I don't agree that tunneling everything through some external facing proxy is "TLS certificates for internal services done right".
HN user
pizzalife
That seems like a pretty controversial take. Why would you not be able to learn things orally?
Why did you not mention LLM use in the post at all?
Are you not using LLMs as part of your toolkit in 2026?
I remember using knoppix on some machine in the school computer room, to sniff everyone's logins using ettercap (pre https adoption). Good times.
Right. `CAP_SYS_ADMIN` is for all intents and purposes equivalent to root.
This is cool. Is it possible to easily install with ollama?
Well, judging by this thread, it doesn’t seem like it.
It’s really not a good idea to be posting about your case when it hasn’t even been resolved yet.
I did this on my Nokia phone over GPRS in 2005, my program of choice was irssi. We did have a Markov chain bot though.
See the AT&T/iPad data leak, where AT&T were leaking private information on the internet with no security checks at all. Someone found it, told the press, who in turn told AT&T, but the FBI still investigated it as a "crime", raided their home, charged them with "conspiracy to access a computer without authorization." AT&T go no punishment at all.
I think you are missing some nuance here. They found a vulnerability where they could just increment an "id" and get access to another user's information. They then went ahead and scraped as much as they could. Also this person (iProphet / weev / Andrew Auernheimer) is awful and certainly not a victim. AT&T did not leak the information, Andrew did!Should they have had better security? Yes. Was the vulnerability extremely basic? Yes. Doesn't change much, a vulnerability was used to dump a bunch of private data.
It’s in a private Ip range so unless you’re inside Iran you’re fine.
Why would you want to give out your contact info to people you didn’t engage with?
The business card is more than just an exchange of phone numbers.
I'm not asking for anything. Just commenting that transcripts of videos make for bad blog posts. I'm not interested in watching the video.
Yes, reading transcripts is a terrible way of ingesting information in my opinion.
This blog post has a really verbose format.
TLDR; White lights are used during the daytime, red lights at night (less annoying), towers under 200 feet don't need blinking lights.
I use the following IDA pro MCP plugin for this: https://github.com/mrexodia/ida-pro-mcp
Is this motivated by a need to prepare for war?
In short, yes.
The possibility to pay by card when the internet is not working – ‘so-called offline payments’ – is an area that ‘the Riksbank believes needs to be improved considerably, particularly in light of the geopolitical unease in the world,’ according to the announcement
https://www.riksbank.se/en-gb/press-and-published/notices-an...
Indeed, this article makes them look bad. Seems completely tone deaf to release this as a puff piece about the product.
“Show some respect?”
Do these historical accolades give him a blank check to be wrong in the present?
I also got rejected by Anthropic, and now I’m working at an amazing startup instead. Anthropic’s hiring process is dumb, you shouldn’t take it personally.
There is a market for capabilities, i.e zerodays in widely used software. It has value, sometimes in the millions.
No one will buy some shitty XSS on a public website.
This guy could easily get indicted under CFAA. This isn’t how you conduct “white hat” security research lmao. If they don’t have a clearly outlined bug bounty program, you are in a pickle. Especially with using legitimate employee credentials.
The 20kg bike would accelerate roughly twice as quickly as the 40kg bike. Accelerating super quickly is not safe.
If a 20kg motorcycle can do 4kW why is that a concern?
Because it would go too fast.
Beautiful terminal interface, well done. For people using Crush, how do you feel it compares to Claude Code or Cursor?
What kind of GPU setup are you using for Kimi?
If you work at a startup, sometimes you have to do extremely mundane and boring things unrelated to your expertise (“wear many hats”). AI is especially useful in those cases so you can quickly go back to working on things you enjoy.
I love this. Quick suggestion: make the width/height of the animation depend on your terminal size. Then you could make the animation a bit smoother for larger terminals.
I like egui a lot, but I haven't figured out how to not get blurry fonts in macOS/windows. If anyone has a tip I'd appreciate it.
Pretty much yes