HNHacker News
TopNewBestAskShowJobs

roozbeh18

122 karma · joined March 14, 2012

@roozbehk
submissionscomments
roozbeh18··on Cloudflare OHTTP gateway
We have Cloudflare Tunnels to thank for this. I wish Cloudflare did more to stop malicious use of Cloudflare Tunnels.
roozbeh18··on JSON formatter Chrome plugin now closed and injecting adware
last night I got an alert from Malwarebytes on my machine that it quarntined an extension.

Quarantined - PUP.Optional.Hijacker. C:\USERS*\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\BCJINDCCCAAGFPAPJJMAFAPMMGKKHGOA

wondered what the extension was... JSON Formatter

roozbeh18··on Shai-Hulud Returns: Over 300 NPM Packages Infected
You are just reducing the blast radius with use of podman; you will likely need secrets for your app to work, which will be exposed regardless of the podman approach.
roozbeh18··on Kafka is Fast – I'll use Postgres
Just checked my single node Kafka setup which currently handles 695.27k e/s (average daily) into elasticsearch without breaking a sweat. kafka has been the only stable thing in this whole setup.

zeek -> kafka -> logstash -> elastic

roozbeh18··on I ditched Docker for Podman
Someone wrote a PHP7 script to generate some of our daily reports a while back that nobody wants to touch. Docker happily runs the PHP7 code in the container and generates the reports on any system. its portable, and it doesnt require upkeep.
roozbeh18··on Show HN: Omnara – Run Claude Code from anywhere
someone at the leadership is also thinking how he/she can lower head count by removing the agent master
roozbeh18··on Critical vulnerability in AI coding platform Base44 allowing unauthorized access
20 years ago the school class enrollment website allowed just that by changing account IDs in URL, we were bypassing the priority enrollment. I had fun adding my friends and I to classes we wanted.
roozbeh18··on Beirut airport bans pagers, walkie-talkies on all flights
we have not had a plane blow up into buildings since, so something must be working. yes, it's also inconvenient.
roozbeh18··on SEqlite – Minimal Stack Exchange Data Dump in SQLite Format
Can someone tell me how this is collected in SQLite
roozbeh18··on Ente: Open-Source, E2E Encrypted, Google Photos Alternative
use google takeout.
roozbeh18··on Fly Kubernetes
I made the same bet with cloudways which is now owned by digitalocean. they filled a gap for me, and I was ok if they decided to close shop; I am glad it didn't go that direction, and they are part of a bigger company that also was once a small company, but they are now publicly traded. you make your bets...
roozbeh18··on The weirdest bug I've seen yet
haha, that was questionable for me as well. It's ok for Grammarly to read your stuff, but crash metadata is a no no.
roozbeh18··on Cisco Acquires Splunk
Easy for sec to identify affiliation to Splunk for this call.
roozbeh18··on The Password Game
I learned alot today. #win
roozbeh18··on Tell HN: Putting mirrors around my desk improved my posture
yea worked for me till I hit 40
roozbeh18··on Sam Altman says era of remote work is over
sounds good. put me back into the office with far less meetings then jumping from zoom meeting to another...
roozbeh18··on Retool Database
I wish retool had two things, more granular permissions for users on team plan. right now this is reserved for enterprise. I can not simply share only specific apps to certain users.

I wish to be able to pay yearly. We are on a hosted solution.

roozbeh18··on Jailbreak Chat: A collection of ChatGPT jailbreaks
hahaha made my day.
roozbeh18··on Poll: Contractors, what is your hourly rate
Hahahaha
roozbeh18··on Design the next iPhone
say no more https://imgur.com/a/1v1emWj
roozbeh18··on Design the next iPhone
"This isn't just an upgrade, its a breakthrough"
roozbeh18··on Design the next iPhone
dont let me stop you https://imgur.com/a/1v1emWj
roozbeh18··on Guest WiFi using a QR code
:)
roozbeh18··on I'm a scam prevention expert and I got scammed
I am a security guy by profession, the other day my wife singed up for a tesla and they ran her credit. next day we get a random call from wellsfargo regarding an auto application and wanted to verify her information. my wife confused why wellsfargo calling, did what I always ask her to do. tell the individual to provide her with the case number and she will call back and they do not need to provide her the call back number. This is easy to remember for most people and She did just that. It turned out tesla has multiple financier which tesla failed to mention that one is wellsfargo.
roozbeh18··on How did LastPass master passwords get compromised?
OP blog suggests users receiving similar email even after changing their master password. two possibilities for LP. either their servers were hacked and hashed master passwords were dumped somewhere or as LP said, system error due to a bug.
roozbeh18··on Tetr.io
Damn
roozbeh18··on Goddamn AWS seems to be down again 4th time this month alone
no fun if you have to explain it haha
roozbeh18··on Facebook bans, sends C&D letter to developer of Unfollow Everything extension
ah, had a discussion with a friend about sending money with Iran in the comments. he said his poker buddies used to donate 10% of the winning for someone to help orphans in iran. in the paypal transfer he wrote "for the good work you do in iran". his account got banned and money never got returned. later his account was reinstated but money never was returned.
roozbeh18··on Developers fix multitude of vulnerabilities in Apache HTTP Server
lol
roozbeh18··on US Cybercom says mass exploitation of Atlassian Confluence vulnerability ongoing
its' misleading and it gives off the notion that the cloud is more secure so you should migrate your instance to our managed "Cloud" version.
Page 1 of 3Next →