News for hackers. Stuff that matters.

eyeareque

Re:Google is killing first and second gen Nest Thermostats on Wednesday August 27, 2025 @04:31PM (#45044809)
I agree. It would be nice if you could self host your own api, and keep these things from turning into useless hockey pucks
Doesn’t the price end up being the same if you factor in tips with Lyft?
Did anyone find the fine print on what you agree to when you use their service? I am not surprised whatsoever.
Re:Docker Apology on Thursday March 16, 2023 @04:06PM (#35187659)
I’m guessing they did this change because the cost of giving a free service isn’t cheap for docker?
Does this mean the vote that was made will be over turned? (If it turned out a single vote passed it)
Re:Macwright.com redirects HN readers away on Friday September 16, 2022 @12:19AM (#32862017)
I recommend posting the articles as you intended to. You’ll never make everyone happy anyway.
This seemed promising but it doesn’t look like it had any traction https://www.rfc-editor.org/rfc/rfc8471
Does this passwordless future still involve getting a cookie in your browser that can be stolen and used from an attackers machine? If so, we still have a problem to fix.
I get the 1984 vibe this has.

How should companies defend themselves from insider threats?

Re:Ubiquiti vs. Krebs on Thursday March 31, 2022 @11:36AM (#30868379)
Suing a journalist is not a good look. I wonder what other vendors out there will take up some market share from them after this nonsense is over. Hopefully this in the end this turns into a net positive for Krebs.
Re:Updated Okta Statement on Lapsus$ on Tuesday March 22, 2022 @02:30PM (#30769669)
It feels like a lawyer heavily tweaked this to sound better than it really is.
Re:Toll signs on 101 report your transponder setting on Thursday March 10, 2022 @10:10PM (#30635662)
I am curious what happens if you modify the transponder to send something other than 1,2,3?
Re:SSH Bastion Host Best Practices on Thursday January 13, 2022 @06:42PM (#29928617)
Maybe I missed it but did they cover logging all keystrokes entered by users over the bastion? (In the case where you need to log into it first vs merely doing port forwarding)
It’s the other side of allowing a free market. Companies will do whatever it takes to make more and more money.
Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @12:10PM (#29841664)
I have no clue. Spread awareness and contact your senator?
Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @12:08PM (#29841647)
None that I can see.
Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @06:54AM (#29838037)
When I looked mine up I could see just about every job I’ve ever had. It also showed who pulled this report over the past 24 months. I see that my credit card companies pulled it, a background check company that my current job used, and also some random “TEST Batch Account” whatever that is.

SSN + DOB and you can find out how much money I made on my w2 for many years of my life. Nice.

I am debating on doing a ccpa delete on this data. I wonder if future employers will give me a hard time when negotiating pay if they can’t verify my salary this way? Also, will I have to delete it every time that an employer sends them this data? Awesome.

Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @06:15AM (#29837776)
There is already the blind app and also levels.fyi
Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @01:11AM (#29835600)
It’s hilarious that companies try to stop you from discussing your salary but at the same time they will give it away for free to a shady company.
Re:Tell HN: Salary data is for sale on Friday January 07, 2022 @12:10AM (#29835222)
How is this even legal? How do we make this no longer possible? It seems like we need a new law to stop this unapproved sharing.

Did we ever agree to this?

They updated the law: you have to go through at least one interview before they are forced to share it.
Re:Demystifying USB-C and Thunderbolt Docks (2017) on Wednesday December 08, 2021 @12:09AM (#29481459)
I’ve had a super old DVD player connect to the internet over an hdmi cable to my blue ray/surround sound system device that had Ethernet connected. It used the connection to patch itself, didn’t even ask if I wanted to.
Re:Stripe hiring issues make some lose job offers on Thursday December 02, 2021 @03:06AM (#29413661)
If nothing else, reject stripe offers to avoid this one year grant scam. It decreases your potential upside, and saves them money, lowering your earning potential vastly. Some companies who do this argue it will protect you from downside. But you know what else does? Getting a new offer elsewhere (with signing bonus).

I have over heard that snap, lyft, coinbase, and stripe are doing one year grants. Avoid them like the plague!

If they ban you does this mean that they stop tracking you and saving data about you? Sounds like a win.
Their source of salaries is Glassdoor which seems to be focused on base salary alone.

They should have used levels.io for a better source. It includes bonus and rsu.

Their source of salaries is Glassdoor which seems to be focused on base salary alone.

They should have used levels.io

Re:Google launches new vulnerability reward platform on Tuesday July 27, 2021 @10:40PM (#27979781)
So much this. It’s insanely annoying when they say something isn’t a risk and then they fix it shortly after. Google should improve this problem over new webpages.

Older »