HNHacker News
TopNewBestAskShowJobs

reconnecting

2,848 karma · joined October 14, 2024

Constructor of tirreno security framework.

github.com/tirrenotechnologies/tirreno | www.tirreno.com | team@tirreno.com | meet.hn/city/46.5218269,6.6327025/Lausanne

submissionscomments
reconnecting··on Siri AI
Exactly, I thought one year was enough to prove that everyone reads those letters differently nowadays.
reconnecting··on Siri AI
It looks bad from every perspective. I've never seen two apple's in one URL for product category before. apple.com/apple-intelligence

To prove my point, I opened a random date on the Apple website matching today's date to compare. 16 years ago, June 8 (1) Apple released the iPhone 4. There's still no room for jokes about that release, and from this perspective, calling their AI 'Apple Intelligence' feels weak compared to what they used to deliver.

I agree that some years ago Apple was the strongest in marketing, their brand team had been setting the bar for tech, but I simply can't say that anymore.

1. https://web.archive.org/web/20100608073904/http://www.apple....

reconnecting··on Siri AI
I don't think Apple has the option to rebrand Siri at this stage, assuming people actually call Siri by name. However, turning AI into 'Apple Intelligence' doesn't feel creative either.
reconnecting··on Siri AI
I mean, seriously, AI = Apple Intelligence?

It's not even funny, it's not smart. It's like if they released MS Siri and said it's Mac System Siri.

reconnecting··on Siri AI
Amazing how this time Apple found the `sweet spot` to release Siri AI when the letter combination A and I has fed up literally everyone.
reconnecting··on GR IV Monochrome Image Sensor
From website: Monochrome-Dedicated CMOS Image Sensor

To pursue the highest level of monochrome expression, a dedicated image sensor was developed. It does not use a color filter to acquire color information; instead, each pixel captures the brightness information of the subject and directly translates it into a monochrome image. This allows the sensor to receive more light information than a conventional color image sensor, resulting in sharper images with enhanced detail and improved sensitivity.

reconnecting··on 1worldflag: A blue dot on a transparent background
> If you go at light speed

I will certainly not. And even if I did — within any reachable radius there's nothing actually suitable, everything is 10+ ly away, but maybe I missed something.

reconnecting··on 1worldflag: A blue dot on a transparent background
> we eventually start to colonize other planets.

Could you please clarify which ones? I'm planning my escape, but it seems that even lightspeed wouldn't be enough to colonize anything suitable.

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
Our team develops a risk-based analytics system that we also use for bot detection. From our perspective, bots shouldn't be blindly blocked, but rather properly monitored and blocked only when necessary. Here is a live demo (1) to give you a general idea.

1. https://play.tirreno.com (admin/tirreno)

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
This is really interesting. I indeed looked at this problem from the wrong perspective.

I'm working on an open-source tool that could be useful for bot detection, but I'm still not confident that anyone would deploy it on-prem and make the setup/maintenance instead of just routing traffic through the cloud.

Perhaps performance as a KPI could work. Thanks!

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
I'm not defending meta here, but I should mention that meta also uses crawlers to visit pages when someone send a link through their services.

   User-agent: *
can be ignored by bots, but if they ignore the disallow rule for their own UA, they can easily be blocked by network AS.
reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
There are domain zone files, and they sometimes contain NS records. Cloudflare hosted domains are easy to identify via their NS records, which also makes Cloudflare customers an ideal target for phishing.
reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
The website I mentioned has over 15k webpages and ~200 GB of media, and yet we monitor bots manually and only block them if they're pulling 5k requests in a row. Malicious URLs, multiply 404 are blocked by default. HEAD request rejected.

Even on a very bad day, the server's page load time doesn't go over 1s.

However, it seems like I'm indeed looking at the problem through the wrong prism, as what I've seen from the comments suggests that the initial issue is performance, and the bots are what uncover it.

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
> When most of your server capacity is going to answering the scrapers it matters

I've been dealing with the web since the previous century and still haven't managed to build a website that could be hurt by scrapers visiting it.

If you went through the logs, you'd probably see that these bots are on a single IP or subnet, which can be easily detected and blocked instead of closing off search to non-registered users.

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
I thought you wanted users to flag Cloudflare domains through a browser extension, which is why I got confused.
reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
And assume you have

User-agent: meta-externalagent

Disallow: /

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
Did you check IP addresses, are they all from AS32934?
reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
Why so? They're all in NS already: *.ns.cloudflare.com
reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
If you can email me, I'd be happy to volunteer some help looking into this for your org, as we've made some tool to investigate bots (open-source).
reconnecting··on Cloudflare CEO Is Lying to You About the Bot Traffic Jump
For ads, I believe this must be a problem for ad platform owners.

If the digital platform's storefront is their business, they could afford to spend some budget on bot detection. Bots still come from data center networks, sometimes render pages incompletely, request resources in bulk, and show enough patterns to be flagged internally.

If we look at a medium website, most random crawlers will come from Amazon, Microsoft, DigitalOcean, Hetzner, OVH, and a few other DC networks — these can be blocked easily without harming real users. The rest can be detected and cleaned up, even manually.

The math is simple: 20,000 visits a day at 15 seconds each = ~83 hours a day lost watching a Cloudflare logo, just because someone doesn't want to dig into the logs. I don't buy it.

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
I don't understand what difference bots make. For me, a website (the public part) is a storefront. People walk down the street and see what's inside — that's the purpose. If something should not be available immediately, that's the private part of the store.

I've been monitoring bot traffic on digital platforms for over 10 years. Sure, the crawler share is growing, some even with malicious intentions, and those I detect and block.

I disagree that this pain is worth the cost of making real people spend their life on verification.

reconnecting··on Cloudflare CEO is lying to you about the bot traffic jump
Cloudflare bot detection has taught me a reflex to close the tab every time I see its logo.
reconnecting··on Ask HN: Spent thousands, got no customers. What's wrong with my site?
Yesterday's post on nearly the same topic:

https://news.ycombinator.com/item?id=48390168

reconnecting··on Laid off. Broke. Depressed. & idk how to market my SaaS
Because most probably their business is not SaaS, they're 'selling' their success.

It's also possible that people just cover illegal activity with some sort of SaaS.

reconnecting··on Laid off. Broke. Depressed. & idk how to market my SaaS
There's an uncomfortable truth about SaaS, especially about B2B. It takes enormous resources and time to lift a SaaS.

Unfortunately, the internet is full of all sorts of growth strategies and gurus saying it's feasible, but in reality it's nearly impossible. And when I talk about time, I mean 2-3 years for B2C and easily 5+ for B2B on organic growth.

Moreover, the current spread of LLMs is only making things worse, compared to if you'd started before COVID. People are overheated with SaaS, it's not fun anymore, and everything is considered a privacy or security threat. All of this only lengthens the path to customers.

I don't want to give any advice on what to do, but based on my nearly 20 years of experience in web entrepreneurship, income from B2B SaaS is not something you can count on in the early years.

reconnecting··on Meta workers can opt out of being tracked at work up to 30 min
> I only work more than 40 hours a week if I feel like it

This line really hurts! I made my first website in 1999 and my first online business in 2010, and I've never had a real vacation without emails since then.

However, in my 40s, as self-employed, I've never paid myself a six-figure salary either. So perhaps I need to reconsider my plans for the rest of my life.

reconnecting··on Squillions: How money laundering won
Customer...

French companies pay social contributions (~45% of the full salary) via Visa and MasterCard, and the French authorities are making it nearly impossible to pay these by wire transfer.

reconnecting··on Gmail thinks I'm stupid, so I left
Google can just block your account for no obvious reason and ask for KYC, which could easily leave you without access to your email for a week.

Hope that's not your case, but seeing how irresponsible Google is in its actions, I couldn't tolerate such risks.

reconnecting··on Gmail thinks I'm stupid, so I left
Proton isn't used only by scammers.

    site:onlyfans.com "proton"
reconnecting··on Fidonet: Technology, Use, Tools, and History (1993)
I've wished to have a reason to create my own FILE_ID.DIZ file ever since the BBS era.

https://github.com/tirrenotechnologies/tirreno/blob/master/F...

← PreviousPage 2 of 21Next →