HN user

gcbw2

457 karma
Posts3
Comments190
View on HN

the term "pizzagate" was part of the disinformation to throw the actual investigation under the bus.

The press focused on a leaked report that it all happened in a small pizza place. While it effectively (for the leakers) killed progress of the investigation (the one which consequences are being talked now in this thread, so it was very much real) it also gave a catchy name for a while, that cause real investigative reports to jump in.

fake news is a very interesting problem to follow.

Not talking about a hacker. I am stating that the described hash dance offers no exclusion from GDPR as saying "we promise we won't look" would do.

My point about brute forcing being useless, is that you hold all the information needed to re-create the hash. All but one tiny piece that is the random number. so brute force is a very effective O(<tiny piece size>). And since it is stored in your locally available data, there is no rate constraints.

"Hey company in shenzen that i suspect is a shady front to illegal data mining business, do you have any data on me? i'm john doe, living at 123 naive st #42, phone number 555-555-555, national registry number 1234556. You can reply to me on this same email address. thank you. PS: maybe i filled this in an webform, so please do not attach this new info to all the traffic/behaviour you previously collected from your TV on this same IP address"

If a search query on your data would contain all the components of the original hash, i don't have to walk backwards and break the hash. i just have to hash my query terms in the same way.

Also I suggested you store the daily hash forever. But even if you really erase it every day, as you say, If you or an attacker makes the same request every day at a predetermined time, when you/they get your logs, you/they can use that predictable request to get the daily secret too.

I consider the information to be stored in plain text, and that you would have to have requested permission just the same. You pretty much have an identifiable user (via IP/UA/access time) stored in your logs.

Anonymization is removal of information, not encoding it in a convoluted hash.

This is still logging everything the GDPR says you can't without asking for consent, but you made your search convoluted (but not less efficient if you have all the pieces) to (suggest|lie?) that you need to break the hash and that's why you don't need consent.

None of the information you are using on the hash wouldn't be in the search query itself! ip, user agent, path, date, etc. So there is no way to reverse the hash. You just hash your search query and compare in O(1) time.

The only piece of information that realistically makes the hash slightly difficult to get is the random number refreshed every day. But either you store it (and i have no reason to believe you do not) or it make the brute force effort trivial as I only need to generate the hash with that variable now.

You think in terms of theoretical society that is either On or Off. No place is like that.

You missed the point that the people fleeing is already stealing tax and are likely the bad parts of the system themselves. They are fleeing from others like them and the justice, to begin with. If the system will collapse or not, i doubt that cross their mind.

This isn’t super easy to see because it’s hidden in a bunch of cultural stuff we just take for granted.

This is why sociologist mostly clump all the ism (capitalism, socialism, etc) into religion. They work within the same framework.

If someone said "give all the poor people money to improve the life of a rich person who owns thousands of hotels" you would trhow that person out of the window. Now dress it in the complex Myths, which the article tries to unwrap, and everyone buys!

that's a very bad analogy. Apps waste way more bandwidth. It's better if you turn it around: "unlimited gas for you 4mpg hummer. But we will nickel and dime you if you try to ever fill up the 1L reserve tank on your electric scooter"

Thaddeus Kosciusko 7 years ago

and I have no idea why there hasn’t been a movie made about him.

because hollywood would never tell a tale that shows the founding fathers as being pro-slavery.

Reparations is still a hot topic in the US.

This is the "expected" outcome of most big tech organizations. I doubt there was malice or stupidity from the actual people coding this (but the malice still exist, it is just a few layers up)

You have two kind of elite at the top: a bunch of very smart people, completely disconnected from daily work, setting up automated code checks and style rules. Let's call those architects/Engineering VPs. Then you also have a bunch of short term revenue people in a completely different side of the company who owns all the money and set the targets. Let's call those Product VPs

The daily work will be full of agile-cargo-cult (that is, all the meetings agile impose, without any the actual communication), with people in the teams reporting to different chains. Engineers having to abide by the crazy ineffective coding style (usually because nobody cared to provide the tools to help achieve the code quality required), and product/managers abiding by the short term revenue churn.

And since the Product org is the one who decides if target goals were met for bonuses and promotions you see why the actual coders might do that bullshit (e.g. which one ever got you a promotion: "I contributed to hugely announced feature X" vs "I followed all the best practices set up by the architects i have never met and prevented a security report two years in the future from dragging the company in the mud"?)

Most companies denounce the problems of having silos, but silos actually make the smaller org/teams responsible for the entire stack and tools. It is hated by investors because it is more expensive, but in the end, it is the real cost. A very vertical big corp will be cheaper but the reason it is cheaper is because less work is being done and always end up like this for ignoring the human nature of the people that it is made of.

Twitter was down 7 years ago

So the only take away is that now the population at large notices tech companies outages as much as they notice celebrity deaths?

Twitter was down 7 years ago

since all of them happen in high profile business hours, i'd guess either #1 or #5.

For #4 to be the actual cause, outages out of business hours would be more prevalent and longer.

N.B. it has some confusing passages to people that doesn't know L.A. very well. e.g. "Chinese immigrants had started moving to suburban enclaves like the San Gabriel Valley, bypassing Chinatown and its businesses completely" and then proceed to tell an anecdote from a restaurant in the very heart of downtown chinatown.