News for hackers. Stuff that matters.
Re:Epic Games announces Lore version control system by MrDresden on Wednesday June 17, 2026 @11:58AM (#48572305)
I once worked in a git repository that required those kinds of restrictions.

This was within a bank and the code in question was related to enabling Apple Pay from within the banking application. The consequences of that information and code leaking or being seen by anyone who had not signed the NDA were very serious (don't remember the details but it made the lawyers were extremely stressed about it).

Needing to figure out a way to protect those parts of the codebase it was decided in the end that the "easiest" way of doing this was to split the repository in half, with the actual artifact building taking place from the half that had the NDA code. The rest of the application (basically the whole application) was then used as a dependency by it.

Still didn't quite solve the issue, but access to that repository was heavily controlled.

Re:Epic Games announces Lore version control system by SoftTalker on Wednesday June 17, 2026 @12:19PM (#48572631)
Strikes me as bizarre that payment code would be sensitive, unless it's a security by obscurity thing (which would also be concerning).

Keys, secrets, etc. yes. But code? What am I missing here?

Re:Epic Games announces Lore version control system by danudey on Wednesday June 17, 2026 @12:46PM (#48573038)
As others have said, it's Apple and they do not take kindly to other people leaking their technology/announcements ahead of time.

See also: the time that ATI's CEO told his employees that their chips would be powering Apple's to-be-announced hardware a few days before the announcement. Steve Jobs responded by pulling all of ATI's hardware from its demo units at the announcement, not mentioning ATI at all, cancelling a joint demonstration of the Radeon card that was going to be in the system, and never partnering with ATI again.

https://web.archive.org/web/20001216031800/https://www.zdnet...

Re:Epic Games announces Lore version control system by gouggoug on Wednesday June 17, 2026 @02:08PM (#48574282)
From the linked article, it was a press release, not just to his employees.

> The incident began Monday when ATI, which supplies graphics cards for all Apple's current models, issued a four-paragraph news release that stated its Radeon processor would be featured in three new Mac models -- none of which were announced by Apple (Nasdaq: AAPL) until CEO Steve Jobs' Wednesday morning keynote address.

Re:Epic Games announces Lore version control system by danudey on Wednesday June 17, 2026 @03:53PM (#48575927)
Oh, I misremembered then. Yikes.
Re:Epic Games announces Lore version control system by ifh-hn on Wednesday June 17, 2026 @01:29PM (#48573680)
Sounds like a bit of a dick...
Re:Epic Games announces Lore version control system by rib3ye on Wednesday June 17, 2026 @03:06PM (#48575210)
Going scorched earth was kind of Steve’s thing.
Re:Epic Games announces Lore version control system by yonatan8070 on Wednesday June 17, 2026 @02:01PM (#48574181)
One word: "Courage"
Re:Epic Games announces Lore version control system by ifh-hn on Wednesday June 17, 2026 @03:09PM (#48575258)
Not sure I understand? Sounds like a temper tantrum to me.
Re:Epic Games announces Lore version control system by kenferry on Wednesday June 17, 2026 @03:52PM (#48575914)
Inside joke. Apple's marketing guy used the word "courage" as an explanation when removing the headphone jack.
Re:Epic Games announces Lore version control system by LPisGood on Wednesday June 17, 2026 @07:06PM (#48578271)
That decision had a lot of detractors at the time, but it ultimately seems to have been correct.
Re:Epic Games announces Lore version control system by _carbyau_ on Wednesday June 17, 2026 @08:18PM (#48578855)
It still has a lot of detractors but it is hard to beat such a sheer market flex.
Re:Epic Games announces Lore version control system by m463 on Wednesday June 17, 2026 @08:59PM (#48579189)
I don't know if I agree.

People who moved to bluetooth got arguably worse sound quality.

For wired headphones, there were very few lightning headphones and they mostly sucked.

Now with usb-c you can get a broader range of headphones (because other phones have gone with usb-c).

either kind needs a dac inside the dongle, or the shell of the headphone, or have a bulky external dac.

3.5mm is still king for decent wired headphones/earbuds.

Re:Epic Games announces Lore version control system by jianfenglin on Wednesday June 17, 2026 @10:34PM (#48579940)
Most people don't like wire and don't care about genuinely good sound through wire vs. artificially sweetened (DSP-ed) sound through Bluetooth. That's what Apple is targeting at, the mass consumer.
Re:Epic Games announces Lore version control system by d3Xt3r on Thursday June 18, 2026 @04:43PM (#48591273)
Wired headphones are making a comeback though. They're even considered trendy/fashionable now.

https://www.cnn.com/world/wired-headphones-comeback-spc

https://mashable.com/article/wired-headphones-instagram-acco...

Re:Epic Games announces Lore version control system by Shorel on Friday June 19, 2026 @01:14PM (#48600728)
Honestly that "most people" seems to be more marketing driven than real opinion.

When you simply can't purchase one thing, then you move to the next thing.

I have several wired and wireless headphones, all for different uses, and the existence of wireless headphones don't make the wired ones less useful for their particular strenghts.

Re:Epic Games announces Lore version control system by Shorel on Friday June 19, 2026 @01:10PM (#48600695)
It was wrong then, it is still wrong now.

All my three phones have a headphone jack.

I don't have or plan to have an iPhone.

Re:Epic Games announces Lore version control system by RajX-dev on Wednesday June 17, 2026 @09:52PM (#48579585)
lol
Re:Epic Games announces Lore version control system by MoonWalk on Wednesday June 17, 2026 @06:19PM (#48577742)
Four words: You're holding it wrong.
Re:Epic Games announces Lore version control system by paulddraper on Wednesday June 17, 2026 @02:19PM (#48574455)
They unilaterally issued a press release about Apple's upcoming release.

That's kinda a no-no for partnerships.

Re:Epic Games announces Lore version control system by MoonWalk on Wednesday June 17, 2026 @06:14PM (#48577696)
He was, but this incident wasn't an example. That's a righteous punishment for an infraction like that.
Re:Epic Games announces Lore version control system by therealpygon on Wednesday June 17, 2026 @07:33PM (#48578511)
For violating an embargo and publishing a press release announcing products of another company that hadn’t been debuted? What “non-dick” response do you think is appropriate against a prospective partner that violated clear guidelines that defined their partnership which basically included “#1: Keep your mouth shut”, exactly?
Re:Epic Games announces Lore version control system by kazinator on Wednesday June 17, 2026 @10:51PM (#48580119)
I believe that the action does reflect Jobs' ego in the following way.

Namely, his belief that CEO == company.

Jobs would never take the view that the action of the CEO of ATI is actually one bad actor acting alone which doesn't represent what ATI wants as an organization, and is unfair and damaging to that organization and all of its employees.

The reason he would not take that view is because then he would not be able to believe that he is the single most important thing at Apple, overshadowing everything else.

If the leak had been the responsibility of some rank and file employee at ATI, with appropriate action taken against that employee by the ATI CEO, it is likely that Jobs would likely have reacted differently, because it then would not longer be seen as a personal matter between him and the CEO, where the corporations are just pawns in a game of teach-you-a-lesson.

Re:Epic Games announces Lore version control system by Hendrikto on Thursday June 18, 2026 @02:27AM (#48581513)
Ultimately, it is the CEO who has to take responsibility. They are the chief executive officer, after all. And they are well compensated for it.
Re:Epic Games announces Lore version control system by kazinator on Friday June 19, 2026 @11:37AM (#48599825)
But did you notice how this was backwards: the company taking responsibility for the CEO's actions, in the court presided by Jobs.
Re:Epic Games announces Lore version control system by formerly_proven on Wednesday June 17, 2026 @01:27PM (#48573653)
> and never partnering with ATI again.

Except of course shipping ATI hardware for years afterwards, then also using nvidia, then dropping nvidia and only using ATI/AMD until transitioning to Apple Silicon.

Re:Epic Games announces Lore version control system by danudey on Wednesday June 17, 2026 @03:56PM (#48575957)
Well:

1. They kept existing designs, since even Jobs wasn't so crazy as to demand a complete re-architecture of existing laptop models on a whim; plus they probably also had contractual obligations/pre-purchase arrangements

2. They switched to nvidia, but from everything I know they also hated working with nvidia (IIRC Jobs accused nvidia of stealing Pixar tech)

3. AMD is a different company than ATI (technically), and Apple of that era was different than the Steve Jobs temper tantrum era.

But yes, relevant details.

Re:Epic Games announces Lore version control system by NewJazz on Wednesday June 17, 2026 @02:44PM (#48574824)
Also Steve Jobs Apple is probably much different than today's Apple.
Re:Epic Games announces Lore version control system by isodev on Wednesday June 17, 2026 @04:28PM (#48576387)
It’s funny how exciting Apple Pay was when introduced, only Apple pulled the lock-everyone-in card and now we’re all using QRcodes.
Re:Epic Games announces Lore version control system by mixdup on Wednesday June 17, 2026 @06:19PM (#48577746)
In the US you can use Apple Pay anywhere NFC payments are accepted. It's generally completely open on the acceptance side at this point
Re:Epic Games announces Lore version control system by account42 on Thursday June 18, 2026 @05:32AM (#48582961)
It's anywhere close to open and requires vendors to seek approval from Apple for every implementation - Apple just has the market share to make everyone dance to their tune.
Re:Epic Games announces Lore version control system by mixdup on Thursday June 18, 2026 @02:59PM (#48589886)
Apple Pay works on any terminal that supports NFC tap to pay payments. There are thousands, tens of thousands of terminals in the US that are not "Apple Pay" that you can use it on
Re:Epic Games announces Lore version control system by ZekeSulastin on Wednesday June 17, 2026 @05:21PM (#48577099)
I guess the "we" depends strongly on location - I've no problem using Apple Pay basically everywhere except Walmart.
Re:Epic Games announces Lore version control system by MoonWalk on Wednesday June 17, 2026 @06:17PM (#48577722)
No idea what this is referring to...
Re:Epic Games announces Lore version control system by necovek on Thursday June 18, 2026 @03:29AM (#48582020)
Many countries in the world have local systems for quick, direct bank transfers encoded with QR codes to be used by local payment systems or local banking apps.
Re:Epic Games announces Lore version control system by MoonWalk on Tuesday June 23, 2026 @02:04PM (#48648835)
Huh, thanks. I've traveled a decent amount and have never seen this. "We're all using" is a huge overstatement.
Re:Epic Games announces Lore version control system by FabHK on Thursday June 18, 2026 @01:43AM (#48581261)
I'm in HK, most HKers use ApplePay with NFC, and don't use QR codes. Over in mainland China, however, it's all QR codes (with AliPay, WePay).
Re:Epic Games announces Lore version control system by hylaride on Thursday June 18, 2026 @09:20AM (#48584881)
Most developed countries I've been to use NFC/Apple Pay. Where you see the use of QR codes is in China, Africa, and other countries that VISA/MC/AMEX hasn't penetrated (for either political or socioeconomic reasons).
Re:Epic Games announces Lore version control system by NetOpWibby on Wednesday June 17, 2026 @05:45PM (#48577336)
SHEESH
Re:Epic Games announces Lore version control system by kurthr on Wednesday June 17, 2026 @12:25PM (#48572728)
Because it's Apple. They are huge, have scary lawyers, write scary contracts, and want to "delight the user" with features only when they announce them. They hate leaks, and demand separate teams for basically any/all development.
Re:Epic Games announces Lore version control system by HWR_14 on Wednesday June 17, 2026 @03:58PM (#48575986)
The code revealed the existence of Apple Pay, which had not been publicly confirmed.
Re:Epic Games announces Lore version control system by user_of_the_wek on Wednesday June 17, 2026 @01:31PM (#48573722)
It seems this wasn’t about the code itself, it was about Apple Pay not being announced yet. So only people under NDA would be allowed to even know what they are working on.
Re:Epic Games announces Lore version control system by juancn on Wednesday June 17, 2026 @12:23PM (#48572699)
It's kinda like that, there could be a proprietary fraud detection heuristic in there that you don't want to get out.
Re:Epic Games announces Lore version control system by zer00eyz on Wednesday June 17, 2026 @01:03PM (#48573276)
> security by obscurity thing... What am I missing here?

You are looking at the problem from the wrong direction.

If you build a honeypot, to trap hackers, does it behove you to explain what the bait is, and how the trap works?

Know your customer, fraud detection heuristics, finger prints, behavioral triggers are all areas where banks, and financial institutions need to keep the sauce secret. Telling the other party "how" you catch them just gives them the steps of what not to do.

Re:Epic Games announces Lore version control system by necovek on Thursday June 18, 2026 @03:32AM (#48582040)
Alternatively, you can also just try not to have security issues, and resolve them with urgency when they do pop up.
Re:Epic Games announces Lore version control system by hk__2 on Wednesday June 17, 2026 @12:24PM (#48572712)
Maybe that’s some scoring to decide if you should be able to pay or not with some method.
Re:Epic Games announces Lore version control system by arianvanp on Wednesday June 17, 2026 @07:04PM (#48578247)
Yes Apple Pay relies on security through obscurity even today. See the Veritasium recently made a video about it https://youtu.be/PPJ6NJkmDAo?is=iUuJ0W9xUHF_6gTU
Re:Epic Games announces Lore version control system by edoceo on Wednesday June 17, 2026 @10:37PM (#48579974)
There is a bunch of mundane stuff in the banking/finance world masked off by paperwork.

It's not sensitive in the leaking state secrets sense it's sensitive in the risk adverse lawyers on both sides think it's sensitive.

The Bureaucracy exists to perpetuate the Bureaucracy.

Re:Epic Games announces Lore version control system by kazinator on Wednesday June 17, 2026 @10:39PM (#48579997)
The non-strawman version of "security through obscurity" is the belief that a system is secured by means of keeping its mechanisms secret.

Suppose an organization doesn't believe such a thing; it's still more secure to keep code secret than not.

Obscurity is a valid layer of security, just not a valid corner stone or linchpin of security.

In particular, when code operates as a service (end users don't have the executable code on their machines) then protecting the source code is a real security measure. Without it, attackers can only probe the service as a black box, guessing about what it is doing.

Re:Epic Games announces Lore version control system by contingencies on Wednesday June 17, 2026 @01:37PM (#48573809)
Can confirm split repos is an excellent solution for protecting IP.
Re:Epic Games announces Lore version control system by yaur on Wednesday June 17, 2026 @02:44PM (#48574833)
Not sure what it is on the Apple Pay side but with FPLS it is/was basically your keys would be revoked and you would be ineligible to ever get new ones… so no content that requires DRM on iOS for the life of the company.
Re:Epic Games announces Lore version control system by sroussey on Wednesday June 17, 2026 @03:41PM (#48575771)
PCI DSS has various controls for code handling credit card cards which tends to require different workflows for code that touches credit card numbers, from say, marketing pages. So splitting the code into different repos can be quite common.
Re:Epic Games announces Lore version control system by Meneth on Wednesday June 17, 2026 @05:16PM (#48577040)
Banks absolutely love security by obscurity. No clue why.
Re:Epic Games announces Lore version control system by jeremyjh on Wednesday June 17, 2026 @05:26PM (#48577154)
It had nothing to do with security - it had to do with contractual obligations. Contracts with Apple (also Google, Samsung, Mastercard and Visa) required the product to be kept absolutely secret before the public launch. I was a tech lead with developers working on Bank of America’s ATM client - which had firmware and software updates ahead of launch - and I found out about Apple Pay the day it launched. Across the aisle were developers who supported the debit auth platform and they had no idea either.
Re:Epic Games announces Lore version control system by vorticalbox on Wednesday June 17, 2026 @05:29PM (#48577175)
security by only obscurity is bad. Having both is better.

For example say I have a hollowed out wall that is hidden behind a painting.

Just putting my money in the hole is bad once it’s found it’s gone but if I put my money in a safe in the hole. Well now you need to find it and break the safe and a hidden safe is objectively better than just having a safe on the floor because you need to find it first.

Re:Epic Games announces Lore version control system by dessimus on Thursday June 18, 2026 @02:42AM (#48581627)
Sure, if there's many paintings scattered around the house of various sizes, but if there's only one painting, in your office, behind the desk, mounted to cover a safe at standing height, then you might as well hang a neon sign saying "Look Here!" next to it.
Re:Epic Games announces Lore version control system by mvkel on Wednesday June 17, 2026 @05:24PM (#48577136)
It's the most effective kind of security
Re:Epic Games announces Lore version control system by kazinator on Wednesday June 17, 2026 @10:58PM (#48580177)
Banks run a lot of code as a service. Most people never get to see the executable code. If the source code for those services were easily visible to employees that don't need to have access to it or external consultants and such, that would be monumentally stupid.
Re:Epic Games announces Lore version control system by BobbyTables2 on Thursday June 18, 2026 @12:20AM (#48580765)
I assume compiling the payment code as a library (w/o debug symbols) and making that available to the wider group wast allowed? Header files a problem?
Re:Epic Games announces Lore version control system by ryanm101 on Friday June 19, 2026 @08:31AM (#48597837)
Could you not have placed the code in a submodule and likited access to the submodule repo ?