1B05H1N

So they use lies and deceit instead of anger.

Hallucinating about biological threat creation now?

I've found that it's useful for explaining things to me, and barely anything else.

It matters now because it's easy to do?

I work in application/product security and have managed WAFs for multi-billion dollar companies for many many years.

Move DNS to Cloudflare and put a few WAF rules on your site (managed challenge if bot score less than 2 / attack score == x). I doubt you'll even pay anything, and it will resolve a lot of your problems. Just test it before moving it to production please (maybe setup a test domain). Remember, a WAF is not an end-all be all, it's more of a band-aid. If you app isn't hardened to handle attacks, no amount of advanced WAF/bot protection will save it.

Message/email me if you need help.

Didn't make enough money off skins this year I guess. Good luck to those impacted.

""" The baker, in fact, had unwittingly become a textbook example of how to survive a shipwreck.

First, he delayed immersion; among those who went into the water that night, Joughin was the absolute last to get wet.

Second — and most important — he managed to stay calm and strategize a way out of the water. """

I'll consider this next time I'm in a shipwreck.

Do you guys actually share this much locally?

I have my local sync'd to my cloud storage and just pull it down if/when I need it. I'll just email/text people around me if they don't have airdrop compatibility.

Fraud is a huge driver of this. The need for high friction is here as more people are issuing chargebacks, hackers are getting more bold, etc.,.

Source: I work in ecommerce.

Maybe 5k is the max payout for the bug class?

How should one detect this kind of stuff?

Also reverse props to the meta bug bounty program manager for not understanding the finding initially. I know it's difficult managing a program but it's not an excuse to brush something like this off.

One of the many applications of chatgpt, I'm not a programmer by trade so any pointers are welcomed!

Long long phone

https://youtu.be/6-1Ue0FFrHY

They prioritized earning new business and lowering customer friction over enforcing MFA. They also had no idea 14k accounts were brute forced and cred stuffed, so that's 100% on them. They have enough money to do the security work.

Sorry, why would I pay 20/year bucks for this when I have my own website/infra?

Can you still see the meta data (sender, receiver and timedate)?

How did they not notice 7 million accounts being accessed through credential stuffing?

Do they have 0 fraud prevention? I doubt the attackers cycled IPs.

Is credential stuffing even hacking?

It's super lame that the company doesn't enforce 2FA.

Write/read is not great and there is no way to get help from google if you're not an enterprise customer (in the event of something happening). I use a cloud provider for important things and online drives as backups for smaller personal projects.

They're the flavor of the month today, but I'm waiting on a better/cheaper option.

In case anyone wants to read the US Treasury announcement:

https://home.treasury.gov/news/press-releases/jy1925

""" ...Binance willfully failed to report well over 100,000 suspicious transactions that it processed as a result of its deficient controls, including transactions involving terrorist organizations, ransomware, child sexual exploitation material, frauds, and scams.

Terrorist Financing. Binance failed to report to FinCEN transactions associated with terrorist groups including Al Qaeda, the Islamic State of Iraq and Syria (ISIS), Hamas’ Al-Qassam Brigades, and Palestinian Islamic Jihad (PIJ).

Ransomware. Despite being one of the largest receivers of ransomware proceeds, and transacting in millions of dollars of ransomware proceeds from attacks involving at least 24 different strains of ransomware, Binance failed to report these transactions.

Child Sexual Abuse Materials. Binance never reported transactions with websites devoted to selling child sexual abuse materials, including Dark Scandals.

Darknet Markets, Scams, and Other Illicit Activity. Despite sending and receiving virtual assets proceeds from large-scale hacks, account takeovers, and darknet markets dealing in illegal narcotics, counterfeit and fraud-related goods and services, as well as other illegal contraband, Binance never reported any such transactions. """

My netflix subscription went up because Rinsch embezzled money to pump and dump dogecoin?

Welp, surely this will work out for OpenAI and their board.

If you use enough to justify the cost, right?

I ran the numbers and it saves me a few hours a week on average, so it really pays for itself. If you don't use it then it doesn't make sense.

Your scientists were so preoccupied with whether they could, they didn't stop to think if they should.

Best part is the guy has a -5 rep.

Whoopsie daisy.

Wow, I can listen to the same 40 or so songs in lossless.

They had the insight to somehow a amass a massive $30 million fortune with a large-scale piracy scheme but weren't smart enough to hide it or move somewhere without an extradition treaty?

100%. It's a too risky for me and my family.