News for hackers. Stuff that matters.

johnny_b_g

Re:Wells Fargo to Pay $3.7B for Mistreating Customers on Tuesday December 20, 2022 @05:48PM (#34073916)
Gotta love the WF fanbois here upvoting twblalock and downvoting everybody else.

Oh noes! I talked about voting! That troll pvg will no doubt be here in short order to whine about it (in complete violation of the rules too!)

LOL, whatever you say Japetto!
> "When you apply for a mortgage you are informed in advance that it might be sold. In fact, when I got mine I was told it would be sold. This information is given to every applicant as a legal requirement and people who don't like it don't need to go through with the application."

Ah yes, the good ol' American practice of victim blaming: "Well, we specifically told you we'd screw you over; look, it's in paragraph 151, subsection 15, article G of the document you signed as we hovered over you impatiently that time you came in when we didn't tell you we were closing 10 mins after that appointment we setup the day before the deadline to sign... so it's really YOUR fault!"

> "What about the 268,000 employees who work at Wells Fargo, 99% of whom had nothing to do with this?"

Boo-fukken-hoo. They were all part of the problem - the grease of the machinery if you will; something this bad doesn't go unnoticed by so many people. This was clearly an "inside job" with many, many people involved internally.

I would have no sympathy for any of them, even if they'd end up losing their own homes as a result (sweet, sweet irony that would be!)

Again, the whole work vs. personal networks isn't what's really relevant here - it's the auto-joining of synced in Wifi network(s) from other devices that's the real issue (see my other post(s) here for an example).
While the OP is referring to a "work" machine, I feel their setup is besides the point - it's the fact that it's auto-joining a synced-in Wifi that's the issue...

Essentially, what happened to me is that on my iOS device I was setting up an IoT device (which, similar to the OP, I keep IoT stuff on a different network segment), which you can only do so via an app, by joining an 'ad-hoc' network created by the IoT device. And that's where all that began; the sequence of events:

1. joined the IoT's Wifi network from my iOS device to set it up; doing this records that Wifi connection in iOS, and the default is that 'auto-join' is enabled by default for newly joined networks

2. this new Wifi network is synced to my Mac(s) since I have iCloud Keychain sync enabled

3. Later on, my Mac lost its primary network connection (from router reboot, or other event, etc.); Mac goes "Hmm, network down. Oooh! There's this other Wifi that's available, lemme join that one automatically!"

4. Me later, after noticing my internet doesn't seem to work on my mac, even though it shows having a network connection: "WTF is this connected to that network?!? I don't want anything else connecting to that!!"

So essentially my mac(s) joined a new network not meant for them, automatically, without my explicit action. That potentially opens it up to security issues of the IoT device because of this auto-join it does behind one's back.

While it could be said that the user shouldn't be mixing a "home" keychain (iCloud) account on a "work" machine, perhaps their work have a BYOD policy, and/or perhaps a policy of using Keychain for work-related password storage, and since iOS doesn't allow the use of multiple user accounts even on their so-called "Pro" devices (hello, Apple? It's 2022!) maybe they don't really have a choice.

But I think that whole argument is beside the point, because the real issues as pointed out are:

- one network used on one device shouldn't necessarily mean that it's suitable for *all* the user's devices [1]

- but more importantly: syncing of Wifi network should only be a convenience; actually connecting to a synced-in Wifi network should only happen by explicit user action, and the 'auto-join' feature should never, ever sync across devices (it should only ever be a device-specific setting), defaulted to off when synced in via iCloud Keychain sync. [2]

That second point is what I also believe to be a security risk.

[1] https://twitter.com/MCSeb/status/1590722905876619265

[2] https://twitter.com/MCSeb/status/1590723613824806912 (though I think OP misunderstood the System Preferences settings on 'auto join')

I got bit by this myself not too long ago; glad to see it getting some traction from someone at Apple, even though it's from the totally wrong department.
> “RTA” is against HN’s guidelines.

lol but reposting half an article as a comment is[1]? boy the rules on this site are more complex than the constitution!

1 https://news.ycombinator.com/item?id=33585957

Re:Show HN: Stable Diffusion print-on-demand apparel on Sunday November 06, 2022 @11:43AM (#33494434)
As opposed to pulling this sh!t? https://news.ycombinator.com/item?id=33494109
Re:Context to Twitter's 2023 advertisers issues on Sunday November 06, 2022 @11:06AM (#33494027)
So quit making posts whining about it and flag them instead. GAWD!
Re:Context to Twitter's 2023 advertisers issues on Sunday November 06, 2022 @10:58AM (#33493934)
Indeed - pvg is clearly one of HN's biggest trolls/hypocrites, but thinks because having >11000 karma the rules don't apply to them.
Re:Typing the Technical Interview on Wednesday November 02, 2022 @06:05PM (#33443560)
That's rich coming from a known repeat troll. You must be a Republiturd.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...

>How does one challenge a patent?

With massive amounts of money, since the PTO has made it impossible for the system to actually be fair.

For me, on a Mac, I consider Safari dead in the water ever since they crippled its extension support, so that's a no-go.

Chrome is made by whom I consider a privacy rapist, so I refuse to use that. As for any Chromium derivatives - well, given its origins, I consider them tainted, so no-go as well on those.

That leaves only Firefox, which to me is quite capable and fast, and I really have no issues using it.

I do think governments should look closely at Chrome's monopoly, since it's Google's (or Alphabet, or whatever name-du-jour) power play in vertical integration/takeover for its own advantage, and way to crush competition.

Re:The technological case against Bitcoin and blockchain on Tuesday March 08, 2022 @12:24AM (#30596724)
I said some inflation is fine (ie. normal/expected) except hyper inflation/deflation.
Re:The technological case against Bitcoin and blockchain on Tuesday March 08, 2022 @12:23AM (#30596716)
This totally ignores the greediness in capitalism, which cryptocurrencies exemplifies (there's no problems they actually solve, except the problem of how to make the rich richer)
Re:The technological case against Bitcoin and blockchain on Monday March 07, 2022 @10:39PM (#30596188)
>The itch.io response here is uniquely abrasive in the field

"Uniquely abrasive"?? I see you haven't seen all the trash-talking from the Laser-Eyed bros in Twitter.

Re:The technological case against Bitcoin and blockchain on Monday March 07, 2022 @10:36PM (#30596162)
>what problem Bitcoin solves (inflation).

Some inflation is fine (some would argue has some value/purpose) - what you don't want is too much inflation, or deflation ("hyper"). But I doubt any cryptocurrencies can truly solve it (Bitcoin least of all).

But what I find fascinating, especially from the Bitcoin crowd, is how they trash all fiat currencies ("because inflation!!"), but still use fiat to compare/set the price of Bitcoin.

Basically, without fiat to give it value, their precious Bitcoin is worthless.

Re:Elon Musk now says we need more oil and gas on Saturday March 05, 2022 @08:40PM (#30574126)
Does anybody actually listen to these Bitcoin Pushers anymore??
> So: > > - you still haven't said what exactly you're missing from Safari to consider that it "properly supports PWAs"

You've been repeatedly given answers, but you have decided to dismiss them because you decided they're somehow irrelevant, just like I suspect the people at Apple will dismiss any valid criticisms of Safari, and only listen to the gushing Apple fanboys that claim Safari is all rainbows and unicorns.

> - you clearly ignore what I write

"The hypocrisy is strong with this one" -Yoda

> At this point I'm no longer interested in this one-sided conversation

... aaaand that's how a fantroll ends a conversation he's losing.

Exactly.

I'm not a Facebook user, mostly because of the vast and repeated privacy violations they've committed in the past (not to mention their monopoly behaviors and political influencing, etc.) - but because I don't run/own/fund any similar monopolistic entity, I'm essentially forbidden from even talking about it??

Another is ClearView AI (oh look, another Thiel-funded thing!) - I oppose the existence of that company based on their entire business model being the abuse of people's information without consent, and how they expect you to cancel yourself to prevent being abused by them [1]. But according to some people [2], anyone that hasn't been abusing people's privacy cannot have an opinion on ClearView AI's actions [3], until you actually do so yourself [4], otherwise you're just "posturing" [4][5].

Yeah, great logic!

> They worship them, to put it simply - the rich and powerful - and they don't understand & can't process that not everyone else does.

What's worse are the ones that go out of their way to justify or even apologize their behavior (not unlike those part of a certain political cult right now).

[1] https://app.clearview.ai/privacy/deindex

[2] https://news.ycombinator.com/user?id=Kranar

[3] https://news.ycombinator.com/item?id=29858726

[4] https://news.ycombinator.com/item?id=29858764

[5] https://news.ycombinator.com/item?id=29858663

Indeed - apparently my Trump bashing was "unqualified", so I now have to go and run for President, get elected, be President for 4 years, and then I can start bashing him.
Ah I missed that - thank you!
Any hosting offerings?

I like that it's OSS, and obviously many will like the option to self-host, however some like to also have the choice of it being hosted (mainly for ease of management/security) - this usually also offers a revenue stream for the project.

Quickly looking at it, seems like it would work out better than Confluence, which we've been using, but found it (Confluence) to be slow to fix/implement features.

As opposed to posting an opinion as a "comment" to try to get that last word?
Re:Twitter suspends account tracking Maxwell trial on Wednesday December 08, 2021 @06:10PM (#29491778)
That's not even a relevant question - the excuse given by Twitter was "the account was “artificially” amplifying information" not "bots were 'artificially' amplifying the account"
Re:Ask HN: When is Apple's EV going to be released? on Monday September 06, 2021 @08:59PM (#28439723)
> Dell sells like 30 different laptops. Apple sells 3.

So Dell offers 30 different choices in price/feature ranges, from lowest to highest. Apple only offers at most 3 - likely all in the more expensive range.

Kinda fits and confirms the "telling you want you want" mentioned above.

Older »