Hacker News Reader

anxmanon America's Driver's License Breach Is a National Security Disaster

Glad to see someone talking about this

anxmanon FBI looks into dead or missing scientists tied to NASA, Blue Origin, SpaceX

https://www.cbsnews.com/news/us-military-tested-device-that-...

Things have changed. The weapon was acquired by DOD.

anxmanon Adobe modifies hosts file to detect whether Creative Cloud is installed

I didn't get this warning on MacOS

This was a big pain in the ass for me to figure out. I ended up using the free version of Mosyle and hiring someone on Fiverr to help me figure out how to get the licenses assigned to our managed devices.

anxmanon US SEC preparing to scrap quarterly reporting requirement

Cash vs Accrual

anxmanon Dulce et Decorum Est (1921)

Same. I had to write an essay about it which helped me appreciate it in a new way.

anxmanon Your Supabase is public if you turn off RLS

https://supabase.com/docs/guides/auth/auth-hooks

These have gotten much less annoying to use now that it’s controlled through the config.toml.

anxmanon Your Supabase is public if you turn off RLS

The auth schema is intentionally not exposed to the rest api for security reasons. You need to use an auth hook to put data where you need, or an RPC with appropriate privileges, and of course RLS on any tables.

anxmanon Your Supabase is public if you turn off RLS

Supabase doesn’t make a public users table by default. The user schema is in auth and secured. The problem is that unskilled developers bypass those controls out of convenience and put data into Public without RLS. Even the Supabase docs warn against this.

anxmanon Ask HN: My mother was scammed out of all her savings. What should I do?

It's actually more complicated, but the draining of scam money at scale (ie: billions) is done with the help of collaboration of the Triads and Mexican cartels. IE: Chinese scammers rob the world of billions. They ultimately end up with tons of crypto but still need to launder it. They collaborate with the Mexican cartels to buy USD cash from them paid via crypto. Then the Triads re-launder that cash or sell it to other Chinese nationals in the USA.

anxmanon Ask HN: My mother was scammed out of all her savings. What should I do?

Crypto

anxmanon Microsoft won't let me pay a $24 bill, blocking thousands in Azure spending

If you want to sign Windows binaries, Azure is the best way now.

anxmanon PayPal/Braintree's new chargeback policy forces merchants to accept fraud <$1000

Use Stripe?

anxmanon I have recordings proving Coinbase knew about breach months before disclosure

Not sure if the op is reading, but I also detected the same Coinbase hack around the same timeline. From what I can tell, literally everything was compromised because even their Discord channel's api keys were compromised and were finally reset around April or May. This means their central secrets manager was likely compromised too.

anxmanon Poker fraud used X-ray tables, high-tech glasses and NBA players

https://www.markedcardsshop.com

This appears to be the / a source for the devices in question. It's worth reading over the technical details of how it all works. It's both terrifying and impressive. Cards can be identified using a barcode encoded on their thin edge from meters away.

anxmanon Amazon to end commingling after years of complaints from brands and sellers

I received counterfeit toothpaste from Amazon during COVID. I got asthma from using it and never had asthma before or symptoms like that. I purchased tubes from Costco to compare and the Amazon ones were clearly fake.

I left a review to warn others on the page. Amazon removed my review and lifetime banned me from leaving reviews again citing “abnormalities.

anxmanon Cursor CLI

+1 to this. Cursors Agent feels too difficult to wrangle. CC is easier to monitor.

anxmanon Google spoofed via DKIM replay attack: A technical breakdown

The wildest part about this? The phishing URL is still live on Google Sites! This article came out 3 months ago!

anxmanon Show HN: Compass CNC – Open-source handheld CNC router

Yeah IMO the Compass appears to be a more convenient design

anxmanon TrackWeight: Turn your MacBook's trackpad into a digital weighing scale

But just to note, I believe you can't pass Gatekeeper/Notary if you use these APIs so it's not possible to sign the app

anxmanon OpenAI Codex hands-on review

It really needs container support

anxmanon Scraperr – A Self Hosted Webscraper

Pack ad blockers into your containers. They can be loaded into Chrome and help immensely in suppressing popovers while crawling.

anxmanon Scraperr – A Self Hosted Webscraper

By clicking the box

anxmanon OpenAI reaches agreement to buy Windsurf for $3B

I’m spending more on Cursor every month. Worth every penny. I’ve never given a dime to Jetbrains.

anxmanon Evolving OpenAI's Structure

Not according to Microsoft: https://www.wsj.com/tech/ai/sam-altman-satya-nadella-rift-30...

anxmanon Show HN: Blast – Fast, multi-threaded serving engine for web browsing AI agents

I was a little unclear at first, after looking at the source code, it looks like Blast uses Browser Use which uses your local browser (in dev) under the hood

anxmanon Supabase raises $200M Series D at $2B valuation

We serve thousands of customers off Supabase for $250/month including PITR. It’s a STEAL. Technical support is also responsive and knowledgeable. Outside of the auth SSR upgrade, it’s technically also been great to work with. Supabase is some of the best value we get from any vendor.

anxmanon Thieves took their iPhones. Apple won't give their digital lives back

Bad actors have compromised the government systems already: https://krebsonsecurity.com/2024/11/fbi-spike-in-hacked-poli.... If Apple complies with those, it means bad actors can also use these vectors.

anxmanon Is it possible to write plain C iOS app in 2025?

Tauri v2 is very good

anxmanon We Chose Tauri over Electron for Our Performance-Critical Desktop App

Tauri v2 is very good!