Hacker Newsnew | past | comments | ask | show | jobs | submit | TheBozzCL's commentslogin

TBH, this just sounds to me like the crypto industry is discovering, yet again, why the banking and credit card industry have all this red tape and supply chain security.

Like sure, they're not fully immune... But at least I can call my bank and show them that I didn't suddenly fly from New Mexico to Florida to buy $200 in gift cards from a gas station in the middle of nowhere.

Crypto MUST deal with fraud and hacking if they want to become reliable. At that point, they'll just become another bank with a casino attached.


Most banks in the US still use SMS password reset.

PNC is so bad they even have “secret question” password reset, last time I saw it, e.g. “what’s is the name of your cousin”


I self-host my own DNS over TLS for domain-level adblocking. Maybe not the wisest decision, but it's working well so far and it doesn't require a lot of maintenance now that I've refined the setup.

I use a DNS registrar and certificate that support wildcards. That way, I don't have to leak my DoT subdomain and I gain some obfuscation. Android's Private DNS option doesn't support alternate ports, so I'm forced to use the default.

I use nginx as my reverse proxy and TLS terminator. At this stage, I apply rate limiting and subdomain filtering.

Then nginx forwards the streams to Unbound, which filters out any local IPs from the responses to avoid leaks.

Finally, Unbound forwards requests to my Pi-hole, where the magic happens.


"We own the infotainment system"

I've thought about what I can possibly do if I ever need to buy a modern car. Bring my own cell phone tower spoofer? Threaten to not buy the car if they don't disconnect the antennas first?

It's good that these things are starting to catch the public's interest. Gamers' Nexus' exposé on LG TVs. The lawsuits against car manufacturers for selling driving data (indirectly) to insurance companies. The pushback against Flock. I wonder what else is needed to actually move the needle globally.

I see a good sign in that Gen Alpha seems to find using disconnected devices to be trendy. I hope it's a trend that stays long term.


I mean I would suspect (and suggest) rebuilding older stuff, as honestly the cars from 10+ years ago are in many, many ways better built and more reliable, but don't ask me why I know this, but with certain LLM assistance, an absolute boatload of modification and RE on newer cars has become much more tractable, including reworking the telemetry. I'm not a lawyer all stunts were performed by a professional on a closed course.

If you don't mind a rusted out car, you can certainly keep them running for a long time. However, you want a nice car? Well, that's a different story. An assembly line is so much more efficient than manual labor that a brand new car is cheaper than rebuilding an old car. When you talk to car collectors you discover that either they have done a huge amount of labor themselves and they have no clue how much that would cost if they would pay someone or yeah they're paying someone and you discover that they they are paying more than new cars to keep this show only car in a perfect condition.

Ohoho that actually sounds like a cool weekend (multiple?) project. Almost makes me want to go buy a new car.

Calling things you disagree with "slop" is slop /s

But just in case you haven't noticed, we live in a world where a ridiculously wealthy minority can derail whole countries by ther whims. Wealth concentrating on a single select few is an absolute disaster for the rest of us, because we lose power to them.


> Calling things you disagree with "slop" is slop /s

Does this apply recursively? /s


I literally just switched away from Hurricane Electric to deSEC. The only real issue that I had with HE, but it's a big one, is that they don't allow wildcard CNAMEs. I consider that important for the security of some sensitive endpoints that I have no choice but to expose publicly. Those endpoints are well protected with 2FA and heavily monitored, but I wanted to be able to use randomized subdomains to at least have some obfuscation on top.


It’s literally what you experience in your life. I’d say I value my life a lot, in the end it’s all I actually own.

On the other hand, others value my attention because they can make fractions of a cent by making me look at stuff, because there’s a minimal chance they’ll convince me to spend money on stuff of probably little value.

Seems to me they don’t value my attention a lot, and I don’t get much of value out of it.


If you have anything even remotely important tied to your email address… then at least get your own domain name associated with it. It’s not a 100% guarantee that things won’t go wrong, but at least you can recover if your current digital feudal lord turns their ire on you.


Thanks for sharing this! What a treat of a video. It's a fun project, and it's presented very well. This guy has a talent for communication - the video was super clear and well explained. I really admire that ability and I want to get better at it.


To me, the killer feature has been the ability to filter out sites from my search results. I removed all of Pinterest, several tabloids and conspiracy sites, any obvious AI-generated sites that I run into, and just with that my search result quality has increased drastically.

It's a feature that I'd like other search engines to adopt natively.


Imagine if they analyzed all the user-blacklisted domains and deranked them from other (new) users' results. Death of SEO!


Getting rid of most social media has been one of the best things I have ever done. I didn’t just delete my accounts, I also blocked the sites so I can’t visit them.

The best one to delete was definitely reddit. It’s too easy to doomscroll. It’s such a time sink, and being hyper-aware of everything that’s going on nowadays just made me anxious all the time.

HN hasn’t proven to be much of an issue for me. I guess it’s just less active, so I run out of new content faster whenever I visit.


I did the same, but I'm still holding on to Reddit with many restrictions:

- No mobile apps

- 10 min/day time limit on web

- Only browse 6 subreddits individually

- Filtering all posts below a certain karma level (depending on the subreddit)

- Collapsing all comments by default

This has completely changed my relationship with the platform for the better. I would quit it entirely, but unfortunately it's the best news source for a few of my hobbies.


subreddits also have a RSS feed. That helps when you just want stories and links.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: