jjluoma
jjluoma on Hacker News
How does the course-swapping site work? Is there some part that requires users to enter their credentials (email, password) on a web site that is not operated by the university? Is there some part that saves an access token or a refresh token in other place than the web browser?
Is some OAuth2 authentication flow involved so that the university has registered the application and assigned a client id and return URI?
I think the university might have valid security concerns if the application somehow accesses student accounts without valid OAuth2 authorization flow (or equivalent).
Entering login credentials for university on a third-party site is probably forbidden by terms of service for the university site.
What about the gut bacteria? No gut bacteria, no worm?
I would like to know more about those insurances, have they bought new ones? If so, are those really going to cover anything at all they would like to be covered? If there has been negligence, breach of duty or breach of trust in the past, why would a new insurance cover those?
If only the task that the estimate is for would not change much after the estimate has been given.
I didn't sign a work contract because it was written in English and there was no translation available, especially since it contained a non-standard clause related to intellectual property rights. All communication before signing the contract had been in my native language.
At least they removed something that had been deprecated
ERROR: gcloud failed to load: module 'collections' has no attribute 'Mapping'
I would try to use zstd for compression before exploring other options. It is much faster than gzip.
Google provides two alternatives for age verification, a credit card payment and sending an electronic copy of a valid government issued ID.
This explanation seems to be quite terse, "If you use a credit card, any temporary authorization will be fully refunded. If you use an ID, Google will delete the image after verifying your age."
Both methods would require me to provide them (or some other entity) new personal data. In the case of credit card payment, credit card number (and thus what bank I am using, maybe also what kind of card I have) and my home address.
My government issued ID has also other information like a photo of me, my signature, social security number, all my given names and card number. I wonder if they would accept an electronic copy that would have all those covered.
2-step verification can be turned on by going to
https://myaccount.google.com/ and selecting security and then "Signing in to Google". The "2-step verification" finally leads to the point where phone number is asked for enabling SMS based verification. Only after enabling SMS based verification it is possible to enable Authenticator App (TOTP) or some other options.
At least I couldn't find other way to enable TOTP i.e. first SMS.
I'm assuming you are a consumer since consumer protection organisations were mentioned.
I would start by sending a GDPR subject data request for any personal data they have. There is a definite time limit for the response time. In case of inaccurate data, then there is right to rectification.
If there is no appropriate receipt for the 1200 EUR charge showing value added taxes charged I would ask for the receipt. Some tax agency might be interested if there is no such receipt.
I wonder how many of the fake orders could have been cancelled by the restaurants themselves if they had tried to verify the phone number of the new customer (new phone number and/or address). Maybe an SMS for verification (fails in case of SIM-swapping) or pre-payment in case of a new customer. Assuming that there are viable methods for pre-payments.
I think if they choose to avoid any kind of verification of contact information they don't have good reason to complain in cases like this.
What about General Data Protection Regulation and anonymization? My source code files usually start with copyright notice with my name and email address followed by a reference to the license. In this case anonymization may be against my interests and rights.
Maybe they have a stronger position because they own GitHub. There is at least "Release and Indemnification" section in the terms of service.
This kind of comment, "co-pilot can write 90% of the code without me, just translating my explanation into python", about copilot troubles me. If the code has been mostly produced by co-pilot, does an user of copilot have sufficient grounds to to claim being the author and assert rights based on copyright? Globally?
The same dog was used in all occasions: 1) sniffing of the clothes 2) around the house 3) inside the house 4) sniffing the truck.
I would question if the dog was essentially trained to recognize the smell of the suspect, and if so, did the dog really indicate it was smelling odors from a dead body or the odors from the suspect.
Also, only clothes of the suspect from an evidence room? Only one truck?
This project might be interesting, except that there is no license specified. Thus unusable.
At least zoom has privacy statement / policy page available on their web site unlike threatspike.com
I find this a little bit funny,
> I was extremely suspicious of the EXISTS optimization, since it changes the logic to exit early.
Does this this mean that if one has found an answer, it is somehow sensible thing not to return the answer right away?
Is this 'invert a binary tree' really nothing but a simple puzzle, solved by swapping left and right children? There are probably better examples then this case.