eyeareque

Thanks Microsoft, you just saved me $84 dollars a year. I just cancelled my paid account.

One thing to watch out for is CCA cat cabling. It’s cheaper, because it’s copper coated aluminum. I have no clue if it reaches spec, but i don’t think it’s worth it because it would cost so much to rewire your house again later (or trace down an outage/packet loss in production).

Briefly, twisted pairs reduce noice and crosstalk.

Facebook + google android = data harvesting dream come true for these companies.

That’s fine, but if it’s not publicly accessible don’t advertise the pay for entry content, the masses can’t view it without waiting for someone to post a workaround link.

I would be fine with this if the link was to working content (the workaround link).

Pay walled links should not be allowed here.

Sure you can pay with cash. But you better turn off your phone because they also track you with your WiFi MAC address when you walk into stores.

Do NDAs really just expire after three years like this ex Tesla employee claims? Something tells me that he will be sued very soon.

My feeling is that these jobs should be given to US college grads first. Let them grow into the roles. Why are we letting foreigners get hired into these roles instead? Let the college grad learn on the job, instead of the external candidate.

I have noticed that they pay less for h1b workers, and this is not only at Cisco, basically everywhere I have worked.

I’ve also seen the companies write job descriptions that only fit the h1b worker so they can help them get a green card. It’s sad.

Finally, I believe that companies have too much power over a h1b worker. If they fire them, they only have a month to find a new job and then they have to fly home. It’s bad on all sides.

I met someone who was from China say that these people in these camps are being “harmonized”.

It’s interesting how things can be perceived when the government controls the media.

Being able to focus on one thing for long amount of uninterrupted time can work wonders. Put everything else aside and just work on one task. I’ve noticed that the most impressive engineers have this trait.

Sounds plausible. Now I’m curious how much extra work this finding has caused teams at Google. There are probably many other similar insecure paths that need to be cleaned up.

That would be pretty brutal and cause people to quit trusting android phones.

But I think the same could be accomplished with the access he had, or worse, but would have taken a lot more work. He also would have needed to avoid detection too. His access sounds more troubling than the Aroura attacks they had years ago.

Wow, that is quite significant.

36k is not a small bounty for an RCE, but I feel like this is more critical to Google than the highest Android payout, for which they pay up to 200k for: https://www.google.com/about/appsecurity/android-rewards/

XXXX == what types of things?

I’m curious why there was no auth required for his calls.

It’s known that remote image loading is bad. Why is this even enabled? I think they get a pass on this, it’s definitely a bit over blown.

If you use a Mac without in client decryption, you’re fine. Also, if you use little snitch, you’d catch the request going out if it was hosted on a site you haven’t white listed.

Also, who allows image loading by default? Disable this if you haven’t yet. Spammers abused this for tracking a long time ago.

Can EU citizens request that equifax purge them from their systems? If so I wonder what would happen if you deleted yourself?

Would this affect companies like Google and others who have contractors/vendors, but use them as if they were employees?

Wow, this is shocking. I’m surprised this hasn’t been in the news before. The fact that you can do this and that Facebook is so open about is surprising.

Has anyone used this before?

I use them instead of Intuit for exactly this reason. Intuit is an evil parasite.

Agreed, sadly there’s no chance for the US to get this for the next 2.5 years at a minimum

I dream of the day that I can ask various companies to delete every piece of data they have about me.

The garages are too expensive now, as they’ve been converted into studio apartments.

My favorite memory about weird stuff: I have a no name rack mount server case that was missing a key for the front lock. Unsurprisingly they had the exact same case and sold me a spare for cheap.

I always loved looking at all the old gear there, it brought back a lot of memories. Netopia, Netscreens, old Cisco routers, Sun servers.

Here's a blog post someone put up about the closing as well: https://rsts11.com/2018/04/06/weird-stuff-warehouse-is-closi...

Thanks, I updated the title.

I’ve worked at other companies in teams that take these security reports in. There’s no excuse for their long delays in response, you showed them clear abuse immediately. I wish you would have given them the tavis experience. Next time use Google’s own terms, with a set date on when you will publish to put pressure on them. They do this to others and need to be held to the same standards.

Nice work! It is amazing how a bug that so many people don’t care about (open redirects) could have been exploited Google’s prime income generator.

If nothing else, you can use this as a nice gem on your resume, which can help you get more interviews or better paying jobs in the future.

If a user puts their location as being EU based, you get better privacy controls? If I still used fb I would take advantage of this.

This makes me wonder: If SV only has 20 something superfund sites from back when tech was very small, how many superfund sites does china have with their massive factories?

After ditichong Facebook long ago it seems amusing to me that people have such a connection with it and find it hard to leave.

Sure it may seem hard at first. But your true friends will not lose contact with you. You might not know random life events about your seldom communicated with old high school peers though.