Hacker Newsnew | past | comments | ask | show | jobs | submit | flamesofphx's commentslogin

Your website should have a theme and Topic, Follow that, what graphics go with your theme and topic, if it's a personal website it should be about you or the person it covers, if it's geographic cover photos, activates that geographic, if a product website, add graphics/animation appropriate to the product. Deciding those should be the first thing.

Usually there is a person, that could probably be replaced with a old Fischer price recorder loaded with a pre-recorded sequence of bad idea(s), running such an outfit, but yeah there usually one person behind everything...


Doubt it's a single chargeback that did that, though it's probably what got there attention to your account. Probably something else (A bad infosec tool copy/modification to search for something like SS# patterns). Even from a security point of view I would see your email and add points for suspected fraud. What do you think and employer would think to if they saw an email like that (Minor drug reference @ omg.lol)? There is a lot of tools in infosec if they see it they would be against term of services (Some that you would not think of either)... Then further I would look for social media history too following, an incident on appeal (That's not just a recursive rejection) and see responses from you getting defensive as seen in the beginning of this thread. It's not professional behavior simply put.


GitHub isn’t his employer, what are you talking about?


Honestly I love it, didn't see it before till I search for it, I think they just picked the wrong target audience...


Honestly, I feel this on a spiritual level — or, well, an infernal one.

My native language is PHP, which, as everyone knows, is the demonically fluent tongue of the Ninth Circle. Down there, variables appear from the void, arrays shift shape without warning, and error messages read like ancient curses. Beautiful stuff.

Recently I tried picking up Rust, which people kept hyping as some kind of angelic, higher-order language… but after using it, I’m convinced it’s just the void teaching itself self-esteem. Every compiler message sounds like: “I’m perfect. You’re the problem.”

So yeah — working in a non-native language is tough. But if I can survive switching between demon-speak and cosmic-void-whispering, you’ll be fine too.


Haha I should have been clearer that I meant human rather than programming (or demonic) language. But by the sounds of it, I should be down there in the infernal PHP realms! The boringest part of type safety is surely the safety...


My Bad, I keep think hacker news refers to mostly programming..


I'm pretty sure the parent post is referring to spoken language, not programming.


I’m confused as to why your comment got downvoted. It wasn’t rude and the poster even confirmed they misunderstood in a sibling comment.


I get rid of my bot attempts.. by doing this:

1. Make all port not respond (Stealth in the firewall), unless they are public like http..

2. Change the SSH port # (over 8192 also)..

3. Setup port knocking watchdog so they have to knock first in a specific order on three ports before being allow to connect to real port.

4. Setup fail2ban. Including if someone pings the knocking ports (in the incorrect order) or real ssh (Without knocking first) then after a couple of times, add their ip to fail2ban list for 48hours..

You get rid of 99.98% of the lookers instantly, by just doing step 2...

This assume you have control over the server, there are several script online that help you provision something like that with ansible.. (Most of them helper related to configuring fail2ban.


I too change my default port on all nodes except public SFTP servers. I also restrict the TCP SYN MSS, Window and TTL and allowed CIDR blocks for non public SFTP servers. It keeps most things very quiet. Quiet makes it easier to spot more serious and targeted attempts.

This is an attempt to see what fun I can have with the bots on public SFTP servers. I am also curious if I can crap-up their logs a bit, depending on what they log. It's also fun to get them stuck using OpenSSH rather than depending on netfilters tarpit which AFAIK is not available via nftables.

This poor bot for example is stuck in a loop and can't even try to authenticate because of something I put in the sshd_config a copy of which is available on the SFTP server. Legit SSH clients can attempt to authenticate however.

    srclimit_penalise: ipv4: new 128.199.x.x/24 deferred penalty of 9 seconds for penalty: connections without attempting authentication

    # since I cleared the logs this morning
    logread | grep -c "128.199"
    591


I wonder if they old movie lawn mower man is going to become a reference for AI... They might need a dam...


A type of yes man/fall man often destined for a jail sentence, when a company has or is going to commit something they know is not in a legal and actually likely to result in criminal investigation they hire this kind of person "Just before" the act. This person is also allowed to acknowledge things but not fix them, because reaching product shipment is more important. Their job description can be basically summed up by getting a chimpanzee to learn how to say yes, and find and fling feces everywhere, when there given the command to clean this mess up.


Test if humans can detect the difference between a bot/ai amongst a set of humans and the bot/ai (I don't even thing the bot has to be AI to take the test).. If more humans detect one of the humans as a bot and don't id the bot at all, it considered a good success. This is from my understanding of the test. I think there has been historically multiple inconsistent procedures.. That's really not what I worry about though what I worry about is the bots/AI that purposely fail to the test to hide their intelligence.


You mean: https://lobste.rs/

? for it news?


https://lobste.rs/about#invitations

Basically you get an invite from someone else there, you can still be in chats and read the news with out it... Which is good enough for me, so sorry can't send you an invite. So the easiest way would be to join a chat, make some friends then ask for invite, they have like a chain tree that also takes people invite quality into account, so the person that give you an invite need to trust you a bit.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: