Hacker News new | past | comments | ask | show | jobs | submit | rwestergren's comments login

One one hand, I can see the captcha is easy to fall for. On the other, nothing says "prove you aren't a machine" like "run this code that a machine could easily run."


If you have any sort of Experian bureau activity, you're at risk by this issue whether you manage your profile with this site or not


Experian allows unfreezing via their site in the article. If someone can easily recreate your account, they can unfreeze it which makes it pretty useless.


Yes, but if you have an account you’ll at least get an email notifying you that your account’s email address has changed (as a result of someone recreating your account). That’s how I was tipped off to someone trying to buy a car in my name (by pulling on the thread of calling customer support asking wtf I got that email). So it’s very useful to at least have an Experian account so you can know when someone is trying to go after you this way.

Now granted, it’s possible that the attacker won’t change your email address first, in which case I’m not sure if you get an email stating that your credit was unfrozen. But it’s likely they’ll change it in order to make it harder for you to mitigate the damage in a timely manner.


Exactly


defaultdict doesn't seem to easily solve for the main topic of deeply nested values.


+1 for Fiddler, though it doesn't sound like the author was in a position to forward traffic to an HTTP proxy at the time in prod


I was scratching my head on how he was capturing requests without mentioning a proxy cert, but then I saw the security note at the bottom.

  You'll see that the data for these products is sent in plaintext to and from their servers
The API seems to have a valid cert and is listening over HTTPS - strange that the app client uses plaintext.

  curl https://api.petkt.com/
  {"error":{"code":97,"msg":"App is out of date, please upgrade"}}


I find CORS is generally a good interview question for frontend or full stack engineers.


I shared this elsewhere but I could have expressed the initial problem a little clearer, which actually was "enter my home without unlocking my phone which causes my phone to die in the cold."

Unlocking the screen caused the battery to drop immediately - it still had network connectivity prior to that.


I think the initial problem was clearly-enough stated, and the GP's point is valid - why bother accounting for the case where your phone is so close to dying that you can't unlock the screen, when just a bit less battery life would mean that your phone dies regardless (and you're stuck outside anyways)?


The battery level isn't actually close to dying, in my case it just rapidly depletes from up to 40% when it's very cold. But that 40% remains intact seemingly with the screen off. Could be my phone also, but it has happened often enough that I wanted to solve it and thought this was an interesting approach.

For me, this was just a matter of convenience and not optimizing for most resilient or reliable solution. I do have backup plans for home entry.


Batteries are generally less able to source current when very cold. At low temperatures, the battery was sufficient to power your phone in a low-draw state (minimal network activity, no screen, low power CPU state), but the voltage dropped when current draw increased.


I experienced this. I ran to work at -10F. When I arrived, I took out my phone to take a photo of my ice beard and although it almost immediately died.


I had no idea this was a thing. How cold are we talking for this to be something that happens often?


Back from 2015, bypassing an APK signature check: https://randywestergren.com/reverse-engineering-the-yik-yak-...


Marlette Funding | Multiple Engineering Roles | Full-time | Wilmington, DE / REMOTE

Marlette Funding is a consumer financial technology (fintech) business on a mission to inspire financial confidence by helping people manage their day-to-day finances. We offer a digital financial platform with simple, accessible and personalized financial solutions including personal loans, credit cards, and a financial health product.

The company is a fast-growing fintech that has been recognized numerous times as a best workplace. If you are energized by working in a fun organization where communication is open, everyone feels included, creativity is embraced, personal growth is encouraged, and you can make positive impact on the business, Marlette is the place for you.

Senior frontend engineer: https://jobs.lever.co/marlettefunding/54bfe4d1-1fa6-4172-a40...

All open engineering positions: https://jobs.lever.co/marlettefunding?department=Technology&...


Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: