e_proxus

The perfect setup would be an M1 iPad that runs something iOS-like when it is in tablet mode and then switches to macOS when in laptop mode, keeping the apps running. At least, one can dream…

For a good (for some definitions of good) extra paycheck, I guess many would do more work.

Want to buy a cool car? Do some cleaning on the side.

Translation:

Major technical breakdown at Klarna when customers saw other people's data - The Swedish Financial Supervisory Authority (FI) has contacted the company

Payment giant Klarna, which has 87 million customers globally, is currently experiencing major technical problems. Users of the company's app saw other customers' payments and personal data, before it was shut down completely. The supervisory authority Finansinspektionen, FI, has asked Klarna to explain what happened.

In its app, Klarna has major technical problems. It means that users were logged into other customers' accounts and thereby see sensitive data such as their payment and purchase history and postal address. Users were also able to see part of the bank details linked to Klarna, but not the full account number.

One of Di's journalists accessed an account belonging to "Elisabeth". When the app was reloaded, another customer's login became visible.

When customers logged in with their own bank ID, they accessed other people's accounts. Each time they refreshed the page on the app, they brought up the details of a new, seemingly random user. It is unclear whether customers have been able to shop with other people's money.

Klarna had a total of 87 million consumers worldwide at the end of 2020, but it's unclear how many of those have an account on the company's app. The technical breakdown also extends beyond Sweden's borders, with outraged reactions pouring in on Twitter from Klarna users in various countries.

Klarna has now closed the app, citing a service outage. The company's press officer Niklas Gillström will return to Di after a while with a written comment.

"We are currently experiencing disruptions in our systems caused by technical problems. We are doing our utmost to restore the system and our services to full capacity and apologize for any inconvenience this may cause our customers. We have currently blocked all logins to the app until we are sure the problem has been fully resolved."

Di continues to seek the company for follow-up questions on whether the technical problems are due to an internal breakdown or external influence, how seriously the company views the sharing of personal data between users and whether customers may now have accidentally traded with other people's money. Klarna has asked for a response.

The Swedish Financial Supervisory Authority, FI, which among other things is the supervisory authority for banks, states that it has been informed of the situation.

"We have contacted Klarna and asked them for an explanation of what has happened," says Karin Lundberg, head of the business area Banking, to Di.

At the moment, FI has no further comments, she adds.

Di also seeks the Privacy Protection Authority, IMY, formerly known as the Data Inspectorate, for comment.

IMY has the right to fine companies up to 4 percent of their global annual turnover for serious violations. In addition, Klarna could face civil litigation, not least in the US where it has 15 million users.

(Translated with www.DeepL.com/Translator)

This is such a dystopian comment, sounds like straight out of a William Gibson / Neal Stephenson / Vernor Vinge book.

Can they guarantee no JIT code via static analysis as well? Or could someone sneak in a tiny bit of disguised JIT code just to get to this register?

I would assume a huge JITed VM implementation would show up easily in analysis.

HN mods should correct the headline to match the article.

And the benefit of Epic’s store to the consumers is exactly 0% because most publishers pocket the difference.

Sublime can definitely be that kind of editor, but requires quite a lot of setup in some cases. There is a language server plug-in, which (IMO) is not straight forward to customize or even setup, with very little feedback when something goes wrong (broken LS implementation, or misconfiguration). However, when it does finally work, it's super snappy and clean.

The philosophy of Sublime is almost opposite to VS Code and other IDEs. Instead of everything enabled by default, everything is simple and lightweight by default. Then you add your own things on top.

I mostly see it as analogous to programming, where I too prefer to start simple and add things I control on top and where I understand the whole stack. Compared to picking a huge framework which lets me get started but where I don't understand the hundreds of layers beneath.

Since I use Sublime Text since years, and plan to use it for years to come, I see it as an investment to learn the underlaying functionality and eco system from the ground up. It makes me a better and more productive programmer in the long run.

NeoVintageous is the most complete, up-to-date Sublime Vim plug-in. It is a fork (I think?) of Vintagous, whose author went on to make Six, both of which now seem abandoned.

NeoVintageous comes with many more features out of the box (Vim plugins like Abolish, Surround and Sneak!). Since choosing it I haven't had to install or do any additional tweaks (apart from customizing a few settings).

Highly recommended!

Unprovement?

If I search for “buy new running shoes” I’d rather get the best search results, not the highest paid for.

I’m pretty sure there are better criteria for those results than the amount of money paid to end up in that list.

But alas, that’s not what modern search engines use, because they are advertisers first and foremost. Not reputable search providers anymore.

I tried to use DO Spaces (their S3 equivalent) to store 13 Kb of Pulumi state data, it took 5 minutes to save. Switched to AWS S3, it took less than a second.

It seems to be seriously rate limited to the point of being unusable.

But it can’t be turtles all the way down? Isn’t a semaphore counter also shared state that needs to be protected if several threads want to “down” the value? Can it become negative?

Since it is a desktop computer it makes total sense to move Ethernet to the power brick. That way, you can have a single cable up from under your desk to the computer. I'm collecting all my cables in a rack under the desk anyway, and the less cables I have to route over the desk the better.

Wish there was a USB hub on the brick as well!

It's not perfect though, and it only makes the OS marginally more snappy since it replaces many animations with equally slow fades.

Does that imply a performance hit, or is it roughly equivalent to targeting Vulkan “directly”?

Last I looked in Gothenburg those seem a joke. Only about 50 apartments in the whole city and an average queue time of 10 years or so.

No experience with the building codes in Berlin, but a least the N story limit makes sense to me. It would totally destroy the look and feel of many parts of the city of this wasn’t in place.

What I think is a bigger problem is the countless vacant lots all over the city. Even centrally there are tons of them, e.g. with only a one story supermarket or parking lots (as mentioned above) or sometimes it’s just overgrown. I wonder what the deal are with those. My guess is that the city already sold them in more dire times and now owners just sit on them until the real estate prices makes the time ripe to build something there. Can’t find another explanation for it.

I get a feeling that it is just a band aid because of unsanitized data and sloppy coding practices.

If you subscribe to the philosophy of sanitizing and validating user data on the edge as soon as you receive it and then stick to using whatever data type you decided on, this is much less of a problem (any mismatch in runtime would then be considered a bug).

First of all, other systems in other societies point to that it is not the only possibility. Second, the laws and regulations transform how society views criminals. I think in more modern crime systems (I come from Sweden) criminals are often viewed as victims themselves and the main goal is rehabilitation (quite obvious since it will lead to the most reduction in crime over time).

I think they complain about the fact that the file dialog is collapsed by default, going to some length to hide the browse functionality (Apple probably wants you to save everything in Documents and be done with it).

The save dialog can be expanded by default by tweaking it though: https://github.com/mathiasbynens/dotfiles/blob/master/.macos...

One could imagine other payloads like chaff, smoke, or even paint or flash bangs to disable equipment and injure the crew perhaps. Not sure how efficient that would be though.

If you’re on macOS there’s Vimac which gives you this for the whole OS including Safari and the contents of web pages (since it supports macOS accessibility features).

https://vimacapp.com/

Security and open source philosophy are two completely orthogonal problems. You can a have an open source system that is the most secure, sandboxed implementation there is. Likewise you can have a completely insecure closed source proprietary system.

The freedom in open source could be the freedom to structure your system in the most secure way possible for running untrusted applications. It’s just that no one managed to achieve this yet in a satisfying way.

And the input for timers is yet another custom UI where you can’t enter the time with a numpad.

You can actually hotlink directly to the Settings page for your app (e.g. Slack does this in their settings).

Completely agree. If you change the category it doesn’t even scroll to the new icons, it just instantly replaces the existing ones making it appear as if those are the only ones existing. It’s only if you actually drag your finger over the icons that you get any indication there’s more.

It’s even worse, tapping a category brings you to the first icons in that category. There’s no way to find the default set (which seems to be somewhere in the middle of “objects” because that’s where the folder icon is).

And there’s a bug too (at least on my 12 Pro). When you scroll past the category border the category button jumps back and forth between the two categories as if it can’t decide which category you’re viewing right now.

The whole icon picker is very non-standard and feels very un-Apple.

Unless I’m missing something we’re talking about a tab bar? The worst thing that can happen is that you switch to that tab. Switching tabs should never be destructive.

Last time I signed up they showed the pricing per month but billed for the whole year and there was no way to cancel early. Had to contact support to get my money back once I realized this.

Probably larger if you compare to full ASCII frames, but you could probably apply the same compression techniques used on video frames to the ASCII format as well. It’s just a grid of “pixels” after all.