News for hackers. Stuff that matters.

nde

Re:iCloud Photos is now required for permanent Shared Albums on Thursday October 15, 2026 @07:17PM (#50111703)
>Step 6: In iOS 27, iPadOS 27, or visionOS 27 or later, make sure that iCloud Photos is turned on.

>How iCloud Photos works: iCloud Photos keeps every photo and video you take in iCloud

This effectively forces users to sync their entire camera roll to iCloud just to keep using Shared Albums as before. I understand the need to support full-resolution photos, but that should be opt-in—not a requirement to upload my entire photo library to Apple. Temporary Albums, which automatically delete after 30 days, are not an equivalent replacement.

This is from 2019
Re:iOS 18.3.2 enables Apple Intelligence on Friday March 14, 2025 @07:58AM (#43361762)
Seems to only affect some users. Also, not claiming it was on purpose or with malicious intent. I’m sure it is an unintentional bug.

But, it also goes to show that Apple can tweak your settings at will, ignoring your prior preferences, which I think we can all agree should not happen.

It is also not the first time this happens:

- iOS 18.3 https://arstechnica.com/gadgets/2025/01/ios-18-3-macos-15-3-...

- iOS 17 https://www.bitdefender.com/en-us/blog/hotforsecurity/ios-17...

Re:iOS 18.3.2 enables Apple Intelligence on Friday March 14, 2025 @07:50AM (#43361702)
Based on what I know about it, Apple Intelligence is not inherently bad. I just choose not to use it and purposefully disabled it, so to have it re-enabled automagically by an update feels bad.
Re:iOS 18.3.2 enables Apple Intelligence on Friday March 14, 2025 @07:47AM (#43361689)
Looks like this was previous reported. Only seems to affect some users.

https://www.macrumors.com/2025/03/11/ios-18-3-2-apple-intell...

Re:iOS 18.3.2 enables Apple Intelligence on Friday March 14, 2025 @06:07AM (#43361082)
Updating to the latest iOS, which included a critical security patch, once again enabled my Apple Intelligence. This happened with the last update, someone reported it on HN so I thought to check. Once again, there it was enabled.
Re:Insomnia REST client now requires an account on Wednesday September 27, 2023 @03:59PM (#37680421)
Discussion going on in https://github.com/Kong/insomnia/issues/6577. Unlikely to change anything, though. Time to look at alternatives.
Re:Lastpass Security Incident on Wednesday November 30, 2022 @07:43PM (#33810567)
Is there a better cloud-based alternative to LastPass? I see KeePass being mentioned but I’m not interested in the keeping devices in sync myself.
Re:Tell HN: SMS can be used to bypass Sendgrid’s 2FA on Monday November 07, 2022 @07:28AM (#33504949)
I feel like my biggest peeve with this whole situation revolves around a lack of choice on the user’s end, with (presumably) the goal of hardening security. And, then not doing the research to ensure the choices made are actually the most secure.

The more cynical reason might revolve around getting access to your phone number, but we’ll give the benefit of the doubt and say that’s not the case.

In my opinion, websites offering 2FA should give users a choice to pick between: - Security Key (with Backup Codes you can store offline or SMS) - Authenticator App (with Backup Codes you can store offline or SMS) - SMS - No 2FA

If I want to choose a less secure method for 2FA or backup codes, that should be my choice but clearly communicated.

Tell HN: SMS can be used to bypass Sendgrid’s 2FA

A couple weeks ago, I signed up for Sendgrid to take advantage of their free email service. I always provide as little information as possible when signing up for new services, and I try my best to avoid providing my phone number. Luckily, I was able to get everything set up and maintain some level of privacy doing so.Fast-forward a couple weeks: I go to log in to change one of my templates,...

( Read More... | 9 comments | 3 points | on HN )
We’ve been using Dgraph in production for a few years now.

The project is fine for hobby projects but it is NOT production ready.

Don’t take my word for it, though… I invite you read through some of the issues reported in their discussion forums and to take a look at their Github contributions over the past year.

There was major turmoil in Dgraph Labs (the project’s maintainers) last year which resulted in the CEO and 95% of the engineers exiting the company. They are currently in a rebuilding phase, with limited staff and runway.

There are several critical bugs, which lead to either data loss, data corruption or cluster instability, which the current maintainers have failed to fix. Additionally, their customer support is often either unresponsive or unhelpful (even for paying customers).

Running a Dgraph cluster is expensive, with heavy memory utilization and favoring vertical scaling. If you need scale, then be prepared to spend big.

The documentation is not great and because very few people use this project in production, help is extremely limited.

Best of luck to you should you choose Dgraph and to anyone currently using it already.

Re:I'm nervous and don't know where else to go on Saturday October 15, 2022 @08:19AM (#33214147)
Hello db, I’m sorry you were put in this uncomfortable situation. Ideally, you would have received all the documentation, resources and training necessary to mitigate your feelings of stress. Unfortunately, the reality in our industry is that you’ll often find yourself in these uncomfortable situations. Good news is that you will grow from them.

The propensity to quickly learn and adapt to new situations is a critical skill in IT. Knowing when to apply your skills, however, is also critical. I advise you hone these skill.

Regarding your situation, you have a few options:

1. You can say “No”. It took me a really long time to realize that “No” is a valid (and often necessary) answer. If you don’t feel comfortable or able to take on this task, don’t. You wouldn’t pour gasoline on a forrest fire. Sometimes you are the gasoline and need to know when to say no.

2. As others have pointed out, candidly communicate your feelings around being uncomfortable but willing to take the time to learn. This will show that you are honest, can recognize your short-comings, but are also willing to grow.

3. You can smile, act confident and pray that nothing will go wrong. If things go well, either you’ll be a hero or no one will notice, but if things go wrong… people will notice. There’s a lot of comments here suggesting that being an intern is a get out jail free card… I don’t think it is. Yes, people more senior to you should know better; often they don’t, but you should (if you recognize it) know better and communicate.

Like others, I would recommend documenting your communications with your boss. If they happen over a call or in person, take notes during or promptly after the call.

Ultimately, I think there’s a difference between doing something you “think” you can do and it going wrong, and doing something you’re not comfortable doing and it going wrong.

Best of luck!

Airbnb rebranded [1] and so can you. Ultimately, the important part is that you accomplished an MVP while juggling family, work and kids. Hats off to you mate. You should be proud.

[1]:https://blog.keycafe.com/the-history-of-airbnb/

Really cool idea! Style aside, I think you’ve developed an interesting product with lots of appeal, especially for those looking to be “less” connected.

For those complaining about the style, perhaps offering a DIY kit may be a viable alternative that allows anyone to add their own flair.

It’s a shame to see companies putting profits above people’s lives.

AirBnB’s argument, that guest’s should “know the risks of booking during a pandemic” could easily be turned around on AirBnB/hosts, who “should accept the risks of operating during a pandemic”.

It’s a terrible situation for everyone involved, but I think the person trying to do the responsible thing, by adhering to local guidelines, shouldn’t be punished for it.