The supplied page does not contain information about a TSMC hack. Although the filing URL is presented under the title “TSMC Hacked,” the visible content is an SEC access notice stating that the request came from an undeclared automated tool. It asks the requester to identify the company using the SEC site through its user-agent information and points to the SEC’s developer guidance for downloading filings efficiently.
The notice explains that the SEC monitors traffic to protect site availability and may limit or temporarily block requests when automated activity exceeds its guidelines. It sets a threshold of no more than 10 requests per second across an IP address’s machines; access may be restricted briefly if that rate is exceeded, and may resume after activity stays below the threshold for 10 minutes. The SEC says these controls are intended to manage excessive automated searches, not disrupt ordinary browsing. Since the underlying filing’s text is not included, the material provides no account of an incident, its effects, or any response by TSMC.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Penlink’s Webloc, which uses advertising data for surveillance, has been purchased by security agencies across multiple countries. Citizen Lab warns the system enables intrusive mass surveillance, with particular risks in authoritarian states. (citizenlab.ca)
Nvidia chips reportedly reached China in large quantities after Commerce Secretary Howard Lutnick declined to enforce export controls and failed to replace them. Lutnick should resign, the author argues, over the resulting national security risks. (nytimes.com)
DOC-foundry uses AI agents to create Sigma security detection rules, then has a simulated attacker test them. A deterministic referee checks coverage before a stakeholder review chain approves the rule and records its review trail. (github.com)
The FBI warns that the FaceStealer scheme targets cryptocurrency holders and steals their funds. Treat unsolicited offers and links with caution, and verify crypto services before sharing information or sending money. (fbi.gov)
Cloudflare’s abuse-reporting page is reportedly blank, leaving visitors unable to use the form it directs them to. The page is intended for reporting abuse hosted through Cloudflare. (news.ycombinator.com)
Home Assistant stores refresh-token secrets and signing keys in plaintext, while some tokens never expire and survive password changes. Anyone who obtains the configuration directory or a backup can retain access to the home, and restoring a backup can revive old tokens. (seclists.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.