Hacker Newsnew | past | comments | ask | show | jobs | submit | cornedor's commentslogin

No, since they're simply too many. For an e-commerce site I work for, we once had an issue where some bad-actor tried to crawl the site to set up scam shops. The list of IPs were way too broad, and the user-agents way too generic or random.


Could you not also use an ASN list like https://github.com/brianhama/bad-asn-list and add blocks of IPs to a blocklist (eg. ipset on Linux)? Most of the scripty traffic comes from VPSs.


Thanks to widespread botnets, most scrapers fall back to using "residential proxies" the moment you block their cloud addresses. Same load, but now you risk accidentally blocking customers coming from similar net blocks.

Blocking ASNs is one step of the fight, but unfortunately it's not the solution.


Hypothetically, as a cyber-criminal, I'd like to thank the blacklist industry for bringing so much money into criminal enterprises by making residential proxies mandatory for all scraping.


Except when I forgot the name of an app


Drag a folder of application shortcuts into the the dock and you’ll have roughly the same thing

Like this:

https://www.reddit.com/r/mac/comments/i3prgq/til_you_can_dra...


CMD + SPC for spotlight and then CMD + 1 gets you to the full set of apps.


Wow! I didn't know that cmd + number switches context of spotlight. Amazing tip, thank you!


Spotlight upgrades are really great in Tahoe.

Take a look at being able to search an app from Spotlight: CMD + SPC => "Mail" => TAB => then I'm searching all my emails


Any idea if the woff2 files served by Google are the same? Or that they maybe are more optimized for web?


I’m afraid I don’t know for sure, I only know that the woff2 file I generated with the CLI worked fine in all the browsers I needed it to. Other posters have said that Google may do some user-agent sniffing or other fingerprinting to maybe serve an even more reliable version, but I can’t comment on that.


Since caches are no longer shared between pages, it actually is often better to self host your fonts than rely on public CDN’s. Makes it even weirder that Google does not offer a simple solution to self host fonts.

https://dev.to/rstacruz/public-cdns-arent-useful-anymore-2b6...


Google likes collecting referers and IP adresses


See my top-level comment pointing to where Google is specifically refuting that. So you're welcome to believe they do, but it'd have to be a conspiracy that nobody at GOOG has ever whistleblown.


Your top-level comment does not refute that. As one of the replies to it already states, saying that aren't going to use to info to "create" a targeted profile doesn't really mean a whole lot when they already have so much data on most people already. Even for people that they don't already have a profile on, it's not obvious that they couldn't just add it in to an existing profile in the future if the person made a Google account or something.

It's also not nearly as unbelievable as you seem to think it sounds that it could be happening without anyone blowing the whistle. What would you expect to happen if they did? Does "Google tracks lied about tracking users through front downloads" sound like front page news, or something that would stay on people's radar for more than a day or two even if it was? It's hard to imagine that there would be any sort of fine that would reach a level that mattered to Google, or that the recent antitrust case would have had a different outcome if only the font conspiracy had been discovered. Trying to blow the whistle on it just wouldn't be worth it.


It's consistently around 10 seconds, often faster.


Not a user, but isn't de difference here that users might expect a shared item only to be visible for friends, but instead it is public?


That is possible. I wouldn't think that because there are no "friends" in this app but I could see why a Facebook user might think that. On the other hand, when you open the app you immediately see content from people you aren't connected to. It all feels very public to me.


I opened the app and the third post was someone making a note to self to cancel their car insurance, followed by a reply comment saying oops that wasn't supposed to be public, so at least one user was confused.

It seems to be mostly generated pictures though.


Your question is important because we need to understand nothing is private online. Yes, thankfully our bank accounts and other important info is PW protected, however, these PW's are eventually stolen by data breaches. (Didn't we all recently have to change our PW's on FB, Microsoft, Google and Apple?)

To think that anything used on AI is going to stay private is nice, but not likely.


Bad take. And these types of takes are why privacy continues to be eroding.

I agree with you that privacy right now is fragile at best. Disagree that it needs to be.


<Disagree that it needs to be.>

Please explain. I don't think that privacy should ever be fragile.


Why did we all “have to change” our passwords on these large platforms. What happened? Was there a leak I didn’t hear about?



That wasn’t a data breach, that was malware:

> The records exhibit multiple signs that the exposed data was harvested by some type of infostealer malware.


I think this one is already generated using AI, LLM's find it very funny to use quantum for anything that should be made jokingly complex.


Light doesn't match up at all (look at the Ronaldo example) and the animation is far from perfect. Go through the one with the joker frame-by-frame, and you can see his arms moving through his body and stuff like that.


In this case, the reason might be that it needs WebGPU, which is only available in chromium based browsers. Changing my user agent doesn't let me in either. Text selection being disabled might be a "lazy" fix for text being selected while in game.


This time it's sadly just another case of a web developer who thinks he knows better than you what browser you should use, it works fine with

  // ==UserScript==
  // @name     oasis.decart.ai Firefox fix
  // @version  1
  // @run-at   document-start
  // @match    https://oasis.decart.ai/*
  // ==/UserScript==
  
  unsafeWindow.chrome = 1;


Back in the Flash days, I had a signature on a forum with a small (like 120x40) SWF file in it. It was a little "city builder" game where you could place different types of stores, and the goal was to earn as much money as possible. It would save the state to local storage, so you could continue in other comments I placed.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: