Top
Best
New

Posted by lafond 5 days ago

Using TypeScript to obtain one of the rarest license plates(www.jack.bio)
196 points | 206 commentspage 2
tantalor 5 days ago|
I'm not seeing what TypeScript brings to the party here? Looks like regular old JavaScript plus a vanilla dashboard.
sphars 5 days ago|
He used TypeScript for the scripts he wrote to pull the data. He also used Next.js to build the dashboard which is written with TypeScript
mkw5053 5 days ago||
Very similar to this post from a few months ago - https://blog.jonlu.ca/posts/ca-plate-checker
jconley88 5 days ago||
In CO, there isn't an online search. When you apply, you have to list your top options and hope one is available. I'm also not a normal person. I'm an engineer and this was not good enough for me.

I emailed government employees until I figured out who was responsible for license plate records. I submitted a CORA (Colorado Open Records Request) for the entirety of their dataset. I had hoped to get the data on some regular cadence to build a simple online service for others. Unfortunately, they flat out refused and wouldn't discuss options.

When I told my family what license plate I wanted, they laughed at me and said "No one has that, just go get it". And so I did and it worked. I now have what I consider to be the best possible license plate in Colorado: "LCNZPLT"

Occasionally I'll see someone walk by my car, see the plate, think for a few seconds and then start laughing. Mission accomplished!

bombcar 5 days ago||
Oh I get it your license plate is “License Plate”

LCNSPL8

rsync 5 days ago||
The best possible license plates in Colorado all start with ZG …
eurleif 3 days ago||
>EVENTVALIDATION is (was?) a novel security measure implemented in 2006 by the ASP.NET team to "prevents unauthorized requests sent by potentially malicious users from the client [..] to ensure that each and every postback and callback event originates from the expected user interface elements, the page adds an extra layer of validation on events".

The attack it prevents is called XSRF, and this security measure wasn't novel in 2006.

sltkr 5 days ago||
It's a fun story of course, but it also seems that people like OP who abuse public APIs are why we can't have nice things, and why so many web pages these days are bogged down by Cloudflare and Anubis interstitials that waste human time.
abound 5 days ago||
Yeah, also running a scraper with no rate limit against a government website is a pretty risky endeavor.
LikesPwsh 5 days ago||
Skiddies targeting an individual site are a drop in the ocean compared with the industrial scale LLM scraping, so blaming them for it is in bad taste.
wiseowise 5 days ago|||
> Skiddies targeting an individual site are a drop in the ocean compared with the industrial scale LLM scraping

They're not. Both are bad, but at least there's some utility to LLMs.

Someone1234 5 days ago|||
The difference is that the government won't charge a major LLM vendor with a crime, but they may kick in John Smith's front door and ruin their life.
rozenmd 5 days ago||
I did something similar to get OnlineOrNot's twitter handle - I realised that unclaimed names would 404 and so I set up a check to get an alert when that happened.
zzo38computer 5 days ago||
What character set does it use? For example, can "O" and "0" considered different characters or same character, and are some letters/numbers not used? If so, then how many they say are possible is not quite that simple, since some might match (so they cannot simply be added together) and some might not be possible.
chatmasta 5 days ago|
I was hoping “using TypeScript” was going to be more along these lines, i.e. using the type system as a constraint solver for some combination of homoglyphs that resembles a target string.
jonluca 5 days ago||
I did something similar with CA a few months back - https://blog.jonlu.ca/posts/ca-plate-checker

Next steps would be to make it LLM assisted and to generate common number/letter replacement combos

lafond 4 days ago|
Great minds think alike! Tough you weren't able to find anything cool with it, but glad I wasn't the only one thinking to automate it :)
vachina 5 days ago||
I got my vanity phone number this way too. However key point is to have a registrar with an insecure lookup endpoint like in the article.

Most endpoints now only give you a list pre generated numbers to choose from, AND that endpoint is rate limited to the tits with reCaptcha. No more script kiddies.

resurge 5 days ago|
Hey, would you please consider adding an RSS feed to your blog? I remember liking your post about Waffle house and now also this one, so I tried to add it to my RSS reader. But unfortunately no feed is available.
lafond 4 days ago|
It's now available! https://jack.bio/feed :-)
More comments...