Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)D
Posts
3
Comments
171
Joined
2 yr. ago

  • What year is this? 2008?!? Now we have Netflix and piracy is not a problem, right? Oooohhhh right they decided to kill the golden egg chicken but they still want the eggs

  • Nope, because Facebook app is not a VPN service so it cannot intercept traffic.

    What it is unclear from the article is how they circumvented the certificate check on the app side. Probably (given this was many years ago, maybe these apps weren't setupping certificate pinning/HPKP)

  • To the part that they were bribed.

    I think they are simply in the pipe dream that they will become the new LinkedIn

  • While I see what you are seeing, I think people will just move to the next startup.

    Also by Occam’s razor, don’t explain with malice what you can explain with stupidity

  • Regev then told the crowd, “Part of the privilege of working in a company, which represents democratic values is giving the stage for different opinions.”

    Followed by:

    A Google spokesperson said the employee was fired

    Do I miss any logical step or a managing director just said that Google doesn’t represent democratic values? 🤔🤔

  • Problem is the amount of money in the fine. The fine is up to 10% of the global turnover for the first time (that is relevant). But if they get 1% they may just try in keeping in playing chicken with the EU

    I don’t think the EU will be fine with this because it would be a precedent for every other big company for all future regulations

  • Except if the severance package is BS and they don’t find enough volunteers (but hey! They tried!) and people get volunteered

  • Like what? They have servers in Switzerland, they seem competent.

    Anything that is based in the US is not privacy friendly by law (at least for not-US citizens, see why US will never be an equivalent country for GDPR)

    Anything that is implemented/maintained by incompetent is not privacy friendly by NSA/hackers/you name it

  • At least in Europe, passengers jets are new because more fuel efficient at the "normal" speed. These old jets are then transformed in cargo where they go very slow so fuel efficiency goes up by other means (and the old jet is way cheaper).

    This was a passenger plane so i doubt it was anywhere close to 50 years old

  • This! Encrypt at rest with the key handed off to the provider every single time you login is just a PR stunt

  • Here we are talking of very debatable definitions of “making sense” tbh

  • That's called science... You know the thing that you publish on scientific paper. Nothing to do with lobbying... You know... Giving "donations"

  • If you stop putting fuel in your car, the first few miles are very cheap i must say....

  • I hear the general sentiment against billionaire and corporations but from game theory point of view what they are doing is the rational behavior.

    The problem is not them doing this, the problem is that the system (judiciary system in this case) is not neutral as it is supposed to be.

    The problem, though, is that it's short sighted. If the workers are abused less and less business opportunities there are. In other words on the short term the corporations win, on the long term everyone loses.

    A single billionaire, overall, can spend less than 1000 millionaires that can spend less than 10 ppl that make 100k/y

  • My first not embedded OS! Actually not... It wasn't the hipster "warp"... Boy i am old 😅

  • There is a net effect in browsers and in rendering engines especially.

    The more people use chrome engine (that is pretty much everyone except Firefox) the more web developers support only Chrome because... Cost/layoffs.

    For this reason i make a point in using only FF (except for websites that already don't work with Geko).

    Monopolies are not good for anyone (especially with current Google attitude)

  • Bobby table, this, buffer overflow... Are all similar in spirit.

    Bobby table is a way for hiding the malicious SQL query after a normal query (in that case after the select with "Bobby" you inject the malicious drop table)

    In this case after the normal email (that normally would serve for both identifying the user and for the mail to send the recovering mail), the attacker sends two mails, the first is fo identifying the user the second to send the recovering mail

    In the case of buffer overflow you inject malicious code after normal(-ish) data

    It's not an XHR attack since for the mail recovery workflow you don't need an authenticated session.

    To be a bit more compassionate to the developers, this is probably some dynamic typing problem. Probably ruby is "smart" into understand that an array can contain strings after all... So an array of strings is as good as a string... But here we go into static vs dynamic typing.... And it's a bit of religious war (fun fact in 2011 i was advocating with Guido Van Rossum in having at least an optional static typing check in Python - at the time the discussion was how to make python faster/compiled - and he was borderline mocking me 😅 and few years after pytypes but still no compilation at horizon 😂)

  • Not the commenter but it seems like the parameters of the HTTP Get/Post weren't protected/checked. The API was likely something like: Email to reset: string(email account to reset) But it accepted something like: [string(email account to reset), string (email to which the reset mail is sent to)]

  • And the cost to own apple hardware (that is not exactly cheap, even 2nd hand)