HNHacker News
TopNewBestAskShowJobs

testvox

874 karma · joined August 28, 2017

submissionscomments
testvox··on When it comes to composition and length, passwords mostly don't matter
That seems pretty possible though, if SS7 is the only issue then providers of 2factor SMS auth should just have a number on each network and when a 2factor request comes in they should determine what network its being sent to and then actually send the SMS from the number they have on that network.
testvox··on Google employees are listening to Google Home conversations
As long as you are warned that you are being recorded then the law considers you to have given consent if you decide to continue to talk. This is why all the home devices make a loud sound that you cannot disable before they begin recording.
testvox··on Google employees are listening to Google Home conversations
Know that even in all party consent states, if you continue talking after being made aware that the conversation is being recorded implies consent. This is why devices like google home are legal, they make a loud warning sound before they begin recording. For example in CA the law states that:

> (a) A person who, intentionally and without the consent of all parties to a confidential communication, uses an electronic amplifying or recording device to eavesdrop upon or record the confidential communication, whether the communication is carried on among the parties in the presence of one another or by means of a telegraph, telephone, or other device, except a radio, shall be punished...

(b) For the purposes of this section, “person” means an individual, business association, partnership, corporation, limited liability company, or other legal entity, and an individual acting or purporting to act for or on behalf of any government or subdivision thereof, whether federal, state, or local, but excludes an individual known by all parties to a confidential communication to be overhearing or recording the communication.

https://leginfo.legislature.ca.gov/faces/codes_displaySectio...

testvox··on IBM Closes Acquisition of Red Hat for $34B
https://github.com/microsoft/WSL2-Linux-Kernel
testvox··on YouTube bans content “showing users how to bypass secure computer systems”
That site is wrong, lock picking tools in all those States are still legal to possess for non-criminal purposes same as all the other states. They just consider possession of such tools to be prima facie evidence that you have criminal intent. Prima facie evidence is basically evidence that if not disproved by the defense is by law sufficient to convict.

So that means it's still legal to possess such tools in those states. But if prosecuted for criminal possession you basically lose the presumption of innocence and must prove you had no criminal intent rather than the state being required to prove that you did.

testvox··on YouTube bans content “showing users how to bypass secure computer systems”
Most people do not live in houses that I would call "secure systems". The reason locks in residential homes are not that sophisticated is because it's not worth the cost to make them secure when there is still going to be a glass window right next to it.
testvox··on Why we're ending support for MySQL
Yeah, SQL in applications that need to be performant and responsive is a huge pain and I have found it to not be worth the effort.

If you don't need performance or responsiveness though you can save a lot of effort except in very simple cases. I've seen it shine in quickly built proof of concept applications and in ad-hoc analytics queries.

testvox··on A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?”
Not only is ReactOS getting a lot of coverage it otherwise would not have, but the core claim seems to be that ReactOS is actually such a good re-implementation of Windows that actual Windows engineers think it couldn't have been accomplished without using the Windows source code.
testvox··on Show HN: YouTube-DL GUI Powered by Electron
I like https://scoop.sh/

    scoop install youtube-dl
testvox··on Ask HN: I'm a New Manager – How to Best Handle Employee Grievance?
In California it would not be illegal so long as all parties were warned they were being recorded, but what he describes is illegal unless they are in a one party consent state.

> (a) A person who, intentionally and without the consent of all parties to a confidential communication, uses an electronic amplifying or recording device to eavesdrop upon or record the confidential communication, whether the communication is carried on among the parties in the presence of one another or by means of a telegraph, telephone, or other device, except a radio, shall be punished...

(b) For the purposes of this section, “person” means an individual, business association, partnership, corporation, limited liability company, or other legal entity, and an individual acting or purporting to act for or on behalf of any government or subdivision thereof, whether federal, state, or local, but excludes an individual known by all parties to a confidential communication to be overhearing or recording the communication.

https://leginfo.legislature.ca.gov/faces/codes_displaySectio...

testvox··on AMD Responds to WSJ ‘Keys to the Kingdom’ Story
They are probably not an all-purpose public figure, depending on the particular facts they could end up being considered a limited-purpose public figure. But even private figures must prove at least negligence to have a successful defamation claim.
testvox··on AMD Responds to WSJ ‘Keys to the Kingdom’ Story
Yeah in general if the untrue statement was made without at least negligence then it will be protected.

> Statements made in a good faith and reasonable belief that they were true are generally treated the same as true statements; however, the court may inquire into the reasonableness of the belief. The degree of care expected will vary with the nature of the defendant: an ordinary person might safely rely on a single newspaper report, while the newspaper would be expected to carefully check multiple sources.

testvox··on Everything everywhere is securities fraud
No, most countries will not allow their courts to assert original jurisdiction for torts or crimes committed in other countries by foreign actors. The US has more exceptions to this then most other countries, for instance the controversial https://en.wikipedia.org/wiki/Alien_Tort_Statute

But even the Alien Tort Claims Act only applies to torts, and only to those which are "...committed in violation of the law of nations or a treaty of the United States."

testvox··on The Problem of the Aging Surgeon (2009)
Also reminds me of https://en.wikipedia.org/wiki/Senior_status
testvox··on FedEx sues U.S. government over 'impossible' task of policing exports to China
USPS was never privatized. It was reorganized as an independent agency.

> The USPS is often mistaken for a government-owned corporation (e.g., Amtrak) because it operates much like a business. It is, however, an "establishment of the executive branch of the Government of the United States", (39 U.S.C. § 201) as it is controlled by presidential appointees and the postmaster general. As a government agency, it has many special privileges, including sovereign immunity, eminent domain powers, powers to negotiate postal treaties with foreign nations, and an exclusive legal right to deliver first-class and third-class mail. Indeed, in 2004, the U.S. Supreme Court ruled in a unanimous decision that the USPS was not a government-owned corporation, and therefore could not be sued under the Sherman Antitrust Act.

testvox··on Smoltcp: A small TCP/IP stack in Rust
You could easily calculate such a stat from here. Microsoft Apple and Google are all in the top 5, with IBM and Oracle being the other two. Adobe used to be on top but with the death of flash they have been slipping. I checked out the breakdown of memory corruption/overflow bugs and its well over 50% of CVEs for MS and Apple. Google is much better with less then a quarter of their CVEs being memory related.

https://www.cvedetails.com/top-50-vendors.php

Microsoft 6508/116769 = 5.5%

Apple 4502/116769 = 3.8%

Google 4110/116769 = 3.5%

total (6508 + 4502 + 4110)/116769 = 13%

testvox··on Stop and Shop now has big, goofy-looking robots patrolling its aisles
Spills happen all the time, and if they are not cleaned up promptly they create a liability for the store. People (old people especially) can be seriously injured or even killed by slipping on spills. That could cost a store millions of dollars in injury or wrongful death damages per incident.
testvox··on Maine Governor Signs Strictest Internet Protections in the U.S.
Their response won't be to pass a robocalling law, it will be to send the police to your house to arrest you for harassment which is already illegal.
testvox··on Android now forces apps to include proprietary code for push notifications
No, the app can continue to use third party push notifications if the OS allows it to.
testvox··on Sharing Books with My Dad in Prison
In the US the difference is that jails house people before trial and for misdemeanor sentences (generally less than one year) and prisons are for felony sentences (generally greater than one year).
testvox··on Skiptracing: Reversing Spotify.app
Doesn't electron include the nodejs runtime as well?
testvox··on How Anne Wojcicki’s 23andMe Will Mine Its Giant DNA Database
Federal law requires that labs retain the results of genetic testing for a minimum of 10 years.

> Reports of genetic testing must be retained for at least 10 years. Electronic records are acceptable. Specific regulations for specimen retention are not proposed, but each laboratory must have a written policy defining its own specimen retention policy.

http://clinchem.aaccjnls.org/content/45/5/739

testvox··on Mosuo Women
I'm not sure of your claim that the Catholic Church is the oldest existing organization as that is a pretty broad term. For instance this Church is older, https://en.wikipedia.org/wiki/Greek_Orthodox_Church_of_Jerus...

I believe the Catholic Church is the oldest corporation (they were the first non-human entity recognized by law as having similar rights and responsibilities as an individual).

testvox··on U.S. Cities Strain to Fight Hackers
But those things can be done without putting sensitive information on the internet. Crypto currency transactions can keep everything sensitive off the network. A one way airgap is indeed all you need (your device should be able to push data to the network but never receive any data from the network). The same scheme works for voting.
testvox··on Powerless investors vote overwhelmingly to oust Mark Zuckerberg as chairman
Because they don't own the company... You say they have the most to lose, but I would say the investors who put 100s of millions of dollars into the company have more.
testvox··on Brush your teeth – postpone Alzheimer's
But then again brushing with fluoridated toothpaste is one of the few dental interventions with good evidence supporting it's effectiveness (unlike flossing for instance).
testvox··on Password expiration is dead, long live passwords
I thought Yubikeys and other hardware keys were best practice?
testvox··on The Central Park Five
In fact the supposed perpetrator confessed after he met at least one of the 5 in prison. I say supposed as he was never actually convicted of the crime.
testvox··on Facebook reportedly argues there's no 'expectation of privacy' on social media
Your phone company can actually record your conversations so long as they ensure all parties to the conversation are aware they are doing so.
testvox··on James Webb Space Telescope emerges successfully from final thermal vacuum test
Also Hubble was pretty much a derivative design of existing spy satellites, just fit with some different lenses and pointed in a different direction.
← PreviousPage 3 of 11Next →