News for hackers. Stuff that matters.
Re:Ask HN: Who is hiring? (August 2019) by ryacko on Thursday August 01, 2019 @12:56PM (#20585788)
This is free security advice, have separate accounts for various public and private facing communications channels.

By saying “your DM might get buried under the avalanche of work-related DMs by Monday” indicates an interesting combination of awareness and a lack of awareness that I find both baffling and too common.

Re:Ask HN: Who is hiring? (August 2019) by dang on Thursday August 01, 2019 @02:23PM (#20586716)
Please don't do this here—it's against the rules at the top of the thread.

We detached this subthread from https://news.ycombinator.com/item?id=20585666 and marked it off-topic.

Re:Ask HN: Who is hiring? (August 2019) by ryacko on Thursday August 01, 2019 @04:40PM (#20588125)
I apologize, it was the only way to bring it to the person’s attention, and after a few incidents, I don’t use Discord’s service anymore.
Re:Ask HN: Who is hiring? (August 2019) by euphidime on Thursday August 01, 2019 @01:07PM (#20585919)
I'm not really sure how to respond to this since you're not providing any specific rationale for your arguments. I think you may want to review https://news.ycombinator.com/newsguidelines.html if you haven't read it in a while.

I'll assume good faith and respond to what I think your argument probably is: Maintaining separate accounts just to prevent phishing is basically security through obscurity. All you're doing is adding some level of implicit trust to messages you receive on your "work account", which isn't actually secret and can probably be discovered by a sufficiently motivated person.

Re:Ask HN: Who is hiring? (August 2019) by ryacko on Thursday August 01, 2019 @01:12PM (#20585985)
I am making no argument, but I will now.

He is openly admitting to being vulnerable to a type of denial of service attack. If he is flooded with communications, he would be delayed in reading other important communications.

I do not advocate security through obscurity, which is security theatre. I also think Discord should open source how various systems operate, particularly law enforcement interfaces, as I do not believe law enforcement are any better.