oasisbob

3 ms·

1.
by oasisbob 5d ago
This is a pretty classic network operator story: go to great lengths to provide for physically diverse paths, then not notice when your provider refactors and grooms them onto the same bundle.
2.
by oasisbob 5d ago
It's funny how rote and regularized "playing" with money gets after a while though. I used to work for a financial institution small enough to sometimes need someone from the back office to help fill in as a warm body for dua
3.
by oasisbob 8d ago
ai;dr
4.
by oasisbob 10d ago
I never thought I'd be on the side of advocating for a strengthened CFAA, but the mens rea requirement here seems really problematic in the age of agents.
5.
by oasisbob 11d ago
> It serves nobody except CloudFlare and hardware companies when one side set up blockers and the other side spend money putting VPN SDKs in consumer TVs The problem with this perspective is that it ignores the victimization which is hap
6.
by oasisbob 11d ago
Oh yeah, absolutely.
7.
by oasisbob 22d ago
Could this be SOCKS-specific behavior? Haven't dove into RFC1928 yet, but curl documents the `--socks5-hostname` option and mentions that DNS resolution can be the responsibility of the client, or the proxy. Wondering if it's poss
8.
by oasisbob 22d ago
I'm really confused by this too. It has the smell of a TOCTOU problem where the tool allowing web access is filtering and blocking access based on the hostname, but the request itself is being executed on the same container as the agen
9.
by oasisbob 22d ago
The human cost the report points at caught my eye too. OpenAI should do the right thing and compensate them for their trouble. > The administrator spent the next 5 days fighting a losing battle against the agents, deleting an average of
10.
by oasisbob 22d ago
Someone else pointed out this post that OpenAI is apparently running models with high degrees of persistence internally, and that they were involved in previous incidents: https://x.com/peterwildeford/status/209273
11.
by oasisbob 26d ago
I think this asymmetry is a fantasy. For many sites, your hypothetical penny to create an account is a cost an attacker would gladly pay.
12.
by oasisbob 27d ago
I think you underestimate the difficulty in effectively gating user registration. If the anti-bot efforts in general don't work for other site pages, they won't work for signup functionality either.
13.
by oasisbob 27d ago
> Many of these boxes may not even have the spare CPU power ... I don't think that's generally how these networks use residential exit proxies. There are at least a dozen well-developed frameworks out there for decoupling the c
14.
by oasisbob 27d ago
In my climate, tree establishment is getting more difficult and expensive because of stronger summer droughts. The local city plans for five years of establishment watering now, at an overall establishment cost of ~$4,000 per tree.
15.
by oasisbob 29d ago
Technology aside, those are some truly gorgeous and informative graphical examples.
16.
by oasisbob 29d ago
Extreme example, but it's harsh, noisy and they'll sometimes aggressively swoop down at you. https://youtu.be/RuOVY4r9ipg
17.
by oasisbob 1mo ago
Sure they were! They're key safety infrastructure in response to a universal problem to keep needles out of the trash. People being harmed by needle stick injuries don't care if the needles are being improperly disposed of due to
18.
by oasisbob 1mo ago
Kohlberg's theory of moral development comes to mind.
19.
by oasisbob 1mo ago
The Kin was pretty cool. Very usable with cheap hardware and cheap data plans. If the timing was a bit different, Microsoft might not have been tempted to commit infanticide.
20.
by oasisbob 1mo ago
> not all diabetics use injectable insulin and the ones that do are more likely to do so at home. I'd love to hear the citation for this one, as people using injectable insulin generally need to do in conjunction with eating, and I
21.
by oasisbob 1mo ago
> Ask yourself if that's truly what motivated those being installed... What motivates this infrastructure is the danger to workers if syringes are just thrown into the trash. My dad had type one diabetes with a type A personality, a
22.
by oasisbob 1mo ago
Names and even dates of birth aren't consistent enough in records for this. You're reinventing a natural key with a bunch of identifiers which aren't stable enough.
23.
by oasisbob 1mo ago
Very similar experience here. Started July 30, sustained through August 6, when it started a significant ramp-up in volume (5x or so). Most of the traffic is originating in GCP. We're seeing ~70k req/min sustained from Google Clou
24.
by oasisbob 2mo ago
Open TCP connections can also be wildly cheap and efficient - Apple Push Notifications (APNS) and Android's push systems maintain open TCP connections to just about every mobile device on this planet. An open connection is just a bit o
25.
by oasisbob 2mo ago
Trampolines are great. They're also super cheap! One of my favorite trampoline hacks is to rip the legs off and use them as a giant tree swing, or portaledge when tree climbing. The hoop is immensely lightweight, strong, and doesn&#x27
26.
by oasisbob 2mo ago
I'm curious how this feature chooses to turn itself on with automatic detection. Somehow managed to fool it the other day by shutting a car trunk, helping someone load up, with me on the outside. It activated the dots for the rest of m
27.
by oasisbob 2mo ago
Isn't high-ductility associated with creep, especially under static loads? That would seem to be a downside of an adhesive like this.
28.
by oasisbob 2mo ago
Just in case anyone else is wondering, that article mentions that you get to keep your keys no less than eight times, while being light on all other details. I miss publications with skilled human editors.
29.
by oasisbob 2mo ago
Setting up the strawman of writing "by hand" only to attack it as being ableist is facile and asinine. Nobody is arguing that Hawking, or anyone else who uses dictation or other assistive technologies to capture writing, aren&#x27
30.
by oasisbob 2mo ago
The fact that the network concentrator co uses DoD v4 address space to avoid conflicts implies that their clients are bringing v4 addresses, so IPv6 is utterly irrelevant in this situation.

More ›