Hacker Newsnew | past | comments | ask | show | jobs | submit | anonymousjunior's commentslogin

When did you try Uber at SFO? They changed the pickup process a few months ago and it's been a nightmare ever since. I've found the trick is to make the trek through the airport to the International terminal where they're still allowed to pick up curbside.


This is what's really concerning. If FSB was able to actually implement something and shell all nginx boxes (and thusly obtain SSL certs, intercept communications, etc..) imagine how much access they'd have.


Then they would definitely advertise it by attacking the company so that the whole world would know about their secret backdoor. Very smart, indeed!


Physical access is easier to get than remote access when you have a baton and the intelligence of a cop.


FSB/GRU are more than just thugs with batons, they are professionals who could easily slip in to a building at night and access computers without anyone knowing. Basically the Russian CIA.


GRU have been severely embarrassed quite a few times in the last few years. It does seem that they're much closer to thugs with batons.


Just thinking about it would have a chilling effect which to the authorities may be better than actual access.


I'm going to switch from nginx to Caddy, so I guess?


On the flip side I feel like nginx has too high of a profile. It'd be better to target some other low level system package or npm/pip module, etc.


that's not going to happen, too many security experts constantly monitoring nginx. That's the beauty of it being a high profile open source project.



"I keep track of these things, Clark. One of us has to."


Just like too many security experts monitoring crypto standards so NIST wouldn’t try to slip in a backdoor?


No, not similar. Crypto is very different.


Interesting utility. I can see a few really exciting use cases for this.

If I had one wish it'd be native support for syncing generated snapshots to S3 or Google Storage for easy transfers between authenticated systems and users. Maybe I'll take a look at building out a PR for that over the weekend if that's okay


Yes, by all means please do. Simplicity of use is very important to me, so make sure it's generally applicable and easily understandable, but other than that - go for it! Awesome.


Why can't we ban ibuprofen?

Nicotine is an extremely complex molecule which has been proven to have positive effects in the treatment of autism, as well as mild cognitive impairment, such as Alzheimer disease. Blanket statements like this are harmful to the general nature of science and show a disregard for empirical evidence.

Nicotine can be utilized for positive measures at therapeutic levels and was in Phase III clinical trials with the FDA for such uses before the backing pharmaceutical firm ran out of money. I recommend you do some research on Nicotine as a compound and interactions with nicotinic receptors in the body, the pharmacology is actually fascinating.


Segment write keys are technically public. Most sites have them published in the client facing JS


Segment actually does a pretty fantastic job onboarding new personnel and funneling them through security training. Recently gave a great talk here at the Bay Area OWASP meetup about how they've gamified security awareness training with an internal leaderboard and random CTF challenges.


Does anyone actually have up to date interest data on FB these days? I can't remember the last time I "liked" an interest or artist page. All of the data in the system now is leftover from when I was like 15 using the platform (24 now and yes, actively dating).

Only thing I actively use FB for these days is messenger and fantasy football shit talking groups, which are all "private".


I was more talking about the "dark" data they collect from our surfing over the internet =P Not great, but it could potentially help with this one particular case.


lol it's literally the initial tech screen for Google


It's not though. They expect shit to run afterwards. As someone who primarily writes Python (whitespace matters) in Vim (it's universal), having to code in Google Docs is a horrifying experience


They expect shit to run afterwards.

No reasonable interviewer expects you to write perfect code on a whiteboard or in a non-IDE editor. I'm sure there are plenty of unreasonable interviewers, which is an indicator that you don't want to work for them.


That was my thought, but I got syntax complaints after my first tech screen with Google. Now Asana is asking me to do the same so I'm hesitant to even move forward.


My biggest issue is hitting spacebar 20 times in a row. I usually work in Python via Vim so Google Docs is a pure shitshow for me.

"Do you want tabs or spaces?"

> "Spaces please"

"Fuck... okay I guess..."


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: