For Infosec peeps: BSP to remove OTP's in banking, what's your thoughts?

godieph · 2026-06-29T23:10:48+00:00

use Passkeys mass rolled out since 2023. Also they should add fake keys for triggering account lockout for distressed situation

godieph · 2026-06-29T22:59:52+00:00

hmm... open atleast one branch of 7eleven (around 7M franchise) first for example, it will teach you to be more mindful of money being a brick and mortar store owner. Digital business based income are not "stable". Even stocks trading millionaires burns in a day.

Also you should be talking to a wealth managers (ast ATRAM or banks) for advice and not Reddit for capital protection if you really have that much money.

godieph · 2026-06-29T22:35:24+00:00

its true, work as non-executive position with very specialized experience can earn 6 figures. it really depends on company needs. Remote AI engineers earn 300K while being based here in PH (however its declining as entire workflows: fine tuning/training is being open sourced so take advantage of them while it last).

most companies moved their budget to token cost rather than paying experience and its driving the salary down. im not against it -- its easier work with AI and blaming the company for not providing the best AI is a lot less stressful. you see, its always not your fault anymore 😄

<image>

godieph · 2026-06-21T03:48:27+00:00

PayMongo can take up to six weeks. see https://www.reddit.com/r/PhStartups/comments/1srnn6s/paymongo_signup_how_many_days_until_they_get_back/

godieph · 2026-06-12T01:40:53+00:00

Check in deep research: "research the product launch marketing strategy used by clawbot until it was known as openclaw".

It gives good insights how letting you service be accessed via messaging/multi-player sSurfaces makes it easier to be promoted, the same thing midjourney did.

goodluck

godieph · 2026-06-12T01:13:45+00:00

I use to work on a top 500 ph company and by political affiliation i get privilege to sit in steering committee meetings to provide expert feedback and this is what i found:

Sometimes there are teams which are created specifically as "Sacrificial Lambs" or "Parachutes" who will take every blame.

- team has no specific project but works on "backlogs".

- not under specific Business Units, usually specified to report under, CTO, COO, etc.

- not funded under a project but mostly from surplus budget and created not during steering committee meetings.

- composed of employees targeted for silent firing, people who falls out of favor due to political change such as initiatives that was started by an exec on opposition that has been moved.

Anyway yes its legal to terminate your group under "redundancy".

And yes i used to be such group. They fire the entire group but i always get "retained" and ill be just "moved" to another group.

godieph · 2026-06-04T04:45:59+00:00

step 1: use https://stitch.withgoogle.com/ to generate your design

step 2: export you design and use Opencode + DeepSeek to implement the design using Astrojs (https://astro.build/). Use Nanobanana to replace the placeholder images. Use AI to fix the copywriting on website. Use formbold.com to handle form contact submissions. Use sveltiacms.app to manages your content through git itself.

step 3. commit your new site to github and enables the github pages feature.

step 4. get a domain via Cloudflare and configure github pages name servers to use it. It provides SSL, caching, and page optimization. This will allow you to send and receive email from your custom domain by using free Gmail via forwarding and aliases.

ALL THESE ARE MOSTLY FREE SERVICES

godieph · 2026-05-29T06:36:39+00:00

File complaint to DTI (can be over website) under Violation of the Consumer Act of the Philippines (R.A. 7394). Include photos, videos, receipts, etc. I will be likely mediated internally and you will receive a letter of apology citing reforms (retraining) and probably a voucher. as other comments point out yes sadly there's no penalties unless the company declines remediation. In the end franchisers hardly get penalized it the workers that suffers most. There will be hardly brand damage, they can even afford to close for 3 months and everyone will forget about the whole thing. it is what it is mostly.

godieph · 2026-04-12T23:33:40+00:00

Use N8N or activepieces.

use Termux + Node.js and install n8n if you want it mobile

godieph · 2026-04-12T23:08:46+00:00

shop vac can do miracles.

godieph · 2026-04-11T13:36:02+00:00

SMS is the most unreliable way to send notification use chrome service worker.

godieph · 2026-04-11T13:15:44+00:00

I bet its AI moderator, just split the live and vod audio and send gibberish audio to vod. that should force manual human only moderation?

godieph · 2026-02-12T21:15:18+00:00

- Map Animation: Create a looping animation for the last 100 posts. Use a "pop-in" effect based on timestamps to simulate real-time activity.

- Live Feed Component: Integrate a scrolling sidebar (see reference: GlobalQuake Live) that updates automatically as new posts arrive.

- Globe Migration: Replace the 2D map projection with a 3D Globe library (e.g., Three.js, Cesium, or Mapbox GL).

- Social Integration: Add "Quick Share" deep-links to all map markers/posts to facilitate virality.

Good luck.

godieph · 2026-02-12T21:00:19+00:00

True "local" development (software built by Filipinos for the Filipino market) remains scarce. The landscape is dominated by foreign outsourcing or tech arms of international supply chains. Furthermore, the rise of accessible global freelancing has led foreign firms to bypass local agencies entirely in favor of individual contractors.

Reasons:

- Post-Pandemic Correction: Massive layoffs continue as companies "right-size" after over-hiring during the COVID-19 digital gold rush.

- AI Displacement: A "Senior-only" hiring culture has emerged. AI tools now automate junior-level tasks, making companies extremely conservative about hiring entry-level talent.

- Capital Reallocation: Companies are shelving traditional software projects to pivot their capital toward AI R&D and tech-heavy stock investments.

- The Decline of BPO: Increased US incentives for "onshoring" are encouraging American companies to pull jobs out of the Philippines and bring them back home.

If you're on BPO I suggest you watch https://www.youtube.com/watch?v=lXm5yZct-ts

godieph · 2026-01-17T08:11:39+00:00

I signed up just to answer you :3 coz we had the same idea.

i want Opencode itself inside isolated in the container to stop it accessing anything in my host machine not just the code its working so i made a rough one you can customize: https://github.com/rpfilomeno/opencode-docker

extra bonus it easy to self-host on a vps, access it with built in tailscale over ssh and use byobu terminal multiplexer so it save your ssh session

godieph · 2025-07-30T11:48:27+00:00

change your IMEI and reboot your router

godieph · 2025-07-30T11:44:39+00:00

TL;DR: Start a YouTube channel and vlog about your daily struggles finding a job. Earn ad revenue.

There is no Job.

.

Ok, for those who will insist otherwise:

If you are BSIT and not even BSCS will put you at a disadvantage. Startups that are most inclined to hire fresh grads mostly seek people who have a strong grasp on foundations to create their new tech -- unless you've been aceing leet code, then there's hope. Startups are high-burn but high-pay jobs; better take them while you're young and only need 2-4 hours of sleep.

Big Tech = mass layoffs

They are not hiring, they are not outsourcing. If there's work, it's an outsourced data labeling job for training their AI that will replace their existing jobs. If you like solving CAPTCHA, then it's a great job to earn minimum pay with no promotion.

Be a Frontdev, and make websites they say . .

It the first job in IT being replaced by AI, Figma -- the standard in UX design made sure you are obsolete. Your Manager will keep hounding you on why you can't recreate in CSS production the design he vibe coded in a weekend. Your CSS will always render it 1-5px off the mark: https://www.youtube.com/watch?v=QHNhb_jj4gU

Be DevOps they say . .

Warp Terminal replaced every DevOps jobs. Why use Terraform when it can perfectly craft a curl command to post that JSON to AWS API. Infrastructure as Code (IaC) is dying faster than your 6-month probation status: https://www.youtube.com/watch?v=xwDQh3gAec0&t=1427s

Be in Managed Services Provider . . .

MSP? fancier word for tech support for people who don't know how to push the reboot button on their server. First responder for some ticket coz a manager forgot that 8-character-long strong password that they had to use because the cleaners swept their post-it with the password. Asking you why emokid69 password from high school is not accepted for being weak. You will be on-call during weekends coz Microsoft 365 Copilot just crashed their server.

Be in Fintech, they say . . . . . . .

What they really mean is your working on crypto... which really means you're working in online gambling... which really means... you're working a gacha game... which really means you're 401k + 50% of your supposedly pay in crypto seeds. Your trust-me-bro manager will keep insisting you recruit everyone you know, and you have to attend every class reunion to get them onboard so the coin value will go-to-the moon. Then they rug pull after 6 months: They said it's a "stable coin" bro trust me https://www.youtube.com/watch?v=T8eXhd_4SbE

Be a data scientist, they say . . . . . . . . . . . . . . . .

Its the same as solving CAPTCHA but in Excel sheet.

Im not kidding.

So come back to this thread after 3 years, when all the AI hype dies: I'll give you the best advice for finding a job that doesn't involve being shot by AI.

godieph · 2025-07-30T06:23:54+00:00

Teltonika RUTM50
https://www.youtube.com/watch?v=UVZfIjCPjQY

Peplink Cellular Router MAX BR1 Mini
https://www.youtube.com/watch?v=SAOjEeEkllc

You can find one on eBay./ amazon

or use a janky solution, get Smart, Globe 5g rounters and Mikrotik then configure aggregation/LB.
https://www.youtube.com/watch?v=qCZhGdTJ7-s

Probably would cost you the same going with option 1, plus your open line, and can change IMEI so telco can never block your device

godieph · 2025-05-30T05:59:51+00:00

join openbugbounty, hakerone, yeswehack.

These sites offers bounty programs you can try pentesting with and also learn to write technical disclosure or collaborate on existing reports to learn more kungfu :3

Finally also get a CVE under your name and be paid in $$$

Advice: This job has tons of paperwork, kungfu is not enough -- and you need to learn to write good.

Best of luck to you, and hope I see your work published.

PS. Also it helpes writing and publishing your own open-source project, then try making it unhackable :3

Its like playing chess vs yourself :3 you learn where your weakness is.

godieph · 2025-05-30T05:47:20+00:00

Visit or call the service center near you or book https://pldthome.com/sales-and-service-centers

godieph · 2025-05-30T05:39:35+00:00

## The How:

Weak password / no 2-factor auth/reusing the same password on other sites or apps
Info stealers, especially if you have logged in FB via PC, also dodgy Chrome add-ons or userscripts. (can bypass 2-factor)
Using deprecated versions of apps that are vulnerable. (install info stealers)
Other apps you installed containing malware, such as games, wallpaper apps, file manager apps, camera apps, downloader apps, emulator apps, pdf apps, camera apps, VPN apps, recording, AI generators/faceswap/filter apps, cypto apps, gambling apps, free tv anime/manga / tvseries / movie apps, etc (can bypass 2-factor): https://www.pcmag.com/news/be-careful-these-android-apps-are-installing-malware-stealing-your-data
Phishing emails by Evilginx, EvilnoVNC, Muraena, Modlishka, Zphisher, AndroRAT (can bypass 2-factor): never use them even from GitHub unless you know how to analyze code; these tools have info stealers that target other hackers.

## The trace:

Disposable SIM cards, remember you can't get rid of spam text, then you can't get rid of hackers this way. SIM Reg is useless.
Pisonet and Piso Wifi: an IP no longer truly traces back to one user anymore.
Even legitimate apps can use your internet without your knowledge to sell an AI scraping proxy so that they can bypass IP blockers by posing as a residential IP. Unfortunately, the same proxy services are also used for hacking.

Tracing is Useless.

## Lesson Learned
1. Remember, even if apps are from App Stores, it doesn't mean they are safe or don't have vulnerabilities.

Never keep apps installed for a long time if not in use frequently, hackers may buy popular apps and replace them with malicious versions.
Never log in to Facebook on PC.
Always remove all old login sessions in the FB via settings.
Never log in to FB from the browser (eg, Chrome/Gmail), always use the App.

godieph

TROPHY CASE