Login

u/hibzy7

r/Achievements r/Agentic_Marketing r/BYDAU r/OpenAI r/ClaudeCode r/LLMDevs r/ChatGPT r/chatgptplus r/TradingView r/codereview r/TeslaAustralia r/ClaudeAI r/Redditachievments r/codex r/VibeCodeDevs r/Anthropic r/Forex r/devsecops r/EmpiresAndPuzzles
▲ 1 r/TeslaAustralia

Buying used Tesla.

Hi all, saw a used Tesla with a dealership, here in melbourne. It's around 60K KM and with $38.5K drive away. It's marked as 2023 model.
No registration. Searching VIN shows it's a QLD Tesla, build 2022 but compliance at Jan 2023.

Is it worth getting this?
Also how can we verify how many users and transfers was made ?

Tried QLD TMR and paid car history report, which doesn't show much info.

Any other suggestions to check?

reddit.com
u/hibzy7 — 5 days ago
▲ 269 r/OpenAI

Now I feel like, Anthropics every decision is based on OpenAI. Sol release > force to keep Fable in subs, Luna price drop > sonnet too 🤣

u/hibzy7 — 10 days ago
▲ 66 r/OpenAI

Vibe Coding: you add a new feature/patch and the whole project breaks 😅

u/hibzy7 — 12 days ago
▲ 2 r/BYDAU

Requesting purchase suggestions

I am staying in a rented apartment, so not sure how the charging will go. I really like the Sealion 6.
Now I'm confused between sealion 6, seal 6 and Atto 3. Not sure which one to go for.
I'm not a car person, so any advice is much appreciated. TIA.

reddit.com
u/hibzy7 — 13 days ago
▲ 43 r/EmpiresAndPuzzles

can't finish this , wasted 6 flags, and even Bernies painting was resisted.

Why was Bernies SS resisted ? There is no buffs in any of the heroes . Even if I take the blue hero off first, the others don't get any damage. This is frustrating

u/hibzy7 — 17 days ago
▲ 1.4k r/Anthropic

DeepSeek V4 Flash API is 18x cheaper on input, 28x cheaper on output, and matches Opus 4.8. Time for Claude to atleast reduce sonnet pricing

u/hibzy7 — 20 days ago
▲ 3 r/codex

The last reset was held correctly by Tibo, so you get 1 days usage, before you are forced to use banked reset. Then you have to finish it in next in 2 days to get the most of it, before the next banked reset kicks in.

u/hibzy7 — 26 days ago
▲ 42 r/codex

Did the Codex limits get worse again. I'm on X5, use Sol High, barely used for few changes to my existing project and already consumed 10% weekly.

u/hibzy7 — 1 month ago
▲ 0 r/EmpiresAndPuzzles

This is couple of matches during covenant Quest, there is no rules which states heroes resist cursed painting, is this a bug ? Similarly in master druid quest, everyone resists Bernie... Is this a bug?

u/hibzy7 — 1 month ago
▲ 8 r/EmpiresAndPuzzles

This round has been my nightmare. No matter what I use, it's impossible to kill, lastly killed everyone including the reviver, but this shit don't die

u/hibzy7 — 1 month ago
▲ 9 r/Agentic_Marketing+5 crossposts

Update to my last Post, which aims at security for your projects, fully open source and local.

Coverage update — CodeInspectus now covers 32 checks (13 AI-specific + 19 SAST) plus 200+ secret & API-key patterns.

★ Built for AI-generated code — the checks generic scanners don't have (13)

  1. Hardcoded secret shipped in client-side code
  2. Secret baked into the built JS bundle
  3. Real secret behind a client-visible env prefix (NEXT_PUBLIC_ / VITE_ / PUBLIC_)
  4. Supabase service_role key (full DB access, bypasses RLS) in client-reachable code
  5. LLM SDK client with dangerouslyAllowBrowser:true, exposing your API key
  6. RLS policy with USING (true) — matches every row, table wide open
  7. Public table created with no Row-Level-Security at all
  8. RLS checking JWT role/aud instead of the actual user — access not scoped to owner
  9. Supabase Edge Function with no auth check — endpoint runs for anyone
  10. Over-permissive RLS on storage.objects — bucket files openly accessible
  11. Untrusted input reaching an LLM prompt (flags likely prompt-injection sinks)
  12. Authz decision trusting client-writable user_metadata — privilege escalation
  13. Model/untrusted output rendered as raw HTML in React (__html) — XSS

Industry-standard code security (19 SAST checks)
14) SQL injection — string-built query (JS/TS)
15) SQL injection — string-built query (Python)
16) Command injection — shell command from string (JS/TS)
17) Command injection — subprocess shell=True (Python)
18) eval / dynamic code execution (JS/TS)
19) eval / exec of non-literal (Python)
20) NoSQL injection from request data
21) Path traversal — filesystem path from request input
22) DOM XSS — untrusted data into innerHTML/outerHTML
23) SSRF — outbound request URL from request input
24) Weak hash (MD5 / SHA-1) — JS/TS
25) Weak hash (MD5 / SHA-1) — Python
26) Weak cipher (DES / RC4 / 3DES)
27) Insecure randomness — Math.random() for a security value
28) JWT alg:none — signature-check bypass
29) CORS wildcard origin with credentials allowed
30) Insecure cookie — missing httpOnly / secure
31) Insecure deserialization (Node)
32) Insecure deserialization (Python)

Plus 200+ secret & API-key patterns — Anthropic, OpenAI, Google/Gemini, AWS, GitHub, GitLab, Stripe, Supabase, Cohere, Perplexity, Hugging Face, Azure + more. All still fully local.

https://github.com/Synvoya/codeinspectus

Requesting your valuable feedback, and support from like minded security professionals to further improve this 🙏🏽

u/hibzy7 — 22 days ago