costco

15 ms·

151.
by costco 3y ago
My goal for 2024 is to read as many John Regehr publications as I can.
152.
by costco 3y ago
Wait a couple of weeks and some guy in the middle of nowhere will have mirrored the site with one of those tools that clones a site from web.archive.org and put some ads on it.
153.
by costco 3y ago
As far as I can tell no one is validating against government databases except for things like sanctions lists. For Americans they might use something like TLO in the best case. The identity verification companies like Onfido get a picture
154.
by costco 3y ago
That's not what the article is saying. The article is saying that the ability to pretty easily create realistic fake looking identities with AI will undermine e-KYC systems that are popular with online financial services. This would
155.
by costco 3y ago
How long before some journalist peruses literally any fraud forum and finds people selling fully KYCed bank/exchange accounts for $200 and several people offering to verify an account with whatever identity you want? Also, the slow ro
156.
by costco 3y ago
"Tank" is actually wanted for his involvement in running an IcedID botnet, not his earlier work with JabberZeus. I wonder why. Maybe they have better evidence for the more recent stuff.
157.
by costco 3y ago
If it is a common task like decoding base64 then you can compare the results of your function with the results of a well established existing implementation and abort when they are not equal.
158.
by costco 3y ago
In libfuzzer you can return -1 to exclude an input from the corpus. extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { if (size > 256) { return -1; } handle(data, size); return 0
159.
by costco 3y ago
I'd imagine stuff like SSL certificate expiry monitoring, CT log monitoring, or IP address geolocation / reputation. I assume a handful of fortunes have been made this way. But you're competing with people who can outspend
160.
by costco 3y ago
I'm pretty sure Epinatura is https://www.urdn.com.ua . They host VPNs and some other notorious pirate services. I think in 2015 or so they had all their servers confiscated by the SBU but I guess they got them back.
161.
by costco 3y ago
I wasn't expecting this to get much attention because it didn't require very much effort on my part but it looks like someone has smiled upon on my post :) Anyways, this is the kind of thing a simple setup can find, see mongoose&
162.
by costco 3y ago
Made an ancient computer with very limited CPU usable for my siblings with Gentoo. The secret is to do USE="-* minimal" and enable things that are required from there. Compiling a custom kernel was actually necessary because it
163.
by costco 3y ago
It's a part of the browser. It's not doing it with Javascript if that's what you're asking. Chrome includes a file with the name widevinecdm.dll or something like that on Windows. No one knows exactly what this file d
164.
by costco 3y ago
Discovered some bugs in an HTTP library used in upnp software found in Zyxel and some other brands routers. Unfortunately no code execution but did get reliable crashes! All it took was honggfuzz and ~30 lines of code: #include <s
165.
Crashes in HTTP server used in routers found with simple fuzzing(github.com)
54 points by costco 3y ago|4 comments
166.
by costco 3y ago
Well now I know I have a bunch of software I want to try https://github.com/unum-cloud/ . The author is definitely brilliant. I should benchmark https://github.com/ashvardanian/SimSIMD/blob&#x
167.
by costco 3y ago
This is definitely still possible. Saw a guy a year or two ago in a web scraping Discord who does this for fun and found all sorts of API keys. I think he found a 2captcha API key for an account with a 5 grand balance by spamming the sear
168.
Lessons from building GitHub code search [video](youtube.com)
256 points by costco 3y ago|100 comments
169.
by costco 3y ago
Here's a talk that may interest you with former Director of the National Counterintelligence and Security Center Bill Evanina and Special Agent Charles McGonigal (yes, that one). https://youtu.be/aZdJ6aDsB08?t=5712 The
170.
by costco 3y ago
Gambling operators pay taxes on gross receipts beyond just ordinary corporate taxes that in most states range from 5-10% which also happens to be the typical range for sales tax. As well as a federal excise tax of 0.25% on all dollars wage
171.
by costco 3y ago
They exist, it's just a different business model (high volume, low margin) that's not compatible with massive TV advertising campaigns, large sign up bonuses, etc. See Pinnacle. Alternatively, there's the exchange model a la
172.
by costco 3y ago
Gitlab is a great product but using it has a negative effect on getting contributions for an open source project outside of the core developers due to Github's larger user base. I have seen this play out many times.
173.
by costco 3y ago
> Eve's Hollywood by Eve Babitz, if you want to fall in love with a Los Angeles even more, great writing Goodreads recommended me this after I read Slouching Towards Bethlehem (which I really liked). Now I have a second opinion so
174.
by costco 3y ago
It was fun to write and if more people start botting like I do it might eventually become useful. But yes it's premature if that's what you mean.
175.
by costco 3y ago
I wish I saw this when it was posted last year. This is awesome and really convenient.
176.
by costco 3y ago
I enjoy HN as much as the next guy but it's easy to get high comment counts when you count archive.is links (and the ensuing 4 levels nested argument about why they don't work with Cloudflare DNS and who's in the right on tha
177.
by costco 3y ago
Good point. I only have the ugly code in a few places so I debated whether doing something like this would be worth it or not. It probably is.
178.
by costco 3y ago
It's part of an API client I made for Resy so there are some guarantees on what characters will be in configID which is why I don't escape everything. I actually have a separate pool but I used bytebufferpool.Get instead of clien
179.
by costco 3y ago
Maybe I'm confused on how strings work but if this doesn't allocate: // excerpted from Cut if i := Index(s, sep); i >= 0 { return s[:i], s[i+len(sep):], true } return
180.
by costco 3y ago
Nice practical article. I tried to rewrite the code in it to use byte slices and calls to the bytes package instead of strings while keeping the calls to Split, thinking it would be faster due to less copying. The allocations were actuall

More ›