HNHacker News
TopNewBestAskShowJobs

sucrose

96 karma · joined May 12, 2015

twitter.com/sucrose
submissionscomments
sucrose··on Facebook Research Warned of ‘Tipping Point’ Threat to Core App
Exactly this -- it's gotten to the point for me that anytime I see a post that isn't original, I click the little drop-down arrow (in the upper right-hand corner of the post) and click 'Hide all Posts from [Spammer Name]'.

There's a few friends that I've considered un-following completely because of how many times I've had to do this on their posts. One of them is my brother-in-law -- I called him out on it the last time I saw him, he admitted it's gotten out of hand.

It's baffling how many dumb meme pages there are. But even more baffling, is how many people actually have the motivation to maintain those meme pages. The people that are willingly following them, well, I've lost hope for them.

sucrose··on Opmsg – A GPG Alternative
According to the screenshot, it's not the he won't, it's that he can't.
sucrose··on Authentication and the Have I Been Pwned API
I don't see it as him monetizing the stolen data, but the mere existence of it.
sucrose··on Authentication and the Have I Been Pwned API
Why are bad actors abusing the API? What benefit does it give them to just be able to check for leaked data on e-mail addresses? Especially when it doesn't actually provide the leaked data...
sucrose··on Slack Security Incident
Keybase has a Teams feature so it's built more towards your use-case. I use it to trade Stellar (XLM), file storage/management, and sharing/proving all of my platform identities. I haven't had a chance to get too social on it yet so I can't comment on the chatting experience, but overall it's a neat platform. It also has a command-line interface.

If you end up signing-up, follow me @ https://keybase.io/jbales

sucrose··on Dropbox silently installed new file manager app on users’ systems
> Expandrive

How does ExpanDrive compare to AirExplorer¹? The ExpanDrive UI looks cleaner.

¹https://airexplorer.net/

sucrose··on Cracking My Windshield and Earning $10k on the Tesla Bug Bounty Program
As other frameworks have done for quite some time* :)
sucrose··on Ask HN: What are some fun projects to try out on a spare Linux file server?
My Synology luckily was never pwned, but there were millions of attempts. Noticed higher than usual traffic one day, opened the access logs and found someone attempting to brute-force the SSH credentials... unfortunately for them I don't use passwords, only certs for authentication.
sucrose··on Ask HN: What do you do with your Raspberry Pi?
Is there a benefit to personally tracking flights instead of querying 3rd parties?
sucrose··on Juul’s New Marketing Is Straight Out of Big Tobacco’s Playbook
> not intended as a cessation device.

> So they're for people who want to smoke cigs and Juul?

No, they want to wean smokers off cigarettes and have them continue using the Juul instead. Not a cessation device for nicotine, but for tobacco.

sucrose··on Ask HN: Twitter account stolen by presumed vulnerability
Ouch, that's crazy. Hoping to hear what happened in this situation...
sucrose··on Hack the Box – Pentesting Labs for Free
I tried to do a SQL injection on the invite code form and they blocked my IP for 15 min. I guess some technique's aren't allowed.

EDIT: Switched my target to the front-end and was able to get in pretty easily.

sucrose··on Google – My Activity
I've been using MXRoute¹ for the past year and it's gone really well. I've never had a dropped e-mail. They use MailChannels² as a blacklist fallback. They're affordable, reliable, with quick support.

¹ https://mxroute.com/ ² https://mailchannels.com/

sucrose··on Uber will start deactivating riders with low ratings
I never thought of it that way. I always think of it like the A thru F grading scale back in high school. But from your girlfriends perspective, nobody gets a 5 unless they went out of their way to make the ride special. I actually like that much better.
sucrose··on Gmail tracks the history of things you buy, and it’s hard to delete
I second this! I've been with them for 2 years and they've been perfect.
sucrose··on Gmail tracks the history of things you buy, and it’s hard to delete
I'd be happy to switch away from https://domains.google but I'm loving the free, full Whois privacy protection. According to Gandi's Whois Privacy¹: "excluding your state, country, ... and the name of the company..." from the Whois privacy feature. I need full Whois privacy.

Do you have any other registrar suggestions?

¹: https://docs.gandi.net/en/domain_names/common_operations/who...

sucrose··on Update to Security Incident
Exactly. If it wasn't deployed on May 5th, instead of writing, "when a build deployed to the development tier", I'd expect something along the lines of, "The intrusion originated on May 5 in the development tier".
sucrose··on Show HN: Light up the toes at your next party
This would only work in a sparse dance-floor. I thought this project somehow magically solved the problem that I immediately thought of upon seeing it, but no. It's literally just blasting a laser across the floor. Step into the beam, and it's blocked to everything behind you.
sucrose··on Calling a real estate robocaller back
> Scammers have this popular trick of spoofing the caller ID for a number local to you.

I recently moved to a different state and kept my old phone number. When someone calls using that old area code, it's immediately obvious that it's a robocall. I have no ties to that area code, therefore no reason to answer. I usually Spokeo the suspicious numbers afterwards because I'm curious who it is.

A few months back I tracked down the PII of a number that called me, so I texted them back. Here is our short, interesting conversation: https://imgur.com/a/4V2ugw9 (phone numbers and contact list names have been redacted)

sucrose··on Librem One – A growing bundle of ethical services
...the Corporation [“Purism, SPC”] is organized for the following purposes (collectively referred to as “Specific Social Purpose):

..."The Corporation will only use and distribute free/libre and open source software in the kernel, OS, and software in its products."...

https://puri.sm/about/social-purpose/

sucrose··on Indie Game Removed from Switch After Dev Reveals It Has a Hidden Code Editor
> dev should only be shipping to hundreds, thousands, or millions of personal devices via Nintendo’s infra only what’s printed on the tin

That's a very long-winded way of saying, "He should only sell what was advertised."

> unsuspecting users

Nobody is forcing anyone to find or access Easter Eggs. It wasn't malicious nor annoying, it wasn't even accessible unless you attached a keyboard. I haven't seen any backlash from "unsuspecting" buyers, only Nintendo.

I see the potential worries from a security perspective, but as an "unsuspecting" consumer, why would you care?

sucrose··on Mail a Letter Online
I remember using this service to send mail to an incarcerated family member about 7 years ago. Works great with ASCII art too!
sucrose··on Show HN: Dhole, a developer-friendly cryptography interface built on libsodium
Looks interesting-- I'm currently in the process of writing a custom CMS blog for a friend, this will be useful for the authentication.
sucrose··on Coinbase Debit Card
You can, but your sarcasm seems to assume people are just simply converting dollars into bitcoin just to use this debit card. This feature may not be for you, but for those who trade or accept it as a payment for their goods/services. It essentially eliminates the process of selling the bitcoin and/or waiting a few days to transfer the funds to your bank.
sucrose··on Show HN: Linbox – a free, open-source Google Inbox alternative
Tried again today and it's working. I'll give it a try after work.
sucrose··on Blocking high-risk non-secure downloads
The DuckDuckGo Privacy Essentials¹ extension is a great alternative that I switched to.

¹ https://chrome.google.com/webstore/detail/duckduckgo-privacy...

sucrose··on Show HN: Linbox – a free, open-source Google Inbox alternative
Is it down for anyone else? I'm getting a ERR_SSL_PROTOCOL_ERROR
sucrose··on 58 Bytes of CSS to look great nearly everywhere
I cannot access your website: ERR_SSL_PROTOCOL_ERROR
sucrose··on Two More Cases of Third-Party Facebook App Data Exposure
Well, the 2nd paragraph explains that: "The passwords are presumably for the “At the Pool” app rather than for the user’s Facebook account, but would put users at risk who have reused the same password across accounts."
sucrose··on Boeing software under scrutiny as Ethiopia prepares crash report
47.734600, -122.604500

https://www.google.com/maps/place/47%C2%B044'04.6%22N+122%C2...

← PreviousPage 2 of 4Next →