HNHacker News
TopNewBestAskShowJobs

burna_aws_acct

33 karma · joined February 5, 2023

submissionscomments
burna_aws_acct··on Ask HN: How about we rename FAANG to MAMAA?
Thinking about this too:

MAGNAT (Meta, Apple, Google, Netflix/NVIDIA, Amazon, Tiktok)

MAGNAM (Meta, Apple, Google, Netflix/NVIDIA, Amazon, Microsoft), if TikTok is cut...

MAGNAM-IT (Meta, Apple, Google, Netflix/NVIDIA, Amazon, Microsoft, Intel, TikTok), for the boomers' parents and the Southerners.

burna_aws_acct··on GitHub: SMS and TOTP can now both be registered 2FA methods
If the point is to increase security, isn't it counterintuitive to allow SMS?
burna_aws_acct··on RIP Product Hunt API: What it means for developers
IMO, a much-needed and long overdue improvement to the API. User privacy and security matters.
burna_aws_acct··on Hackers claim they breached T-Mobile more than 100 times in 2022
There's also this giant vulnerability with Apple Webkit, across all devices, that was patched 13 February 2022: https://9to5mac.com/2023/02/13/macos-13-2-1-webkit-security-....
burna_aws_acct··on Hackers claim they breached T-Mobile more than 100 times in 2022
Ways which I shared with Google, because it's a very serious privacy and security vulnerability.

We need more robust security integration to catch things before they are pushed to results. I understand latency will increase, and some ads revenue will decrease. But like, isn't it also cool to have a customer base that is better protected against egregious attacks, attacks that could be prevented? IMO, yes. It's called "stewardship."

burna_aws_acct··on Hackers claim they breached T-Mobile more than 100 times in 2022
SMS in unencrypted, and Google SE has been compromised for much if not all of 2022. From what I can tell the issue persists. I officially reported it in December, and again in January, and again in February. Pretty wild, TBH. Think about the number of services that have Google SE and Ads integration. Makes me nauseous.

Did you happen to report to Apple and Google (for documentation)?

burna_aws_acct··on Hackers claim they breached T-Mobile more than 100 times in 2022
One random factoid I notice is that AWS and Microsoft just announced launch of Open Gateway. Noticeably missing from that list of Telecom Providers is... T-Mobile. I'm sure it's mere coincidence, albeit a noticeable coincidence.

" Initial carriers that have signed up to Open Gateway are América Móvil, AT&T, Axiata, Bharti Airtel, China Mobile, Deutsche Telekom, e& Group, KDDI, KT, Liberty Global, MTN, Orange, Singtel, Swisscom, STC, Telefónica, Telenor, Telstra, TIM, Verizon and Vodafone. "

Link: https://techcrunch.com/2023/02/26/mobile-carriers-team-up-wi...

burna_aws_acct··on Hackers claim they breached T-Mobile more than 100 times in 2022
Interesting... I had something similar happen to me, with minimal outward, acute damage (e.g., running up bills on random credit cards). It is reasonable to assume my entire identity is compromised. Sorry this happened.

How do you know T-Mobile was the entry point, and not say, Google (e.g., Google Chrome, Google Ads)? What type of phone did you have (e.g., Android or iPhone)? What is your browser and Search Engine on your smartphone?

Thanks!

burna_aws_acct··on The Imminent Danger of A.I. Is One We’re Not Talking About
Agreed. The article is written as if it is not already our reality: https://tinyurl.com/amazon-onemedical https://tinyurl.com/amazon-rxpass
burna_aws_acct··on Apple’s iPhone Passcode Problem
2FA via passcode and biometrics is quite nice. The solution you propose enhances privacy/security protection against "the criminal element" and law enforcement alike, as biometric indicators in isolation are fair game for the police. #acab
burna_aws_acct··on Amazon's security theater destroys password security
Relax, they have it... Oh wait. Maybe we're not supposed to know that part. I mean, can you check to see if you have a lingering session cookie or web token that could be used to verify you based on your previous interaction w/ your computer + browser + email (user-specific, sensitive profile info), I mean w/ Amazon (account-specific info)? Maybe also inspect both the email and the link, for good measure. I'm hoping, I mean assuming you're not using Chrome Browser?
burna_aws_acct··on Spotify is testing playlists that could be unlocked by NFT holders
Questions: (1) Will we have to pay for Spotify service, and also pay for NFT? Depending on where the NFT is hosted, this could get quite costly for customers and be prone to degradations (e.g., blockchain hacking +/or collapse).

(2) Does each playlist come with a human-authentication sticker? I understand there is an authenticity assurance with NFT-backed songs/albums/playlists, so the move by Spotify makes sense. I hope record labels and artists alike leverage this for themselves as we move into AI-generated <everything>. I want the option to know I am listening to music created by humans, not deep-fake hijacks.

(3) In cases where AI-generated songs are "recorded" and released, will AI be granted writer/producer credits? If no, there's the everlasting issue of "it will remember." Unlike humans, AI may be better positioned to reclaim its value (monetary and otherwise).

burna_aws_acct··on High-skilled visa holders at risk of deportation amid tech layoffs
What in the David Eastman is all this?
burna_aws_acct··on JPMorgan should reveal more about CEO Dimon's role in Epstein accounts – USVI
It'd be helpful to understand who else JPMorgan is engaged with, from the Epstein-window moving forward. Surely the Epstein accounts weren't in a vacuum. Are there noticeable links to other high-profile individuals/companies?
burna_aws_acct··on Ask HN: Why Is the Internet Boring?
Hmm... What if there was a better way of indexing across multiple media types? Then we could have a "down the audio-visual rabbit hole" experience via info clusters in a format such as an RSS feed. We could have AI glasses that use eye-tracking and haptic gloves to select AV content. And this would allow us to be anywhere while taking in info, instead of glued to a physical computer monitor.

For me, there's the part of learning that is interpersonal. Shared excitement about learning a topic with and from others within reasonably close physical proximity does have benefits. I guess holograms and VR are supposed to supplement this, though I'm unsure a cartoonized avatar is a sufficient replacement.

burna_aws_acct··on US and EU Announce Plans to Develop AI Standards
A little tardy to the party... But better than not at all, I suppose.
burna_aws_acct··on Brave Search lets you remove Pinterest results and more
Brave has a bunch of ad and tracking blockers built-in, not just uBlock Origin.

Why do you call Brave a scam? Do you also classify Google Chrome a scam?

burna_aws_acct··on Google has gotten so cheap, employees now have to share desks
IMO, it's to make them uncomfortable (i.e., don't get too comfy). Change is imminent. What that change is, not exactly sure.
burna_aws_acct··on Apple Responds: Thieves Spying Passcodes 'To Steal Entire Digital Lives'
If a person gained access to all the assets associated with a device, wouldn't that mean they also gained access to the individual's digital fingerprint and/or face identification?

What I gain from this article is, "See? Storing all your identity (financial, personal, professional) in digital format on a small external device like a phone is not a good idea." To which 2007 would uniformly reply, "I told you so."

Now it's 2023, what do we do...

Apple's reply (IMO): We're not God, and we have no solution that won't completely destroy your privacy with us, a Big Tech company. Please take ownership over your identity, or else...

burna_aws_acct··on Google destroyed evidence in antitrust battle, Feds complain
QQ: Is Google the only corporation to be instructed to seize auto-delete of internal messages, or are there others? Thanks.
burna_aws_acct··on Justice Department says Google destroyed evidence related to antitrust lawsuit
i.e., Google lawyers found a loophole, and through it all employee chats were funneled.
burna_aws_acct··on Justice Department says Google destroyed evidence related to antitrust lawsuit
QQ: Was Google the only corporation required to suspend its auto-delete practices? Thanks!
burna_aws_acct··on FBI Recommends Using an Adblocker to Perform Web Searches
I like Brave because it comes equipped with a customizable Ad blocker (and Tracker shields, VPN, and Tor integration).
burna_aws_acct··on Amazon employees push CEO Andy Jassy to drop return-to-office mandate
Tracker and Ad-blockers, and SEO to discard Amazon results (e.g., tinyurl.com/brave-googles-amzn-free-search).
burna_aws_acct··on Let's build a Chrome extension that steals as much data as possible
Oh, I am quite certain most corporations and hackers did exercise this curiosity for all of 2022, at everyone's expense. Shout out to Google for the ongoing cover-up. Can't lobby this one away.
burna_aws_acct··on Let's build a Chrome extension that steals as much data as possible
Is this a roundabout way of saying, just don't use Google products and services? (non-rhetorical q)
burna_aws_acct··on Hugging Face and AWS partner to make AI more accessible
I will say this. Many acquisitions begin as partnerships.

Shall we begin to unearth the "partnership" with Stripe, and its impact to customers? Perhaps a necessary discussion worth continuing elsewhere, e.g., https://news.ycombinator.com/item?id=34863530...

burna_aws_acct··on Hugging Face and AWS partner to make AI more accessible
This is correct. All of a sudden, we'll see "Amazon state-of-the-art Natural Understanding systems paving the way [blah blah blah]"... Umm... No. It's HuggingFace. And just like that, HuggingFace fades away; its well-earned recognition reassigned to Amazon, by Amazon. It's not a possibility; it's a certainty.

Shout out to Amazon though. People keep falling for the "partnership promise." The wax must be hella poetic.

burna_aws_acct··on Old Reddit Is Down
Second time this month...
burna_aws_acct··on Hugging Face and AWS partner to make AI more accessible
... all the way to slaughter.
Page 1 of 2Next →