Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

A bot can trivially generate TOTP tokens from a shared secret and receive/process incoming SMS to extract the code.


Then use the fact that I am a paying customer of Hilton’s for years to mark my account as a human. I have the Hilton credit card, I am a Diamond member, what else do they want?

I know why they force me though, I use content blockers on macOS and iOS to block tracking and ads, but that is not a good reason.


I can think of few behaviours more human-like than using a content blocker. :)


Can you share those content blockers? I recently acquired my first iOS device and have been suffering through the ads.


Not who you asked, but I use Firefox Focus as a content blocker. Since iOS only has Safari and WebViews (Safari in different clothes), you enable content blockers by going to Settings > Safari > Content Blockers.


I use Wipr. Firefox Focus is a free one for iOS though.


AdGuard is where it’s at on iOS.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: