larkinrichards

I think you missed it: go and dot net launched without package managers. It was a long time before they had a standard package manager.

Love it when the ads load but the video you wanted to watch won't load.

How do you define "minor accident" -- perhaps it was a "minor" accident because no one was injured and no other party was involved?

Last time I bought a car, I found the one I wanted with the note that it had been in a minor accident. I paid for the carfax, and learned that it had some damage and repairs, and had somehow traveled across the country in the process. Limited details, except, the accident had occurred in Florida. $10 later I had the police report. It was a 4wd car and suffered 2 broken axles & broken drive train. not minor in any way.

Article says "photos of the damage made it look more than minor"

Sounds like buyer was scammed.

> The term "salvage" was a complete shock, but a deeper dive into the CARFAX vehicle history report, which he didn't pull until after the sale, uncovered a "minor accident."

> Photos of the damage made it look more than minor, and a Tesla technician told him the repair work as shoddy.

The article doesn't miss it -- this is exactly the point. We can and will rearrange our environment to support robots, but that means they will never learn dexterity.

offline now. It's a reasonable to expect that this information should not be available in real time to protect parking officers. It's already published daily, as mentioned in other comments.

Exploit chain--

1. zendesk allows you to add users to a support issue and view the complete issue history by sending a response email to a guessable support email from a person associated with an issue and cc'ing the person to add.

2. Zen desk depends on a spam check for inbound email validity. This check does not appear to catch instances where sender email is spoofed. Zendesk claims this is bdue to DKIM/SPF/DMARC config but I have trouble imagining that 50% of Fortune 500 would get this wrong. There are many automated checks available.

3) Apple issues an Apple ID account to anyone who can receive a verification email Sent to the mailing address ([email protected])

4) Slack allows you to sign in to a workspace using any Apple ID associated with the workspace domain (e.g. [email protected])

This researcher reported #2 to hackerone and was declined. Researcher later discovered full exploit with 3 and 4. Did not update hackerone, contacted affected companies directly.

it would have been prudent to update hackerone on the additional finding, but it feels like an easy oversight for a 15 year old after getting rejected on the first round.

Zendesk should take the higher ground and recognize the mistake and correct it. Not get all "ethical mumbo jumbo."

Based on the Oct 12 change log, "changed flight 4 to "starship super heavy" -- this reads that they can perform multiple flights with the same mission profile. So they can do a few quick test catches and avoid relicensing?

unlikely. They'd already created the prototype decks. They had the fabrication know-how in house. Sure they have in house VFX experience, but rigging the scene and trying to match lighting to reality and ultimately disappointing customers? It's a no brainer to use the real deal when you can.

Many would hire an agency to create an ad for you but that would 10x the cost, not to mention dealing with the opinions of an outsourced creative director...