HNHacker News
TopNewBestAskShowJobs

forward1

353 karma · joined October 10, 2023

submissionscomments
forward1··on Comcast says hackers stole data of close to 36M Xfinity customers
Good luck getting a mortgage for your shell LLC - won't happen.
forward1··on Comcast says hackers stole data of close to 36M Xfinity customers
Sure, can you cite which criminal law was broken or demostrate damages for civil claims?
forward1··on Comcast says hackers stole data of close to 36M Xfinity customers
> non-public residential addresses

What is a "non-public" address? All addresses are public information. It is not at all clear what you're protecting and from whom; there is a distinct lack of a coherent threat model.

forward1··on My cat water fountain comes with a spicy USB power adapter
I recently replaced my 120V receptacles with USB ones. Super convenient and it's allowed me to get rid of the dozens of various transformer plugs around the home.

https://store.leviton.com/collections/usb-outlets

forward1··on BC Supreme Court bars man from calling himself an 'engineer'
This guy wasted a lot of time and money just to prove to himself that the legal system is unfair and stupid. I have to wonder whether it was worth it.
forward1··on Let it snow in your terminal
Python? We don't need no stinkin' Python.

    while sleep 0.1; do printf "%-$(( ( RANDOM % `tput cols` ) - 1))s\e[0;$(( 30 + ($RANDOM % 8) ))m*\n" ; done
forward1··on Proton Mail gets a desktop app for encrypted email and calendar
Can we please stop regurgitating "encrypted email" as if it's some virtuous accomplishmenet?

Anyone can encrypt something. The challenge is keeping authentication to that encryption valid, accurate and secure.

As far as I can tell, PM does not in any way innovate on that. They just prey and capitalize upon laymen who foolishly equate encryption with security. In fact expecting any privacy from email at all is outright delusional.

forward1··on Ledger's NPM account has been hacked
2FA only protects login. Pretty much all account security from that point on is based on portable bearer tokens.
forward1··on Proton Mail gets a desktop app for encrypted email and calendar
A simple XSS turns into RCE with Electron desktop apps. I don't understand how technically competent people can in good faith accept this outrageous risk.
forward1··on Proton Mail gets a desktop app for encrypted email and calendar
Gmail also spies on everything you do, whereas desktop clients like Thunderbird do not.
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
Adult life is a series of compromises and adjusting expectations accordingly.
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
I told the CISO he was an idiot who didn't understand security (in front of many peers), because we disagreed on implementation. Soon after I was fired for "violating company policy".

I realized being right is not the most important thing in the world, certainly not more important than being employed. The other lesson was to never involve myself in office politics again: it is irrelevant and ultimately lowers your standing in an organization.

forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
A few years on, it's 650, so I actually did myself a favor getting fired, even though at the time I was filled with regret and resentment. In retrospect, the job was miserable and I was acting out because I was deeply unhappy.
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
Growing food absolutely harms the environment. Maybe not one potato, but modern agriculture is a leading cause of climate change (mostly animal ag, but the point remains).

This is not nihilism. This is what capitalism is by definition. Says Rob Urie:

> Economic production that produces toxic externalities like global warming, dead oceans, undrinkable water, unbreathable air, etc, depends on assigning little or no value to these. To make this very clear, Western economic ‘accounting’ places no value on these, on the most fundamental necessities of living beings, by design. As Oscar Wilde put it, a cynic is someone who knows the price of everything and the value of nothing. This is in fact a summation of Western economics; circumscription of the ‘knowable’ world by what has had a price tag put on it. The externalized costs of capitalist production are real— more real than the stuff in stores that is only ‘cheap’ because the true costs were lobbed off on people who haven’t yet fought back.

- https://www.counterpunch.org/2014/06/09/global-warming-is-ec...

forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
It's likely not, but it's my strongest frame of reference.
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
All business is profiting off misfortune of other people. That is the cornerstore of post-industrial capitalism: maximize the externalization of the costs of production. Name one product, service or industry which does not harm people, animals or the environment - impossible!
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
I used to have this attitude in my early 30s when I first made >500k. I thought I was indestructable, irreplacable and had an ego to match it. What a humbling experience it was to be laid off, in fact I think it was one of the best things to have happened to me. My relationship to work and business is much healthier now. I just smile at the silly games tech employers and their staff play.
forward1··on Spotify CFO cashes in £7.2M in shares after value surges on news of job cuts
I grew up in communist USSR. You have no idea how grotesque things can be without a free market.
forward1··on Governments spying on Apple, Google users through push notifications
FYI what you're describing is https://en.wikipedia.org/wiki/Third-party_doctrine
forward1··on Gordon Freeman at the Olympic Games
It would help to know what is warning you.
forward1··on Governments spying on Apple, Google users through push notifications
Simply put, sunk cost fallacy. Apple marketing has completely inundated and exhausted consumers by front-running a BS privacy narrative, to an extent such that users of their products lack even the vocabulary to meaningfully reason about and discuss what privacy is and is not; instead opining an opaque, closed source platform could defend their individual interests from asymmetrically powerful forces at all.
forward1··on LogoFAIL: Secure Boot bypass with manipulated boot logos
Disagree entirely. With an outdated CPU, you could be owned just by running Javascript on the wrong site. Not so with a vulnerable UEFI/BIOS, that requires additional privesc as is seen here.
forward1··on Governments spying on Apple, Google users through push notifications
> Which still leaves you in a large enough group that it's not practical to deploy full-press individualized surveillance against all of them.

Assuming no advances in technology obscured from public view, of course.

> Some of them depend on this for their livelihoods.

You sort of answered your own question there. Consider whether foreign nationals writing software in near destitute are susceptible to MICE, in relation to Bay Area millionaires.

forward1··on LogoFAIL: Secure Boot bypass with manipulated boot logos
Thanks. My take is on this is root access -> stealthy bootkit. Further demonstrates "secure" boot and similar DRM is theater only.
forward1··on LogoFAIL: Secure Boot bypass with manipulated boot logos
Do Libreboot supported hardware devices, which appear quite old, still receive CPU patches? If not, it is probably time to stop using it. Coreboot may give you a fighting chance however.
forward1··on LogoFAIL: Secure Boot bypass with manipulated boot logos
The risk is "image parsers in UEFIs ... are riddled with roughly a dozen critical vulnerabilities" but what is the attack vector? Has a dropper been identified? Or is this an academic finding only?
forward1··on Governments spying on Apple, Google users through push notifications
Signals Intelligence is not based on mere assumptions.
forward1··on Governments spying on Apple, Google users through push notifications
> NSA: Linux Journal is an "extremist forum" and its readers get flagged for extra surveillance

https://www.linuxjournal.com/content/nsa-linux-journal-extre...

But they totally can't figure out you use a custom OS built to resist surveillance. Go figure!

forward1··on Governments spying on Apple, Google users through push notifications
No competent startup or small business would take on such a legal risk. And anyway, a sure conclusion can already be reached on the basis of reasoning about the complete and total lack of warrant canaries anywhere.
forward1··on Governments spying on Apple, Google users through push notifications
Absolutely and confidently incorrect. Local notification settings have no bearing on this metadata, which is generated, collected and stored with your consent by using Apple/Google app stores.
← PreviousPage 5 of 8Next →