"Although a few people have confused my reporting of the vulnerability with causing the vulnerability itself, I can take comfort in a story that Richard Feynman famously told about his days on the Manhattan project. Some simple vulnerabilities (and user interface problems) made it easy to open most of the safes in use at Los Alamos. He eventually demonstrated the problem to the Army officials in charge. Horrified, they promised to do something about it. The response? A memo ordering the staff to keep Feynman away from their safes."
With ESP you can do that without even coding, using ESPHome it can be done using YAML config, it can also be paired with Home Assitante, MQTT or many other thing without any coding
> Claude then suggests these same ideas to someone else, who legitimately believes this is now their work.
Won't this mean that claude assisted you with someone else work? Sure it's not from a "chat" but claude doesn't really know anything other than it's training data
Why would doing this to 125K accounts give them access to one account per day? The chances of guessing 6-digtis pin code for each account is the same (10^6) regdless of how many accounts your are attacking
NVR is to distinguish it from DVR, Digtal Video Recorder (ironically it's not really digital, more like analog) It's much cheaper than NVR, because the camras are simple and diffrere the encoding to the DVR unit. And there XVR with can combine both Network and Digital cameras
NVR is to distinguish it from DVR, Digtal Video Recorder (ironically it's not really digital, more like analog) It's much cheaper than NVR, because the camras are simple and diffrere the encoding to the DVR unit.
And there XVR wich can combine both Network and Digital cameras
It's not a problem with PRs if you use Squash merge, the developer can make any number of changes to that PR but in the end, only the final version (in this case it doesn't include .DS_Store) will be commited. even the .DS_Store file will not be in the git index
anonymous app submissions will make the app store more dangerous. You can go the extra mile and create a company or legal entity if you want to hide your name, but it's straightforward for gov. to get your identity no matter what, they can just ask Apple or Google
Coding is just a part of engineering, I'm currently in a mental block, I would be very happy if an AI wrote the code for me, but from the look of it only change the way i would write code, instead of thinking+writing loop, it would be prompting+reading loop which is kinda worst IMO
We had the same issue because Marketing was using a stupid landing page SaaS tool to generate sales, it was connected directly to Stripe and we didn't have any control over it. We discovered the problem through Intercom, which notified us about a high volume of bounced emails (automatically sent after purchase). It was clear what was going on after discovering the same pattern.
To fix it, I had to proxy that unreliable SaaS software to implement CAPTCHAs and stronger bot detection. It was essentially a MITM-style proxy but for protection. It was fun to implement