lhoff

I wasn't arguing the spoofing part but the important vs. critical part. The same bug for ankther platform is ranked as critical.

The thing is that according to Microsoft critical spoofing is not possible.

Whats your interpretation. The even acknowledged that the bug is an critical RCE on the desktop app. Coincidentally the desktop app is not part of the bug bounty programm.

To be fair the impact on the desktop app is higher since it also has access to the OS and the attacker is not stuck inside the browser sandbox. But from my understanding it still is possible to steal the SSO token. When i think about O365 setups with OneDrive for Business and Sharepoint that means the attacker would have access to all files stored there. That usually means all company related files that person has. Additionally the attacker would have access to all emails and messages of the user.

How is that not critical?

And according to the Bug Bounty side, Spoofing bugs "do not qualify for this severity category".

Its out of scope because the scope microsofts bug bounty programm is limited to web applications and endpoints.

The reason is probably to safe money. The bug bounty for a critical RCE would be between 10k$ and 20k$ depending on the quality of the report. Important Spoofing is rated for 3k$ and 500$.

So that is basically a giant middle finger to the security researchers.

Source: https://www.microsoft.com/en-us/msrc/bounty-microsoft-cloud

When will the WASM runtime will be available.

The resolution is not everything. Compression and bitrate matters as well. No $100 Camera is able to handle that bitrate. Raw 8k results in 2.6 Gbps. That is not something that a small and low prower CPU can process. And thats what causing the heat.

I checked for a 100€ 4k action cam and tried to find out the bitrate they use. I found none where it was specified but this one https://www.goxtreme-action-cams.com/de/goxtreme-manta-4k/ requires at least a U3 class SD card. That means 30MB/s so 240mbps. And thats what causing the heat. Canon could of course but a better cooler into the camera but that was either a economic decision to protect their professional camera gear, a a design decision to keep the case small or a mix of both.

Canon has the EOS C70 that is more or less what you called a mirrorless design. Its just recording 4k and has a smaller sensor. So its not that canon isn't able to come up with a camera like the Alpha 7S series. And the Alpha 7s is also not able to record in 8k.

The guys a linustechtips watercooled one of their Red Helium 8k Cameras. And the actually did cool the sensor itself and not the processor.

Its a video series but the final assembly and test is shown here: https://www.youtube.com/watch?v=OEUCNh5g-2I

The ironic thing about the dirt cheap OEM parts from europe ruining local business is, its happening in europe as well.

If a local shop orders parts from lets say shimano it must be bought from the official shimano importer. All while the online shops import it themselves and undercut the prices by a lot.

I once wanted to buy a new bearing for the crankset and my bike was already disassembled. So i went to the local shop to avoid waiting for shipment (was before next/same day delivery was a thing in germany). The price there was about 50 or 60€ while the online price was something in the 20th. I talked to the owner what the reason for that big of a difference and he showed me his official B2B catalogue. It was basically the price he asked for. So he wouldn't even make money out of it if I would have bought it there. He recommended to just buy it online which I then did.

I could imagine thats a bias.

That we just remember the bad examples when den recommendation was bad but not when it was good because we didn't make the connection.

I'm asking myself that for quite some time.

Do you use a tracking blocker. That could also be a reason why you get bad recommendations.

Maybe the link should be changed to https://noyb.eu/en/noyb-files-complaints-against-apples-trac...

Thats the official press release of Schrems organization.

The Title oft the original Article is a bit misleading.

Its about their budget brand Honor.

I believe you got hacked. Perhaps you shouldn't have shared the link with the token included.

If dont know mich about these work related apps but all my banking apps work with a magisk based root. So maybe thats a workaround.

I have a similar setup but instead of SSH Tunnels i use wireguard.

In my case some services are not routed to the public internet and only accessible from within my privat wireguard network. E.g my smart home hub. I really like the flexibility to decide whats available for who.

What the hell

There is no way i would eat something linke that.

Sorry. I missed that is was an AMP link that skmehow didnt work after i deleted the twitter referee.

Here is the correct Link. https://www.abc.net.au/news/2020-10-21/soldiers-killed-man-w...

I resubmitted it here https://news.ycombinator.com/item?id=24864696

He's not a native speaker. His german has a strong spanish accent and he es using a structure in his sentances that is more like the english structure.

Nevertheless his lectures are really good. I did my bachelor degree at Freie Universität Berlin took part in some of his courses. His main research topic is AI and robotics.

Maybe the people who did the theming stuff aren't the ones that would working on compatibility issues.

Thats usually the case in company driven projects but not necessarily in community driven open source projects.

If you would be the project lead and a person comes to you and tells you that he would like to create a newer modern theme. If you tell him/her no and that he/she should work on something completely different i wouldn't be surprised if you would never see him/her again.

Apprently Milgrom didn't pick up his phone when the commitee called him. So his neighbor who happens to be Robert Wilson woke him up.

The best thing, there is a doorbell video of that happening: https://twitter.com/Stanford/status/1315631500080148480

Thanks. Wasn't shown on the slides.

Interesting points:

ZEN3:

- 19% IPC improvement

- 8 Core CCX complex with unified L3 Cache (before 4 cores shared half the L3 Cache)

- Still 7nm process

Ryzen:

- 631 points in single core cinebench for 5900X - 640 points in single core cinebench for 5950X

- 26% performance increase in 1080p gaming compared to Ryzen 3000

- Models (Available November 5th):

  -5950X (16C 32T, 4.9Ghz / 3.4 Ghz, 105W TDP, 799$)

  -5900X (12C 24T, 4.8GHz / 3.7 GHz, 105W TDP, 549$)

  -5800X (8C 16T, 4.7 Ghz / 3.8GHz, 105W TDP, 449$)

  -5600X (6C 12T, 4.6GHz / 3.7 GHz, 65W TDP, 299$)

Radeon:

6000 Series launch on October 28th

According to the Guideline "please use the original title, unless it is misleading or linkbait; don't editorialize" the Title should be "What’s New In Python 3.9"+

https://news.ycombinator.com/newsguidelines.html

My prediction about that is:

Two years from now - no one will care about that

> roughly half of U.S. corporations report being attacked by ransomware last year.

Holy f..

I knew that is was bad. But that is way worse then i expected.

My brother uses Zapier to automate a lot oft the processes in bis company. Especially the backoffice processes. He is is not a tech savy Person. If you ask him what an API is, he has no idea.

It obviously only works if you use SaaS pltaforms for everything but, sadly, thats the default in a lot of companies anyway.

It is not obvious from the title but Element is actually acquiring Gitter. Quote from the article:

> In practice, the way this is happening is that Element (the company founded by the Matrix core team to fund Matrix development) is acquiring Gitter from GitLab, with a combined Gitter and Element dev team focusing on giving Gitter a new life in Matrix!

There is also another blogpost from the elements side https://element.io/blog/gitter-is-joining-element/

I remember that i read about a lawsuite were someone tweeted the hash of a document and proofed that way that this documenta existed at that point. I believe it was about a patent infringment and they even brought a twitter employee in as a witness to testify aboht the imutability of tweeta and the timestamp.

Cant find the article (hash is not a good search phrase when it comes to Findung an article about twitter).

Isn't that part of the beauty. I once came across an article about the making of Diflourdioxid that was one of the best reads i had thia year.

To anyone who is intereted in the backszory of Libreoffice and speaks German: The Podcast "Alles gesagt" did an Interview with Marco Börris (Founder of StarOffice). Mind you the Interview is 6h long but absolutely worth it. Later Mr. Börris was working for Yahoo and was involved in Yahoos side of the Development of the first iPhone. He has some really interesting stories to tell.

https://www.zeit.de/gesellschaft/2019-03/marco-boerries-alle...