bstsb

the page keeps 301ing to the home page for me - could be a region issue

https://archive.ph/JYC9B

then every casual user would switch instantly to Gemini, or the most convenient alternative

The default applies only to version updates. Security updates still open immediately, so critical fixes are never delayed.

does this require a real vulnerability report, or CVE? if the package is compromised would they just be able to push a false "critical update" that bypasses this wait?

as far as i remember only the Pro tabs are paywalled (the ones created professionally)? the community tabs are all freely available on web, and carry little restrictions on mobile

people have been mistaking AI conversations with reality since the very first text-based models came into the public view with ChatGPT. i'm sure with each incremental improvement to outputs like this, though, more people will get convinced of its "humanity"

(see https://www.reddit.com/r/MyBoyfriendIsAI/)

can Vercel give any assurance that they won’t add a reliance on their closed-source cloud offering for the package? especially given their ownership of next-auth too

i really loved better-auth’s DX but the nature of their database adapters means it’s relatively easy to switch over to another provider/library

i think the point is that one actually burns disk space, while the other is just a nuisance for people on plans with limited data

i remember making my first HTML app when i was your age - my teacher let me use the computers after i finished my work, and i used JSFiddle to learn the fundamentals. if it weren't for the supportive adults around me i would never have got into the field of computing today!

good luck with making more projects :)

i think honestly it’s the opposite. it still confuses me why meta invested so much in their pointless experiments (think any of their AR ventures) when their main source of revenue was, and continues to be, their boring advertising on consumer apps

wow, this is actually a really impressive attack - a far cry from the obfuscated postinstall hooks seen a million times before.

the only real long-term solution to node-based attacks like this is to run any remote code in a container, or even a VM?

[…] the publisher posted a blank white page with the cryptic phrase, “This article has been withdrawn due to article violation.” Springer Nature is nevertheless still selling the empty PDF for $39.95.

completely unsurprised, given the state of online papers publishing. if you don’t have an subscription or aren’t an organisation member, the fees are insane

the actual base64 email itself is an HTML document, with a bunch of filler text about metal magnets!

Hi there, A magnetic domain is a region within a magnetic material in which the magnetization is in a uniform direction. This means that the individual magnetic moments of the atoms are aligned with one another and they point in the same direction [...]

they sign off the email with a zero-width space set to "font-size: 0" for some reason

interesting - this looks quite promising. anything that reduces captchas or client blocks while using a VPN is welcome in my books.

i’m not sure what they mean about agents, however. would this mean a human generates legitimate traffic, and that goodwill can then be utilised by a browser agent? and will it be possible to host your own Moderator?

what does that even mean in this context??

This conversation was initially just a phone call, but was so powerful that we decided to turn it into a blog and share the audio via YouTube

i can tell - it looks like the blog post doesn't really add anything over a direct transcript of the call itself. it's just a bland summary of the really interesting story Dalton told

I'm amused that it made me accept the terms and conditions without any indication of who I am

as far as i’m aware, that’s fully binding and often an accepted practise - take Minecraft’s server software, where you must accept the EULA with a text flag before running

for the first time in a while on HN, i disagree with the characterisation as AI-generated. at most it was drafted with an LLM, but the final output is pretty human to me.

they used the wrong it’s/its, made But. its own one-word sentence, didn’t capitalise HTML, and used “okayy” in parenthesis. all of this isn’t to criticise the writer - i enjoyed it more seeing these little imperfections that make up a blog post

ironically that guide is AI-generated

it’s referring to the page available at /newest - the “new” link leads to it

the Claude-produced website alongside its excessive hyperbole makes me much less likely to believe this “expose”, even if there is an element of truth to it. if you want to call out a company for being “AI slop”, don’t vibe code a website to do so.

to be fair, the fact they show precise revenue data through their public API is interesting: https://polsia.com/api/public/live/dashboard

always trust a vibe-coded website which uses a Discord bot as its backend

(i'm sure there are countless bypasses out there, but please don't use something like this)

hermitcraft's official website features world downloads for S1-10, as well as modded seasons

https://hermitcraft.com/

that is quite funny, tbf. looks like the person who opened is friends with eva, a member of "server scanning inc" [1] so they thought it was worth a shot

[1] https://eva.ac/

much anonymity provided by VPNs is through how many people use their exit nodes, “disguising” your traffic among others. also if you hosted your own VPN it would be trivial for one to find its host from an ASN, and from there subpoena your billing information

Get Outlook for Mac

this bit made me laugh. was the email drafted in Outlook? was it sent to some sort of forwarding mailbox, or did they just BCC every customer in?

apple didn't "make up" this vulnerability, it was an external team reporting an issue

while there are some tools available for the web UI, like building small React apps or making diagrams, it doesn't have the same loop as Claude Code in terms of iteratively building or fixing

alternate link: https://archive.ph/rsC6e

it’s a fake Cloudflare interstitial, actually using reCAPTCHA. seems like the owner has some sort of vendetta against Cloudflare after the DNS stuff

i would agree if it weren’t for his presence on live TV! at that point it seems too awkward and late to mention something