passion that we're worried you might be dating your pointer allocations.

> Your comments about multiplayer game architecture are so detailed, we suspect you've spent more time debugging network code than maintaining actual human connections.

> You track AI model performance metrics more closely than your own bank account. DeepSeek R1 knows your preferences better than your significant other.

I like your interests :)

Fwiw I'm getting a 404 error on your documentation at the time of writing this. Quick question, does your platform support logic like iterating over lists or handling loops? For example, if Snyk sends a payload with multiple reports to a webhook, could I iterate through them and create Linear tickets for the correct teams based on the contents of the reports? One of our non-dev teams ran into issues with a similar visual builder that didn’t support this kind of logic, which often results in them wasting time on something simple that could be solved with just a few lines of Python. If you support use cases like this, I think they'd be excited to give it a try.

That's up to the engineers of said AI, if you goal is to have an AI that doesn't do that then you have multiple ways to achieve that goal.

From what I’ve seen, AI can do a solid job of bridging language gaps—though it depends on how it’s set up. The data exists, but it’s often buried in native-language sources. By focusing on local content, like newspapers and forum discussions you can shape a dataset that pulls in more authentic, region-specific data.

From my experience, there are tons of interesting places in my country that hardly get talked about online outside of my native language. You won’t really find them on the SEO-boosted travel blogs that google likes to return either. I feel like this is where AI could actually be useful.

> But any lawyers using LLMs in 2025 deserve to be disbarred

In what year would you think it will be acceptable and why?

LLMs are tools, I don't see anything wrong with using them in any occupation as long as the user is aware of the limitations.

I don’t see the comparison to leaving a violent street gang—most grow out of these communities and with good opsec you keep identities and profiles completely separated; the best people I work with had a mischievous past but realized the most sustainable way to do cool things is on the good side, and those who pass background checks without hiding their past stand out as the good ones—though actions like swatting, extortion, or threats of violence go far beyond mischievous.

I'm pretty impressed with the segment anything[0] demo, is this integrated into an actual product anywhere? I do some simple video editing for friends as a hobby and can see some of this be pretty useful.

[0]https://sam2.metademolab.com/

Yeah that's my point, but I'm not sure if codec support is implemented outside of that.

Are the features and codecs safari doesn't support part of WebKit? If so does that mean that any browser on iOS doesn't support it either?

Also, the article links to a blog post[0] about video with transparency, and although the performance is the main complaint I had no idea this was a thing! Worth the read if you enjoyed the article I think.

[0] https://jakearchibald.com/2024/video-with-transparency/

Thank you, I'm a bit surprised people took issue with my comment but I suppose I could have worded it better.

As for your case, I wonder if Okta is relying on an external service like IPQS to get a score, that could explain why they don't really have any control over it.

That's a fair point, probably the best approach would be to do a client side challenge where the server side challenge fails but at that point it's no longer as simple of a setup. Toggling a VPN is definitely annoying but a captcha or something like POW do come with an impact to user experience as well and in my experience are easier (and cheaper) to deal with for bots, a good quality residential proxy where you pay per GB quickly becomes a lot more expensive than a captcha solver service or the compute for a POW challenge.

Do you have the "resist fingerprinting" setting enabled in Firefox? (You can check in about:config)

That's totally understandable and I don't blame them. However since they did state they hoped it would be resolved I thought they (or anyone in a similar situation) might at least want to know how to diagnose any potential cause that you have some control over.

My intention was to explain how to identify what could be causing the issue, not to give any indication that I think this is acceptable. Unfortunately like you point out, sometimes you _really_ do have to deal with a website behind an over sensitive WAF, in which case the steps I provided can be helpful.

Rate limiting based on IP, blocking obvious datacenter ASNs and blocking identifiable JA3 fingerprints is quite simple and surprisingly effective in stopping most scrapers and can be done entirely server side, I wouldn't be surprised if this catches more than half of problematic requests to the average website. But I agree that if you have a website "worth" scraping there will probably be some individuals motivated enough to bypass those restrictions.

Curl-impersonate does this https://github.com/lwthiker/curl-impersonate

Try clearing your cookies and disabling all extensions, if that still results in a block you can try a mobile hotspot. You're either failing some server side check (IP, TCP fingerprint, JA3 etc.) or a client side check of your browser integrity (generally this is tampered with by privacy focused extensions, anti-fingerprint settings etc.). It's not a "fix" but can at least give you an indication of why it is happening.

I sometimes look back on my childhood and think about what might have helped me beyond just having structure - which, for the record, I do agree is very important. I think the biggest thing would have been understanding earlier that I was naturally going to struggle with certain things and that it was okay to ask for help.

To be clear, I don't mean just telling a child they can blame ADHD for their difficulties. Rather, helping them recognize that ADHD is often the reason behind their struggles with certain things and encouraging them to ask people around them for reminders, support, or ways in general to create accountability.

For example, my first job, a paper route when I was ~14, was a nightmare until I asked a friend to do his at the same time as mine and pick me up. Even though we had separate routes, just knowing I had to be ready when he arrived created enough accountability that I didn’t struggle with it as much, and it didn't require me to rely on my parents to impose that structure on me.

Imposing structure is helpful, but it only lasts as long as they have someone imposing it. Ideally, they learn how to build that structure for themselves before they have to navigate everything on their own.

I tend to not edit drafts as much anymore and just start over, more of a destructive iterative design approach. It makes it harder to plan projects and colleagues don't always like it but my output is high and I tend to be really good at cutting off things early that won't work. Do you feel similarly?

> It literally feels like the walls are closing in and there's not enough Adderall that can fix that.

My psychiatrist told me that when using any amphetamine-based medication for ADHD, it's important to see it as a way to reinforce routines and habits, whatever they may be, and not necessarily a fix to ADHD itself but rather as a tool to help my brain.

With that in mind, I was advised to take my medication and immediately start doing the things I usually struggle with. For me, that just meant getting to work on specific tasks or studying specific things. Sticking to this approach made a huge difference in how well the medication worked for me.

Over time, I was able to lower my dose, and now I find it much easier to settle into a routine. While the medication can dull my creativity, I've learned to work around that by adjusting when I take it and planning out my work accordingly.

In the case my workload or life changes I tend to get back to my old dosage for a short period until new routines settle, I'm very fortunate to have a family doctor that understands this and is willing to change dosages when needed.

I'm not sure how this would play out with extended-release versions or if this applies to your situation, but I figured it was worth sharing.

Also curious to know if this approach has worked particularly well for me but not for others, or if you take the same approach already.

Anyone that can explain what the people on X mean when they comment that it was "intentional"? I'm probably out of the loop but this feels super out of place to me.

These are only a small amount directly from the replies to the tweet you shared, you can find many more if you keep scrolling.

https://x.com/27steph77/status/1884799302947500062 https://x.com/Aangtweets/status/1884793609326666014 https://x.com/Ray4444444444/status/1884824192308134234 https://x.com/OmarGoshTV/status/1884807622588522981 https://x.com/Sgt_Mac87/status/1884795428559814968 https://x.com/dudeodnv/status/1884796307665203456 https://x.com/USBornNRaised/status/1884793041610842420 https://x.com/thatcrazytoast1/status/1884797991678034183

That's not how you get diagnosed however, nor do I know if you would receive a diagnosis of adhd when a brain scan shows behavior similar to that of ADHD but you show no symptoms and aren't seeking a diagnosis. If you go in for an ADHD evaluation you typically get a psychological assessment, potentially do some tests which aren't always conclusive and your symptoms will be evaluated. In that sense, it's not really measurable in the same way that we can test for a specific disease, infection or virus.

Meant to say employer(s).