HN user

scragg

177 karma

[ my public key: https://keybase.io/scragg; my proof: https://keybase.io/scragg/sigs/XICOXbKOWwWkfkAUZkICnjY-pgrdS_YSM-VaA4Xu1LY ]

Posts1
Comments97
View on HN

How is this an RCE? The only way I can think of exploiting this is having access to the code. You can "exploit" JSON.parse with the same methodology. Perhaps if someone was using a serializer that uses eval but that shouldn't be a vuln in jsonwebtoken but in the library that passes user input into eval.

I think the point of bringing up hurricane Dorian is the size/strength. It's not unique by itself but cat 4/5's are at an upward trend[1]. Also take a look at hurricane Barry[2] this year. It's a disturbance that came out of the continental US, became a hurricane in the gulf, and came back to strike the US.

[1] https://www.gfdl.noaa.gov/wp-content/uploads/pix/user_images... [2] https://en.wikipedia.org/wiki/Hurricane_Barry_(2019)#/media/...

They did this with the 40kwh option when they first offered the S. They didn't produce this battery and shipped a 60kwh battery that was software limited to 40kwh. I had a 40 on order and was delighted by this. I got the speed of a 60 for free and also not charging your battery to capacity can increase it's longevity. Plus, this gave me or future owners the option to unlock if they wished (I never did).

I think this is fair for when they transition to larger packs. You will get upset customers if you introduce a larger pack right after they bought the smaller. This gives customers the option to upgrade in that transition period.

Also, I noticed a comment:

"Are they hoping some people are going to buy the upgrade when they’re about to out of juice".

It doesn't work like that, you pay to unlock the extra capacity which needs to be charged. When your battery is depleted it won't matter.

Actually if they detect a server is compromised, they will put your server in a FTP only data recovery mode and usually the only way to get your server back is to do a fresh install of the OS. Luckily OS reloads are fast and provisioning dedicated servers takes minutes.

Tim Cook Speaks Up 12 years ago

Older. Negative experiences with younger people were just ignorant and probably did not intend harm. Some older folks will say things with pure hate and complete disregard to our feelings. I understand when Cook mentions the empathy you gain when being a part of a minority. I get anxious when walking into a restaurant that I am unfamiliar with. I think to myself... are we are going to be welcome here, is someone going to say something, what should I do if that happens etc. I've never had these feelings the first 25 years of my life.

On the other hand, there were occasions complete strangers (usually older) have said very nice things to us in public. These positive experiences greatly out number the negative.

Tim Cook Speaks Up 12 years ago

I am a white male married to a black female with 2 mixed kids living in Texas. While we haven't experienced much bigotry our way, it has happened. The first time I was filled with disbelief and shortly after rage while my wife (then gf) cried.

Our lives would be different if we were born a generation ago. Thank you MLK and Tim Cook.

Nexus 6 12 years ago

The Nexus 5 is still available, which I hope they keep refreshing and maintaining its price point. But yea, Moto G, or E for anything cheaper is the way to go.

We should be cautious and prepared for Ebola and not assume we can contain it. We use isolation chambers and a massive team of doctors in special rooms at the CDC just to take care of 2 people. I take a look at the hospitals in DFW and I doubt they can properly contain a handful of cases concurrently.

we finally got an agreement from the administration to release how many times we had national security orders on Apple. And in a six month period, and we had to release a range, because they won’t let us say the exact number, it’s between zero and 250. That’s the lowest number you can quote. Zero to 250.

So does anyone else think this might be a bad number (being so low)? If the NSA had access to everything, wouldn't you expect the official requests for data to be low and not because Apple doesn't store data or it's all encrypted anyway as Cook implies.