zndr

If you scroll down on [the leaderboard](https://hackerone.com/leaderboard?year=2025&quarter=2&owasp=...) page to Country and select United States, xbow is currently on top

I'm glad I'm not the only one looking for a taxonomy of refugees from the great Cybertron wars

Saying they have taxi's in SF is a bit hyperbolic. I have an invite to that program and it's

- only after 10pm - used such an odd slice of the city I not only can't get picked up, it doesn't GO any where I go.

I would love to use either of these programs both for the novelty and because I think Autonomous driving is great, but I literally can't use the program I do have access to.

Seconding this.

And to compound this after doing a half ass job of what OP has done, I recently moved my custom google apps free domain to have a second reception domain i use JUST for this with a `.email` TLD (side note: the amount of tools that don't see modern TLD's as valid is enraging)>

I made the (maybe poor) choice of donating to political campaigns before the last US election using these emails

- `Biden-campaign@` - `democrats@` - `<specific local race@`

All of those I've had to unsubscribe from about 2-3 dozen total OTHER email lists as those emails are literally sold/given out to other campaigns. the biden one being the worst.

Also if you have your own business you'll start getting solicitations, LOTS of solicitations. And god forbid your email is on an old resume, or somewhere else.

Now, is any of this "technically" spam? Maybe but not really. Do I consider it worthless? yes.

But to site your last specific one. I did a search for an address I know was on a compromised product. Specifically a game Heroes of Newerth. They were hacked in I believe 2015 and the list was sold. My email was my old method `[email protected]`. I get like 20~ emails to that a year and all of them go to spam or are flagged as spam automatically.

It's more than that: it's the fact that all of the payment info is there. Every step, field entry, hurdle you put infront of a consumer is usually associated a significant increase in "cart abandonment". By apple allowing you to just apple pay straight in and avoid CC, and billing address etc, they are decreasing the hurdles and increasing the conversion.

Is it worth 30%? In 2013? Maybe In 2021? Definitely not. It should be closer to 5%.

That being said I do like using Apple subscriptions because they make it REALLY easy to cancel them, all in one place, something that can't be said for a lot of other services.

You can actually see their salary calculator here https://about.gitlab.com/handbook/total-rewards/compensation...

Often, it's not the simple. Some times it takes months of trust building. Sometimes the person is part of a community, a community they may have been part of for months or years. Yes their life isn't easy, but putting them in housing might remove them from that support network. Often times people are terrified to move away from the only group of people they've known.

this is deeply on display in the "According to Need" podcast series released by 99% invisible recently. https://99percentinvisible.org/need/

Ideally everyone would see the benefits and realize this is better, but these people have a lifetime of other issues and being houseless is only part of it.

While you're correct, Amazon is so large that this single center being nuked from their org chart would have been an inconvenience. I think it's very easy for us to say "this would help you" but the reality is, it might have drawn a line in the sand, at the cost of every single employee's job.

Yes 100% it does make it safer.

It isn't the led is physically slaved to the power of the camera, the previous version was firmware fixed and was hacked, hence the change.

You're also looking at this the wrong way. Parking apps make the overhead of managing parking lots less expensive. IF you have higher adoption of the app you have less problems with your onsite machines/attendants/cash. Those cost way more money than adopting this across your fleet of lots. Also a lot of lot owners, have a mangement company or work with an app vendor who will add this as a simple way to improve their cash flow.

App vendors are only paid by the people who use the app, so they have every incentive to make it that much easier for some one to use the app than the ticketing machine.

The parking lots may be competing with other lots, but really they are most likely getting money either way, they want to decrease their overhead, hence apps.

Well first off, we don't touch Kubernetes, so probably not a product we're looking at either way.

Agreed, this is a topic on my mind, we have a need for better cloud based dev environments so this article's titled appealed to me, but it wasn't answering any questions or aligning with common issues.

This is very strange, but also is your Super admin an everyday user account, or a specific isolated admin account?

Google normally suspends accounts (notification after suspension with no real info) for heavily reported spam, they will suspend a ton of accounts if your domain is sending a ton of spam, even if its not via g-suite directly. This may be the case are you sure your domain is secured?

I normally run a https://crxcavator.io/ check on any extension, but cannot because it's free. I'm assuming this is all done locally?

ugly? Most definitely, offensive? Not really.

I don't think it installs it I think it just calls the resource from the package.

NVM I decided to inspect the package with `pkgutil`

Here's the offending code

```################################### function install_app_to_path(){ #path=$1 InstallPath="$1/.zoomus_"$(date)"" mkdir -p "$InstallPath" mkdir -p "$InstallPath/Frameworks" if [[ $? != 0 ]] ; then rm -rf "$InstallPath" return 1 fi

    if [[ -d "$1/zoom.us.app" ]] ; then
        rm -f "$1/zoom.us.app/Contents/Info.plist"
        mv "$1/zoom.us.app/Contents" "$InstallPath/trash"
    fi

    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 4
    fi

    rm -rf "$1/zoom.us.app"
    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 4
    fi

    mdfind 'kMDItemCFBundleIdentifier == "us.zoom.xos"'> .zoom.us.applist.txt

    echo "["$(date)"]un7z zm.7z =================================" >>"$LOG_PATH"
    if [[ -f res.7z ]] ; then
        ./7zr x -mmt ./res.7z -o"$InstallPath/Frameworks"&
    fi

    if [[ -f resReitna.7z ]] ; then
        ./7zr x -mmt ./resReitna.7z -o"$InstallPath/Frameworks"&
    fi

    if [[ -f bundles.7z ]] ; then
        ./7zr x -mmt ./bundles.7z -o"$InstallPath/Frameworks"&
    fi

    un7zresult=$(./7zr x -mmt ./zm.7z -o"$InstallPath" 2>>"$LOG_PATH")
    ret=$?
    echo "["$(date)"]check un7z return:$ret, $un7zresult">>"$LOG_PATH"
    wait
    echo "["$(date)"]un7z all finished">>"$LOG_PATH"
    if [[ $ret != 0 ]] ; then
        rm -rf "$InstallPath"
        return 3
    fi

    mv "$InstallPath/Frameworks/"* "$InstallPath/zoom.us.app/Contents/Frameworks">>"$LOG_PATH"
    mv "$InstallPath/zoom.us.app" "$1" >>"$LOG_PATH"
    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 1
    fi

    if [[ "$APP_PATH" == "$GLOBAL_APP_PATH" ]] ; then
        chmod -R 775 "$APP_PATH"
        chown -R :admin "$APP_PATH"
    fi

    echo "["$(date)"]mv $InstallPath/zoom.us.app into $1">>"$LOG_PATH"

    rm -rf "$InstallPath"&
    return 0

}```

I live near twin peaks and seem them A LOT, the first pic in the article is on TP on the road to the top. They are frequently out during the day, one almost got hit by the 37 I was on a few months back.

Zoom Admin here:

An admin, from a dashboard, can see all meetings currently running. If you "click" into one of those meetings for more details, you can also join the meeting as essentially a cohost, you cannot join invisibly.

You CAN see any meeting title, guests, duration, call quality, IP addresses of attendees, Geolocation of that IP, network ti Mic, Speaker and camera in use, and some other stuff.

YOU CAN see all recordings after the fact that are cloud-hosted, Zoom offers 2 recording types based on where you're recording from, laptops like Mac and PC with min spec can record locally, or in the cloud, everything else is in the cloud. I also do not know and do not believe, there is an audit log for this. This is actually the most troubling thing.

You can see more here https://support.zoom.us/hc/en-us/articles/204654719-Getting-...

Also, unlike say Google Hangouts Meet, you cannot add a room to a meeting without consent. Meet allows you to force ANY room into any meeting you want (defaulting with camera and sound on). I've seen people who have these set up in their homes and think of how bad it can be.

EDIT-

Also while no one at my org uses it, I believe you can easily see all zoom chat history.

This is a great point. People understand installers/.pkg files far better than `.app`'s wrapped in a DMG. Those often get launched inside the DMG which has a ton of other issues, rather than being dragged to the Application folder.

Also packages allow for easier deployment rather than dmg's.

The other thing that's important is the privacy policy includes their marketing site You can see a clear list of tools that zoom uses on their Content Management System (CMS) aka Zoom.us here: https://builtwith.com/zoom.us

We already power our iPads via POE< which is also how you'd power those beacons, so it's not really a great improvement.

BUT the idea that you would "tap in" to book it would be great.

I'm more than a decade in on my 1Pwd journey. Loved it the whole time!

A seccond PW manager? Not necessary, an offline backup? Great idea. Most PW managers allow you to export in some way shape or form. Doing so and encrypting said file is a great idea, but also something that's hard to do enough for most people that I don't have a good solution.

Correct, CMd+F for enterprise and they outline a LOT of information about their sales to larger organizations.

So, this is why, at least in the US, EU and a few other countries, we have orphan drug policies.

If you don't know orphan drugs are drugs that could be a life saving medical necessity for rare diseases that do not have a large enough base of users to make the drugs affordable. I'm not talking about Shkreli "affordable", but it's literally not feasible to spin up manufacturing, or final trials, or educational materials for doctors affordable. So governments offer massive subsidies or cost investments for some of these drugs that often only help TENS of people, not hundreds, or thousands or millions.

What's missing is a similar policy for funding otherwise for-profit efforts like the authors.Educational tools and products are often seen as less valuable but I believe they could be immensely helpful.

Now as to the authors original flaws? Well, his product has a clear sell-through referral potential, but it's not really functional to do so with prescription drugs. That being said, selling this product to a CVS or a webmd as a feature could be really good, or major hospital networks, or heck even pharma companies. But all of that is often year+ sales cycles, you can't just luck into that.

Interesting, some of the topics in this paper remind me of this study on the old Elitist Jerks WoW forum: http://james.howison.name/pubs/bullard-howison-2015-elitist-...

The forums were notable because they were VERY strict, but also every single removed post, suspension or ban all got cross posted into a specific forum for all to read. For users who weren't trying to offend this served the same lesson the Paper here makes: how to not do it again, for everyone else it served as entertainment while the mods hammered down trolls.

When ukraine was starting it's revolution in 2013/4, and it was unclear what was going to happen in the country, if it would break into war, or just become some place we could no longer keep our 250 employees, my HR team came to talk to me.

I had 12+ employees there and they asked me to write down the names of 3. Those 3 would be the ones we would try to extricate from a country descending into war should that happen. Them, their wives, and their children.

How the fuck do you make that decision?

So Wework acquired https://www.teem.com/ specifically to do this, well the room booking part at least. They actually approached a different company and were rejected so they bought Teem.

I liked the product, and wanted to purchase it. We Co had so over funded Teem that the sales people couldn't keep up. They were doing demos with experienced Sales Engineers and literally couldn't explain how things worked. We had 2 demos in 2 successive weeks and the product fundamentally looked different both times.

Think about that: Imagine having unlimited eng and product resources and pushing code so fast that your sales team can't keep up sounds good right?

Wrong...we didn't buy Teem we went with their competitor who was behind on a few items, but had a concise product and a concise roadmap that met our needs, not the needs of 1000 coworking spaces tied together.