Well to be fair, you haven't been put in that situation so it's hard to say how you would act. I'm sure many people who have affairs believed, 3 months prior, that they would never be the type to have an affair.
451 karma · joined May 25, 2024
It’s worth fighting those chargebacks. If the chargebacks from stolen cards were initiated by the real card owners, it’s very unlikely you’ll win the disputes. However if the chargebacks were initiated by the fraudsters themselves, that’s a different story and you might have a good chance of winning some disputes.
Did your platform have payout delays for new accounts? 14 days? Did you use 3D Secure payments?
They created both selling and buying accounts on your platform, bought from themselves, withdrew from their selling accounts, and charged back the original payments?
In practice, diesel engines can become more efficient under additional load, and it obviously varies between models but it’s not a 16% vs 50% difference like your example.
The reason EVs don’t tow well is they don’t have a high enough range to begin with. Diesels have nearly double the starting range of an equivalent EV, and storing additional fuel on board is an option.
Honestly, at this point the best we have is to hope the whitehat AI scanning for issues is stronger than the blackhat AI.
I copied the clipboard from the device, and my clipboard was full of another users credentials that they were obviously trying to paste into their own VM. Their devices were leaking clipboard data to each other.
I reported the vulnerability and asked if there was any bounty program (I wasn't looking for vulnerabilities but didn't hurt to ask), to which they said no, but they could send me a signed letter thanking me of my contributions. I said, great, thanks - and never heard back.
All pretty disappointing.
The big selling point of them was a fast, convenient dev experience with many features (most often unused) being built-in.
Now, those built-in features are becoming a security risk as more vulnerabilities are being found in their 1000s of lines of code, and the developer experience benefit is being nullified by agents whittling away the human involvement anyway.
Pre-2024 code is full of human-written vulnerabilities.
Interacting with the internet is a large part of the product's intended functionality. These agents are already in the hands of the masses with full access to the internet. Air-gapping it entirely avoids the risk by removing much of the capability they're trying to develop in the first place, and won't be testing it in the environment they'll actually be used in.
I agree they're testing on the town square too early. They clearly need tighter controls.