2,035 karma · joined July 30, 2025
People are generally massively uninformed if not misinformed. People have not heard real arguments or data for most issues in general.
Want to track what people are doing all the time? https://en.wikipedia.org/wiki/Voyeurism#Treatment
Is this chained with n-days?
I don't know what you ate today. It would be insane for me to confidently claim that you ate two bananas and a pizza today.
The burden of proof is on the person making the claim. That's the basis of empirical research.
This is evil in itself.
Outbid is just sad. People pay money to get on a slop board?
We got IPv6 just so people can dot the exact same dumb shit with it that IPv4 forced us to do.
I'd argue that complexity is not even the right word to describe what the author describes. Thickness or depth is more accurate.
> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.
How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.
The only case where this has much to do with email security is when an email server is breached.
This whole article is a lot of words around very little information.
You won't get this, otherwise we had tons of LLM written photoshop alternatives already. And if it would work, that would be a good thing.
> I walk to the local phone shop and get a replacement sim for my number with a few of bits of ID and I regain sms access.
Or someone else gets access to your SIM by sim swapping you, which is not as stupidly easy as it used to be, but still SMS remains insecure. Building an authentication system on it is just a bad idea from virtually every angle.
TOTP is portable and can be backed up.
I went a little bit off on a tangent, the stupidity of SMS 2FA is a pet peeve of mine.
No, because legitimate users do not just use residential and "commercial" IPs. Like me, right now
Your top level comment is also AI which is against the HN guidelines. Also it is allowed to post your own works, but they should only be a small fraction of your submissions. Please do not use HackerNews primarily for self promotion.
I suggest you read the guidelines: https://news.ycombinator.com/newsguidelines.html
911 calls answered by AI in New Orleans [video] – 2026-08-11 – https://news.ycombinator.com/item?id=49258252
New Orleans is testing Carbyne’s AI-powered Emergency Call Triage software – 2026-08-07 – https://news.ycombinator.com/item?id=49204546