HN user

jenoer

184 karma
Posts7
Comments47
View on HN

Personally, the icon and widget edges constantly moving around when moving the phone even slightly in any direction got on my nerves so bad that I had to disable Motion completely (the only fix for it). This unfortunately also downgraded a lot of other UI components/interactions as well.

It did give me a battery boost though, so at least there's that.

I was directly confronted by multiple advertisement pop-ups that cannot be closed (directly reopen) and have questionable contents. It’s a hard pass for me.

I rather use Cyberchef, it’s open source, runs locally (browser client-side) and supports a gazillion encoding/decoding/hashing options.

I think that the older you get, the less new milestones/events you have (that impress you and remember in detail). This results in having less moments to refer to when looking back in time, (skipping uneventful timespans). This makes things seem closer to the current time than they really are as everything in between is empty noise.

I don’t want to take away your spotlight, because it’s a nice project you launched,

But I do want to point out to people that https://github.com/domainaware/checkdmarc exists for quite a while. I use it often and have also integrated it in various automated tooling.

(It also does not require handing out email addresses to strangers.)

This is a pretty big one (9.8).

The attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the Outlook client. This could lead to exploitation BEFORE the email is viewed in the Preview Pane.

External attackers could send specially crafted emails that will cause a connection from the victim to an external UNC location of attackers' control. This will leak the Net-NTLMv2 hash of the victim to the attacker who can then relay this to another service and authenticate as the victim.

Microsoft has released a script to check for abuse: https://microsoft.github.io/CSS-Exchange/Security/CVE-2023-2...

I’ve personally enjoyed their blog (and software) a lot and am sad to see it stop.

While there are many other great web security-oriented blogs, what are your favorites? I want to expand my (preferably RSS) feeds.

In the end I could, but not before Paypal attempted to convince me to couple my whole bank account with their systems, twice.

The second ‘attempt’/flow allowed me to enter my IBAN. I will change my original comment to reflect that.

I wanted to close my Paypal account just now and they have very dark patterns going on. I wanted to send the remainder of my balance to my bank account, in order to do so I had to couple my bank account.

It directly presented me with the info that if I were to couple the account, Paypal will have 90 days of access to my balance and all my transactions. How about no.

Luckily there was a link on the bottom “link it in a different way”, when following this path (By manually entering my IBAN*) Paypal only stated I could then “easily transfer funds back and forth”. Sounded good, until my bank app opened again and stated that if I was pressing the ‘accept’ button, you guessed it, Paypal will have 90 days of access to my balance and all my transactions. This time I pressed ‘cancel’ and thought “I’ll just buy something random and donate the last Paypal cent I own to some random charity”. Got an error message after pressing ‘cancel’ in my bank app, but curiosity got the best of me, I refreshed the Bank Accounts page and there it was, my bank account number. I was able to transfer to it without coupling after all.

Once the funds are on my bank account I will avoid and evangelise avoiding Paypal.

It seems that when one of the words starts lowercased it’s always real/hacker news. All satire strings seem to be created with uppercased words only.

Sending and receiving messages works here, but editing them does not, it throws an error. Statuses such as "calling" also do not seem to be updated any longer.

Edit: Restarting Slack does update the edited messages.

Edit 15:24 CET: Slack is back up.

Nothing fishy about it, its proper Quality Assurance using the initial release of Windows 11 as an MVP.

If they’d build preview versions of all tools that Windows (11) contains, then release a new Windows 11 preview build any time a tool receives updates (after community feedback) and ask for more community feedback on all of these releases (probably talking a new Windows 11 version every single day) and release Windows only when all the tools and their changes have been deemed worthy/bug-free it will be 2029.

A decentralized peer-to-peer cash system as a movement against the (banking) elite has become a centralized and 'propagandized' "story of value" for the (banking) elite.

Satoshi Nakamoto has great dreams, but basic human greed has struck again.

The toxicity of a lot of Bitcoin advocates' comments on HN does not exactly make me feel like being invited to a fun movement.

"Have Fun Staying Poor" is in my opinion a disgusting remark to make to complete strangers.

Null 6 years ago

This could allow a malicious party to trick the user into thinking it's microphone is not recording while it actually is.

If this action can be performed using the hardware button it is likely that it can also be performed software-wise, it would be a nice addition for malicious software such as malware.

The request for more information will likely only be to confirm you are owner of the property / residing there. As for the request, I simply stated "I want my house blurred for privacy reasons.". No questions were asked and the request was processed within a week.

@robdelacruz: I have a few security-related findings for you that you might want to take a look at:

- I can inject any JavaScript in Titles, Tags and possibly other locations.

- By manually changing the value of the `userid` cookie, I can log in as any user ("1" for admin). This also allows me to access the admin section of the website.

- It's highly recommended to enable "HttpOnly" for session cookies. (Secure and SameSite should also be more strict if the application allows it)

Other remarks:

- There should be a limit on the length of submission titles, these are close to infinite it seems.

Edit: It seems others are completely defacing the board by using these tricks. I just want you to know that it's not me.