ghughes

This is interesting in that it positions security engineering as an that is to be

Avoid for now if you use django-cachalot; one of the monkey patches is broken in Django 3.2.

This quote says nothing at all. Obviously the perp is someone with intricate knowledge of their network.

They might as well come out and say they have well-developed evidence that the perpetrator has an IQ over 50.

It’s not a google scale market

That’s great. I have similar stories.

I burned some CDs with an autorun executable written in VB6 that would play a certain Rick Astley number at maximum volume until the user logged off. Left them lying around with various enticing labels. The result was as predicted. Unfortunately, as in your case, I failed to realize that the list of students likely to do such a thing was a very short one indeed.

Later on in my school clown career, I reconfigured the printers to add a giant “CONFIDENTIAL” watermark across every page. This was the day before an important coursework deadline. That one did not go as planned: clients that had cached the malicious settings kept sending them back to the print server, and it couldn’t be fixed until everyone went home for the day.

10 years ago, yeah.

https://en.m.wikipedia.org/wiki/JailbreakMe

Thanks for writing this up; it was something of a wake-up call from a recent bout of fanboyism, and I found myself agreeing with most of your examples. I'm still learning and I haven't found any of these things to be dealbreakers yet, but they're absolutely questionable design decisions when you consider that other languages already solved many of these issues (with good reason). I think there's a lot to like about Go but I'm worried that the language will die young because of religious inertia.

> Publishers shouldn’t know what people are interested in until they actively go to their pages.

Yes, that privilege is reserved for Google.

Care to illustrate your point with an example? I’m wondering what kind of “unnecessary complexity” you’re talking about.

Who made this?

Can you talk a bit about why you chose Ubiquiti over eero?

I hear Intel's PR department is hiring, if you're interested.

GP's statement is fairly accurate and so is yours. All mainstream news outlets are competitors in the online ad market, and The Guardian is about as good as you get in terms of independence and objectivity.

> We show that this bias holds across multiple populations (college students, MTurk respondents, shoppers at a local mall, and participants from a large, income-stratified online panel)

MTurk workers are incentivized to answer quickly, not truthfully.

Internet polls are bullshit.

> My worst fear is that Coinbase is insolvent.

Surely they would have to be thoroughly pwned for that to be true? They claim that 98% of customer funds are in cold storage, and they ought to be raking it in on transaction fees and with BTC being up 1372% this year. They also raised a $100M Series D round in August. It's not impossible, but highly unlikely.

I can attest to this. I filed a ticket over a week ago because I'm locked out of my account. It took them 8 days to reply with a canned response, then 5 more days to say they don't have an answer for me yet because they're so busy.

This isn't acceptable for what is essentially a bank that just raised $100M at a $1.6B valuation.

Money quote:

> It has been clear to us that the current bitcoin network is completely incapable of functioning as a payment processing network, not just for "cups of coffees" but even for multi-million dollar transactions, and we are using SegWit.

Or in other words, they are listening, just not to your voice. Their product is an intelligence-gathering apparatus that works at scale without microphones or other traditional surveillance tools.

Link to the original report: http://www.politico.com/story/2017/10/05/john-kelly-cell-pho...

And on iOS there’s no way to see them without triggering the copy/paste menu.

It's the other way around.

Amazing work. If you like this, check out Multi Theft Auto and San Andreas Multiplayer, two mods that add online multiplayer support and scripting capabilities to GTA Vice City and San Andreas. MTA:SA even adds a map editor that works inside the game client itself.

That’ll be nice for some lawyers. I’d prefer to see severe civil and/or criminal penalties for the senior management folks who allowed this to happen on their watch. Expect many more breaches of this magnitude until C-levels start to feel the consequences of their negligence.

IANAL, but I'm not sure that you are correct. The agreement refers to claims "arising from or relating to the subject matter of this Agreement or the Products", and the title of the agreement is "TrustedID Premier Terms of Use".

Doesn't that mean you're waiving your right to sue TrustedID, Inc. in a class action for grievances related to the TrustedID monitoring product, not your right to sue Equifax for the data breach?

I doubt you’d get very far trying to negotiate this with any employer that has a legal department.

> To avoid that kind of stuff, when I deleted my account a few years back, I used an automated script to delete all my posts.

Worse still, they've gone out of their way to make this as difficult as possible. There's no bulk delete in any of their apps or API. We all know why.

Makes you wonder what kinds of juicy stuff could be found by a web crawler that specifically looks for inadequately redacted PDFs.

From the readme:

> LocalStack builds on existing best-of-breed mocking/testing tools, most notably kinesalite/dynalite and moto.

Kinesalite and Dynalite are LevelDB-based reimplementations of Kinesis and DynamoDB, and Moto is a mocking library for many AWS services including S3, EC2, etc.

That's exactly what the adtech industry is starting to do. They've even got WordPress and Cloudflare plugins that can dynamically reinsert blocked ads via their proxy.

The awful scroll hijacking implementation on this page really distracts from the content.