HNHacker News
TopNewBestAskShowJobs

richbell

3,652 karma · joined February 1, 2022

submissionscomments
richbell··on Deprecating outdated issues on the GitHub public roadmap
> all the benefits of GitHub enterprise, with none of the con

To some organizations, having to use a cloud SaaS instead of hosting the application on-prem is a con.

richbell··on Early Cascade Injection: From Windows process creation to stealthy injection
Red teaming?
richbell··on Hacking 700M Electronic Arts Accounts
> Does that mean the author got nothing for reporting this?

Correct.

richbell··on Hear the sounds of Earth's magnetic field from 41,000 years ago
I'm reminded of "Sonification & The Problem with Making Music from Data" by Tantacrul.

https://youtu.be/Ocq3NeudsVk

richbell··on Show HN: I built a tool that helps people scan and clean any repo for secrets
This is sort-of describing https://docs.private-ai.com/webdemo/
richbell··on Is Matt Mullenweg defending WordPress or sabotaging it?
I mean, we're aren't talking about him and Automattic because he's a good CEO or person.

There's plenty of reasons to dislike Matt without stirring up petty drama that's exaggerated or misleading.

richbell··on Is Matt Mullenweg defending WordPress or sabotaging it?
> The accounts were empty and didn't have any NSFW content on them.

Was this confirmed by Tumblr staff?

And if the accounts were empty then what's the harm?

> ...was just meant to smear them as a sex-pervert.

The user voluntarily made several accounts with extremely vulgar and sexual names, ostensibly for NSFW purposes. If merely sharing the names is enough to "smear them as a sex pervert", I don't think that's Matt's fault.

Especially considering the post was in response to the user inciting harassment against Tumblr staff.

richbell··on Is Matt Mullenweg defending WordPress or sabotaging it?
> and even tweeting out the private handles of the user he was beefing with.

While I think Matt's current behaviour is abhorrent, my understanding is the linked article buries the lede a bit.

The user claimed they were banned due to bigotry and that Tumblr was lying about them having NSFW content. Things continued to escalate until Matt shared a list of their NSFW accounts.

https://www.threads.net/@samhenrigold/post/DAuTTaEtm_7

richbell··on I quit Amazon after being assigned 21 direct reports
> One of the things she was complaining about was participating in new manager training.

She specifically mentions feeling like it overwhelming and ineffective. That's not the same as complaining that she had to do it, which is what your comment implies.

) However, even as an experienced manager, I felt overwhelmed by the number of videos I had to watch. Also, I didn't feel that they were the most effective way to learn.

richbell··on I quit Amazon after being assigned 21 direct reports
21 reports may not be a lot in a vacuum. It is certainly an overwhelming number of people to suddenly become responsible for — even more so if the team is spread across different cultures and time zones.
richbell··on I quit Amazon after being assigned 21 direct reports
> Not sure if that is sarcastic or not, but the whole article seems to be "middle manager doesn't like basic parts of being a middle manager".

Can you share which parts made you think that? I don't think that's a fair assessment.

I was unexpectedly appointed manager

richbell··on Node.js, Pipes, and Disappearing Bytes
Yes, that is the conclusion of the investigation. It does not make this clickbait.
richbell··on 1 bug, $50k in bounties, a Zendesk backdoor
Indeed, they never had any intention of awarding a bounty.

Heads I win, tails you lose.

richbell··on 1 bug, $50k in bounties, a Zendesk backdoor
> Most of the person’s post and responses here are about Zendesk’s issue, but Zendesk was never informed

It's not clear whether they were informed. The mediator's email says "after consultations with *the team*", which is likely referring to Zendesk's security team.

richbell··on 1 bug, $50k in bounties, a Zendesk backdoor
That's strange, I don't see any missing images. Perhaps the Twitter embeds are breaking intermittently?

Edit: nevermind, I see what you mean. Twitter embeds work, direct images don't.

richbell··on 1 bug, $50k in bounties, a Zendesk backdoor
> you waste time with the constant spam of people begging for bounties

A great blog post on the matter https://www.troyhunt.com/beg-bounties/

richbell··on 1 bug, $50k in bounties, a Zendesk backdoor
> If I am not mistaken, it wasn't zendesk that didn't want to recognize the bug, but HackerOne that did not escalate to Zendesk that they should reconsider the exclusion ground in this case.

Correct, the replies seem to have come from H1 triage and H1 mediation staff.

They often miss the mark like this. I opened a H1 account to report that I'd found privileged access tokens for a company's GitHub org. H1 triage refused to notify the company because they didn't think it was a security issue and ignored my messages.

richbell··on Internet Archive: Security breach alert
I don't think so.

Troy isnt publicly sharing the credentials and that's what's valuable — especially having "exclusive" access.

He blogged or tweeted about this at some point. Sadly, I can't find the link.

richbell··on Wordpress.org Login: "I am not affiliated with WP Engine in any way"
This take is ignorant. Automattic is the one going on the offensive, nobody is "attacking" them.
richbell··on Sequencing wastewater may be key to getting a grip on the H5N1 bird flu outbreak
> Perhaps their decision makes sense given the cost.

What point are you trying to make? 10-15 million is nothing considering how valuable that data is for public health.

Public services cost money; nobody argues that we shouldn't have roads because they cost money to maintain.

richbell··on Internet Archive: Security breach alert
If Troy authenticates the data, they can use that as an 'endorsement' when trying to sell it.
richbell··on Sequencing wastewater may be key to getting a grip on the H5N1 bird flu outbreak
Ontario's conservative government abruptly shut ours.

https://archive.ph/VVaoi

https://www.cbc.ca/news/canada/toronto/ontario-halts-covid-w...

richbell··on YC criticized for backing AI startup that simply cloned another AI startup
> I'm not sure why people are so upset about it.

1. It reflects poorly on YC.

2. Something can be legal without being moral or ethical.

richbell··on Just Stop Oil protesters sentenced 2years for throwing soup on Van Gogh painting
YouTuber Tom Nicholas made a sort of "behind the scenes" video that explores their methods and motivations.

https://youtu.be/0v0dYQ9t5WU

richbell··on Mira Murati leaves OpenAI
For fun:

> In the sentence, the people responsible for the coup are implied to be Murati and Ilya. The phrase "Murati (and Ilya for that matter) took their shot to remove Sam" suggests that they were the ones who attempted to remove Sam (presumably a leader or person in power) but failed, leading to a situation where they had to cooperate temporarily despite tensions.

richbell··on Things I've learned serving on the board of the Python Software Foundation
Lest we forget that Popper was describing a specific type of "intolerance" that existed in the 1940s.

> "In this formulation, I do not imply, for instance, that we should always suppress the utterance of intolerant philosophies; as long as we can counter them by rational argument and keep them in check by public opinion, suppression would certainly be unwise."

richbell··on Open source maintainers underpaid, swamped by security, and going gray
I don't think "conflict of interest" is the right term in this case.
richbell··on Qualcomm Approached Intel About a Takeover in Recent Days
> Many ex-employees swore the servers would catch fire by now.

They've 'caught on fire' many times, such as the time login/2fa broke, or the weeks/months where you were rate-limited to only a few hundred interactions per day.

richbell··on When Fact-Checks Backfire
I think "fact checking" has lost its legitimacy in the eyes of many people — and journalism in general. You can't convince people that something is objective when it has an obvious bias.

Think of The Washinton Post's absurd "fact check" of Bernie Sanders. https://www.rollingstone.com/politics/politics-news/bernie-s...

Granted, we know that some beliefs are incredibly resistant to contradicting evidence, and can even result in people doubling-down (e.g., anti-vax). (Ironically, I don't have a citation for this at hand.)

richbell··on LinkedIn blocked due Meshtastic video in private chat
https://www.nytimes.com/2022/08/21/technology/google-surveil...

You're typically screwed and have no recourse.

← PreviousPage 3 of 34Next →