Hacker News new | past | comments | ask | show | jobs | submit | ttyyzz's comments login

I just want to point out that this is using jQuery 1.11.3 which is and odd choice imo.


I wonder if they just started on codepen with a random snippet, that so happened to have an old jQuery, and then went on with it. I've done that before, where I find a codepen snippet, and iterate over it, without caring for what versions used on it.


This was really made in 2016. I hacked it together back then, and forgot about it. Now I needed to check what did I do yesterday, and I remembered that I once made this tool. It needed just a quick update of the authorization header.

Since this is missing on github, i thought it could be useful for other people. :-)


Not if it was initial put together in 2016:

---

Author and licence

(c) 2016,2017,2024 Pavel Zbytovský


Especially for this small of a site. And they even mixin vanilla "patterns" rather than use jQuery. Very strange.


LLM idiosyncrasy maybe? I can totally imagine an interaction with a LLM making choices like this.


Found multiple bugs in the puzzle area. If you can give mate in more than one way (multiple correct moves for the last move) it sometimes says your move was incorrect which is not.


Another bug in that area is when you need to do your move for white but you also need to move the black piece next, otherwise the puzzle won't proceed


Yup, that bug, I've been trying to figure out what's wrong with it since a week now. Thanks for the feedback!


yep, the lichess algorithm for finding puzzles from real games is way more sophisticated than this, and they find some really weird bugs


I used the puzzles provided by lichess themselves. So, could be problem in my code. I will work towards making it more difficult and letting users choose the level of difficulty. Thanks for the feedback!


Ok, if you're just using the lichess puzzles and stockfish, why wouldn't I just go to lichess?


Okay its not just about the puzzles, I built it primarily for the game review that chess.com charges money for. And with the use of stockfish I've tried to make the UI more user friendly especially for beginners who want to study openings and just spend time looking at a chessboard making moves and seeing what is the best move for each position plus its easily accessible for a newcomer. By contrast, in lichess you have to go through the learn page and "find" the study page while in ChessDream you just go to the page and start making moves. I'm not saying my site is better than Lichess; I'm just proposing my opinions about how ChessDream might be helpful for people that are willing to learn chess.


The satellite image of this place on Google Maps is extremely obscured by the tree shadows, which may have deceived the recognition.


The labels come from OSM so it was probably done by somebody manually looking over Bing's aerial photography and manually tracing what they can see. The iD editor uses Bing not Google.


Unlikely, I zoomed in on one that had a pool with round edges within a square concrete area that had the rough geometry of a basketball court and I imagine a image recognition engine being confused by that.


It was the most humongous deal if we talk about IT security. SQL injection shouldn't be a thing in today's IT landscapes. And here we are giving everyone and their mother admin access to a database where the attackers can literally get not only on a plane but also in the fucking Cockpit. So yes, big big deal.


> where the attackers can literally get not only on a plane but also in the fucking Cockpit.

You can easily get on a plane, you buy a ticket to board it.

People try and succeed to get weapons through TSA checkpoints. I don't know what the idea is though. If you want to shoot and kill someone, do it at the security checkpoint, as happened at Domodedovo. People hijacked planes because the media covered it. You could also hijack busses. I don't know. What is the threat model?

Bag handlers smuggle drugs. I don't know. Airports are fairly porous.

I don't think this little SQL hack gets you into a cockpit. I suppose I could also buy an ordinary ticket, change in the bathroom into pilot clothes, and then bluff my way in. It should be obvious what personal facts about me make that easier for me than for someone else.

Do you see what I mean? This isn't a big deal. It's fun to be dramatic about that's for sure. IMO the large number of high drama personalities in the "security" field - when you are a customer, and on the other side, the technical person is high drama - is harmful to security goals.


Or you could buy a real ticket, bypass security with this (and whatever you have in your bags), then hijack an international flight full of fuel.

This isn’t hard to exploit.


TSA spends $6.3 billion per year on screening operations. Someone being able to bypass the entire apparatus of airport screening using a SQL injection attack is a really big deal.


It wasn’t an sql injection in their code. It was a third party issue.

So internally the question would probably how can you open it up responsibly.

Closing the api is probably a support nightmare; they probably gave too many rights and too little safety checks.


"[...] far more prone to incompatibilities with users WiFi configurations [...]" <- Exactly this! With my Unifi gear, all the configurations that had to be tried out and tested were driving me crazy. From Multicast Filtering (IGMP Snooping), Multicast Enhancment (IGMPv3), Broadcast Contols, mDNS to even the fucking Spanning Tree Protocol on the Switches (STP vs RSTP). How is this plug and play? How are other users even getting anything to work when it comes to multi room and speakers being on seperate APs?!


I've had what I think is this exact problem and it was solved by doing a factory reset on the Ubiquiti controller (I have a pre-production DreamMachine UDM). It only happened once and it was most certainly from a firmware update that corrupted some state/config on the system, probably in iptables forward rules if I had to make an uneducated guess.


I have all speakers on Ethernet to start with. But I also had to put them into the same vlan as my phone, as I could not come up with a firewall config to span multiple vlans. It’s tricky.


Did you ever find a stable configuration? I’m struggling with Sonos/Ubiquiti something fierce


Mostly did this: https://github.com/IngmarStein/unifi-sonos-doc

I had all speakers join my WiFi with none on LAN.


When the countdown reaches zero, it displays the message "That's it."


I have to disagree with the "2 to 6 people" - even for small projects I feel like 4-6 people is great. This way you can ensure that everyone has a “tandem” and e.g. It's not just a frontend developer doing some mischief that someone has to clean up afterwards :D


I also wouldn't download this in 1000 years with no additional information and sourcecode / github etc...


I work for a large German company and some of our suppliers and business partners have had a fax machine for a long time that they used exclusively for our purposes.

Fortunately, these times are over, and the company has celebrated the long overdue abolition of the fax machine ;-)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: