particularly if their personal luxuries (ie internet and beer) are affordable within this income level
1,336 karma · joined July 9, 2012
Sometimes I wish I had a character but I heard they are messing up classic by introducing power leveling!
We won't see this meaningfully acted upon until that can be fairly quantified.
For context, research the "value of human life" in the legal system. The numbers vary widely, but its often seen as somewhere between $1m-$10m USD. Is data about your workout routine worth 1% of your "enterprise value" (your life value)? Probably not. 0.0001%? Maybe, that would be $500 @ $5m "life value".
But then again 70% of the $500 you are "owed" goes to the lawyers who facilitate the class action suit to get the money from the company, so enjoy a meager $150 :)
—> wouldnt the battery eventually die? This seems obvious that after some amount of time a non replaceable battery will stop functioning
Most of the stuff that I appear on havibeenpwned for is some strange data brokerage that probably grabbed my data from another hacked brokerage, etc
Does anyone, perhaps those from the UK, have more knowledge of what could possibly justify this slippery slope that could reduce the freedoms enjoyed by UK citizens?
I think it is self evident, but who is the arbiter of what is "seriously" "annoying" or "disruptive"? Is blocking traffic while remaining silent one of these crimes?
I am beginning to think the claim "Developed in partnership with <BigCorp>" should be seen as a liability disclaimer rather than an asset that adds credibility.
Now the power of the sun going into an efficient and massive solar array is absurdly large so yes, we could technically have nearly unlimited power in a few decades.... but sorry my Sci-fi nerd got the best of me and I don’t agree electricity is technically infinite.
Various missingspaces, Carnegie Melon[sic], etc.
Do you have a website and they scrape it? Or did they physically pay a mechanical Turk or some similar process to type it out, then mark it up 20%+?
That off topic point aside, the point of doing this would be to own your data (at least that’s my attraction to setting this up). Why set this up in Notion?
However anecdotal, the user who was compromised is aware enough not to re-enter their credentials outside URL schemes that match our password manager database, and they wouldnt have entered anything.
“Oh but how can you trust the user, they clicked a bad link?!”... again this email came from a very reputable vendor who we email with regularly, and the link would have been completely normal for a Monday morning in Q1 2020.
I also think part of our reasoning for why the credentials were not re-used was because all the sessions seemed to be headless chrome sessions, but no logins.
I’m not a data security expert, but in my best summary, it seemed they: - Had a “virus” that spread really well. I’m assuming they had two kinds of users. Spreaders, and targets. Our employee was a spreader, sending this bug out to his/our network. Once the targets were hit, they’d be selected out of the spreader pool (so the hackers could remain undetected). - The hack relied upon identifying ,mutually high volume (trusted) email senders. - The hack had something to do with leveraging the platform of Notion.io. Unsure if there is a bug on that platform which was also being abused, or if they just have a good system for hosting phishing pages. - The user’s authenticated sessions seemed to be hijacked and replicated across the globe in headless chrome browsers, which appeared to renew the session until the hack ended.
Edit:: Another commenter in this thread indicated MFA did Not protect them.
A link sent from an existing trusted sender was sent to one of our employees from a vendor’s procurement director, inviting us to an RFP. The link took the user to a “notion.io” page. I do not recall the contents of the page (may have been a login spoof, but it didnt matter).
The hackers then appeared to hijack the “remember me” login session from our employees Chrome.app. Within a few hours, online webmail logins (edit sessions not logins) were occurring all over the world for this user’s mailbox. The hackers then spread the “virus” by emailing this employee’s known contacts the same spoof.
I don’t think Microsoft ever fixed the bug, as far as I know. Our method to protect ourselves was to upgrade to IP restricted logins on a higher level of Microsoft 365, and disable the “remember me for 30 days” feature. We’re debating turning off access to web-mail entirely because it does scare me that I think its still possible to do.
Anyone else experience this?
Excel formulas have long been too hard to comprehend if you were not the original author... and even if you did author it, 4 weeks later you won’t remember how it worked without a half hour of review!
Highly anecdotal, but there are far more complex business processes still running in Excel that are not going to be translated over to Google sheets, and they are all offline behind a network firewall.
Those types of sheets will really benefit from this improvement.
Now if they just supported python instead of VBA for scripting!
However Google sheets is nowhere the install base of excel, so this is a really big deal
My recollection in researching this a decade ago was that the cold weather made the behavior of the rudder change (my term was invert, maybe that’s not accurate), and pilots were trying to pull up, but in fact putting the plane deeper into a nosedive. Some 25 seconds later they hit the ground at some 300-400 MPH and vaporized.
The only way to have saved the plane would have been to dump the hydraulics and/or switch to a manual fly by wire mode, neither of which were a logici thing to do in the 15 seconds they had to save the flight.
I’ve only flown for 20 hours in a Cessna so sorry if my terminology isn’t perfect!