HNHacker News
TopNewBestAskShowJobs

ThbTs4wbXC9Qjv

-16 karma · joined November 6, 2015

submissionscomments
ThbTs4wbXC9Qjv··on Microsoft Employees Protest Work with ICE
Of course! If an ICE agent breaks the law, they are as guilty as any other US citizen breaking a law. That very notion is emphasized by the fact that our government is setup such that it's a system of checks and balances.
ThbTs4wbXC9Qjv··on MacOS Caches Data from Encrypted Hard Drives
Is this vulnerability defeated if you use a APFS/HFS disk password that no specific OSX user accounts are authorized to bypass, as is the case when you encrypt the whole hard drive and then install OSX versus activating File Vault only on a per account basis? In other words, if I don't have the hard drive disk password, but I do have a single user account login/password, nothing is capable of being leaked in this case, correct?

As the Quicklook database is never decrypted unless you have the disk password in this case, I don't think it is, but would like validation of my thought process as it seems like this mostly pertains to mounted encrypted image files or non-system encrypted drives, not whole disk system drive encryption.

However, if you use something like the MacFort app that stores resting app program data (like your Photos Library file) in an encrypted disk image only decrypted/mounted when you open the Photos app itself (and provide proper password) and then is closed/unmounted immediately after the app that called for it is closed, is this vulnerability still valid? I'm thinking it is in this case, as the encrypted files are at one point mounted on the file system in an unencrypted state and QuickLook can then cache contents as described, but again, I'm curious for validation.

ThbTs4wbXC9Qjv··on Facebook ordered to explain deleted profile
Some people don't want all of their friends and family to be notified when they die... so while your transparency idea sounds good in THEORY, I fundamentally disagree with it. Ditto for your appeal process idea. Some people prefer to fade away in silence with dignity (from their point of view).

That said, both of your ideas have merit if they are proposed to users as available OPTIONS that can be manually activated/opted into, but I would hope they never make them the default behavior. Losing someone close is hard enough without turning it into some democratic voting catastrophe.

I believe the legacy contact system is far and away superior to any mess like democratic voting by social peers. It's specified by the person THEMSELVES, as it is after all their account, their life, and their identity being handled here. For those that don't specify a legacy contact, respect their privacy settings and don't auto-opt them into new features that deactivate previously set privacy settings... I'm looking at you FACEBOOK, just because you launch version 2.0.whatever of the insert-feature-here, that doesn't mean the default setting for all previous versions of that system should flip to PUBLIC "magically".

Fuck Facebook.

ThbTs4wbXC9Qjv··on The Age of Tech Superheroes Must End
And so too must end the age of zero accountability for journalists publishing opinion pieces with leading speculation posing as facts.

The fourth estate has long operated without abandon, but it's time they are held accountable for their behavior.

ThbTs4wbXC9Qjv··on Ancient “su – hostile” vulnerability in Debian 8 and 9
Has that project been subjected to the greater world of people who don't think like Google programmers? Internal projects always suffer from groupthink.

Don't get me wrong, I love internal projects because once you're behind the gate, they are the first things I probe and attack. Usually very easy targets.

ThbTs4wbXC9Qjv··on Sinclair Made Dozens of Local News Anchors Recite the Same Script
I'm FAR more concerned about national stations like CNN than local Sinclair stations. Just anti-american agenda based news non-stop. Some of us happen to like the country we live in.
ThbTs4wbXC9Qjv··on How not to handle mass SSL certificate revocation requests
Wow, Trustico majorly fucked up. I had to go back and read from the top to understand the whole situation, but damn, they had SSL private keys being generated and output in plaintext into the user's browser on their site... on pages with 3rd party javascript files (some from advertising companies) being loaded in. The keys were "compromised" the moment they output into the browser in other words.
ThbTs4wbXC9Qjv··on WebKit exploit write-up
Man, it takes so much effort to write up exploits. I discover 'em regularly, but really, the effort to write-up is the best security companies have these days...
ThbTs4wbXC9Qjv··on How to Replace Google's AMP Without Slowing It Down
The standard authored by J. Yasskin from Google? Self-serving their own interests much?
ThbTs4wbXC9Qjv··on Git v2.14.0 released
agreed!
ThbTs4wbXC9Qjv··on Adderall and ADHD at the office
The movie Limitless showed how this will play out for most people. No, not the story of the main character, the 5 minute scene showing his ex-girlfriend who fell completely apart after her period of hyper-success. Think I'm wrong? Well I have a very easy way to measure how far away you are from reaching that same point... look at your dosage amount.. how far are you along from 0mg to the max dosage offered?

You aren't the exception, you will continue hitting plateaus where your dosage has to be adjusted up until you hit the top. Oops, did I say top? I meant to say bottom. You aren't the exception and the happy ending of Limitless was Hollywood magic. Hell, read the book it was based on and even that'll tell you the end of the party IS coming for YOU, don't kid yourself. I give it 3 years before we start seeing massive fall-out from all the stim abuse happening right now in our industry and others.