zaltekk

I think this was very poorly worded. I believe they’re trying to say you pay the reseller $0.13 to get what costs $1 at the upstream provider.

Related:

Amazon Ditches 'Just Walk Out' Checkouts at Its [Amazon Fresh] Grocery Stores

https://news.ycombinator.com/item?id=39908579

I wonder if the scammer is using emails and passwords from a breach against Facebook to access "reputable" accounts and then posting marketplace listings.

I believe what they changed is the ability for "everyone" to discover you to a 10 minute toggle. It defaults to always being discoverable to your contacts.

I assume that it still broadcasts your hashes even in the contacts-only mode, so you'd need to turn receiving off to stop that. Or go a step further and disable Bluetooth entirely* when you don't need it.

* If you disable Bluetooth in the Control Center pulldown it won't actually disable Bluetooth or beacons. It just won't connect to devices. You need to go into Settings to actually disable Bluetooth.

Twitch public announcement: https://news.ycombinator.com/item?id=38939866

CNBC Prime Video and MGM Studios article (has the internal email at the end): https://news.ycombinator.com/item?id=38939871

Amazon also announced layoffs at Prime Video and MGM Studios today:

https://news.ycombinator.com/item?id=38939871

Amazon also announced layoffs at Twitch today:

https://news.ycombinator.com/item?id=38939866

The best I could tell is that it just makes a Docker image for you to deploy to EKS. I’m struggling to see why it’s got OS tacked on the end… it would still seem you’re running Linux and possibly they’ve changed some of the userland?

At first I thought this was going to be a unikernel model like MirageOS[1] is for OCaml, and now I’m disappointed[2].

[1] https://mirageos.org/

[2] Let’s be fair, I was going to be disappointed because of needing an Oracle license anyway.

If only that was the case! Cars have their own cellular modems and ship off your data without any end user involvement.

I'm not sure if I'm reading this correctly. The statements below are my understanding, but it'd be great if you can confirm to provide more color.

The pre-patch setup would just make the implicit trust policy explicit, meaning any user or role in the account with `sts:AssumeRole` on `*` could assume the role (which is still the default when not trust policy is specified).

This change improves the posture by adding a trust policy to the role that prevents any roles other than those two listed from assuming the role. So this is purely a defense in depth measure, and not really a security vulnerability (unless we say the default, implicit trust policy is a security vulnerability itself :P).

Can you share a bit more about how open these roles are to remote candidates?

You list office locations and don't say remote, but then imply remote in the first paragraph. Anecdotally I've heard of people being remote on Apple security teams in the Seattle area, but every time I look at roles on jobs.apple.com they all appears as in office only.

You could be sued for doing something that was potentially considered unsafe by some studies. Business wise it's better to just "play it safe" here with low sodium meals.

From the first paragraph:

> the experience in Australia was that [Facebook's] removal [of news link sharing] had little impact on user engagement.

I don't know how that value (looks like -50?) was chosen, but it seems to correspond to the launch failures.

> which effectively prevents you from installing linux

This was going to be the state when Microsoft first proposed secure boot. But the backlash lead to (1) being able to disable it and (2) being able to load customer keys.

Are any motherboards actually locked down to where you can't install another OS? My older Gigabyte motherboard, my Thinkpad laptop, and my HP business line desktop all support both of these.

UEFI was definitely a pain point for booting Linux when it was first available. The same Gigabyte motherboard mentioned ended up having it all turned off and just used legacy boot for years. But everything works great with UEFI USB boot installers and the OS. I'd recommend giving it a try again.

I personally use secure boot for Linux through custom keys and a kernel install hook that resigns the EFI+kernel+initramfs+cmdline blob. It's quite nice in combination with LUKS unlocked by TPM2 (similar to Bitlocker). Secure boot actually lets you be more selective in which PCRs to verify for LUKS unlocking, meaning it's much less fragile during updates.

> The apps, which are used for calls and text messages, send information including phone numbers, time stamps and call duration to Google

I’m not surprised they collect telemetry on these actions. I am quite surprised that they apparently collect raw phone numbers, though.