Hacker News Reader

thr0wnawaytod4yon James Webb Space Telescope detects water vapor around alien planet

Except every X years where we add another second, except the next 100ish years, except....

thr0wnawaytod4yon My dad died last week and now I am the only male in the family.How do I procede?

Talk to them about it

thr0wnawaytod4yon We will not ‘walk out’ of UK, nor comply with any request to bypass encryption

Very clickbaity but leads to some good links

thr0wnawaytod4yon Ask HN: Is AMPhtml Dead or Dying?

I sure hope it's dead, it's bad for privacy and security and benefited no user ever

thr0wnawaytod4yon The dangers behind image resizing (2021)

Came here for a new ImageTragick but got actual resizing problems

thr0wnawaytod4yon An aggressive, stealthy web spider operating from Microsoft IP space

> there is no need to spider/crawl if there are sitemap XML files listing all the content URLs

you never know if these are all URLs tho, so I would always crawl and brute force more paths than trusting sitemap.xml

thr0wnawaytod4yon Ask HN: Books that teach programming by building a series of small projects?

For this reason you need to find _your own_ projects, solve your own problems (which are actually pretty common, but you have to search or figure out a solution)

That's what I tell everyone

thr0wnawaytod4yon The Back Page: Graduate Students Should Be Paid Living Wages

Taxes? These students will more than likely pay more taxes than they cost

thr0wnawaytod4yon Tesla driver in multi-car crash told police self-driving software malfunctioned

pretty sure tesla will have some form of log, whether it was active or not

thr0wnawaytod4yon Twitter has re-suspended ElonJet account

That man literally didn't do that.

thr0wnawaytod4yon No, Google did not hike the price of a .dev domain from $12 to $850

support isn't that good if you ask me. when I had a problem with my account and they couldn't resolve it, it took quite some time to get my domain back under control.

thr0wnawaytod4yon Ask HN: What are some blog posts that you have enjoyed going through?

all my real oauth knowledge came from this https://labs.detectify.com/2022/07/06/account-hijacking-usin...

thr0wnawaytod4yon Aegis Authenticator – Secure 2FA App for Android

Yes it's an NFC implant. Fidesmo store to load applets, then things like yubico authenticator for OTP. Think of it like only the NFC side of a yubikey neo with fidesmo.

thr0wnawaytod4yon Sudo: Heap-based overflow with small passwords

but if sudo was written in java we'd have other problems ;)

thr0wnawaytod4yon Aegis Authenticator – Secure 2FA App for Android

I'm for real tho, it's called the Apex and you load an OTP applet on it

thr0wnawaytod4yon Aegis Authenticator – Secure 2FA App for Android

people do not cut off fingers for fingerprints so they wont cut my arm off for my github...

thr0wnawaytod4yon Aegis Authenticator – Secure 2FA App for Android

I just put a 2FA implant in my arm

thr0wnawaytod4yon Fake Books

I thought it's just a fancy way to write (something and) something more important.

thr0wnawaytod4yon Cache your CORS

Could have other sec consequences, e.g. XSS in the API is now all of a sudden exploitable, just an example

thr0wnawaytod4yon Ask HN: Have you taken action regarding the Uber hack?

Potentially yes, very likely yes it seems.

thr0wnawaytod4yon Ask HN: Have you taken action regarding the Uber hack?

thr0wnawaytod4yon Why did Uber send REAL GOONS after this man?

It's a story, which is likely interesting to hackers, as it involves uber sending goons to one?