patcheudor

Joined 12 years ago

Karma
2,526
Submissions
501
Member since
Jan 19
View on Hacker News

Recent submissions

Comment · 6 years ago
>any solution which relies on "doing the right thing" (ethics) but does not have any rules, laws or other repercussion for abusing it...

Doing the right thing can vary by culture, perspective, and situation. What is right or wrong to us may be entirely different to someone who's family is starving as just one example. Given the world-wide nature of the Internet, as a species, it is unlikely we are going to be able to agree on a single set of rules or punishments within our life-time.

Comment · 6 years ago
In addition to the health concerns, ozone attacks unprotected polymers causing them to quickly break-down and release additional toxins into the air. I run an ESD ionizer at my well ventilated re-work / soldering station and have had plastic storage bins on the bench crumble at the touch from the ozone exposure.
Comment · 6 years ago
Comment · 6 years ago
In the US, what law makes it illegal to MitM network traffic using a WiFi evil twin or other technique? I'm genuinely curious because I was under the impression there are generally no such statutes and that the only thing that would be illegal is if the MitM used found credentials.
Comment · 7 years ago
or trace back prior fraud. Criminals are using data deletion requests / demands to cover their fraud so they can continue. I don't think as written, this legislation is going to hold up under the onslaught of criminal abuse.
Comment · 7 years ago
Yup. Keep it out of the app store. I ran into BlueMail awhile back when assisting a non-profit. A number of the staff members were using it so I figured I'd take a look. It wasn't long before I found it was exposing email service authentication credentials in clear-text network communication and was sending those credentials to their own servers. I advised everyone to stop running it and banned the BlueMail agent from connecting to our mail service. I reported the vulnerabilities and never heard back. I never followed up because the app was subsequently removed, which I hope I played some small part.
Comment · 7 years ago
>good jobs

This specifically. I think that for a lot of tech workers the valley is a great security blanket. They know if their current gig falls through there will be another one waiting just around the corner. No need to uproot and move. It's actually sort of strange on the surface. There are a lot of engineers in the valley who move around to various companies fairly frequently which looks on paper like they don't have a lot of stability, but in reality the sheer number of available jobs is providing that stability, even if their longevity of employment with any one company does not.

Comment · 7 years ago
Comment · 7 years ago
In the first video from the article, the Tesla would be found to be at fault in most jurisdictions as the driver backing out was well into the backing out maneuver before the Tesla even rounded the corner. The Tesla without question did not have the right away at that point.
Comment · 7 years ago
"Sadly… or not so sadly… the world has moved to HTTPS and to stronger protocols than what lowly Pocket Explorer supports. Thus, most of the web is entirely inaccessible on the device."

This is what proxies are for. Assuming it supports proxies. It would of course be wholly untrustworthy as it's likely vulnerable to a whole host of functional middling exploits.

Comment · 7 years ago
The primary risk is to the GitHub account holder.

First, it's not hard to imagine that someone might try to get their account banned for a GitHub terms of service violation keeping in mind that GitHub holds the account owner accountable for content in their repository. This is true even if that content is from other account holders they've given access to their repository. In this case, anonymous access is intentionally being provided which could of course go very, very, very wrong.

"You agree that you will not under any circumstances upload, post, host, or transmit any content that:

is unlawful or promotes unlawful activities; is or contains sexually obscene content; is libelous, defamatory, or fraudulent; is discriminatory or abusive toward any individual or group; gratuitously depicts or glorifies violence, including violent images; contains or installs any active malware or exploits, or uses our platform for exploit delivery (such as part of a command and control system); or infringes on any proprietary right of any party, including patent, trademark, trade secret, copyright, right of publicity, or other rights."

https://help.github.com/en/articles/github-terms-of-service

Understanding what the tool does, GitHub might be forgiving on the ToS violation front. The problem is with the second scenario: law enforcement. It's very likely that in a lot of jurisdictions, law enforcement, prosecutors, etc., wouldn't initially understand what's going on here and even if it can be explained to their satisfaction, I think very few of us would like to spend a night (or more) in jail while attempting to explain.

Comment · 7 years ago
Comment · 7 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton