update

> I don't understand the controversy at the heart of this post.

Did you miss this part from the article:

> They switched from talking about bug bounty programs, live hacking events, and how they could help you stay secure, to promoting their in-house AI security product and continuous security monitoring tool.

notably the in-house AI security product is trained on existing bug bounty reports.

> It sounds to me more like the OP already disliked H1 (for its sales practices and general enshittification) and the LLM issue was a convenient excuse to make a clean break.

that's pretty harsh to say when OP provided some very valid reasons, imho speaking as someone who's used HackerOne for over a decade.

link to H1's "continuous monitoring tool" for the curious: https://www.hackerone.com/product/h1-continuous-testing

Last time this came up (2023):

https://news.ycombinator.com/item?id=37326806 > FCC refuses to scrap rule requiring ISPs to list every monthly fee

> I remember back in the 2000s writing purely XML websites with stylesheets for display

Awesome! I made a blog using XML+XSLT, back in high school. It was worth it just to see the flabbergasted look on my friends faces when I told them to view the source code of the page, and it was just XML with no visible HTML or CSS[0].

[0] https://www.w3schools.com/xml/simplexsl.xml - example XML+XSLT page from w3schools

> they want my serial number to let me download it.

Out of curiosity, why is that a problem to you? Granted, it is strange; I went through the process for my TCL Roku who's wifi stopped working (still not fixed, and now a second, 3yo TCL Roku has bricked itself. nice!)

I use a pi-hole to block the spying. My experience with Amazon's FireOS & Roku is they phone home a lot.

Firefox on Windows 11 doesn't work.

Looks like the website has been overwhelmed with spam, and, possibly hacked/exploited [1]. It looks like someone has been able to create directories & upload scripts [2]?

I do bug bounty in my spare time so this was an interesting live find.

[1] https://non.io/expoity

[2] https://html.non.io/upload-demo.html

Spectrum was the first company that came to my mind, too. Last week, my mom recently signed up for spectrum & she bought the traditional TV + Internet + Phone package, when she only needed Internet. I've been putting off calling them since I don't want to deal with talking to anyone.

& yep, it is very easy to upgrade your subscription on spectrum's website but there is no way at all to cancel/downgrade online.

I'm in a similar situation. Distro hopped quite a bit, (OpenSUSE, Ubuntu, Debian).

For 5 years now, I've ran Fedora on an old laptop that resides at my parents house, 5000 KM away from me. In that time I have not once physically been in contact with that server. I've done all updates via ssh, including full system upgrades (e.g. Fedora 32 -> Fedora 33) without any hiccups.

To me, that's amazing.

i actually was just thinking of the west cost. i'm a los angeles native, guess that shows. sorry.

> Maine, Rhode Island, New Hampshire, Vermont, Idaho, North Dakota, Wyoming, and Oregon

Are the eight states from the title. Though it seems New York should be included since it says "The bumblebee species have declined by 99 percent in New York."

Also noteworthy

> In the Midwest and Southeast, population numbers have dropped by more than 50 percent.

To nobodies surprise, the culprit is pesticides. Interestingly the west's bumblee population isn't listed as being in trouble.

apparently, turkeys have a pretty understandable language. There's a documentary, My Life as a Turkey [1]; he was able to decipher what each call meant (e.g. which squawk meant "snake" and which one meant "eagle"). So, if you were walking with a turkey, and you saw a snake and wanted to warn it about it, you could, in theory, communicate with it.

[1] https://www.pbs.org/wnet/nature/my-life-as-a-turkey-introduc...

As a bug bounty hunter, I can attest to having an awful experience at times. The three companies I have worked with @ HackerOne have all taken forever to payout or fix bugs. Currently, I have been waiting 4 months to be paid by a company on HackerOne, for a pretty dang high impact bug that leaves all their customers vulnerable; I checked today, & they still haven't fixed it, let alone paid out.

You also have to be aware of policy changes. I've noticed companies remove language that told how much they'd pay out. Some companies have a mandatory pay out of 7-14 days but they are rare; with everyone else, you just have to hope they pay you, and they do, I guess... whenever they feel like it.

yep. checkra1n for iOS 13.1 requires that you re-jailbreak every time you reboot your phone. Takes like 5 minutes to do.

One of those cases where a bug really is a feature

I coded[0] a very simple CMS for my blog around 8 years ago. I wanted something fast and I wanted to use python instead of PHP. so I went with nginx + uwsgi. The website[1] runs on an old laptop. 8 years later I've edited maybe a handful of lines of code.

Perhaps I'm missing something, but I don't get why these articles pop up so frequently as if making a blog was some super complicated thing that required the latest CMS, etc. Most people here (including me) would suffice with a nginx and plain html/css, no CMS required, based on articles like these, at least.

[0] https://github.com/sfttw/avanti [1] https://blog.sailingfasterthanthewind.com/

note, this also works if you add 'move' in between 're' and 'ddit' (i.e. removeddit)

so: https://www.removeddit.com/r/interestingasfuck/comments/gitw...

good to have backup services.

I find it interesting that your comment is being downvoted. Particularly interesting since only certain users have the downvote ability unlocked.

Your comment is informative, especially since a lot of comments so far in this thread are "Where are the users going to go?"

> What does this do besides drive them to Whatsapp?

The mods of T_D have created a website, thedonald.win, in anticipation of T_D being shut down. Anyone who visits that sub regularly knows that that's "The new T_D"

Ah, I've been using firefox for web dev stuff on my old Macbook pro and I've noticed it's a lot faster than it was last year.

Definitely considering making the plunge as speed has been the only thing that's held me back from switching to FF.

> I mean QA & Testing should catch it, sure.

I believe they have been working on FaceTime Group for 5+ years now.

In 2015, Modern Family had an episode where the entire plot focused around the family using FaceTime on their iPhones --- but they had the Group feature[1]! I remember being blown away when I saw that, figured it'd be coming in the next iOS update. It didn't. 4 years later, they finally released it..then recalled it immediately

[1] https://www.mlive.com/entertainment/index.ssf/2015/02/tech_r...

edit: managed to find a short clip from said Modern Family episode: https://www.youtube.com/watch?v=vy3jUOBxQuI

Though in the full episode you see a lot more of the Group feature

I've been using the 3B+ as a media server for a year now. Omxplayer handles 1080p (even m2ts files) easily. Truly amazing what can be had for $35. My Pi replaced an $800 fujitsu laptop and I haven't noticed a single bit of difference in performance.

> Conclusion: Go with www

Am I missing something or is OP using a non-www domain? I'm using Chrome fyi (mentioned because I know safari messes with the address bar)

python3 is breaking my heart. I upgraded my code from py2 to py3, and since then, seems like every 6 months my code will break due to a new python update (I'm on Fedora, fyi). Just last week a bunch of my python3 code stopped working for my IRC bot. I honestly regret switching to python 3 at this point.

Not sure why you're being downvoted. "Menthol cigarettes [...] are particularly popular among black smokers — about four out of five report smoking them, according to federal surveys." [1]

In fact, when Obama's FDA banned fruit- and candy-flavored cigarettes there was a group of black doctors who called on him to also ban menthol cigarettes. [2]

[1] https://www.nytimes.com/2016/09/14/health/menthol-cigarettes... [2] https://www.nbcnews.com/news/us-news/black-doctors-call-obam...

Lots of us 'little guys' have been pointing at the Constitution re: the drug war since it first began.

Shame. As far as I can tell OpenSUSE & Fedora are on the same level. I often struggle deciding which one to install on new servers because I love them both so much.

> create a bunch of data and upload it to the cloud. Once there, it's out of your control, and can be subpoenaed and used against you.

honestly don't know why anyone uploads to the cloud. there's tons of reasons not to, starting from the icloud hacks to [your favorite app]'s RCE bug.

it takes 5 seconds & $30 (pi) to spin up your own server. it's fun to do and at least you know the only possible F-up is between you, your linux server & your comprisable ISP

hm, the article says the opposite about the common wombat.

> Now, despite its name, the common wombat is no longer common. Overgrazing and the destruction of their natural habitat has caused a sharp drop in their numbers; all species of wombat are now protected, and the northern hairy-nosed wombat is critically endangered.

you're right, i didn't include that stuff. I was trying to price it out for someone who is renting a house/apt, but neglected the utilities bit. I actually bought a house here for $20k (in cash from bug bounties) so all I pay for is utilities. This place has an acre of forest and FIOS internet, 3 br and next to the lake. I pay about $300 a month for the services you mentioned, save health care, which I don't pay for at all at the moment.

You can find some of the programs he's successfully submitted to via his website: http://evanricafort.com/achievements/

a lot of them aren't on H1 or bugcrowd.