bink

I think that's misuse of the term as well, but like you said they are only 16.

It's not quite that simple. I don't think most bug bounty participants want a full-time job. But even more-so in my experience they are not security generalists. You can hire one person who is good at finding obscure XSS vulns, another that's good at exploiting cloud privilege escalation in IAM role definitions, another that's good at shell or archive exploits. If you look at profiles on H1 you'll see most good hackers specialize in specific types of findings.

Yeah, that's definitely a no-go. I think you'd see that with any new model, however. I once had a Ducati in the shop for 4-5 months just waiting on a wheel because it was a new model.

There's always a chance the new Scout will fit that model. I'm not getting my hopes up though. It seems every company that releases an EV truck says they'll sell it for $30-40k and then suddenly it's $80k+.

They turned a gross profit, but they've only been selling vehicles for three years. It'll be several more before they are a profitable company. No company can build out two manufacturing hubs (hundreds of millions each) and turn a profit so quickly.

> The price isn't right for small businesses. These trucks are quite expensive

They definitely aimed for the luxury market, like Rivian. Who knows how successful they would've been if they aimed for mid-range like Scout. That's the market they claimed to be entering when they started taking reservations. They also could've offered a fleet ready version without the luxury features, but must've decided not to.

> They're difficult to repair

How so? They are far simpler to maintain than a normal F-150. They're new so they do have parts issues for the electronic components, I'm sure, but I think that's a fair trade-off. In any case, I don't think offering a hybrid version makes the vehicles easier to maintain or repair. If anything it's the opposite.

> Parts availability is scarce, contrasted with a regular F-150 (even junkyards are full of spare parts, that aren't software constrained)

I thought one of the advantages of the F-150 was that most parts were shared with the standard F-150? The battery and motors, maybe not.

Amusingly, there's actually a government agency that takes over pension plans from failed companies. PBGC.

Everything after the first level was tough. Those damn speeder bikes.

The blog says that failing to land on the carrier didn't actually fail the mission. Maybe you're misremembering? I just remember this game being so frustrating that I never replayed it.

That's great, but I'm not sure I'll ever feel comfortable putting a camera attached to a mobile robot inside my home.

pluto.tv has the older "Joel" episodes and I've been enjoying them occasionally. The newer stuff for me has a bit too much "drama kid" energy, if that makes sense.

I looked this up recently because I was vaccinated for it a couple years ago. What I found was that you're recommended to get a booster after 7 years (my doctor said around 10 years when I got the shot).

> some doctors are willing to prescribe it without FDA approval

But the pharmacies are still reluctant to administer it. My doctor prescribed it for me but when I got to the pharmacy they made me fill out some forms... because I checked the box that said I had no serious health issues and I was under 50, the pharmacist absolutely refused to administer it even with a prescription.

It's not either/or. You can tax both the poor and the wealthy at a similar rate.

What's the source on the claim that he used drugs his entire adult life? I thought he had been sober from heroin for decades and only drank alcohol. Additionally, I'm not sure doing drugs alone qualifies one as a bad person.

For those who haven't read it yet, the book "In the Weeds" does a pretty good job of showing the hidden side of Bourdain (if there was such a thing). He was as imperfect as you might imagine. I personally enjoyed learning how cruel he could be as I always had a tremendous amount of respect for him and it made him more human to me.

They even cover an incident where the crew played a practical joke on him with a clown (his fear is mentioned in a li.st).

Looks like they changed the link.

https://www.jenn.site/dissolution/

As a motorcyclist I feel far less safe when one is around me.

https://www.nbcnews.com/news/us-news/tesla-fatal-seattle-are...

With Signal they provide a toolkit you can use to verify that the checksum for your App Store download matches that of the public build or one that you compile yourself.

edit: This is apparently currently not working for Apple and MS builds.

https://github.com/signalapp/Signal-Desktop/blob/main/reprod...

It can be dangerous though. In my area we have roads with speed limits of 45 that drop to 25 "when children are present". My EV always assumes children are present as it has no real way to determine if they are. Driving 25 in a 45 is dangerous for many reasons.

At the router level. I turned off cellular data to be sure, but I don't even think that was necessary since it was on wifi.

From the article:

> OT cybersecurity specialists interviewed by CSO say that KCNSC’s production systems are likely air-gapped or otherwise isolated from corporate IT networks, significantly reducing the risk of direct crossover. Nevertheless, they caution against assuming such isolation guarantees safety.

This was also not a nuclear facility, however. The article says it makes "non-nuclear components".

In my experience auditing critical infrastructure, most facilities are "air gapped". I put that in quotes because while you can't browse the Internet from the control network(s), there are ways to exfiltrate data. The managers, engineers, regulators, and vendors need to know what is going on in real-time. Back in the day this could've been a serial port connecting two systems for a one-way feed. Now I imagine it's something far more sophisticated and probably more susceptible to abuse.

As an example, you might have a collection of turbines manufactured by GE and GE needs to have real-time data coming from them for safety monitoring and maintenance. The turbines might have one connection for control traffic and another for monitoring. How to secure these vendor connections was always a debate.

Btw, there are strong cybersecurity regulations around critical infrastructure. CIP-005-07 covers security perimeters. You can view them here: https://www.nerc.com/pa/Stand/Reliability%20Standards%20Comp...

I don't wanna give away too much in case they're reading, but they didn't use their stealthiest exploit. It was pretty obvious, especially if you monitor your network traffic.

I'm not disagreeing with you, but doing so would open them up to criminal charges and liability. Rightly or wrongly, selling exploits is not illegal. Hacking your employees devices is.

There is some amount of protection until the adversary discovers the new number. But since they've already compromised his phone they likely have his dad's number and can compromise that phone to find him again. It's dystopian.

If he's running iOS he can also enabled Lockdown Mode on the new phone to block most types of attacks.

I've interviewed with these types of companies (not the ones in the article). I've even caught them using their exploits on me after they made me an offer and that seems to be the most likely explanation for what happened here. I don't know how anyone can develop exploits for resale in good conscience.

If these companies have no qualms using their exploits against their own employees they'll have absolutely no problem using them against members of Congress, the Courts, investment banks, tech leaders, and anyone with any sort of power. This gives them the ability to blackmail some of the most powerful people in the world.

edit: And that's not even mentioning their reported "intended use" against dissidents and journalists.

Except with the extra weight of a headset, eye strain, and the uncanny feeling of moving without moving.

Not only does the NSA break encryption but they actually sabotage algorithms to make them easier to break when used.

Heck, I'm concerned how they're going to work in the Bay Area after an earthquake or cell network outage.

I think that's a good comparison. I was around in the 90s and I do remember OOP being pushed by all sorts of people who weren't coders. It was being pushed as the "proper" way to code regardless of the language, size, platform, or purpose of the program in question.