ghxst

7 ms·

1.
by ghxst 6mo ago
The proxy you suggested sounds similar to a WAF, I don't doubt there's use for it but I would assume it comes with similar downsides.
2.
by ghxst 6mo ago
My fear is that platforms that will go to great lengths to enforce this will become an RL playground for some devs to train their chatbots.
3.
by ghxst 7mo ago
I would say you can get to this point far below 100 million people, especially on web. Some people are truly special and have some kind of setup you just can't easily reproduce. But I agree, you do really have to be confident in your a
4.
by ghxst 7mo ago
Highly recommend this video as well, he has a bunch more worth watching. https://youtu.be/rdlZ8KYVtPU?si=wgjkkNDSzuuS3lVK
5.
by ghxst 7mo ago
How does it compare against tshark?
6.
by ghxst 7mo ago
Any docs on this? I didn't know this was a thing.
7.
by ghxst 7mo ago
The use of "storage.googleapis.com" is probably because it's an "authority" domain that apps can't easily ban without side effects. Buckets can typically be used as a static site host where u can host a client
8.
by ghxst 8mo ago
I'm working on a shared remote box for AI assisted development, will definitely look at this for some inspiration.
9.
by ghxst 8mo ago
Don't forget color bots!
10.
by ghxst 8mo ago
Most of them abuse the ip pool attached to lambda from my experience.
11.
by ghxst 8mo ago
They do KYC when you want to unblock certain domains.
12.
by ghxst 8mo ago
That really sucks. Any advice on how to "negotiate properly" to avoid a situation like this?
13.
by ghxst 8mo ago
Is this constitution derived from comparing the difference between behavior before and after training, or is it the source document used during training? Have they ever shared what answers look like before and after?
14.
by ghxst 8mo ago
If you go http native, could you leverage range headers for offsets?
15.
by ghxst 8mo ago
I've used wireguard for a while, not sure why I never considered doing BGP over it, might make for a fun weekend project.
16.
by ghxst 8mo ago
And patients can use it to improve communication with their doctors (which, given the short duration of an appointment can make a big difference.)
17.
by ghxst 8mo ago
Unfortunately, I feel like I'm in the minority here, but AI has been really helpful to me and my doctor visits when it comes to preparing for a ~10-minute appointment that historically always felt like it was never long enough. I can s
18.
by ghxst 9mo ago
IMO eliminating as much client side authority as possible is a very good foundation for MMOs where the latency is acceptable or factored into all aspects of the game (looking at old school runescape as an example). Very cool project!
19.
by ghxst 9mo ago
Just short of 300k members on discord (almost 17k online) at the time of writing this. It's their Google Labs discord.
20.
by ghxst 9mo ago
Not dismissing your first argument but we had good success hiring talent through Discord servers. If you want to reach the same audience that attends hackathons and such it's in my experience the best platform.
21.
by ghxst 9mo ago
They've used discord for a while for things like GSoC but in general it's becoming more widespread seeing that even Copilot has a Microsoft owned discord server, Valdi from Snapchat as well.
22.
by ghxst 9mo ago
Please consider allowing the user to modify the TLS handshake / ClientHello. Out of all proxies I have used only Burp offers this through a plugin / extension.
23.
by ghxst 9mo ago
I went from charles to mitmproxy to proxyman and am currently using Reqable. Something all of these miss imo is a way to modify TLS handshakes.
24.
by ghxst 9mo ago
I'd say Reqable is a worthy mention as well.
25.
by ghxst 9mo ago
Assuming a secure connection this isn't possible without terminating TLS and re-negotiating.
26.
by ghxst 9mo ago
Maybe a stupid question would TOR be classified as a VPN in this context?
27.
by ghxst 10mo ago
Pin the public key (SPKI) or CA.
28.
by ghxst 10mo ago
From a security perspective it is best to assume everything in a GET query is public, it's not always your server logs that you have to worry about, it could also be logs on the clients system (as an example).
29.
by ghxst 10mo ago
Not all websites work well, and you get a lot of captchas last time I tried it. From memory the way they make this work is pretty cool though, they capture Skia draw commands and send those over the network and use a wasm library to replay
30.
by ghxst 10mo ago
Browser data points can make it easy to identify a browser or in some cases even a specific machine, but that doesn’t necessarily equate to identifying a user. What frustrates me is that it takes a service I trusted with my personal data to

More ›