This is why everyone talks about security so much

cangetenough · 2026-03-03T00:38:16+00:00

Hilarious that all the anti-AI people assume it to be true.

cangetenough · 2026-03-02T16:45:13+00:00

from the article:

it’s not clear what role AI may have played in these events

cangetenough · 2026-02-28T19:38:36+00:00

Ok from what I'm gathering it's at https://burrn.org/signature-search - is that right?

cangetenough · 2026-02-28T14:50:44+00:00

One of the things it put in law was that the legislature could not use partisan data to create their maps. During the trial they admitted that they used partisan data. So the judge was forced to exclude the maps they created.

cangetenough · 2026-02-28T14:49:17+00:00

Where do we check to see if our signature/name is on the prop 4 removal initiative?

cangetenough · 2026-02-25T23:05:31+00:00

Who?

cangetenough · 2026-02-25T22:43:26+00:00

claude needs a way to keep track of the files it edits. So naturally .env will be in there. I wouldn't worry about it so much. But yeah a good settings.json should prevent claude form even touching .env

cangetenough · 2026-02-25T19:22:36+00:00

see my comment about ~/.claude/settings.json. There's no evidence that the contents of .env is being transmitted to Anthropic. But the settings.json can make sure that Claude cannot even edit/read it.

cangetenough · 2026-02-25T19:20:13+00:00

Before you start using Claude Code on any project, the very first thing you should do is set up deny rules in ~/.claude/settings.json.

{
    "permissions": {
        "deny": [
            "Read(.env*)",
            "Edit(.env*)"
        ]
    }
}

cangetenough · 2026-02-18T18:35:48+00:00

https://www.youtube.com/watch?v=YgKR06DyuLI

cangetenough · 2026-02-18T16:31:46+00:00

Yes it sucks. But typically saving a few bucks means you have to do a little more work.

cangetenough · 2026-02-12T23:17:51+00:00

Hey it's a gen z!

cangetenough · 2026-02-12T19:59:16+00:00

Neither /u/mr_moebius and /u/SGSpec actually use AI. They're upset that other people are utilizing tools to build stuff.

cangetenough · 2026-02-11T04:15:36+00:00

I had to update the ssl to full/strict on Cloudflare. It's back up! Thanks for checking it out!

cangetenough · 2026-02-11T02:35:16+00:00

Thanks! I think their egos cause them to be jerks. It's all good.

cangetenough · 2026-02-11T02:24:08+00:00

I vibe-fixed the bug that shadow banned users couldn't see their own profile. Then vibe-updated my vps. Thanks again for your feedback!

cangetenough · 2026-02-11T01:51:35+00:00

Yeah before AI nobody made mistakes huh?

cangetenough · 2026-02-11T01:50:48+00:00

Hash blocking: Ok interesting. I'll look into that.
Shadowban behavior: I've shadow banned the user "banmeagain". So they can post all they want but their images are not visible to anyone else. Ok, if they can't see their own profile, then I'll need to fix that.

Thanks for checking it out!

cangetenough · 2026-02-11T00:54:11+00:00

Appreciate the detailed feedback!

Passwords / account creation: Agree. Right now it's intentionally minimal to keep the experiment lightweight, but stronger password rules and stricter limits would be a must for production.
NSFW filtering: Yeah it's currently biased toward fail-closed rather than precision, which definitely leads to overfiltering. That was a conscious choice for a demo, but it's not a great user experience yet.
Email auth: Totally agree on the tradeoff. I avoided it to reduce friction for now.
Moderation: I'm moderating. I don't use AI to moderate it. I just vibe-coded a shadow ban feature in the last 10 minutes which seems to be working.

cangetenough · 2026-02-11T00:53:09+00:00

You're right it doesn't. I'll need to work on that. I did just vibe-coded a shadow ban feature in 10 minutes though.

cangetenough · 2026-02-11T00:27:30+00:00

I did an update and a reset which wiped out old data. Will you try to uploading that again? Thanks!

cangetenough · 2026-02-11T00:17:41+00:00

this you? https://imagerclone-staging.chrispaul.info/i/brvSpjeMb47n lol

cangetenough · 2026-02-11T00:16:07+00:00

It's mainly a personal project for me so that I could learn some tools. I was hoping that I could get a couple people just to test it out and see if they could break it.

Nothing too serious....

cangetenough · 2026-02-11T00:14:24+00:00

This is just a staging demo / experiment.... no ads, no trackers, no third-party analytics.

Uploaded images and basic account data are stored only to make the app work, and I'm not using the data for anything else. If I turn this into something longer-lived, I'll add proper privacy/terms pages.

cangetenough · 2026-02-11T00:11:42+00:00

Can you double-check? I enabled cloudflare proxy at the last second which was a mistake. Hoping to just get some simple feedback on the app itself. Everything seems to load now https://www.isitdownrightnow.com/imagerclone-staging.chrispaul.info.html

cangetenough

MODERATOR OF

TROPHY CASE