bflesch

38 ms·

691.
by bflesch 2y ago
Congrats for shipping! Unfortunately for me the website is very slow due to the animations. When I hover a button it takes 1 second before the background color changes.
692.
by bflesch 2y ago
Yes, 0% or 1% loss per day without sentry mode. When I first noticed I was dumbfounded. And they have this setting "sentry mode only at home", so when you forget about that and do your 50% battery charge travel and park the car fo
693.
by bflesch 2y ago
I've noticed that the tesla app is not super reliable in that regard. Sometimes it re-activates sentry mode, not sure if it is after updates or triggered by second key on different smartphone. But luckily that car will be gone soon and
694.
by bflesch 2y ago
I'm ready to provide witness statement in front of court about the 8% per day battery loss from sentry mode on a 2022 M3P. It's not even on a busy street, just a shitty software. Not sure why you want to argue about that. Edit: So
695.
by bflesch 2y ago
The 8% battery loss per day comes from sentry mode. It's draining your battery like crazy.
696.
by bflesch 2y ago
They already have
697.
by bflesch 2y ago
You can search open threat exchange for files tagged with "scatterbrain" and it will give you various hashes: https://otx.alienvault.com/browse/global/indicators?q=scatte... You can then use the hashes w
698.
by bflesch 2y ago
Nice - I wonder why something like this is not built-in to the language itself. Especially debugging tables is painful to say the least :)
699.
by bflesch 2y ago
that looks like amazing work :)
700.
by bflesch 2y ago
I'm also German and have never seen such weird quotes. Maybe this is some weird windows charset issue but definitely not widespread way of quoting text.
701.
by bflesch 2y ago
"be the change you want to see in the world" - just start doing it. It's amazing how differently people interact with each other when collaborating on a passion project. For me, opensource software is the best way to do it. P
702.
by bflesch 2y ago
well done, thanks for documenting and congratulations on completing the project!
703.
by bflesch 2y ago
From my experience BugCrowd attempts everything to tarpit and delay reports from reaching the actual company. From company perspective this reduces cost (less bounties paid out and less reports to screen by their own staff) while at the sam
704.
by bflesch 2y ago
Maybe you don't have a lot of credibility with them ;) If someone would recommend me to Telegram I'd also doubt their credibility.
705.
by bflesch 2y ago
People one go where the technologically literate tell them go. If it wasn't for me, my family and friends wouldn't have gone on iOS, WhatsApp, Signal, you name it. If we give the thumbs up they know it's not bad if they migra
706.
by bflesch 2y ago
maybe it was the worse discoverability of groups. at some point google became more about commerce than actually listing information high in their result pages. if you search on facebook, communities related to specific topics pop up immedia
707.
by bflesch 2y ago
You chime in to showcase another thing where the USA is wrong, but you oversee the point that in no way russia is comparable to this. In the article you linked, there is a criminal investigation, an audit and a re-test of evidence in order
708.
by bflesch 2y ago
The notion that the judicial system in democratic countries is in any way comparable to the judicial system in the dictatorship of russia is laughable. In democratic countries such errors with regards to forensic evidence spark news because
709.
by bflesch 2y ago
It's a subtle form of propaganda. Same category as the "funny russian car crashes" or "awesome chinese acrobat" videos that are on reddit's front page all the time. One might wonder why it's always those t
710.
by bflesch 2y ago
Good explanation. That's most likely the reason for it. At the same time it's what I don't like with most modern search functions: they won't allow you to search for exact words or sentences. It doesn't work on go
711.
by bflesch 2y ago
This is a clever approach, thanks for sharing. Databases like Postgres come with option to use roles and different user accounts, yet many applications have a single user who can see and do everything. It's overall good practice to com
712.
by bflesch 2y ago
Yeah I first wanted to use this bug to scan their IP ranges and figure out their internal network (e.g. make requests to 10.0.0.1, 10.0.0.2, and so on). But then I realized that it will hallucinate an answer for every IP it is given :) So i
713.
by bflesch 2y ago
Kinda disappointed by cloudflare - it feels they have quite basic logic only. Why would anomaly detection not capture these large payloads? There was a zip-bomb like attack a year ago where you could send one gigabyte of the letter "A&
714.
by bflesch 2y ago
Yes, most of the time you can find someone that cares in the data privacy team or some random security engineer on social media. But it's a very draining process, especially when it's a tech company where people should actually qu
715.
by bflesch 2y ago
I'm not a malicious actor and wouldn't want to interrupt their business, so that's a no-go. On a technical level, the crawler followed HTTP redirects and had no per-domain rate limiting, so it might have been possible. Now th
716.
by bflesch 2y ago
But who would use an LLM for such a common use case which can be implemented in a safe way with established libraries? It feels to me like they're dogfooding their "AI agent" to handle the `urls[]` parameter and send out web
717.
by bflesch 2y ago
Microsoft CERT offers forms to fill out about DDOS attacks. I reported their IP addresses and the server they were hitting including the timestamp. All of the reports to Microsoft CERT had proof-of-concept code and links to github and bugcr
718.
by bflesch 2y ago
I've reframed ChatGPT as a google alternative without ads and am really happy when using it this way. It's still a great product and they'll be able to monetize it with ads just like google did. Personally it's quite dis
719.
by bflesch 2y ago
I've been on the receiving end of many low-effort vulnerability reports so I have sympathy for people who would feel that way. However this was reported under my clear name, my credentials are visible online, and it was a ready-to-exec
720.
by bflesch 2y ago
I'm not a DDOS expert and didn't test out the limits due to potential harm to OpenAI. Based on my experience I recognized it as potential security risk and framed it as DDOS because there's a big amplification factor: 1 API r

More ›