Hacker News Reader

rhdon Sandboxes won't save you from OpenClaw

What if it's convinced to resolve the matter on your behalf, against your favor while it was acting autonomously?

rhdon Taking a $15 Casio F91W 5km underwater

This video might be of interest to you-

https://www.youtube.com/watch?v=iOT8XU1ss3E (Do Oil-Filled (Hydro Mod) Watches Actually Dive Deeper?)

rhdon Regex character "$" doesn't mean "end-of-string"

chatgpt-4:

^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$

https://chat.openai.com/share/696f7046-7f43-4331-b12b-538566...

chatgpt-3.5:

^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$

https://chat.openai.com/share/aaa09ae8-3fd9-4df7-a417-948436...

rhdon Discord as a filehost will no longer be possible by the end of the year

Yep, they're using it for malware delivery as well- not uncommon to find Dropper's that download additional stages of the malware from discord.

rhdon Pysentation: CLI for displaying Python presentations

Chat gpt learning cutoff

rhdon Researchers watched 100 hours of hackers hacking honeypot computers

I know CyberArk PAS has this feature, and there are others. https://docs.cyberark.com/PAS/11.6/en/Content/PASIMP/Configu...

rhdon Show HN: Use cookies from Chrome (CDP) in cURL without copy pasting

I've once used Selenium to run javascript in the webpage to steal a few dynamic tokens required by the sites API to reuse in my more well-trodden python-requests workflow.

rhdon Reverse engineering a mysterious UDP stream in my hotel (2016)

Sounds like a great CTF challenge, will have to explore

rhdon Reverse engineering an e-ink display

Here's an example in Michigan's law:

The Shopping Reform and Modernization Act, or Scanner Law, requires that most items on store shelves be clearly displayed with the price; by signage, electronic reader, price sticker, or any other method that clearly and reasonably conveys the price to a consumer in the store at the place where the item is located. If an automatic checkout system (scanner) charges you more than the displayed price of an item, and:

the transaction has been completed, and you have a receipt indicating the item purchased and the price charged for it; Then:

You must notify the seller that you were overcharged, within 30 days of the transaction, either in person or in writing. Within two days of receiving your notice, the seller may choose to refund you the difference between the amount charged and the price displayed plus a "bonus" of ten times the difference, with a minimum of $1.00 and a maximum of $5.00. If the seller does not pay you both the refund and the bonus, you may bring a lawsuit to recover your actual damages or $250.00, whichever is greater, plus reasonable attorney fees up to $300.00. You may instead file a complaint in a small claims court without an attorney.

https://www.michigan.gov/ag/consumer-protection/consumer-ale...

rhdon An Accident at SpaceX

Is SpaceX a covered entity providing health care? If not, HIPAA is not at issue.

rhdon QR code images in macOS are silently executed in the background hours/days later

There could be privacy concerns where Apple isn't the party using the data, but has allowed a third party access unintentionally.

I don't know if this would be possible given the limited information currently available, but an example may be:

User attempts to browse anonymously through the use of A VPN, obscuring their residential IP. Website, or third party analytics on a website generate unique links and embed them in QR codes hidden on the page. A twist on tracking pixels. Browser requests, and caches image containing QR code on disk. Later, after user has disconnected from VPN their OS indexes images on the filesystem (for search purposes, or whatever, parses the QR code and requests the url contained. Malicious site/analytics firm now has additional data point (residential IP, not obscured by VPN) to correlate against.

There's also the remote potential that the QR code parsing/request functionality could have vulnerabilities. The behavior known doesn't indicate that, but it might result in exploitation with less human interaction if they are found.

rhdon Rethinking indoor air chemistry

I went down a similar journey over the last couple years (CO2, VOC, PM1.0/2.5/10 sensors). In my apartment I sit around zero for particulate with windows closed. I jump up significantly with windows open unfortunately (for my allergies) in the midwest.

I do wish my AC/Heat had more air exchange, similar to your space my CO2 levels rise dramatically after an hour or two of occupation with windows closed.

rhdon WordPress’ market share is shrinking

And SOC/CSIRT folks. A staggering amount of incidents involve an external wordpress install used as free real estate by threat actors in some way (e.g. phishing kit, malware infra).

rhdon WLED Arduino WiFi LED Controller

I think probably something like these: https://www.amazon.com/dp/B01AG923GI?psc=1&ref=ppx_yo2_dt_b_...

I know a lot of people use them punched through maps, for live METARS displays

rhdon WLED Arduino WiFi LED Controller

This project is great, I've used it in a number of 3d printed lamps (I did not design, just printed and assembled): Hex wall feature: https://www.youtube.com/watch?v=k58HUUgFhOw Fiber lamp: https://www.youtube.com/watch?v=lGlQDPNpxps Canister lamp: https://www.youtube.com/watch?v=OdRT6GtUGSo

rhdon Show HN: I wrote a book about Go

Hi,

It's probably a combination of young domain, and associated IPs blocked from mail.

Check on Cisco Talos https://talosintelligence.com/ Submit ticket: https://talosintelligence.com/reputation_center/support#repu...