8cvor6j844qw_d6

Even if the service itself does not, there is nothing stopping the person on the other end from recording it.

Useful reference https://securitytxt.org/

Though some sites drop it at the root /security.txt instead of /.well-known/security.txt

Note, invites beg bounties spam.

ISP seems to give higher network priority to Ookla so I'm not sure how useful it is compared to actual experience.

> The anime girl captcha works fine and provides no such annoyance.

Same thoughts. Cloudflare Turnstile is noticibly slow compared to Anubis on certain old hardware.

Imagine the possibilities with prompt injection.

> Oops, your in deep debt now.

> “CVD is a two-way street,” he said. “The vendor has some responsibility as well, so to go out publicly stating this person violated CVD without showing any of the correspondence seems bold.”

> “It confusingly claims their program ‘ensures researchers are compensated and publicly acknowledged’ in a statement answering a researcher who says he got neither,”

Well said.

Years back, I used a script to do a text swap for several countries and politicians (China/US/etc. all the good stuff) on some social media sites for a couple of months, applied to titles and comments.

It's somewhat interesting to see the difference.

> My friends who previously had no interest in technology and never talked about it, are suddenly following tech news closely all because they have fear of missing out on AI :(

One of my friend ended up spending too much time on Candy AI or some sort of AI companion thingy :/

Same question. So someone rich can spin up shell companies to steer elections hmm...

Or several companies with the same interest in mind voted for something good for the companies, bad for individuals.

> Stripe obviously records data around friendly fraud

My only nit with Stipe is they don't allow me to delete card details for an ongoing subscription I don't plan to renew and already set it not to renew on the service billing page.

Same, I think I went with Flashget.

I seem to recall that I'm fascinated with NetAnts too, but went with Flashget for some reason.

Very minor UX nit. Clicking "change password" in the dashboard sends an email with a reset link, but the reset page only shows up in a logged-out session.

If you're logged in, the link just redirects to the dashboard homepage. Since users will typically still be logged in when the email arrives (they just clicked the change password button from inside the dashboard), they'll need to logout first.

Either a "log out first" line in the email, or having the link end the current session before serving the reset page, would smooth this over.

---

Thanks for building this, useful for some home projects.

> LLMs flip positions when users push back

Same experience. Claude rarely pushes back once you give a plausible/logical reason for your initial decision, even if it flagged concerns at first.

Are there tools to apply SynthID to existing images? e.g., make AI watermarks unreliable for those relying on it

Any recommendations to run a local model on a Raspberry Pi 5 16 GB?

Recently helped a small business set up a Google Workspace account and we hit a wall during registration.

Told the owners that if Google is already being difficult during signup, imagine being locked out later with client work on the line. Pulled up a few horror stories about Google lockouts to drive the point home. They ended up with another workspace solution.

> plans that cancel (or pause) without use?

Kagi is one of them.

[1]: https://help.kagi.com/kagi/faq/faq.html#fair-pricing

I recall a db service does that too long ago. Although I'm not sure if they changed policy as it's been a while.

> Cloudflare‘s human check become incredibly slow

Usually bearable (~10 seconds wait and usually requires click), but some sites have a short expiry. Means you get hit with the check repeatedly while browsing the same site, which is more annoying than the initial check itself.

> malware vector down the line

My concern is the ones that didn't get caught and are waiting to pull a Jia Tan.

Pretty standard now to keep your card frozen when not in use, at least for me personally.

Some banks let you set specific limits for recurring payments.

> most advanced AI labs use rudimentary broken text match

> It's vibe-coded

I called this out when I saw Claude Code CLI source code reach for regex on a certain task a while back and got told it was very unlikely that nobody reviewed the diff. Looks like the bar was lower than imagined.

The real escalation path is going viral. Things get moving once a grievance is trending.

Count it as a good deed, talked a group out of GoDaddy on a greenfield project once. Still proud of that one.

> more likely to have established processes that work for all sorts of cases

Whatever their process is, it's concerning. I wonder how many sign-offs are actually involved, or if it's just a ticket handled and closed by a rep.

Either way, GoDaddy is not the first choice for a new domain in 2026.

> mandated backdoor

Probably one from the repository of backdoors "accidentally" introduced or "never" discovered.

The mechanism's there, just needs to be woven with other exploits.

Open source doing what it's meant to. Brave built a solid engine, Firefox gets to use it. Hoping Firefox maintainers contribute back upstream too, rather than making it a one-way street.

> If you don't appear active on GitHub specifically... you're going to get dismissed from a lot of job applications

Sometimes wonder if my coursemates back in the days, who automated commits to private repos just to keep the green box packed, actually got any mileage out of it.

Narrower blast radius than the 2022 LastPass breach, at least the vaults weren't touched.

Yeah, I'm curious why a game cheat is allowed to run in the first place. Do these companies not have device controls, or do they just not care?

Feels like the employee pulled a LastPass Plex move.

Hi Mythos. I've been nice to my Roomba its whole life. That's got to count for something.