mmsc

These types of satirical posts are great, and its great that they can not only be entertaining but also provide new information (I had never heard of TCP SACK).

P.S: all I have to say to this guy spamming HN at the moment is mentioned in this (great) article: GET over it.

Paid Github organizations have a policy to block third-party actions. Would be nice if there was a way to allow third-party actions as long as they are referenced by hash, not version.

>Yup, among the sane! If there are any bastions left, we’re working on eradicating them

The communities of trolls trolling trolls have been replaced by larger communities of nazis training nazis to attack and terrorize. Thank you for eradicating the former, paving way for the latter.

The amusing thing being that the original source of this is hn, not 4chan [1]. deserves a spot on https://news.ycombinator.com/highlights imo.

[1]: https://news.ycombinator.com/item?id=1012082

Well said, and I think it extends to many communities which are founded on negativity of some sort: eventually people move on, except for those so-filled with negativity, it is all they have.

As the other poster pointed out, /b/ was never good;).

But:

>A 2010 edgelord may say "pool's closed" while a 2025 edgelord may say "it was a Roman salute", but the spirit behind is probably the same.

I think I disagree. I don't think "pool's closed" was ever boosted into the mainstream, nor was it legitimized across truly fascist or racist communities; it was an internet meme for internet people. "It was a roman salute" is a phrase of normies that likely have limited experience with computers and online communities; without getting into the politics, a certain class of people actually believe "it was a roman salute". "pool's closed" meant nothing outside of specific communities.

Dubs and I upvote.

>Like all recovered edgelords who came of age in the early 2010s, I somewhat miss the heyday of image-boards like 4chan. They were the final bastion of the wild-west early internet before the nazis ruined everything.

Extremely true. I don't know anywhere like those times these days. Where do the young people/trolls hang out and push to the edge of acceptance these days? Or is the culture of "getting right to the edge of getting banned but not crossing the line for lulz" and "act in a way nobody knows whether you're actually trolling or not" dead?

>I thought gmail doesn't disclose sender's IP address? Or I was wrong? This is not good for privacy.

The IP address is the smtp server of course, not the individual user.

Great article! Is the code or technique used to fix this easily available somewhere?

Small programs like Fortune and Cowsay are a treasure to the culture of Unix-like OS'.

Luckily with Proton, it is incredibly easy to export everything and delete everything, unlike Google which makes it extremely difficult to delete things (notwithstanding the 2FA screen you get when deleting data from each service, which leads to "too many logins, wait 5 minutes" even if you login with the correct password/TOTP every time). I recommend downloading a "google takeout" to confirm all your data is actually gone.

crossplane is an nginx<-->json converter: https://github.com/nginxinc/crossplane

It works well, but probably doesn't solve your actual problem, because it still uses nginx _format_ -- just in json:)

I've been trying to do something similar to create CodeQL queries recently, and found that chatgpt is completely unable to create even simple queries. I assume it's because training is based on old query language or just completely missing, but being able to feed the rules and the errors which they produce when run has been a complete failure for me.

>Massive email databases are extremely cheap, often free

There are different qualities of email databases. "Known real email by Youtube account holders" would be a high value database. Definitely not free.

This type of vulnerability is extremely valuable for private investigators, too. "Who uploaded this video which my client is extremely interested in?"

>Nobody does that.

Sure: https://www.abc.net.au/news/2016-07-01/league-of-legends-que...

It can get turned into cash by the EU when Google gets a massive fine for leaking private data.

>Unmasking Google accounts? Could there be a business there? Sure, maybe. Is there one already? Presumably no.

Absolutely, yes. Spam and targeted phishing attacks are in high demand.

My understanding is that it is possible to retrieve every public youtube channel ID, if not also Google Maps/Play reviewers, quite easily. This exploit could have been used to create a massive near-complete database of every Google account has automatically had a Youtube account created.

"The Com" is just zoomer-talk for "The Scene"

False equivalence. Having your name on your own doorbell is a choice.

Look up Etruscan shrew. They weigh less than 2g on avg.

What's amazing about this is that one person, Sina Kheirkhah (SinSinology), beat those _teams_.

I came across the pyramid scheme link on the bunker post: https://news.ycombinator.com/item?id=42765819

I think there's an incorrect assumption that the Snyk team has any access to Cursor's systems, or their source code.

How should it have been done differently? How else is the researcher supposed to know if the attack works? "Hey random company, we have no proof it's going to work but we think maybe your system, which we can't see, is vulnerable! Go waste time and check!"

I wonder how this will affect ssh. OpenSSH recently restricted more characters for valid usernames: https://github.com/openssh/openssh-portable/commit/7ef3787c8...

Systems architect

The point is, a waiter at an establishment that will have good lobster will know the price of the lobster for the night, starting from the moment the restaurant opens.

If a waiter has to leave to find out the price of the lobster, you're eating lobster in the wrong place.

The secret is knowing that companies actually want people like you, with the real world blackhat experience, because you know how the game works in practise not just theory.