@lukeisandberg@boshen_c A while ago, before AI, I got a vuln report about a `/me` endpoint because if an attacker has a victims username and password, they can retrieve the victim's info 🤔
Did not get a bug bounty.
Having been part of the industry for 50 years, I can confidently report that none of this is true.
Sure, writing code has a non-zero cost; this is true of any artifact.
But you know what costs even more, Jonathan?
Writing bad code; writing unnecessary code; writing more code than you really need simply because you think you might need it someday or you are too lazy or sloppy to clean up after yourself.
Anything that costs nothing is often worth nothing as well, and results in significant unintended consequences.
so... I audited Garry's website after he bragged about 37K LOC/day and a 72-day shipping streak.
here's what 78,400 lines of AI slop code actually looks like in production.
a single homepage load of https://t.co/TqaEZsF44N downloads 6.42 MB across 169 requests.
for a newsletter-blog-thingy.
1/9🧵
Being a European today basically means having a pretty excellent day until around 5 pm when the White House starts posting the dumbest shit you've ever had the misfortune to read.
Every. Damn. Day.
You could do that with a phone app. Or plasticine. Or pencil and paper. Or a photo. But no, we have to demonise Flipper like it’s some magical evil thing only Flipper can do?
I built a portable Xbox.
This isn't a PC handheld, it isn't emulation, this is a real motherboard from a real Xbox. It has a 9” 480p display, pure digital video/audio, 100W USB C charge and play, and I'm currently adding WiFi 6 for wireless Xbox Live functionality.
Yes, really.
here's a funny little trick you can do with Protonmail addresses
Every Proton address is generated and given a PGP key even if you've never sent or planned on using encrypted emails. All keys are published via the Web Key Discovery protocol, so you can just do a
gpg-wks-client --check -v <proton_address> to look up when the key was created, which is usually the account's creation date by default (assuming the address is not an alias of another main account and the key has not been replaced with a user supplemented one).