HN user

j79

804 karma

[ my public key: https://keybase.io/jp79; my proof: https://keybase.io/jp79/sigs/kLJ7_JXkocHJxnrKOhoJaEbcEIdr9IRg06MFpgYqtdA ]

Posts4
Comments214
View on HN

Looks like that was the original article, which didn't have much details about how the exploit worked.

404 Media is not revealing the exact details of the vulnerability because it can still be exploited as of Monday, when 404 Media verified the issue with one of our own hidden email addresses.

However, based on the current article:

Now Apple says it has been fixed, we can add that, in simple terms, it required sending a target Hide My Email user a message that got rejected as spam. “We don't know how often hidden email addresses were leaked in email logs. For many major email hosts, the leak was triggered simply by an email being automatically rejected as spam, even if it was a legitimate message. Such emails probably didn't make it to your inbox, so you can’t review your spam folder to learn whether you were affected,” Murphy and EasyOptOut co-founder Ben Weiner said in a new statement.

My guess is that if an e-mail was rejected as Spam, the response had the actual e-mail included. However, based on the next paragraph:

“The bug that caused Apple's Hide My Email to leak hidden email addresses to senders has been fixed. However, we don't think the risk to Hide My Email users has been eliminated. Because non-malicious emails could bounce, revealing your hidden email address, and because mail transfer logs are often retained, we'd assume that any hidden email address linked to a Hide My Email address created before July 7, 2026, may have been exposed and could still be in third-party logs,” they added.

It seems even bounced e-mails could leak your actual e-mail.

That's why there's a government shutdown, 100% of that is on the Dems.

Back in my day, the filibuster existed to encourage compromise. The idea that this is "100%" on the Dems is absolutely ridiculous.

There's not much I agree with Trump on, but I do agree with what he said back in 2013: "A shutdown means the president is weak."

Mr. "Art of the Deal" really makes the best deals.

Nobody with a sub-4% is going to sell

Nobody with a sub-4% is VOLUNTARILY going to sell. Home prices have slowly dropped to adjust for interest rate increases. However, a "price reset" will probably occur in areas where folks need to sell due to financial hardship.

Credit Card usage has already seen an increase, savings contributions have dropped, and car loans payments have seen more defaults. Unfortunately, folks are struggling these days.

A sudden "panic sell" of just a few homes could cause overall homes values in a neighborhood to drop, thus "correcting" or "resetting" over-inflated prices. Unfortunately, this would be a doomsday-scenario for many folks who bought recently in the 6-7% with inflated prices. Until interest rates dropped, they're stuck with a terrible payment while being severely underwater for their homes.

Can you imagine if THEY need to sell? Suddenly the value of their home doesn't even cover their mortgage. Now you're talking bankruptcy for many folks...

Thankfully Firefox recently changed their stance from "Neutral" to "Positive".

https://github.com/mozilla/standards-positions/pull/740

Neutral stance: We're not convinced that the complexity this feature introduces upon the HTML parser carries its weight in terms of usefulness for web developers. There's also a risk that the processing model is not compatible with a future declarative custom elements feature as it was developed in isolation. Having said that, the proposal is a reasonable approach for this functionality that takes into account the various constraints and security considerations that come with changing the HTML parser.

Positive Stance: This is a reasonable proposal which takes into account the various constraints and security considerations that come with changing the HTML parser.

Hopefully that's a sign of things to come! (Fingers crossed)

It's interesting. My right wing family also now loves him, but they just love Elon. They would never consider a Tesla because it's what the "left" drive in California, neither of which they want to be associated with.

"But it's private companies! They can do whatever they want!" The telephone companies are private. Do they have a right to kill your connection when you talk about unapproved subject matter? Twitter, Youtube, Facebook, and so on are the modern de-facto means of communicating long distance and to wide-spread audiences.

If I started robo-calling millions of people with unapproved subject matter, I'd wager they'd kill my connection fairly quickly.

I guess a counterpoint to your story: I worked at eBay when the story broke. We were all aware of Ina's blog and followed it regularly. As you mentioned, she was a great voice for e-commerce, and one that the vast majority of us appreciated. So, when the story broke, every co-worker I messaged was horrified and outraged as well. The fact that it went up as high as it did was really disgusting (and honestly, embarrassing).

Robinhood S-1 IPO 5 years ago

It also speaks volumes about "crypto" these days. The vast majority of folks I know treat crypto as an investment opportunity (albeit, a highly speculative one). They're not concerned about blockchain technology or decentralized finance.

Robinhood is the perfect platform for them - There's no need to "swap" tokens or sign up with exchanges. For the most part, RH just "works".

This is my fear. Currently, deep-fakes are fun. We share text messages of Donald Trump singing YMCA and everyone has a good laugh. But as you said, we're also a nation that easily falls for conspiracies. Everything from Q-Anon, Moon Landings being faked, and 9/11 being spearheaded by George Bush, Jr. Someone mentioned you can be the next multi-billionaire by creating a cryptographic watermark with validation, which at first sounds good. However, the obvious issue is that those who believe in these conspiracy theories won't trust "cryptographic watermarks".

Basically, anything and everything can be faked. And people will trust what confirms their biases.

Unfortunately, I personally see no solution to deep-fakes. The worms are out of the can, and we now have to question everything we see, which is A LOT to ask of people. Even if governments band together to "ban" deep-fakes, tightly regulating the internet to track deep-fake origins, or a more sinister "1984" approach, you still have the obvious issue that deep-fakes can be created by those who regulate the masses (our governments).

"What were they thinking?"

There were sites that tracked ratio which required maintaining a certain ratio to continue to be a member. Some members, however, took pride in having a ratio that skewed uploads over downloads.

I personally know people who paid for T1s just to maintain their "rep" of having the highest upload ratio. Not saying this is the case, but having access to a T1 back in the day was almost a way to "boost" their rep on these sites.

New iPhone SE 6 years ago

I live with a couple bluetooth headsets (Apple's AirPods, Bose QCs, and a pair of Beats), and I would say 95% of the time it's not an issue. There's the 5% of the time, however, where I need to re-pair the headset (not the biggest issue in the world) or the battery is dead (bigger issue) and I rarely, if ever, have the dongle on me (or even a pair of headphones to use the dongle with) - obviously the biggest issue when I want to listen.

That 5% of the time, while not often, is enough to remind me why I held onto my iPhone 6S until it finally died on me. As an iPhone user, I truly wish Apple would offer an iPhone 12 with a headphone jack, because I would absolutely buy it (two of the best pair of headphones I own are corded and it's a shame I can't just plug them into my iPhone when I please...)

I tend to cross check both Amazon and eBay and can often find items lower on eBay (with FREE shipping!). Glowing seller reviews like "SUPER FAST DELIVERY" typically indicates drop shippers. So I'll take a chance and often, a day or two later, the expected arrives - an Amazon Prime box!

But it makes me think -- Are they taking a hit on the sale to offer the item lower on eBay? I canceled Prime a few years back, but with a list of known eBay dropshippers, I can take advantage of Amazon Prime like prices at-cost (or lower) when compared to Amazon.com. And all without paying the Amazon Prime fee (obviously, I don't get the other benefits, but it's the 2 day shipping I'm primarily after!)

They mention non-essential workers should WFH (or not work at all), but does anyone know if that applies to delivery services as well?

I know folks (including myself) waiting on goods from Amazon/etc. to be delivered to assist through the quarantine.

Not only is it the President, but also the media like Fox News. They're downplaying the severity and pushing a narrative that the left is stoking fears of coronavirus and secretly hoping for a stock market crash to win the elections.

You end up with supporters of the President even denying coronavirus exists or a conspiracy of the left. Truly frightening.

https://www.politicususa.com/2020/03/07/trump-supporters-are...

After my first son, I noticed an explosion of gray hairs. I went 39 years of my life with a few strands of gray on the top of my hair. Two years since my first arrived? Grays all over. And I mean, ALL over (in places I wasn't prepared for...)

Albeit not identical, dealerships definitely do sell other vehicles and will almost always push the new model of their brand over the used model of the other brand.

I'd argue this will vary with dealerships. And, the pushiness would be more sales person, rather than the dealership.

For new cars, there are a couple reasons why a dealership may push a new car over a used car. The manufacturer may be providing volume incentives and the dealership needs to sale a certain number of models to meet that incentive. Or, a new vehicle has been sitting on the lot for too long and the dealership needs to move the vehicle (this is more true for used cars).

But, USED cars are a cash cow for dealerships. Either through trade-ins or auction purchases (based on the type of dealership), there's WAY more margin in a used vehicle than there is in a new car.

Unless it's a purely volume-driven dealership, dealerships will be perfectly happy to push a used car over a new car.

If Ford dealerships were a marketplace for vehicles other than Fords, I'd agree with this comment.

The issue I have with Amazon is that for many folks, they ARE the marketplace to buy goods. Pushing their own products as the "best Cyber Monday deal" is when things get a bit suspect, at least for me. And honestly, what represents "Best"? Best for the consumer? Or, best for Amazon?

(My cynicism is probably due to working retail (Staples) and having managers push us to sell Staples-branded items due to higher margins for the store/company (and we sales were happy to comply due to the higher spiffs). While I truly enjoy on-line shopping since I no longer deal with sales people, I'm fully aware that the algorithm pushing that "BEST CHOICE" IS the new "sales person". And they know more about me than any sales person in a physical store would ever know...scary.)

Tesla Cybertruck 7 years ago

Unless your use of ironic is in the vein of Alanis Morrissette, I doubt many folks have the funds to buy a vehicle...ironically...don’t cha think?

It also includes families and individuals who live paycheck to paycheck and can barely afford the groceries currently in their fridge, which will likely spoil.

In addition to the financial burden for these families, there's also the potential health impacts of eating spoiled food. Personally, I was hesitant to waste food that my wife had just purchased a few days prior. My stomach disagreed with that decision, and I spent most of my Sunday sitting in the bathroom with no power or cell service.

We're now dealing with the question of WHEN to replenish our food. I've also considered purchasing a generator for just powering the fridge. But, this is all new and any advice would be greatly appreciated.

Wow, the simplicity of this is blowing my mind.

I don't think I have ever even considered using `white-space: pre` with generated content. Really fun, really cool!

Half Korean.

I thought I figured out some amazing snack when I started eating ramen straight out of the pack. My brother and I would mix it with microwave popcorn (two unhealthy snacks cancel each other out, right?)

So it came as a shock when my cousin from Korea came to visit and wasn't impressed with our ramen snacks.

"Doesn't everyone do this?"

Turned out my Half-Korean friends were doing the same thing (we were all Army brats). They were equally surprised to find others doing it.