yogorenapan

Noticed this the other day as well. Sketchy as fuck. I didn't have analytics enabled. I had to go and enable to get access to the option to turn this off

This sounds insane to me.

> Therefore, most of them have never developed real applications without tools like Lovable even if they're technical founders.

I'm pretty young (early 20s), but have been coding, reverse engineering, and hacking away for about 10 years at this point. It's not like they're funding middle school children, how is it possible? These tools are all so new.

A1111 is such a throwback. It's been ages since that & AI image generation was cool. Back before the massive amount of slop and when things were just a fun experiment

Ah I remember a very similar bug. I remember back in the day, I'd use a fork of TheBackdoorFactory so that the replaced app still functions as usual and in the background request permissions & stuff to then be able to do stuff like key logging. Apple also responded with won't fix, but I think at some point silently patched it.

> to reveal blurred version of the images being hashed

Skimmed your linked paper. It seems they were able to classify hashes up to ~8% top-1 accuracy and ~30% top-10. Not exactly a blurred version, or any images at all.

So for example, they can say that you probably have images of trees, or images of buildings, but without much other data & very low accuracy.

I'd still be a lot more concerned about them simply flagging political images rather than trying to get a broad understanding of what type of photos I have

Possibly what we saw in the Russia Ukraine war with AP locations reported by Apple?

https://www.cs.umd.edu/~dml/papers/wifi-surveillance-sp24.pd... And implementation https://github.com/acheong08/apple-corelocation-experiments

Yup. I started learning at 10 mostly messing about with modding and dumb script kiddie stuff. You don't just get a computer one day and get an exploit out the next

IOS and MacOS priv esc.

Yes I needed a smartphone to test on

I got my first bug bounty at 16. Not having access to compute would've drastically changed the direction of my life. I wouldn't have been able to afford university & would likely be working on a farm right now like my cousins

Saw this the other day on the train, and probably stared a bit too hard at the dude wearing it. Surprised to see this on HN so soon after. World feels like a simulation

I know for a fact companies in China do this. One paid me directly for work in this space, and in another, I found my own OSS project in their artifact cache while working there.

I've only ever gotten in trouble in the UK

I'm a European moving to America. Unfortunately money > public transport, and until Europe can compete on salaries and available capital, I'll have to make do with shittier transport

Mate, I live in Europe. The UK (as bad as it is, is still better than the US), the Netherlands, Belgium, and generally anywhere else that has public transport.

Largest freight rail. Public transport for normal people is still shit compared to Europe.

Social left, economic right

The page had so many LLM-isms that I just can't make sense of.

> 18,600+ Engineering years invested in vehicle safety to date

What does this even mean?

> 7,000,000 Lines of safety-assessed code

Are we seriously using LoC as a measure of productivity again?

Not to mention the em-dashes

What services give you a prepaid virtual card for crypto without KYC?

That is quite surprising. While at Huawei (European lab), my coworkers were very diverse, with Chinese being a minority. And even when the higher ups were not fluent in English, and despite me being halfway decent at Mandarin, we still only ever spoke English.

At the same time, there is the saying of "中国人不骗中国人" amongst scammers I've encountered. I wouldn't be surprised if they favored their own in Meta

Mimo Code has grown on me. Before that, a very janky Pi. I've realized that at one point I was spending too much time getting things exactly as I want them versus actually using the damn thing

Interesting one. It knows my internet handle, but when given my full name, it immediately starts hallucinating based on the name structure, guessing which country I'm from and whatnot.

> How do you decide who are the lucky ones?

Lottery. That's how Japan does it, and it works decently well. Usually tied to phone number which requires an ID. That prevents most severe multiple entries

I think it's pretty logical, though perhaps it is correlation rather than causation.

Say I am hiring as a native English speaker in a Chinese company (while of course still knowing enough Mandarin to survive) and I have 3 candidates, one of whom also speaks English fluently. I would definitely be biased towards the English speaker, because I would work better with them.

Now, it doesn't really matter what their ethnicity was, but there is a higher likelihood of them being of the same ethnicity. Especially if my first language is niche, the chances of hiring the same ethnicity would be higher.

I've been on the receiving end of this before, being hired in part because I spoke English due to my manager while the rest of the company was primarily Mandarin

100%. I started out in cybersecurity and was complete shit. I gave up and went into software engineering and devops instead. Now returning to cybersecurity again and things finally make sense

I don't know what I don't know. It's the randomness of HN that has let me find new topics to learn about

I thought HN was restricting Show HN posts for new accounts now. I suppose not? I avoid clicking into these posts nowadays because so many are just slop

Can't believe Ben Welsh is not Welsh, and FiveThirtyEight has nothing to do with Wales

Wow. Surprisingly fun game. I got to level 7 before it became a bit too difficult

And I remember that did happen at one point: https://github.com/acheong08/obi-sync

The mechanism that allowed that was patched as a vulnerability

I've reported security bugs to Apple before. Was a couple years back but I remember it taking around 6 months to patch (there was a couple back and forth for me to get a more reliable POC). Maybe 2 months from when I submitted a POC with 100% reproducibility

The answer you probably don't want: Linux + Firefox. Or just copy link and wget.