HNHacker News
TopNewBestAskShowJobs

arn7av

51 karma · joined December 20, 2019

security@meta

[ my public key: https://keybase.io/arn7av; my proof: https://keybase.io/arn7av/sigs/mbYrFrwKyExnK_GRxoMbZQVcgUjOxmeeAJKhzRXupZs ]

submissionscomments
arn7av··on Microsoft has urged its employees on H-1B and H-4 visas to return immediately
Updated the comment with USCIS update: https://www.uscis.gov/sites/default/files/document/memos/H1B...
arn7av··on Microsoft has urged its employees on H-1B and H-4 visas to return immediately
I agree with the first part, but for the second, this is not an unnamed WH source, it is the Press Secretary Karoline Leavitt
arn7av··on Microsoft has urged its employees on H-1B and H-4 visas to return immediately
Update from USCIS: https://www.uscis.gov/sites/default/files/document/memos/H1B...

"Clarification" from Press Secretary: https://x.com/PressSec/status/1969495900478488745

1.) This is NOT an annual fee. It’s a one-time fee that applies only to the petition.

2.) Those who already hold H-1B visas and are currently outside of the country right now will NOT be charged $100,000 to re-enter.

H-1B visa holders can leave and re-enter the country to the same extent as they normally would; whatever ability they have to do that is not impacted by yesterday’s proclamation.

3.) This applies only to new visas, not renewals, and not current visa holders.

It will first apply in the next upcoming lottery cycle.

arn7av··on Apple now requires a judge's consent to hand over push notification data
From Wired's reporting, Google already required judicial approval, and Apple gave it without them. "Google confirmed to WIRED that it receives requests for push notification records, but the company says it already includes these types of requests in its transparency reports. The company says requests from US-based law enforcement for push notification records require court orders with judicial approval." [1]

> putting the iPhone maker's policy in line with rival Google

this quote from the linked article further strengthens that point - Apple had to catch-up, not Google.

[1]: https://www.wired.com/story/apple-google-push-notification-s...

arn7av··on Intercepting Zoom's encrypted data with BPF
I have done exactly the same thing for Desktop/Android apps using Frida (modified from https://github.com/google/ssl_logger). There are modules out there that dump SSLKEYLOG too (that can be used in Wireshark)