News for hackers. Stuff that matters.

jjluoma

Re:I had to take down my course-swapping site or be expelled on Thursday January 09, 2025 @02:08AM (#42642485)
How does the course-swapping site work? Is there some part that requires users to enter their credentials (email, password) on a web site that is not operated by the university? Is there some part that saves an access token or a refresh token in other place than the web browser?

Is some OAuth2 authentication flow involved so that the university has registered the application and assigned a client id and return URI?

I think the university might have valid security concerns if the application somehow accesses student accounts without valid OAuth2 authorization flow (or equivalent).

Entering login credentials for university on a third-party site is probably forbidden by terms of service for the university site.

Re:Why Darwin Admired the Humble Earthworm on Tuesday August 15, 2023 @06:40PM (#37140213)
What about the gut bacteria? No gut bacteria, no worm?
Re:Mariadb.com is dead, long live MariaDB.org on Thursday April 06, 2023 @03:03PM (#35472890)
I would like to know more about those insurances, have they bought new ones? If so, are those really going to cover anything at all they would like to be covered? If there has been negligence, breach of duty or breach of trust in the past, why would a new insurance cover those?
Re:Why are developers expected to estimate tasks at all? on Sunday March 26, 2023 @02:15PM (#35317584)
If only the task that the estimate is for would not change much after the estimate has been given.
Re:Contracts you should never sign on Friday January 27, 2023 @07:41AM (#34545346)
I didn't sign a work contract because it was written in English and there was no translation available, especially since it contained a non-standard clause related to intellectual property rights. All communication before signing the contract had been in my native language.
Re:Python 2 Removed from Debian on Tuesday January 03, 2023 @03:11AM (#34229092)
At least they removed something that had been deprecated

  ERROR: gcloud failed to load: module 'collections' has no attribute 'Mapping'
Re:Creating a modifiable gzipped disk image on Sunday December 04, 2022 @07:14AM (#33852974)
I would try to use zstd for compression before exploring other options. It is much faster than gzip.
Google provides two alternatives for age verification, a credit card payment and sending an electronic copy of a valid government issued ID.

This explanation seems to be quite terse, "If you use a credit card, any temporary authorization will be fully refunded. If you use an ID, Google will delete the image after verifying your age."

Both methods would require me to provide them (or some other entity) new personal data. In the case of credit card payment, credit card number (and thus what bank I am using, maybe also what kind of card I have) and my home address.

My government issued ID has also other information like a photo of me, my signature, social security number, all my given names and card number. I wonder if they would accept an electronic copy that would have all those covered.

2-step verification can be turned on by going to https://myaccount.google.com/ and selecting security and then "Signing in to Google". The "2-step verification" finally leads to the point where phone number is asked for enabling SMS based verification. Only after enabling SMS based verification it is possible to enable Authenticator App (TOTP) or some other options.

At least I couldn't find other way to enable TOTP i.e. first SMS.

I'm assuming you are a consumer since consumer protection organisations were mentioned.

I would start by sending a GDPR subject data request for any personal data they have. There is a definite time limit for the response time. In case of inaccurate data, then there is right to rectification.

If there is no appropriate receipt for the 1200 EUR charge showing value added taxes charged I would ask for the receipt. Some tax agency might be interested if there is no such receipt.

I wonder how many of the fake orders could have been cancelled by the restaurants themselves if they had tried to verify the phone number of the new customer (new phone number and/or address). Maybe an SMS for verification (fails in case of SIM-swapping) or pre-payment in case of a new customer. Assuming that there are viable methods for pre-payments.

I think if they choose to avoid any kind of verification of contact information they don't have good reason to complain in cases like this.

What about General Data Protection Regulation and anonymization? My source code files usually start with copyright notice with my name and email address followed by a reference to the license. In this case anonymization may be against my interests and rights.
Re:GitHub Copilot is generally available on Saturday June 25, 2022 @07:26AM (#31874339)
Maybe they have a stronger position because they own GitHub. There is at least "Release and Indemnification" section in the terms of service.
This kind of comment, "co-pilot can write 90% of the code without me, just translating my explanation into python", about copilot troubles me. If the code has been mostly produced by co-pilot, does an user of copilot have sufficient grounds to to claim being the author and assert rights based on copyright? Globally?
The same dog was used in all occasions: 1) sniffing of the clothes 2) around the house 3) inside the house 4) sniffing the truck.

I would question if the dog was essentially trained to recognize the smell of the suspect, and if so, did the dog really indicate it was smelling odors from a dead body or the odors from the suspect.

Also, only clothes of the suspect from an evidence room? Only one truck?

Re:Hunting down a C memory leak in a Go program on Saturday October 16, 2021 @09:04AM (#28887586)
I wonder if statistics provided by librdkafka (available also with confluent-kafka-go) could have been used to solve the issue with less effort.

https://github.com/edenhill/librdkafka/blob/master/STATISTIC...

Re:Pylo: Python front-end for several Prolog engines on Tuesday October 20, 2020 @01:27PM (#24840080)
This project might be interesting, except that there is no license specified. Thus unusable.
Re:Zoom still don't understand GDPR on Thursday August 27, 2020 @10:25PM (#24300813)
At least zoom has privacy statement / policy page available on their web site unlike threatspike.com
Re:A Tale of Query Optimization on Sunday May 19, 2019 @06:21PM (#19955901)
I find this a little bit funny,

> I was extremely suspicious of the EXISTS optimization, since it changes the logic to exit early.

Does this this mean that if one has found an answer, it is somehow sensible thing not to return the answer right away?

I hope she is aware of other ways of fixing knitting mistakes given here https://knitom.com/fix-knitting-mistakes-stress-free/ (or google for 'knit ladder down').
Re:Senior Developers Are Getting Rejected for Jobs on Wednesday May 15, 2019 @11:36AM (#19920445)
Is this 'invert a binary tree' really nothing but a simple puzzle, solved by swapping left and right children? There are probably better examples then this case.