Posts

New ask Hacker News story: Tell HN: Meta's AI support feature allows Instagram accounts to be stolen

Tell HN: Meta's AI support feature allows Instagram accounts to be stolen 8 by parable | 2 comments on Hacker News. If the AI support option is enabled for your Instagram account (it appears to be A/B tested for only a percentage of accounts), anyone can hijack it with little effort. Simply get on a proxy or VPN close to the account's region, then ask the agent to send a code to an arbitrary email address. Once you receive the code, pass it forward to the agent, and it'll provide you with a password reset link which you can then use to sign into the account. Posting here for any Meta employees who may be reading. This flaw has been around for at least a few days and has been used to hijack over 100 high-value Instagram accounts. The correct patch would be to disable the AI support feature entirely for the time being until this is sorted and revert accounts and usernames that have been hijacked over the last few days. This is a pretty important flaw and it's currently...
Post a Comment
Read more

New ask Hacker News story: Ask HN: What are your worst war stories bringing agentic applications into prod

Ask HN: What are your worst war stories bringing agentic applications into prod 3 by yaoke259 | 0 comments on Hacker News. For a bit of context, I’m currently creating a team of AI agents at work to generate reports by fanning out into a large amount of subagents to process a large amount of transcript data. When the analysis fails mid-way because of some individual step like an API call returns an error or the machine is out of memory, it would create cascading errors that break the entire generation with almost no visibility. I’ve just spent the past month rewriting the individual jobs as durable execution jobs on DBOS but just wondering if there are better solutions out there and if others encountered similar issues? And then there is the issue to reflect back the progress to the users which I’ve just been coding ad-hoc honestly… When an agent fails at step 9 of 12, how do you handle that? Roughly how many engineer-weeks have you sunk into agent infrastructure (durability, monito...
Post a Comment
Read more

New ask Hacker News story: C++ CLI for folder encryption with AES-256-GCM and USB-based key loading

C++ CLI for folder encryption with AES-256-GCM and USB-based key loading 5 by nextma | 0 comments on Hacker News. I built a Linux CLI tool that encrypts and decrypts folders using AES-256-GCM. It also hides file and folder names and stores the mapping in an encrypted file. Repo: https://ift.tt/ED5RrBY
Post a Comment
Read more

New ask Hacker News story: Ask HN: Have you ever created a custom RISC-V ISA extension?

Ask HN: Have you ever created a custom RISC-V ISA extension? 4 by extensilica | 0 comments on Hacker News. Curious about the real pain points, not the spec writing, but what came after: toolchain patches, simulator forks, getting someone else to reproduce your work. Building a registry for reproducible extension packages: https://ift.tt/y2mULoc
Post a Comment
Read more

New ask Hacker News story: Ask HN: How is your org managing PR review load as AI multiplies code output?

Ask HN: How is your org managing PR review load as AI multiplies code output? 4 by meteor333 | 2 comments on Hacker News. We are facing flooding and surge in PRs across the teams. AI reviewer tools are good, but not exactly helping in efficiency. Almost all developers are experiencing velocity gains in programming but it's not resulting into eventual productivity or velocity in roadmap. How are you or your org dealing with all this?
Post a Comment
Read more

New ask Hacker News story: Ask HN: Thoughts on the current state of tech meetups in the SF Bay Area?

Ask HN: Thoughts on the current state of tech meetups in the SF Bay Area? 3 by Austin_Conlon | 0 comments on Hacker News.
Post a Comment
Read more

New ask Hacker News story: FYI: Dreamina is shady; do not use

FYI: Dreamina is shady; do not use 2 by ronyeh | 0 comments on Hacker News. TLDR: Don't sign up for Dreamina. Bad UX. Difficult to cancel. Doesn't issue refunds. No human customer service. === I signed up for a free 7 day trial of the video generation service. I used it on day one. On day six, they charged me. I canceled the auto-renewal on the website and emailed all of their support channels (Dreamina, Capcut, and Bytedance) to ask for a refund. No human read these emails. Their AI kept sending me around in circles and never acknowledging the request for a refund. More than two weeks later.... either their AI support agent got updated, or a real human finally read my emails. They told me I need to file for a refund via a Google Form. I hate companies that make it difficult to cancel and get refunds. Netflix is super duper easy to cancel. Weirdly, I never actually cancel. If Dreamina doesn't refund me, this will be the last $9 they (and their parent companies) ever earn...
Post a Comment
Read more