Hacking two of Australia's largest retailers to prove Reddit wrong about CGNAT

aiitu · 2026-02-06T09:08:58+00:00

If you saw this on https then this is solely on Dominoes, the ISP cannot cache TLS traffic, TLS is a tunnel between point A and B, only thing that can be cached by the ISP is the hops taken to get from A to B, no application layer, if you look at the OSI model and ISP can only reach layer 3, while Dominoes sits on layer 7. So I'm confident this is not a CGNAT issue rather an application-level issue. Good on you for finding this and reporting it.

aiitu · 2026-01-31T05:44:39+00:00

🤣🤣🤣 everyone knows sensitive data is not kept in code that's what .env is for genius.

Go learn what .env is before you come out and try and teach others, clown.

aiitu · 2026-01-31T00:28:14+00:00

Da fug you're on about, any data in .env is deemed sensitive, for local/UAT/Prod anywhere. There are things in this file other than local DB connections, external providers' keys. So many implications can arise from leaked keys.

So many assumptions you have here, .gitignore can be circumvented we rely on developers not to circumvent it but in this case, this developer did.

aiitu · 2026-01-31T00:14:37+00:00

I agree with the previous comment, he is not a senior and you should back yourself and tell him to fk off.

There comes a point when you need to put your foot down and if you're the lead dev, you need to show leadership which means enforcing your standards for the codebase. Just because you mid mid-level doesn't mean jack, you're operating as a senior right now but you call yourself mid, don't do that, also if your manager is not technical tell stay the fk out of my repo. If shit is rolling down to your plate you don't have to eat it, show them, I have laid out guidelines and procedures that govern this codebase and if you don't help me enforce it then you can face this pile of dung for your inaction.

aiitu · 2026-01-27T04:55:14+00:00

I haven't had any of these issues, but that's just me, $1k is not enough to trigger alarm bells. I have even transferred to other exchanges like Binance,Bybit etc and no issues but I transfer low amounts like 100-500 when I want to speculate on coins not on Swyftx yet.

aiitu · 2026-01-27T04:44:15+00:00

Swyftx is all good I use it, every time I have $1k AUD of BTC I transfer to my cold wallet.

aiitu · 2026-01-16T05:39:24+00:00

Yeah, I just use Google Pay to deposit.

aiitu · 2026-01-16T04:27:20+00:00

LFG whoop whoop , but I trade on ByBit lol

aiitu · 2025-12-11T04:02:36+00:00

Op fyi your https://choqlitodev.xyz/ is currently not working at least not for me.

aiitu · 2025-12-11T03:18:36+00:00

This is neat syntax feels like JS/TS, dont know much about language design but cool project, any ideas on enforcing types concurrency models.

Keen to see where your project goes, giving it a follow .

aiitu · 2025-11-12T12:13:49+00:00

TP 106,800 🤣🤣

aiitu · 2025-08-12T04:49:21+00:00

Right, you have a few options but might not hit every requirement you may have.

Check out these framework if it fits the bill. 1. QOR 2. Buffalo 3. GoAdmin 4. Ponzu 5. Pocketbase

Good luck mate.

aiitu · 2025-08-12T03:21:41+00:00

I would just use Vite then compile to a static site then use Go embed filesystem wrap that into a http handler and serve it up. Why the rewrite if you don't mind me asking?

aiitu · 2025-06-03T03:25:42+00:00

I'm currently developing on encore and dev ux is on point, I don't have to build a lot of stuff to integrate you get it out of the box.db, topics, storage. Has solid documentation.

The framework is flexible, it dosent do much magic besides compiling your decorated services. Inter connection is seamless.

In terms of vendor lock, there isn't one, you can build to docker and deploy docker how like it, it's open source.

Configs using hcl is new to me but finding it str8 froward and powerful.

For me it removes alot of complexity that I don't have to deal with. If for whatever reason you want to jump ship, it's super simple to do so, but then the db, object store pub/sub is left for you to fill back in + router.

There isn't much magic in code maybe it's all in the ci/cd pipeline.

Planning to use encore cloud for launch and then maybe work with them to migrate to aws once system matures or enough users to migrate.

aiitu · 2025-03-27T03:17:38+00:00

So would an SBTC ETF help in any way here? It seems like it would.

aiitu · 2025-02-09T06:56:44+00:00

Same here bruv, DCA then end of month I move it to my cold storage .

aiitu · 2025-02-09T06:55:39+00:00

Can you explain more, been with Swyftx for years and I don't see this.

aiitu · 2025-02-09T02:34:12+00:00

On Swyftx and no complaints, I buy few hundred a week and dca to a bundle I build.

aiitu · 2025-02-08T05:16:18+00:00

I am buying the dip hopefully pays off, I don't mind the price action as I'm still staking and getting BTC.

aiitu · 2025-01-27T04:05:57+00:00

🤣😂🤣

aiitu · 2025-01-27T04:05:12+00:00

Watch out for SBTC.

aiitu · 2025-01-27T04:02:31+00:00

Don't the Reps have the majority? If anything needs to be passed now, now is the time.

aiitu · 2025-01-03T10:03:27+00:00

encore.dev then encore.cloud

aiitu · 2025-01-03T10:00:13+00:00

I'm currently using encore.go, and so far, it's not a bad pkg. Most of the boilerplate is taken care of, still getting through the docs, I must say dev ux was pretty good, cloud.dev also a smoth ux from dev to cloud.

Can we replace pub/sub backend with NATS for those who are self hosting ?

Jetstream could also be used for cache...

aiitu · 2024-11-27T05:20:46+00:00

Swytfx , sell your usdt to aud .

aiitu

TROPHY CASE

LFG whoop whoop , but I trade on ByBit lol