timsh

6 ms·

1.
A net of scammer groups on Telegram(timsh.org)
3 points by timsh 9mo ago|0 comments
2.
Why you should self-host(timsh.org)
1 points by timsh 1y ago|0 comments
3.
by timsh 1y ago
Super cool! I love how the form factor evolved over time - do you think current Robomates will stay the same or change with time?
4.
by timsh 1y ago
If it produces no output, does that mean that there's no code that could act in the future? I first acted out of nerves and deleted the whole node-modules and package.lock in a couple of freshly opened Astro projects, curious if I sho
5.
by timsh 1y ago
you can simply selfhost Plausible or other not-invasive analytics to see all aggregated info you might need. it will be 100% yours and compliant with all sorts of privacy laws and principles
6.
by timsh 1y ago
Im all in for the ai hate, but this kind of hysteria on HN is devaluing all the serious discussions about AI safety, skepticism and regulation. They literally show you a full-page popup with clear text snd OPT IN toggle. It doesn’t seem rea
7.
by timsh 1y ago
This whole online safety act thing gives me goosebumps. I had lived most of my live in Russia until migrating in 2022 and I’m pretty familiar with what it means when the gov starts messing with digital censorship. If you’re not aware, it’s
8.
by timsh 1y ago
A bit off-topic but wtf is this preview image of a spider in the eye? It’s even worse than the clickbait title of this post. I think this should be considered bad practice.
9.
by timsh 1y ago
This whole online safety act thing gives me goosebumps. I’d lived most of my live in Russia until migrating in 2022 and I’m pretty familiar with what it means when the gov starts messing with digital censorship. If you’re not aware, it’s ge
10.
by timsh 1y ago
hey, maybe you’d never heard of https://ororo[.]tv this is exactly what you describe, at lease for movies + shows… just in case - not an ad, not affiliated with them anyhow, just use it for years with all my friends and family.
11.
We trained LLM to find reentrancy vulnerabilities in smart contracts(blog.unvariant.io)
2 points by timsh 1y ago|0 comments
12.
Switching to Claude Code and VSCode Inside Docker(timsh.org)
265 points by timsh 1y ago|161 comments
13.
by timsh 1y ago
not trying to justify it even a bit, but shouldn't people in his position (actively acting against the US-supported position) use something more secure? Like proton for starters? I think most of the activists know the drill (not to us
14.
Ask HN: Where to look for research and writing opportunities in privacy&security
1 points by timsh 1y ago|0 comments
15.
by timsh 1y ago
The difference should be only at the consent level, eg you might see less or more “Accept All” buttons with different design or different ToS linked. I don’t believe there’s a real difference on the code or even SDK level based on geo.
16.
by timsh 1y ago
I mean, there should be something! Maybe not with this exact list of apps, but the code should be similar to other "how-to-record-traffic" guides.
17.
by timsh 1y ago
author here to answer any questions or discuss an app
18.
by timsh 1y ago
Been using coolify to host my blog + analytics + a couple personal projects for around 6 months. Good for 1-click installs that “don’t need” a lot of maintenance, like Ghost, Plausible, etc. Had some issues with spikes in CPU usage (similar
19.
by timsh 2y ago
It’s not included in the list since it’s the stealer itself - it’s not misleading, it says “stealer”/“grabber”. But yeah the fact that it’s out still there is scary
20.
by timsh 2y ago
I don't think that repositories presented and named as Malware or Virus should be deleted - they're good for educational and research purposes I guess. I specifically mean those that impersonate as legit programs (if you can call
21.
Github scam investigation: Thousands of “mods” and “cracks” stealing data(timsh.org)
388 points by timsh 2y ago|160 comments
22.
GitHub scam investigation: "mods" and "cracks" stealing your data(timsh.org)
4 points by timsh 2y ago|1 comments
23.
by timsh 2y ago
oops, here comes the price of a nice-looking Reddit embed. next time I’ll stick to a screenshot :) thanks!
24.
by timsh 2y ago
agreed, however there are duplicates in that list + same app for ios / android. if I’m not mistaking I did a simple unique count on it (or catch the 2000 number from 404media post)
25.
by timsh 2y ago
I don’t know the answer to this, which is why I didn’t mention it in the post. However, I could speculate that these data-broker companies scrape leaked [hacked and stolen] data from various panels and then match records on their end. kin
26.
by timsh 2y ago
The “right” answer is not the one I end up with but rather the version sold by the vendor. this is what Apple and Google would say.
27.
by timsh 2y ago
this is so precise. I guess we’ll need a global version of https://datacolada.org/ quite soon to not get hit by a bus in every scientific field
28.
by timsh 2y ago
MAID = IDFA on ios + GAID on Android [ https://www.start.io/glossary/mobile-ad-id-maid/ ]
29.
by timsh 2y ago
I decrypted them all by installing Charles SSL cert on the iphone. This is why the requests seem not SSL proxied.
30.
by timsh 2y ago
wow @apokryptein thanks for posting my article here... I'm shocked it's #1 rn. if anyone has any questions regarding the post - I'm here to answer & talk!

More ›