HN user

StudentStuff

2,765 karma
Posts1
Comments1,019
View on HN

Huawei promised to fix these horrible security issues after a code review in 2012 and the establishment of the HCSEC oversight board in 2014, yet HCSEC found Huawei had not fixed the issues found in 2012 in their 2018 report, at which point Huawei promised to spend $2 billion to improve code security.

IIRC the 2019 report from HCSEC outlined the same bugs had yet to be fixed. I think Huawei doesn't want to fix bugs in products they aren't currently selling (in part based on Nortel code that has been patched over the last decade with new features), thus the lies and lack of investment.

More reading: https://www.fiercewireless.com/wireless/uk-says-huawei-equip... and https://aragonresearch.com/cyber-war-flashback-remembering-t...

I just picked up a Mac Mini for recompiling a handful of apps. If I were developing daily on it, a better specced machine might be worth it, but 2 to 4 year old Mac Minis are cheap, have the latest MacOS and fulfill my needs.

The browser version of Zoom seems to require a free account be created, and it was audio only in Chromium, I could not get it to use my camera. Zoom refused to work in Firefox.

Jitsi and Google Meet seem to work in both browsers, without requiring me to log in.

I couldn't get it to work in Firefox ESR on Debian 10, and audio was consistently choppy for me in Chromium 80 after I went through their forced account creation process. Zoom wouldn't use my camera either in Chromium :c

Jitsi and Google Meet worked by following a link and clicking one popup. Much easier UX

The spread may appear low in your city, but how much of that is from lack of testing? If your employees can work from home, it is best for you to implement work from home ASAP.

Businesses in Washington State have shuttered or gone to work from home over the last 3 weeks, had most businesses made this change earlier(eg: at the beginning of those 3 weeks) we would see much less spread and quicker easing of restrictions.

Is Alberta doing widespread Covid-19 testing yet? We had cases of teens with no international travel getting Covid-19 in February according to the Seattle Flu Study, there are likely more cases in Edmonton that exhibit minimal symptoms currently.

Seattle Flu Study: https://www.nytimes.com/2020/03/10/us/coronavirus-testing-de...

The healthcare industry can't afford to exist if they don't get paid by someone (whether that is the insurers or Medicare/Medicaid). We've seen mass closures of rural hospitals and medical practices as more rural Americans have lost insurance or gotten insurance that has large penalties for using said insurance: https://www.youtube.com/watch?v=18kxPz4Z_g8

Insurers themselves are a mixed bag, many have gone broke as IIRC the gov't managed pool of money they were supposed to pull out of/put money into to ensure no insurer went under from too many unhealthy, newly insured people has been starved of funding under our current administration.

1. A store location or locations was compromised

2. January 10th was when we notified T-Mobile of the attack

3. Likely sometime between January 17th (the last successful SIM swap attack we experienced) and January 24th.

4. Who knows? T-Mobile refuses to disclose any info to the police :P

I was affected by this, they SIM swapped a line on our account twice, both times on Friday at 5:23pm (followed by swapping the old SIM back at 5:42pm).

Just received the CPNI notice today from T-Mobile, we had a 6 digit PIN set prior to the first SIM swap on January 10th, and changed it before the following SIM swap on January 17th.

T-Mobile told me these swaps occurred at a store for both attacks. I did remove all authorized users from the account prior to the SIM swap on the 17th. T-Mobile has refused to provide Seattle Police Dept with any info about the fraudulent activity, and left me in the dark prior to the letter today.

[dead] 6 years ago

The insurance policy seems super sketchy, take a look at its caveats:

- If your balance loses under 20% in value then the loss is not insured

- If there are any code changes in a contract, there is zero coverage for 250 days

- If the exchange (outlet.finance in this case) is hacked, your not insured

Some card types will force usage of the EMV chip when used in a card present transaction.

By instructing the cashier to manually key in a card (albiet using a barcode to expedite the process), they bypass the need for EMV.

Those two aren't mutually exclusive, and attempting to frame it in this manner is disingenuous.

The ability to book a place to stay is regulated by hospitality law to prevent exactly this type of discrimination by AirBnB against Cadence Lux's non-work related usage of AirBnB.

If a company acts to suppress & hurt a community then attempts to participate in said communities events, they should be ejected from said event.

Pride organizers need to grow a pair and start kicking companies and orgs that have abused LGBTQ+ people to the curb. If said org tries to pull a Salvation Army, they should be publicly put on notice like the Greater Seattle Business Alliance did: https://www.seattletimes.com/seattle-news/as-salvation-army-...

Actions speak louder than words, we have to fight back against PR that conveys lies.

Running games on Linux is trivial at this point, Valve has made WINE so easy to use that all my games from Windows work without me lifting a finger. Civ 5? No problem. Random Indie Game that only ever worked on Windows 7? Works great.

Google did not put sufficient resources towards building a broad platform. If they had, then the Stadia catalog would have many more titles. Instead the AAA rabbit hole has consumed the resources spent on Stadia, and players still get a crummy experience.

Google EOLed Chromebooks that were sold 3 years ago, they do not give a crap about maintaining a stable ecosystem.

These 3 year old Chromebooks don't even get Chrome security patches, you would literally be better off with any other laptop when it comes to security.

All these years later Matrix only has... The ambition to some day try to offer the core privacy features Signal already delivered back then.

E2E on Matrix works, plus key verification is easier than on Signal. Managing metadata is hard, but my Matrix homeserver doesn't have my phone number (unlike Signal) and does not require Google Cloud Messaging. I can even run it on a PinePhone or Pocket CHIP!

But for an actual user who needed privacy and security any time between then and now - and for future users who need it between now and whenever you get this stuff working in the real world, it was Signal that delivered. Moxie was right so far.

Tell that to the people getting imprisoned due to Signal's metadata leaks: https://news.ycombinator.com/item?id=21747424

PinePhone Review 7 years ago

Yet KaiOS ships on tens of millions of phones every quarter: https://en.wikipedia.org/wiki/KaiOS

Mozilla did not want to maintain XUL or Fennec (which was hard to develop for, jumping between layers in C++ & javascript), but Qualcomm, Facebook, Google & the bevy of manufacturers and carriers that Mozilla had rallied behind FirefoxOS forked it and continued carrying on...

PinePhone Review 7 years ago

Could I get more details on T-Mobile's abuse of the FCC's TV Whitespace database? I know they currently do spectrum hijacking with License Assisted Access in the 5Ghz band, I'm curious what their other abuses are tho.

Most eBike batteries are half to 3/4ths a kilowatt hour, though if prices were lower you'd almost certainly see 1kwh & 2kwh batteries becoming standard.

The market is already headed this way, EM3ev keeps putting out larger and larger packs at the same price points year after year.

All raised vehicles are a danger to other road users. Most have bumpers significantly higher than other vehicles on the road, resulting in trunks and hoods on closer to the ground vehicles (Honda Odysseys, Toyota Camrys, etc) getting severely damaged in low speed impacts.

For pedestrians and cyclists, high stanced vehicles ensure they end up underneath the car rather than on the hood of the vehicle (where survival rates are much higher). A person can get hit at 20mph by a Honda Accord and walk away nearly every time, but try that with a Cybertruck and they are much more likely to die: https://usa.streetsblog.org/2016/05/31/3-graphs-that-explain...

Why do you need to download an app to reserve a spot to charge your car?

Make things as frictionless as possible like PayByPhone has done with their Progressive Web App for paying for parking.

Having tried to force apps on people, we often ran into forgotten iCloud & Google Account passwords preventing or slowing installation of our free app. Moving to a PWA made it as simple as emailing or texting a link to add users.

ISPs buying in were OpenNIC's stumbling block (as no normal user is changing their default DNS), ultimately that is why OpenNIC never took off.

The only way an alternate DNS could become popular is if Apple, Google or Mozilla (assuming a resurgence in Firefox popularity) were pushing an alternative DNS.

AI Winter 7 years ago

Is OP inferring we are entering another AI Winter after this most recent hype cycle for general AI?

Considering we use neural networks to encode audio (in Opus), transcribe our speech, secure our homes and much more, this most recent AI wave has been quite productive.