Hacker Newsnew | past | comments | ask | show | jobs | submit | uwuwuwu's commentslogin

Why not just use 4G all the way?

If it's the price tag, this is something companies could fix.


It's really cost. An extra hotspot device is >$100/month. My line of sight is $50month. My phone has unlimited data as well but for things like a security system, it's not something I want to rely on primarily if I leave and need to bring my phone with me.


They could just pay back the exact amount, and that's it.


Very alienating how they disclose names even before their guilt is proven in court.

Also, I read they're considered adults because the crime was so serious. Come on. Just send the BTC back and that's it. This shit is a proof-of-concept and we should be thankful nobody started world war 3 on Twitter.

There's zero harm, just improved security at Twitter.


They willingly impersonated multiple people and tried to scam people based on that. That is not zero harm. Are you really saying that someone that executes a spearphishing attack on a company then uses that to take over accounts within that companies services and then uses that to try to scam people should just get a slap on the wrist?

There are at least two or three levels of this where any reasonable person would have thought "This is getting really fucking criminal"


This was likely a net benefit to US citizens. Much better that this kid exposed these security holes. Imagine how bad it would be if a nation state did this close to the election.

Spearphishing is a real problem and tech companies have no answer. An annual employee training program isn't going to solve the problem. Simply making it illegal isn't going to solve the problem.


> Much better that this kid exposed these security holes.

That's why we have responsible disclosure. It does not make it okay to exploit security holes for profit.

> Spearphishing is a real problem and tech companies have no answer.

That does not make it okay to exploit it.


>That's why we have responsible disclosure. It does not make it okay to exploit security holes for profit.

I'm not aware of any bug-bounty or responsible disclosure method that allows spear-phishing as the attack requires impersonation/fraud. Is there one?


Responsible disclosure does not equal bug bounty. Just because you found a security hole does not mean you are entitled to a payout.

The responsible way to do this would be to prove the access to twitters security team and not exploit it for personal gain. You can even just post it publicly, just don't try to scam people and profit based on the exploit.

Do you think that just because there isn't a bug bounty for a specific exploit that gives you a free pass to exploit it for personal gain?


Send back the BTC with interest or no?


Twitter should cover that as a bug bounty.


I think this is a solid idea.

It's not much for Twitter, and they can see exactly who needs to be remunerated for how much.


Would be ok if everyone was wearing a mask. You go to the bathroom, cough cough, you go to the restaurant, cough cough, and you're driving back home with your friends in the car, cough cough. If we tried to reduce infection during these occasions, there maybe wasn't even a need for much lock-down.

Germany is about to get rid of wearing masks in stores. That's like turning off the firewall because the attack is over. It's preventive, so you need to wear a mask before sth happens.

I'd be very happy if there was an experiment, just for 4 weeks everybody should wear the damn mask both in private and public, and see what happens.

How can so many people fail to grasp the concept of prevention?


> Germany is about to get rid of wearing masks in stores. That's like turning off the firewall because the attack is over. It's preventive, so you need to wear a mask before sth happens.

There were 140 new cases in Germany yesterday in a country of 83 million. In my city of 3,5 million there were 17 new cases. At what point would you say it's safe to not wear a mask in stores?


When it's been ZERO for a while. Obviously?

I don't understand this question at all. As long a there's >=1 case and little immunity the virus WILL spread.


this is literally impossible and completely ridiculous


and yet it worked in Taiwan, in Vietnam, in Japan, in New Zealand...

ridiculous huh


Wasn't it the goal all along to flatten the curve and gradually introduce herd immunity while softening the impact on hospitals?

No one estimates a vaccine any time remotely soon and even with one it would take years at best to achieve zero cases globally.


> Wasn't it the goal all along to flatten the curve and gradually introduce herd immunity while softening the impact on hospitals?

No, suppression was the goal. At least, the study that turned the tide on policy concluded that targeting suppression was essential.


The issue with herd immunity are the unknown long term risks. Just imagine this stuff wrecks your immune system a couple of months after infection. Or, that immunity goes away after some months.

There's no guarantee that herd immunity helps. On the other hand, we could be working all hands on deck to arrange our lifestyle AND protect from infection.


Flattening the curve was the most immediate and important goal, because overloaded hospitals kill a _lot_ of people.

Herd immunity by everyone getting infected should _not_ be a goal. That's still going to kill many, many people.

The estimate for the US by that route was around 2.5million dead. You could probably scale that by population size and maybe reduce a bit as we get better at treatment for this disease, but that's still a big number.

I don't think we have much option other than to prevent the spread as much as we can while waiting for something like a vaccine and/or far better treatments than we currently have.

Zero cases globally will indeed be a while, if it ever happens.


As long as there is a very volatile equilibrium, I'd wish we play safe -- because there is absolutely no cost associated with wearing masks.

We've seen that local outbreaks happen, and that local authorities hesitate to take action.


Wow, we’re really caught up in yelling at each other. Seems convenient for the people in charge of our response over the past six months and the organizations that have spent decades preparing for pandemics.


I didn't mean to yell - I'm simply astonished. A mask costs like 0.15€ or 0.17$ (based on Taiwans price with overall comparable price levels in Germany). Two masks a week, that cost is next to nothing.

I think the response in Germany is quite good compared to many others.

My main issue is: we compromise on having some infections and deaths, rather than compromising on wearing a mask.


What are you talking about? Everyone wears a mask in Germany in closed spaces and public transport. I haven't seen a single person not do it and it's already part of daily life. I don't understand the point here?


Meck Pomm country wants to get rid of wearing masks.


The economics Minister of MeckPomm wants to. His boss doesn't. The federal health Minister also disagrees, as do most other states: https://www.rnd.de/politik/maskenpflicht-in-den-bundeslander...


I don't think this will happen, I also HOPE it won't happen too soon, in Bayern we still have restrictions on number of people that are allowed to meet. Austria got rid of masks almost everywhere, but you still need to wear them in public transport and pharmacies, so I'm pretty sure they will be with us for a while.


I feel like in Linux distributions, there's some default, and when questioning this default, the answer is "well your use-case is different".

After like 15 years with Linux, my personal conclusion is that the default very often makes no sense for any use case.

Would it make sense to split configuration from the software package itself and provide profile packages with sane defaults for servers, desktop and laptops?


This does make a lot of sense. A simple toggle during installation can make it much simpler for users. All the tools are available, but setting it up and configuring to a specific use case usually requires jumping through some hoops.


Something I never understand:

Why is this not the default?

So many people struggle with the same stuff over and over again, yet, there's no mechanism in Linux distros to package default settings for a use case.


You want a stable, easy-to-use platform. Setting /var/log to something other than the main disk risks all kinds of difficult to diagnose problems. If that means burning through SD cards, so be it. It's relatively easy to mod it to write elsewhere, that's exactly the purpose of user customization.

What they ought to do is put an easy way to set that in `raspi-config`


You can solve most of these problems by not using an under powered or bad power supply. From what I have seen most raspberry pi users love to just take a random charger and plug it into their raspberry pi. Micro usb has been known to be totally inadequate as a power delivery mechanism for SBCs and on the armbian forums people are going to complain if you show them an SBC with micro usb. USB C is a lot better but you are still better off with the official raspberry pi power supply.


What is right for Raspberry Pi might not be right for a desktop might not be right for a server.

Typically things are geared for desktop users who have not much idea what they are doing and everybody else is expected to understand and configure to their needs.

Nowadays distributions started preparing separate profiles (workstation, desktop, embedded, etc.) that save a little bit of work.

noatime is a default for most distributions but a person that does install on Raspberry Pi might be configuring filesystem manually and not be aware to put it there.

Swap is very tempting to have on the Pi but is going to kill the card in a hurry.


That it's more secure.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: