tom1337

11 ms·

181.
by tom1337 1y ago
I wondered how you are deciding on whether the response helped the user. Couldn't find it on your page quick so I asked your bot > How are you checking whether the answer helped the user and that it needs to be billed? >I couldn&
182.
by tom1337 1y ago
well then thats on me and i misunderstood. I thought that with secure boot enabled a tampered operating would not boot and therefore the anti cheat can expect that if secure boot is enabled the os is legit. but yea if secure boot enrollment
183.
by tom1337 1y ago
checksumming does make sense because it ensures that the file you've transferred is complete and what was expected. if the checksum of the file you've downloaded differs from the server gave you, you should not process the file fu
184.
by tom1337 1y ago
As example, FaceIT Anti Cheat only works if Secure Boot is enabled. I guess their argument is that they can ensure you only boot genuine Windows and thus they can better check if you've tampered with anything.
185.
by tom1337 1y ago
yea having also issues with pulling anything from ghcr
186.
by tom1337 1y ago
Yea - I honestly don't get why a random commenter on your GitHub Repo should be able to run arbitrary prompts on a LLM which the whole "attack" seems to be based on?
187.
by tom1337 1y ago
Back in the days Google verified businesses by sending a postcard to the address you have created your business at. The postcard had a verification code which you’d need to enter. Sometimes you'd also had to revalidate the adress owner
188.
Ask HN: Is vibe coding overhyped or am I missing something?
3 points by tom1337 1y ago|6 comments
189.
by tom1337 1y ago
I'd also question if the updater needs to download the update before the user saying they want it. Why not check against a simple endpoint if a newer version is available and if so, prompt the user that an update could be downloaded an
190.
by tom1337 1y ago
Well I've just created an account on substack to test this but turns out they've already fixed the issue (or turned off their WAF completely)
191.
by tom1337 1y ago
Unfortunately I don't have any examples at hand right now. What I remember is that in some smaller villages in germany it was missing house numbers and some streets weren't "cut" correctly. So when you had an intersectio
192.
by tom1337 1y ago
I tried going that route and it unfortunately didn’t work well. At least in Europe OSM is missing a lot of house numbers and even has some larger flaws of missing data / invalid attributed streetnames.
193.
by tom1337 1y ago
I think what the original commenter meant was a multi-hop setup like this: You -> Russian IP -> US IP then you'd get anonymity via the Russian hop but aren't geoblocked due to your final hop being in the US.
194.
by tom1337 1y ago
If you’re taking about the status page: So I put together a simple shell script that runs from the crontab every 15 min, outputting some system stats to a basic HTML file in the webroot. It only updates every 15min which is why you’r
195.
by tom1337 1y ago
Source for everybody not believing this: https://en-americas-support.nintendo.com/app/answers/detail/... (Point 4 under "On a PC or smart device")
196.
by tom1337 1y ago
Website has no SSL and if ignored throws a 403, GitHub Link throws 404.
197.
by tom1337 2y ago
I wonder if this could be used as something like early recaptcha. Have a machine do transcriptions and for the parts where it's not entirely sure just let users play the game and then accept what most users chose as the correct solutio
198.
by tom1337 2y ago
exactly - also, as headers are not signed or anything and they could easily be spoofed i don't get the use case they are being used for. to me they just seem to be useless noise?!
199.
Ask HN: Chrome sending new x-browser headers?
7 points by tom1337 2y ago|2 comments
200.
by tom1337 2y ago
Waiting for the day where CloudFlare publishes their own LLM trained on their entire cache
201.
by tom1337 2y ago
I totally agree. I thought about adding a paragraph about how it seems like even oracle themself doesn’t use it on production (cause otherwise it’d have probably more downloads due to developers, CI, you name it) but it is possible they use
202.
by tom1337 2y ago
Yea their CLI has 510 Weekly Downloads on npm and JET itself nearly 1000. https://www.npmjs.com/package/@oracle/ojet-cli https://www.npmjs.com/package/@oracle/oraclejet
203.
by tom1337 2y ago
Don’t really have a real answer but if "zap them to whatever service I prefer" means "use zapier" couldn’t you just create a HTML Input Field with a button next to it and when the user clicks the button the value from th
204.
by tom1337 2y ago
As somebody who’s daily driving the Terminal.app with ohmyzsh and never bothered switching, what are the reasons one would prefer another emulator?
205.
by tom1337 2y ago
The https://mantine.dev docs rule. They provide a lot of examples on the landing page and if you navigate through the page each component has a great explainer with a playground and all possible settings you can give. Direct wit
206.
by tom1337 2y ago
You've probably agreed to that somewhere in the Terms Of Service and therfore gave consent
207.
by tom1337 2y ago
I actually also wondered about this because if Signal does not encrypt attachments and delivers them via CloudFlare and that would suck as CloudFlare could just look into all them. It seems that signal is indeed encrypting all attachments a
208.
by tom1337 2y ago
> The counter point is that anyone who cares about being anonymous is using methods to disguise their identity that cannot be compromised by this attack, e.g: a VPN. Yes unless Apple is doing Apple things and ignores VPNs for things like
209.
by tom1337 2y ago
Is this really an issue? Back when I implemented Google OAuth I used the "sub" that Google gave me as well as the email. I'd wager that Google does not re-use a sub for the same E-Mail so if the account is deleted and then so
210.
by tom1337 2y ago
Agree with the second part. Github actually has merge queues, but only for the enterprise tier…

More ›