AtNightWeCode

7 ms·

391.
by AtNightWeCode 3y ago
It is the same problem. My main issue with how it works is that typically tokens (and cookies) are valid until they expires. You browse some service and then it can be used by anybody for hours after that. And the methods for securing JWTs
392.
by AtNightWeCode 3y ago
The more I use GPT it becomes very obvious that this is a dead end. ChatGPT constantly becomes more stupid and it does not matter if you use version 3.5 or 4. Had version 4 repeating the same very incorrect answer 4 times in the same chat t
393.
by AtNightWeCode 3y ago
Nice. Side note. The problem with JWTs is bigger than this. I "steal" web tokens all the time to get access to stuff outside the context the tokens were handed out in. If someone comes up with something really clever in this area
394.
by AtNightWeCode 3y ago
This is my understanding as well but I have seen claims that it is still very possible to do length attacks on SHA384.
395.
by AtNightWeCode 3y ago
Most encryption even with fewer bits is not possible to hack in real time. What is often happening is some sort of cracking. It is not impossible that there are flaws in these devices. I know nothing about them. You simply do not brute forc
396.
by AtNightWeCode 3y ago
Most logging tools if used correctly separates static messages from dynamic values. Which makes grouping trivial.
397.
by AtNightWeCode 3y ago
My tip is to find an arcade hall that is specialized in pinball and that have both new and old games. I have been to some of the museums that people talked about in this thread and I would avoid that. Better to ask around which games you ma
398.
by AtNightWeCode 3y ago
Surely nobody runs 3 Kafka nodes in production, no?
399.
by AtNightWeCode 3y ago
Email addresses, that is the only reason why we got the .com domain. I think the other arguments in the article are pale.
400.
by AtNightWeCode 3y ago
I cannot detect any difference.
401.
by AtNightWeCode 3y ago
I don't get it too. Maybe one needs to enable something. The search is still useless. Locally I use git-grep.
402.
by AtNightWeCode 3y ago
How do one access the new search?
403.
by AtNightWeCode 3y ago
Some benefits of Scrum over Kanban: * Scrum is less flexible. It is easier to force everybody into a fixed process. Kanban can easily become cowboy development especially with junior devs on the team. * Scrum comes with clear short term goa
404.
by AtNightWeCode 3y ago
A service should solve an entire problem and minimize the count of horizontal network calls. Serverless providers wants you to split things into single tasks but the overhead cost per request is high. A task is not a service.
405.
by AtNightWeCode 3y ago
Hotels in SF are affordable for some reason.
406.
by AtNightWeCode 3y ago
As the joke goes, senior devs copy code from answers on Stack overflow. Junior devs from questions. It is always better to educate people. ChatGPT needs to be treated as Wikipedia.
407.
by AtNightWeCode 3y ago
The police have confirmed that they were at the location but there are no further details. Could be anything.
408.
by AtNightWeCode 3y ago
Services like **GPT to clarify. HN filters out this apparently as the kind soldiers they are...
409.
Ask HN: What are the simplest qs AI-services failed you to answer?
1 points by AtNightWeCode 3y ago|1 comments
410.
by AtNightWeCode 3y ago
My example is simple. This is for tracking and fingerprinting. At the same time. This all may soon fall into the mobile tracking problem. Like in my country. By having a mobile turned off is in itself a tracking point.
411.
by AtNightWeCode 3y ago
Why not. I have a crazy idea. How about building an edge service that renders pages on the edge on identical HW and SW and then just stream it to end users. Could be built with Cloudlfare workers and Puppeteer for instance. People are alrea
412.
by AtNightWeCode 3y ago
People drive around in more or less Chinese built cars. Or cars using Chinese tech. A bigger threat perhaps. Apply the pressure on Google and Apple instead to provide a safe platform even if the apps are rouge.
413.
by AtNightWeCode 3y ago
Stupid. And they oversell AI. ChatGPT gives me tips on how to optimize regular expressions by removing all the wildcards. Literately. Or changing my atomic groups into non-atomic groups. Opening for backtracking problems. A problem I see th
414.
by AtNightWeCode 3y ago
Yes, that would work.
415.
by AtNightWeCode 3y ago
Another thing with SSH. Is there something like a host header in SSH to be used for blocking direct IP access?
416.
by AtNightWeCode 3y ago
Another problem with SSH is that people remove the key check completly in automations since some services just rotates the keys without telling. Or for being lazy.
417.
by AtNightWeCode 3y ago
I worked a lot with protocol buffers and for the problem it claims to solve it solves that problem well. I can't really grasp this criticism. That extreme type hell that Java coders like is not really a thing outside the Java world.
418.
by AtNightWeCode 3y ago
So what actions am I supposed to take to verify that I am on the safe side? The blog post did more to downplay the problem than actually being helpful for the end users.
419.
by AtNightWeCode 3y ago
The problem with ChatGPT is that it is sometimes plain wrong. I don't know if there is a diff between 3.5 and 4. Probably not. A test is to try to get ChatGPT to solve simple math problems. It fails. One can even instruct it to apply s
420.
by AtNightWeCode 3y ago
"Given there are companies selling fingerprinting as a service, if you want to really protect yourself from fingerprinting, you should use Tor Browser or Firefox with resistFingerprinting=true." Fingerprinting services tries to fi

More ›