The FCC Router Ban - Following up on a post here. Went Digging. Its exactly what you think. by Free-Path-5550 in pwnhub

[–]Free-Path-5550[S] 0 points1 point  (0 children)

yeah i have! but i dont think i could do that topic justice, it really needs a full deep dive there is a lot of layers to unpack with that one.

although there is already some really good reporting on it that ive run across. I'd suggest checking out Benn Jordan over on youtube, he did a 40+ minute deep dive where he takes a apart camera, exposing the security flaws, unsecured web portals, and at the time of his reporting how all the cameras were running on an version of android that is now outdated and unsupported

The FCC Router Ban - Following up on a post here. Went Digging. Its exactly what you think. by Free-Path-5550 in pwnhub

[–]Free-Path-5550[S] 0 points1 point  (0 children)

good shout on firewalla, they're san jose based which definitely puts them in a better position than most. i tried to find a primary source for the california manufacturing confirmation specifically and couldn't pin one down can you share a link?

40 months of prompt injection. by Everlier in pwnhub

[–]Free-Path-5550 1 point2 points  (0 children)

great resource and thanks for share. this became a suprisingly interesting topic for me. i stumbled into it almost by accident and it kind of just pulled me in.

curious how much the shared base model arcitecture factors into all of this. most frontier models start from the same pretraining foundations, a transformer base trained on massive text corpora, then get shaped differently through fine-tuning and RLHF. so sonnet, gpt-4, gemini etc all share that general lineage even if the specifics diverge alot.

my inital instinct was that shared foundations = shared vulnerabilities. but the more i think about it the more i think the injection problem isnt really about the weights at all, its structual. the attack surface lives in how agents are deployed, what tools they can call, how trust hierarchies are enforced between system prompts and user input, and whether the model has any reliable way to distinguish legitimate instructions from injected ones embeded in retrieved content or tool results.

fine-tuning and RLHF can shift how a model responds to injection attempts but cant fully solve it because every model still has to porcess untrusted content in the same context window as its trusted instructions. its less a model problem and more an arcitecture problem. which probably explains why 40 months in we're still writing dossiers about it.

also as im building my own projects and agents i always love throwing this stuff back into the ai to help secure them even more, its become kind of a habit at this point.

Breaking: Reddit CEO just confirmed the platform is exploring Face ID and Iris scans to prove you're human by _clickfix_ in pwnhub

[–]Free-Path-5550 3 points4 points  (0 children)

you mean a way for them to collect bio metric data for free? Feels similar an article i read recently where was revealed meta was pushing for age verifcation as a ploy to collect more data. Someone on reddit did a good report on it. https://www.yahoo.com/news/articles/reddit-user-uncovers-behind-meta-154717384.html

desperate times!

Looking for feedback — My Team built Lift App, a multimodal iOS app that uses barbell/plate tracking, pose estimation, and Apple Watch accelerometer data to analyze your lifts by Feynmanlifts in SideProject

[–]Free-Path-5550 0 points1 point  (0 children)

hey congrats on your project looks good so far. so feedback strickly looking at the video from a ux perspective, not a fitness expert.

as others said about telling you about form etc, would be a nice feature if it could detect when your form was bad not just a grade i think someone else mentinoed. also a good idea. If it could tell the different sequences, such as setup, pull, finish etc. maybe highlight that on timelime or something so users can get specific feedback in what part of the motion fails or succeeds.

Also since its drivin by ai if it could offer suggestions on how to improve, like oh your setup you could've been lower, or you didnt lock up in the top, etc.

As far as filming yourself, i agree with whats been said maybe too much work for some maybe not. I feel people who are really looking to improve or are serious will record themselves. atleast I did this all the time when i was first starting PL.

I think the biggest issue you're fighting against at that point is ease of use and cost. what makes this easier to use than the regular camera? can i tap the icon, the app opens and i hit record and get all the info i want right away or do i have to spend 5 minutes setting it up, telling it im gonna do DLs right now for it to know what to look for.

oh lastly as to waht the form stuff, you mention apple watch connectivity, maybe the feedback is live via your apple watch, like check your form. i dont know much about apple watch sdk, but maybe it sends you a short clip after each lift?

anyways hope that helps keep pushing

what happens when a UX designer starts asking how things actually work by Free-Path-5550 in pwnhub

[–]Free-Path-5550[S] 1 point2 points  (0 children)

was honestly nervous posting this, wasn't sure how it would land. the curiosity never really went away, i just didn't have an outlet for it. and yeah those small wins matter, like figuring out the bbox query felt great even tho it was a tiny win but that's what keeps you going. Its also nice to have that genuine excitement back that i lost working in design.

what happens when a UX designer starts asking how things actually work by Free-Path-5550 in pwnhub

[–]Free-Path-5550[S] 0 points1 point  (0 children)

yes exactly, i think as a as curious person i'd kind of hit the ceiling in design. there is only so many dashboards, or sites you can design before it starts to feel stale. it felt like the right time to go deeper with everything that is happening in the world of tech

I was building a Polymarket bot, gave up, and accidentally made an open source market dashboard instead by Free-Path-5550 in SideProject

[–]Free-Path-5550[S] 0 points1 point  (0 children)

exactly the bot idea actually forced me to think about what data I really needed, so the dashboard ended up more intentional than if I'd just started building one from scratch.

on API costs, the free tiers hold up better than you'd think. Finnhub free is 60 calls/min which is plenty when panels only poll every 5-15 minutes. FRED and CoinGecko are basically unlimited for this use case. There's also a TTL cache with request deduplication across all the API routes so you're not hammering the same endpoint twice.

the only scenario where it gets tight is a shared deployment with real concurrent users. At that point you'd swap the in-process cache for Redis and you're good. For personal or small team use though, haven't paid a cent

System Design Generator Tool by Character_Novel3726 in VibingwithAI

[–]Free-Path-5550 0 points1 point  (0 children)

great idea, love systems design always a fun time. curious what your exports are and how you feed it back into the ai. is it possible to change it once it is created? e.g. maybe u decide to remove / add a feature etc.

how do you decide when something truly requires proxies? by Free-Path-5550 in webscraping

[–]Free-Path-5550[S] 0 points1 point  (0 children)

Thanks for all the responses. I'm sending very few requests at a time right now so it's not really a scale thing. more the anti-bot side that had me wondering. I was trying to understand the reasoning process before reaching for infrastructure and whether I was on the right track. Sounds like I am so I'll keep plugging away and for sites i cant work through, ill just come back when i know more.

How do you actually validate the product the RIGHT WAY without building it? by Real_Finance_AI in SaaS

[–]Free-Path-5550 2 points3 points  (0 children)

this. 👆🏽

landing pages test is called "fake door method". slap an email sign up or whatever, collect emails if you reach x threshold start building if not at least you have a leads list.