HNHacker News
TopNewBestAskShowJobs

mobeigi

426 karma · joined July 28, 2020

Live for the hype! https://mobeigi.com/
submissionscomments
mobeigi··on Email bombs exploit lax authentication in Zendesk
This spam campaign drove me nuts! I received so many of these emails from so many random companies.

The key takeaway is to always have a email verification loop (or something stronger like phone verification) when using an anonymous user feature. You need to prove you own an email address before you use it.

mobeigi··on Show HN: Halloy – Modern IRC client
I'm amazed people still use IRC! More power to you. I used to use it a fair bit back in the day bit the last programming community that I was a part of that used IRC moved to Discord around 2020 which is when I basically stopped using it.
mobeigi··on Chess.com regional pricing: A case study
I'm a big fan of lichess! Their developers are also super friendly and helped answer my questions when I was using their open source projects to build a hobby chess app. I donate regularly too.

This post was more about exploring regional pricing using a case study and lichess being free in every country wasn't a good fit :)

mobeigi··on Chess.com regional pricing: A case study
I checked several states from the US and some from other countries. I did not find any discrepancies within a country but I didn't check every combination of course!
mobeigi··on Who needs Git when you have 1M context windows?
I'm waiting for the day someone builds a wrapper around LLM chats and uses it as a storage medium. It's already been done for GitHub, YouTube videos and Minecraft.
mobeigi··on Chess.com regional pricing: A case study
Great observation! This is definitely something they do. India is a good example where the price should be lower based on purchasing power, but it’s been increased since chess is really popular there and they can make more overall profit by increasing the membership price.
mobeigi··on Malware can turn off webcam LED and record video, demonstrated on ThinkPad X230
Pretty clever technique. I guess things like this is why physical covers / privacy shutters are liked by consumers.
mobeigi··on Hetzner cuts traffic on US VPSs
To be fair their pre-change allowances were insanely generous.
mobeigi··on GenChess
This is pretty look. Made a Shrek based set and it looks decent.
mobeigi··on I Don't Have Spotify
I've used this site before when moving from Spotify to Youtube Music, worked really well and didn't take long to transfer everything over.
mobeigi··on Title drops in movies
Wow I love the presentation of this website, very nice!
mobeigi··on New images of Jupiter
So beautiful! I love these!
mobeigi··on ChatGPT Search
Memory is only a con in some use cases. If the LLM goes down the wrong path, sometimes its impossible to get it to think differently without asking it to wipe its memory or starting a new session with a blank context.
mobeigi··on ChatGPT Search
Seems like very similar to just asking the model for a question and asking it to provide sources? Is this a realistic competitor to Google search and friends?
mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
If the website is down or slow and you want to read the article, here is a full page screenshot of the post: https://i.imgur.com/SPp6IHX.jpeg

Sorry :'( I didn't expect the post to get this much traffic.

mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
Great point!

This community is Australian & New Zealand based, we had 0 European players or visitors. And as @unsnap_biceps this predated GDPR compliance.

You are right though that you wouldn't be able to do this in Europe today because asking for fingerprinting consent defeats the purpose because the hacker would likely quickly figure out what is happing and circumvent it.

mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
It was a security nightmare. Basically a half baked browser with a subset of the security considerations you'd expect from a browser.

Valve worked on it for a little while patching bugs as they popped up (notoriously slowly I might add). Then in August 2017, an exploit in which server operators could execute JavaScript on players that joined their servers started to spread and was maliciously abused by bad actors. For example, some server operators using their player bases residential IP addresses to sign up to gambling websites so they got kickbacks. Others simply tried to hijack Steam accounts or sell rare Steam virtual items on the Steam marketplace to themselves.

After Valve patched the above exploit, some smaller bugs popped up in the following weeks and 2 months later in October, Valve completely binned the VGUI browser in CSGO. They had enough! This broke a lot of plugins like IdentityLogger and music players that would play music in the background as you played the game. But at least the attack vector was removed.

mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
The game's the game.
mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
This scenario definitely did pop up and we would review it on a case by case basis to unban users or make exceptions. However, it was quite rare. Only a handful of reported instances over several months. If our servers were more popular we definitely would have run into it a lot more.
mobeigi··on We outsmarted CSGO cheaters with IdentityLogger
I'm a big fan of using identifiers reserved for examples. I use TEST-NET-2 IP's and example.com all the time in my documentation!
mobeigi··on Using GitHub as a CMS
That is super neat! I had no idea pressing '.' would trigger a web based VS Code to spawn open with files from my selected repo in it. Such a time saver for quick edits compared to the regular single file GitHub file editor.
mobeigi··on Trapped
Feels like I'm a hacker on an episode of Law and Order :D
mobeigi··on It's not enough for a program to work – it has to work for the right reasons
Works fine for me?
mobeigi··on Show HN: Pumpkin – A Modern Minecraft server written in Rust
Are there any benchmarks for it? How much faster is it than a vanilla server?

I know Minecraft servers tend to get extremely resource intensive as the player count creep and people run extremely beefy servers to handle the load and still offer poor TPS.

mobeigi··on Busy Status Bar
Very cool idea but very pricey for what it is. I build a LED 3-4 times bigger with power supply and Rasb Pi for less (and its programmable). However, this is more convenient as a single unit. I could see myself maybe buying this for $30, probably not more.
mobeigi··on Internet Archive: Security breach alert
Out of curiosity, do you use a unique email address for every single service?
mobeigi··on Sourcegraph went dark
Agreed. I generally don't have an issue with companies private sourcing their work when they are the dominant contributor to it. I have a much bigger problem with companies that do it that have benefited dominantly from the contributions of others. For example, imagine if the Linux kernel went private.
mobeigi··on The anatomy of a 2AM mental breakdown
These breakdowns happen to everyone and its really bad when its just you against the world. I've been lucky that my last few major outages have all been team efforts with anywhere from 2-10 people working on the issue. Albeit, this is a perk of working in a large enterprise.

With more than one person you can bounce ideas off each other and share the pain so to speak. It's highly desirable.

mobeigi··on Ask HN: Tired of software career. What now?
A break and then a job switch might be what are you are looking for. The problem is you can't usually line up a job for "in 3-6 months time" and you have to have the finances sorted ahead of time.
mobeigi··on Density raises $51M Series C led by Kleiner Perkins
A pretty cool product and very useful! I hope something like this becomes super wide spread (maybe with competitors as pricing is a bit wack) so we can always know how busy our local stores etc are before heading out.
← PreviousPage 2 of 2