News for hackers. Stuff that matters.

cmcd

Re:A Message to Our Users on Thursday April 02, 2020 @10:58AM (#22759742)
> "We want to start by apologizing for the confusion we have caused by incorrectly suggesting that Zoom meetings were capable of using end-to-end encryption. Zoom has always strived to use encryption to protect content in as many scenarios as possible, and in that spirit, we used the term end-to-end encryption."

Excerpt from their previous release above, only a few hours earlier.

Glad to hear they are starting to make improvements but waiting for public backlash to fix issues is a bad sign.

Re:Tell HN: Zoom truncates passwords to 32 chars on Wednesday April 01, 2020 @11:57AM (#22750056)
You are only storing the hash of the password so there is no reason to have arbitrary length constraints like 32. Why not make it several thousand characters?
> The middle class already pays most of the taxes

I'm not so sure about that. The top 1% pays 37% of federal income taxes. Meanwhile, the bottom 50% paid only 3% and 44% of paid nothing at all. Depending on the source you use the middle class in America is typically considered to top out at incomes between 100k and 122k. In either case the middle class pays less than half of income taxes. Then looking at the bigger picture we see income taxes only account for 60% of all taxes.

Sources: https://taxfoundation.org/summary-latest-federal-income-tax-... https://www.irs.gov/statistics/soi-tax-stats-irs-data-book

Re:Show HN: Pep – Turn Your Website into a Progressive Web App on Thursday February 27, 2020 @02:54PM (#22437109)
An example project using Pep. Most people are going to be skeptical that this can be done with a single line of code.
Re:Mozilla’s DNS over HTTPs on Tuesday February 25, 2020 @12:50PM (#22415327)
I'm not against DOH but there are definitely some downsides. For example, your token does not get reset on network changes. This means your DNS provider can track your DNS requests across networks, including VPNs.

With normal DNS anyone in the request chain can see a stream of DNS requests but there is no context. By the time the request is one or two hops from you it will be interwoven with tens of thousands of other requests making it impossible to know which one came from who.

With DOH the DNS provider will have a unique identifier to correlate requests back to a specific system/user. Google offers one of the most used DNS services, with DOH they will be able to track all DNS requests you make even if you turn on a VPN.

Re:Cloudflare silently deleted my DNS records on Monday February 24, 2020 @03:12PM (#22407944)
I am sure AWS, OCI, GCP, etc. all host scam websites with varying degrees of removal efficiency. What cases are you referring to specifically? Did they state they were not going to take these sites down or what was the context that you object to?
Re:Bloomberg bankrolls a social-media army on Wednesday February 19, 2020 @04:37PM (#22370358)
Pretty sure that is illegal, wouldn't be a major complication to add a metal detector outside voting booths.
Re:“I made an operating system UI within Unity” on Monday February 10, 2020 @03:35PM (#22292980)
Why does MacOS only "sort of" have type-to-search?
If you are living "almost" paycheck to paycheck as a engineer with 200k+ total comp you are doing something seriously wrong.
Re:CS246: Mining Massive Data Sets on Thursday February 06, 2020 @02:55PM (#22259665)
Like what? If you are a high productivity engineer you will have excellent health care through your employer.
I didn't create a twitter account but my information could have been leaked via this process.
Re:Wacom tablets track every app you open on Wednesday February 05, 2020 @10:50AM (#22247805)
A Wacom tablet is not the same as a phone, it is a peripheral. This is like your Dell keyboard tracking your keystrokes and what application they go into.
Hate speech is different from speech inciting violence, which is already illegal in the US.

Hate speech is not well defined, something that would be considered offensive in the Silicon Valley might be considered a compliment in New York.

Restricting hate speech restricts free speech, they are the same issue. You only have to look back a few years to understand why this is important. What we consider acceptable has changed vastly over time, if we don't have the freedom to discuss topics against the status quo we won't progress as a society.
The other question is, what is your cloud provider going to intentionally do with your data without your consent.
I don't think it is that controversial in the US. There is a small, vocal minority that is against free speech but the overwhelming majority of Americans do not see things that way.
What do you mean? Unless you are living paycheck to paycheck stock is just as real as cash.
Re:Captcha.nsa.gov on Monday February 03, 2020 @01:18PM (#22227158)
You think the NSA is phishing from a nsa domain?
Re:The Failure of the iPad on Wednesday January 29, 2020 @09:48AM (#22181059)
These failures apply to every tablet that is not running a full desktop OS. Of these the iPad is far and away the best option currently.
> And do you honestly believe a sandbox would have stopped MS changing the page?

That is how a sandbox works, Microsoft's installer would not be able to access configuration files for Chrome to change the settings.

What do you mean? There is no reason an office suite should be changing configuration for your browser without explicitly asking.
Are there any advantages of using borg over rclone?
Advertising on iOS relies on internet access so toggling it off would mean no ads.
I don't think those numbers really capture the full story since the majority of children rarely or never cycle on the road. I couldn't find a resource for the number of children who regularly cycle on roads, but one of the main reasons children might be doing this is going to and from school. Only 1% of children commute this way. There are certainly other reasons children might cycle on roads, for the sake of argument let's add another 1% for children who regularly ride on roads but do not ride to school. Using your estimate of 40 million children between the age of 5 and 14 that gives us just 800k regular cyclists and a 30.6 child pedestrian deaths per 100k.

https://www.saferoutespartnership.org/media/pressreleases/US...

During the industrial revolution hard labor jobs transitioned to maintenance work for the machines. The problem is as we improve at automation the need for non-technical maintenance decreases.

A small team of engineers can displace thousands or tens of thousands of workers without creating any new opportunities.

Re:If you don't own your OS, you don't own your BTC on Monday January 06, 2020 @09:45AM (#21969444)
It wouldn't have to be Microsoft exploiting this though, a few rogue employees that can modify their telemetry system could do this on their own. There is no external oversight for Windows but on Linux there are thousands of people looking at changes even if you aren't looking yourself.
Re:If you don't own your OS, you don't own your BTC on Monday January 06, 2020 @09:43AM (#21969424)
We already know Windows has some pretty excessive telemetry, it is not unreasonable to assume this or other elements of the OS can be exploited to gain control of a wallet.

At least with Linux we have thousands of open source developers keeping an eye on things, chances are much higher that an issue would be caught with Linux since Windows is closed source.

Just because the institution does not use the data irresponsibly doesn't mean the service provider will not. Not to mention third parties which could potentially gain access to this data directly or indirectly by listening for the check in signal devices send.

Per the article, this is not being used to help the students succeed, instead it is being used to damage their grade for a lack of attendance. I think most reasonable people would agree attendance is not a reliable metric by which to base a students grade. The exception being discussion based or interactive courses like debate or public speaking.

Re:Bill to crack down on robocalls passes Senate on Thursday December 19, 2019 @04:10PM (#21839340)
If you want to move away from phone numbers I don't think Whatsapp is a good place to go..
Re:Rust 1.40 on Thursday December 19, 2019 @03:21PM (#21838836)
A company the size of Facebook probably has teams tinkering with all sorts of languages most companies will never use.

Older »