Hacker Newsnew | past | comments | ask | show | jobs | submit | cremp's commentslogin

Back before ClusterFlutter (which was just a lot of Java object type-casting, large multi-dimentional arrays, and overflow math) botting was pretty easy to write yourself with very little JVM knowledge.

Bans were (and still are) pretty hard to come by as long as you pay for a membership.


Great scripting language, but has a pretty troubled past.

Once the original creator moved on from ownership, the new owner also had a business with Runescape botting.

The story is that it didn't go well for the maintainers of Autohotkey until another person took the reigns.


Paris/ins3 (the RuneScape botting-related owner of AHK) had a fairly checkered past from what I understand, but most of it was before my time.

The direction RSBot took under his leadership was less than ideal. I lamented the loss of RSBot 2 and local scripts. The subsequent versions, dependent on the SDN, were never as good.


This might be a good plug for Morphie or Revanced patches to automate the patch process.


I'm a big fan of Revanced, but I haven't heard of Morphie - do you have a link for it? (I tried searching, but all I'm coming up with are cosmetics, chargers, and an IRC app.)

Edit: found it: https://morphe.software/ - looks like it's sort of an offshoot of ReVanced that only supports Youtube at the moment.

And, for those who weren't aware of ReVanced, see https://revanced.app/ - it was originally just a tweaked version of the YouTube app called Vanced (an "advanced" YouTube app, but without the "ad"s ;) - but now it's a tool that can patch a bunch of different apps.


> a basic level of device security across all iMessage threads I have

Is that really true though? Jailbroken phones, iMessage may still work. Any device security gets thrown out the window.

You also can't expect everyone to have an Apple device for security, which we've seen time and time again SS7 being weak - So is the requirement to remove SS7, for everyone to jump on the Apple train?

I see Beeper as doing Apple a service, not so much a competing platform, but a gateway to the iMessage ecosystem - 'Hey, this would be pretty cool to use without this app and have it native' vs the 'Only Apple devices can use this.'


> Is that really true though? Jailbroken phones, iMessage may still work. Any device security gets thrown out the window.

Apple closes exploits which allow jailbreaking, precludes it in the EULA. What more would you have them do?


> Apple closes exploits which allow jailbreaking, precludes it in the EULA. What more would you have them do?

Preventing jailbreaking is not a good thing, in part since that's what allows us to check on what Apple is doing on the device, in regards to privacy, security and e2e encryption. If nobody can check, do you suppose we just accept their statements about the device as fact?


> More and more of the internet is now moving behind Cloudflare

This is a big double-standard here on HN. Everyone hates Google for making decisions on behalf of the internet as a whole; yet Cloudflare has done the exact same thing with a different OSI layer.

I'm not very trusting of Google, but I certainly dont trust Cloudflare any more-so, because they keep things much closer to the chest.


> double-standard

Meanwhile upthread...

> Cloudflare essentially centralizing the Internet is disturbing to me.

Maybe different people have different standards, and HN isn't a completely homogeneous group with a single viewpoint. Just like every other group where individuals are free to express themselves.


I think we can trust them for now. They seem like good people and company. I don't know what's at stake in the future, but Mozilla has trusted their service, so there's bo good reason not to.


For the overflow, Jagex with RuneScape did it in Java. They also did stupid Object arrays 7 or so levels deep, doing casts on casts in between. The bytecode itself made the actual runtime slow to a crawl (anywhere from 5 to 10x slowdown.) This was circa 2014.


That’s interesting to know


Spit-balling; when will they put GSM chips in them? The cost of a data-plan could easily be reached with estimated figures for ads and selling usage data.


GSM is old-hat. The new cool is 5G chips embedded in TVs, and they are coming. And you won't be able to opt out unless you build a Faraday cage around the TV.

https://www.t-mobile.com/tvision/tvision-5g


For maven, to push artifacts via the correct mvn deploy:deploy-file requires a S3 wagon (transport layer) software to actually make the S3 calls. For bigger orgs, having everyone use a wagon is a non-starter.

All I'm seeing this does is give the proper http endpoints so you dont need the wagon. Is it worth ~2x the price, no, but it's better than the other enterprise-y solutions.


I see, I used it only for a small org. Maybe those companies can pay the 2x penalty.


It should be noted that SameSite was broken with Google Sign-in because Google themselves never set the None attribute before they reverted the rollout in April. [0]

This is a killer for all federated login systems.

[0] https://github.com/google/google-api-javascript-client/issue...


Can you recommend a good article that gives an overview of the issue? I'm not really familiar with how SSO is implemented and why SameSite breaks it.


Samesite won't break it if you set it none. Eg samesite=none Google failed to set it before the official rollout.

Reason is that sso effectively uses an iframe or popup to a 3rd party auth provider (Google, Microsoft, Auth0...) Provider saves a cookie with that state (from something like accounts.google.com) and usually reads it back from first party context.

If samesite is not set to none, supporting browsers are not allowed to write cookies on the auth domain from the firstparty context, and so the firstparty scripts don't think it ever happened, even though it did. First party scripts can't read it and so sso failed.


Going full tinfoil hat...

We've seen the GDP number manipulated during this crisis, Gov propping the economy up with lots of self-debt that we cant pay back.

We've seen that other developed counties in the world bawk at us. Example being the American woman who killed a guy in the UK by driving on the wrong side; and the US said she had diplomatic immunity, when she did not. [0]

Crime stats... Crime isnt crime if it isnt punished or even taken to the courts proper. A sitting president was impeached, but not removed from office. He was charged with high-crimes. If you need a statistic, just look at how stacked the government is from a 2-party system.

I'd completely agree that America is fucked.

[0] https://en.wikipedia.org/wiki/Death_of_Harry_Dunn


> A sitting president was impeached, but not removed from office. He was charged with high-crimes.

> lots of self-debt that we cant pay back.

Neither of those work that way. I agree on the 2-party stacked system though.


Her husband did NOT have diplomatic status.


Corrected; Thanks.

Didn't realize the US was that bad.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: