odensc

Yep - this is the core issue that made the vulnerability so bad. And if you use a subdomain for a third-party service, make sure your main app auth cookies are scoped to host-only. Better yet, use a completely different domain like you would for user-generated content (e.g. discorddocs.com).

Pretty simple fix: require more data to look up a citation, like the number, issue date and plate/VIN (this is how my city does it). Technically doesn't make the scraping impossible if you wanna try every permutation of a license plate, but makes it mostly infeasible.

Currently it just requires the sequential citation number [1], which is how the data is being scraped so easily.

[1]: https://wmq.etimspayments.com/pbw/include/sanfrancisco/input...

Google is down because Google Cloud is down, Antrophic is down because Google Cloud is down, and OpenAI isn't down but some of their SSO providers are down because Google Cloud is down.

So, not a coincidence.

Not exactly the same, but in the same vein, Reddit has a "Random" button that takes you to a random subreddit. Google has "I'm Feeling Lucky" which gives you a random search. A "random" button seems like a relatively common little easter egg.

> They harvest emails that you punch in for email receipts at checkout for marketing purposes. etc. etc.

Really? I've been using a unique email (i.e. homedepot@my.domain) at checkout for the last 2 years and haven't received any emails at that inbox except for my receipts.

Visually, it looks a lot less like a copy of a BlackBerry keyboard, so that helps.

The first patent quoted in that lawsuit article has expired [1]. The second patent is still active [2], but is related to a "ramped-key keyboard" (essentially curved), which this new product is not AFAICT.

The third, a design patent [3], is still active, but would appear to only apply to a complete handheld device that includes an attached keyboard, not a separate accessory... Not a lawyer or patent expert by any means though.

I guess we'll see - none of that stops anyone from suing them.

[1]: https://patents.google.com/patent/US7629964B2/en?oq=7%2c629%...

[2]: https://patents.google.com/patent/US8162552B2/en?oq=8%2c162%...

[3]: https://patents.google.com/patent/USD685775S1/en?oq=D685%2c7...

> So, it'd be hard to pull off such an attack.

That's what you'd think, but people rarely pay that much attention. The fullscreen prompt only shows up for a few seconds.

For example, recently a family member clicked on a fake YouTube link from an ad in Google's search results. Clicked the search bar and it immediately turned their whole screen into a "call apple support" popup.

They called me up because they thought it was a virus, but really it was just a fullscreen webpage, and being not very technologically inclined, they didn't even try Esc, Cmd+Tab, Cmd+Q, etc.

Some cars use "indirect TPMS," which means instead of a sensor in the tire's valve stem, it measures the speed of each wheel and uses some fancy math to determine if the pressure is low.

I'm not sure if the Kia Ceed is one of such cars, but if it is, there may be some wackiness in their indirect TPMS system. Especially considering the OP says it only happens after prolonged driving at high speeds.

It's not an issue specific to USB-C. There are also plenty of USB-A/Micro-USB cables that don't have the data pins connected. Typically this is only an issue with super cheap electronics that only use USB-C as a connector for power and don't really follow the spec.

I haven't heard of a phone coming with a charge-only cable. Especially because that cable is usually used for syncing to a computer (iOS)/transferring data from an old phone (Android).

They didn't even quote that analysis correctly. It shows that it would take 30 minutes for the average person... big difference there.

Can confirm. A couple years ago, I had a Chrome extension with ~100k users; I was receiving these types of emails every week.

One of them straight up offered $10k, whether that was a real offer or not I don't know because I never replied to any of them.

I've since taken down the extension as I'm no longer maintaining it, but weirdly I still get these emails, albeit less frequently.

Can anyone reproduce this? I don't pay for GPT-4.

I noticed the "shared links" contain this disclaimer:

> This conversation may reflect the link creator’s Custom Instructions, which aren’t shared and can meaningfully change how the model responds.

Perhaps the author either unknowingly or intentionally added something to their custom instructions which causes this behavior?

The article did say that:

> The seeds had to go, too. While poppy seeds might be legal, it is never legal to plant them. Not for any reason.

What is that calculation based off of? The article lists the 4 filters as $70 (which I'd assume you would replace all at once).

The Levoit uses 1 filter "unit", and filters are $55 for a 2-pack on Amazon ($27.5/ea), or half that if you trust the third-party ones.

Levoit recommends to replace the filters every 6-8 months, so you could get 12-16 months of filtration for $55. I can't find any calculation in the article for how long the author estimates their filters would last.

Isn't $100 (the stated cost to make this) the same as a proper air purifier like a Levoit Core 300?

Agree with your take, but in this case it was pretty easy to find the ruling on Google. Here's the case page [0] and the PDF [1]:

[0]: https://www.nlrb.gov/case/03-CA-285671

[1]: https://apps.nlrb.gov/link/document.aspx/09031d45839c9e8e (file download warning)

I bank with a local credit union, and their online banking originally only supported SMS. I wrote to them about the many security issues with that, and an executive responded and acknowledged my concerns.

A few months later they added TOTP support. Not sure if I influenced that at all, but it's just another reason why I will only ever use a credit union as my main bank.

Makes you wonder if the actual article is AI-generated as well. That blog has a lot of articles about GPT-3 :)

Not to mention the impacts on the people who live in the communities on the coast that these cables often land at. See what has happened with Facebook's new cable in Oregon: https://oregoncoastalliance.org/facebook-proposes-undersea-c...

I would suggest adding information about the display panel on your website. I could not find anywhere whether it's IPS or not.

"Waste" is subjective. Some people may enjoy driving/running a bunch of errands (I find it fun sometimes when I have nothing else to do).

This isn't the same as the source previously provided with the drivers. This is a completely new kernel module.

Unless I'm mistaken that's just a security audit of their client applications, which would not in any way prove that they aren't logging.

My experience with RAVPower products has been great as well, but last time I ordered they literally put a card in the box saying "get a $35 gift card for giving us a 5-star review." I'm surprised it took this long for Amazon to do anything.

All good here too. Regional?

There are dozens of YouTubers on that platform who regularly advertise it in their videos on YouTube. Doubt that has anything to do with this.

No, it's literally just the decompiled TikTok APK.

Those repos have a 404 response, which means the user decided to delete it themselves for whatever reason. Repos taken down from DMCA return 451 (unavailable for legal reasons).

Which is why I was curious - it seems that a domain mostly serving videos and images would be classified as a content server.

Do you know who I could contact to request a review unit? (if you can share ofc - email in bio) I have an open-source Jetson-related project that I think the new model could be useful for.