HNHacker News
TopNewBestAskShowJobs

mjcl

1,176 karma · joined June 27, 2011

submissionscomments
mjcl··on $5.6B cloud company Fivetran acquired its way to survival
Our last Fivetran renewal switched from credits to straight $-per-MAR. The remaining credits were converted to a $ credit.
mjcl··on Linux distro downloads MySQL database password with curl to “fix” security bug
Please, yes. At a previous job, a department used a Windows accounting app that had a machine-level ODBC connection with the database credentials saved in it. A user figured out you could use Microsoft Query to pull data from the ODBC connection into Excel. This worked well until she accidentally deleted 90% of the vendor records from the database while trying to filter some data. I couldn't even really be upset at the user, a bunch of dumb product design decisions had to align like swiss cheese for this to happen.
mjcl··on Over 20k servers have their iLO interfaces exposed to the internet
As far as I can remember, HP has always randomized the default iLO password. ProLiants used to come with a "toe tag" (little card attached to rack mount server by string) that had the iLO MAC, iLO hostname, default username and default password. Newer ProLiants put it on a sticker on the server itself or on a pull-out tab.
mjcl··on Merchant Service Horror: Amazon Pay and the Disappearing $2300
If Amazon was dropping the last digit from the routing number the ACH credit transaction attempt would have never made it to the destination bank. The fact that the destination bank was able to tell a digit was missing indicates the routing number was correct. A transaction with an 8 digit routing number would have never have left the OFDI because routing numbers are 9 digits.
mjcl··on I hate password rules
The first place I worked was like this, with the exception of the long complicated passwords. We told people to call the helpdesk to reset their password and would save their password to an Excel sheet. This was improved slightly by rolling out a self-service password change tool that logged the passwords to a database.

One day someone that had legitimate access to the password list was fired/quit and the VP decided we needed to have everyone (~800 users, 700 remote) call the helpdesk to reset their password. All the helpdesk calls waiting for a password reset clogged the voice T1 (23 lines) for the office, preventing most calls in or out. Oops.

Thankfully when the company came in-scope for sarbanes-oxley the external consultant we hired to help with the audit said there was no way we could continue logging user passwords and stay compliant.

mjcl··on Plaid settled $58M lawsuit over alleged consumer data sharing
Wells Fargo worked with Plaid to implement a direct API (incl. oauth) because it meant Plaid would no longer hold onto the credentials of millions of WF customers.
mjcl··on REvil ransomware executes supply chain attack via malicious Kaseya update
Not sure if this is the thread you were referencing, but it is useful: https://old.reddit.com/r/msp/comments/ocggbv/crticial_ransom...
mjcl··on IBM's 18-month company-wide email system migration has been a disaster: sources
My experience was that MS understands how IT departments work (from small to large) and are fantastic at providing resources to customers if it means you'll end up using more MS products. At a prior job they paid for a local consulting group to configure the Office 365 tenant, connect it with the existing on-prem infrastructure and train the staff on migrating mailboxes.
mjcl··on YouTube TV removed from Roku channel store amid Google contract dispute
Yes, I was extremely annoyed when Netflix gave me a month of "free upgrade" to 4k with no way to remove it or force HD streaming short of cancelling the account.
mjcl··on 4chan founder Chris Poole has left Google
seppo!
mjcl··on EU vaccine rollout severely lags behind
Another hypothesis: Oxford was originally going to partner with Merck [1] but there were no supply guarantees in that contract. AstraZeneca was willing to give guarantees and run production in the UK, so the UK government leaned on Oxford and had them partner with the more agreeable supplier.

[1] https://news.sky.com/story/covid-19-rejected-contracts-and-a...

mjcl··on I guess I have to watch ads everywhere on my $1,500 LG TV now
It's a spec, I've yet to see a device that implements the spec.
mjcl··on The Last Message Sent on AIM
Skype for Business / Lync was originally called Office Communicator and has always used SIP for client/server communications.
mjcl··on Simple Bank Is Closing
As a customer, thank you for a wonderful experience! The app was the reason I kept using Simple.
mjcl··on FCC orders phone companies to help trace illegal robocallers
> It's a very ancient system, much older than the internet.

Actually, you could argue they're around the same age. ARPANET switched from NCP to TCP on 1 January 1983 [1] and the initial SS7 standard was released by the ITU in 1988.

[1] https://tools.ietf.org/html/rfc801

mjcl··on Zero-click, wormable, cross-platform remote code execution in Microsoft Teams
It sounds like the normal Microsoft support (aka PSS) when you don't have a support agreement. If the problem you are reporting is solved by a hotfix or update, then MS refunds the support fee.
mjcl··on My experience as a poll worker in Pennsylvania
And the Sequoia optical scanner (the 80s looking one) doesn't neatly stack the ballots inside, they drop into one of two hampers inside (ballots that have write-ins are segregated) and become a huge mess.
mjcl··on Paris hails victory over short-stay rents
When the larger property manager companies offer short leases (3 - 6 mos) the monthly price is usually higher to 'recover' the cost of more frequent unit turns (Thanks to 'revenue management' from companies like YieldStar). These options aren't really intended for people on the edge, since applicants still need to pass the same credit screening requirements which are usually based on income to rent ratio.
mjcl··on Windows 10: HOSTS file blocking telemetry is now flagged as a risk
That link is for an Open License. The MS Open License program allows you to purchase volume licenses individually, but the initial MS Open License order must be for at least 5 licenses (of something).
mjcl··on Twitter is at its best when verified accounts can’t tweet
My experience has been about once a month the iOS app (phone & tablet) will revert from Latest to Top. It will show an easy-to-miss toast message saying "You're now seeing top tweets first."
mjcl··on Wirecard offices searched as prosecutors probe management board
TabaPay is an option, as is Stripe.
mjcl··on GE switches off light bulb business after almost 130 years
Yeah, I have about 15 of the old yellow/silver Phillips LED lights and they've been fantastic. The only one that has died overheated because it was in a globe fixture without enough airflow to cool the bulb.
mjcl··on California voters to get mail-in ballots for 2020 election
They compare it to the signature on your registration form.
mjcl··on California, Oregon and Washington announce western states pact
I think this is a polite way of these states saying that they're not going to follow any 'national plan to reopen the economy' put out by the White House.
mjcl··on FDA grants emergency authorization for first saliva-based coronavirus test
The legislation that created the FDA (the Food, Drug & Cosmetic Act) defines drugs to include "articles intended for use in the diagnosis, cure, mitigation, treatment, or prevention of disease in man or other animals". See https://www.law.cornell.edu/uscode/text/21/321, section 321 (g)(1)(B).
mjcl··on As more of them die, grocery workers increasingly fear showing up at work
Not legally, though it sounds like if you put postage on it, it would be: https://www.law.cornell.edu/uscode/text/18/1725
mjcl··on Ask HN: What data points do POS systems send to Credit Card Companies / Banks?
The answer depends on the vendor and your bank. Beyond the basic vendor, amount and description, some vendors transmit additional details like tax breakdown, travel class and line-item data. I found a PDF from Wells Fargo[1] that details some of the information that's transmitted.

On the bank side, I've seen the Level 2/3 information exposed to users of a purchasing cards (read: company credit cards). On the monthly statements we'd see line-item details for some vendors, like Best Buy. Travel purchases included flight segment details, cabin class, etc.

[1] https://www08.wellsfargomedia.com/assets/pdf/small-business/...

mjcl··on U.S. Navy bans TikTok from government-issued mobile devices
Currently Grindr is owned by Kunlun, but they have agreed to sell it by June 2020.
mjcl··on Ransomware, Data Breaches at Hospitals Tied to Uptick in Fatal Heart Attacks
> Can we tie logins to employee badges to skip all password entry? (Lost badges would thus warrant reporting loss.)

You can, but typically you'd use a badge with a PIN. If you use something like this[1] with virtual desktops (VDI) that don't terminate your session when you disconnect, you can get the "time to login" down to a few seconds, since it's the same RDP session following the user around.

[1] https://www.identityautomation.com/iam-platform/healthcare-c...

mjcl··on Pagers, faxes and cheques: Things that might seem obsolete, but aren't
Absolutely, for a long the company was too cheap to pay for real time tracking software and the timeclocks.
← PreviousPage 3 of 7Next →