Hacker Newsnew | past | comments | ask | show | jobs | submit | neilv's commentslogin

This is a great idea. I have done this manually, and it was a lot of work.

Even with a tool, people will still have to understand the output, enough that they can spot situations like "this part doesn't make sense at all", "that bit isn't static", "holy crud, there's an unsecured secret", "this part suggests a dependency on this other server we didn't know was involved, and which the tool doesn't investigate".


I agree! It's always a 'best effort' tool. There's going to be corner cases where something that might end up in the 'logrotate' role could arguably be better placed in a more specific app's role.

It does an okay job at this sort of thing, but definitely human eyes are needed :)


That's a tricky one for public writing discretion. The Sun and Broadcom connections add to the point. Something a person with that background said was surprising. And the exact wording in one of the quotes was relevant.

I don't know whether I would've identified the person. As a principal-ish engineer and early startup person, who interacts with teams and all up and down the org charts of companies, it's important that people trust me. One part of that is to show discretion when entrusted with information. It's nuanced.

I have some WTF quotes and situations from recent interviews that I've decided not to share. The most recent one I did share was relatively mild, and I decided to paraphrase what the out-of-line person said, and be reasonably confident the person couldn't be identified. The incubator mentioned is harder to obscure, and is relevant to some people, so I tried to find a reasonable balance, but they should know who they are and be able to take some criticism, so I didn't worry much about it. https://news.ycombinator.com/item?id=46415495


George Lucas's other influences:

"George Lucas in Love" https://www.youtube.com/watch?v=mZ49Smi2SLQ


I hope this doesn't lead to further cracks, and PS5 multiplayer games being overrun with cheaters.

Once PS3 was cracked enough to run game mods, every PS3 GTA freeroam session was overrun with obnoxious cheaters, ruining it for everyone else. (Sorta like the tech industry.)

In most computer tech things, I'm all Linux, OpenWrt, Coreboot, GrapheneOS, etc., but the game console is one thing that that I like being locked down.


I don't, your forced under the mercy of that they keep supporting. At any time they can render your console usless and force you to upgrade.

Consoles are e-waste in my eyes, perfectly good for other uses but liocked to what the vendor wants to give. Limited by the hardware that's given and then nagged to buy latest model.

Why am I not allowed to turn an old PS4 in to a Linux router? It has a beast of a CPU, USB ports and suports SSD's, what's the issue?


> Why can't I turn an old PS4 in to a Linux router?

I simply sell my game consoles when I'm done with them.

They would make terrible Linux routers, even if they were unlocked.


Sure, you can do that. However the taste knowing that I will soon be nagged to update with less features working makes it a waste, I paid $$$ for it.

Shouldn't I be allowed to repurpose it for other uses than just a console when it becomes EOL?


> Shouldn't I be allowed to repurpose it for other uses than just a console when it becomes EOL?

Yes, once hardware becomes some kind of end-of-use, end-of-support, or end-of-life (exactly what, to-be-determined), the brand should be required to unlock any aspect that hasn't already been unlocked, so that people can reuse the hardware. (And maybe put the unlocks in escrow before then, in case the brand goes out of business.)

There are also situations in which hardware should be unlocked while within use and support. But probably not for a given gaming device, or not in a way that permits that hardware be used as the gaming device while unlocked.

Gaming consoles are a very rare thing that I want locked down, as long as I am sharing whatever pool of online gamers that device accesses. (Because online gaming has way too many people who haven't yet learned to play well with others, and cheating in multiplayer games is a thing that many do.)

And the fact that I have less control and ownership of a gaming device is one of the reasons why I use a dedicated device for gaming, and also isolate it on the guest VLAN.


This is moot, we both have different views.

As someone who really tries hard to fight the environmental waste (I litter pick, I donate, I reuse, I repurpose) it hurts to see to walk by a second hand tech store with stacks of old consoles in the window (excluding retro here) knowing they will just end up in a landfilled polluting the world for the rest of entirety and cannot be used for anything more than a paper weight. This isn't just gaming consoles.

My view is that cheating is a developer/studio problem not hardware. If game companies actually enlisted proper moderation this wouldn't be an issue. Where can I report cheaters, How do I report cheaters? That was never a provided option to me. Although maybe now you can, I don't game online as much as I did, but even when you could, not one thing was done about it.

I kicked hackers back in the day in my CS:S servers. If they actually hired moderators who actually did their job then this wouldn't be so much of a problem.

I don't disagree. Knowing that the device is locked down I cannot ensure that I am not being used for monetary gain.

Isolating to a VLAN should be the de-facto but most outside of tech have no idea what that is, so now you have a corporate brickable console prone to monitoring all for the sake of mitigation of hacking and to force you to upgrade for cash grabs.

Yes, realistically Nintendo and Sony do somewhat provide a service where you can still play a PS3, as that of a PS2. They want folk to use their consoles but knowing they could just axe it like so, deters me from buying.


> Cons of a publisher: [...] they actually do little to no marketing of your book.

Unless the publisher has already written off a book, don't they have incentive to market it?

There are some low-cost things you can do to market a book, and they reportedly make the difference between no sales, and some or many sales.

And a publisher can learn the currently effective marketing methods, and then apply that skill across books of many authors.


No, their incentive is to wait and see what books are taking off, then pile on the money when they know it's already a winner. Today, unproven authors are expected to do their own marketing.

For the marketing that has significant costs (e.g., paying for ads, paying for show appearances, paying other influencers to plug, making quality videos for social media, travel for events).

But it costs almost nothing to do ARC readers for reviews and ratings, and it's free to time things for the Kindle store algorithm. You just have to know to do it, when.

And there's some other "free" marketing that publishers should have automated by now, because they can amortize that across many book releases.


You know how Facebook became a popular employer among new CS grads, by paying more than anyone else?

You know that book/movie, "The Firm", in which the new law school graduate gets a surprisingly lucrative job offer? (spoilers) It turns out that the reason is Crime.


What point are you trying to make? Any company offering above market compensation is engaging in illegal activity?

Not always- see Costco. But in a world where every company is trying to minimize expenses to maximize profits, paying significantly above market is at the very least an indicator that there may be something fishy going on.

It's a valid business strategy to hire the best and brightest in the field, and to pay higher than average to attract that talent -- if you can afford it.

"Big law" firms are a good example of this too: they pay way more than some random family law practice.


The "if you can afford it" is pulling all the weight there. Why can certain companies afford it more than others in the same market? The context of this thread is suggesting that those companies are doing more crime or crime-adjacent activities.

Sure, I understand the thread's implication and I'm certainly not saying that it's never true.

But some companies have the choice of hiring, for example, one really great engineer for $500k, and one very solid one for $250k.

Another organization might want to hire three engineers for $250k.

A third, perhaps, wants to hire seven at $100k.

They're all spending the same amount of money, but not every company can "afford" that spend -- especially if they need several engineers working on unique feature sets.

I just think it's a leap to say that every company paying more than average market value is criminal.


Yes and what do large, white shoe law firms work on primarily? The largest clients are the ones with lots of…legal activity.

What types of clients might those be?


Costco's IT department is not above market rates in the Seattle area fyi.

How I understood OP - is that Costco pays better than other big retailers. Also probably not only for IT department, but on average (including cashiers and such).

Yea I get that.

But the context of the conversation is white collar crime, corruption, or unfair practices, and paying significantly above market rate.

Costco is a very egalitarian organization. They pay is flatter across the entire hierarchy. Lower rank people are paid more, higher ranked people are paid less. They are a super ethical organization, I'm a big fan (though they could do better at incentivizing innovation).

It's just not the same pattern as paying gigantic amounts of money to hoard up "CS grads" or lawyers.


I don't think he implied that. Criminality and ghoulish ethics are just one of many reasons a company may offer above market compensation.

Yes. But only because every company is engaging in illegal activity, big tech just more so.

Sure seems that way, no?

Low ethics high pay? Higher margins from lower ethics?

At some point does complacency with scammers become racketeering or criminals conspiracy? Knowledge is an element of crime and they know people are being scammed yet look away from it.


Any company offering above market compensation is engaging in illegal activity?

To quote Randall Munroe, "Correlation doesn't imply causation, but it does waggle its eyebrows suggestively and gesture furtively while mouthing 'look over there'."

https://xkcd.com/552/


What point are you trying to make? That Facebook is not trying to push the boundary of laws and ethics?

It's a short leap from "the hacker company" to "the scammer company". A short and very, very, very profitable leap

Facebook was never "the hacker company". Zuck was a scammer himself when it was still TheFacebook.

  Zuckerberg: Yeah so if you ever need info about anyone at Harvard
  Zuckerberg: Just ask
  Zuckerberg: I have over 4,000 emails, pictures, addresses, SNS
  [Redacted Friend's Name]: What? How'd you manage that one?
  Zuckerberg: People just submitted it.
  Zuckerberg: I don't know why.
  Zuckerberg: They "trust me"
  Zuckerberg: Dumb fucks

I know a lot of people who won't work for some companies for ethical reasons.

Though, sometimes the exact reason is muddied, since companies that are perceived as unethical in how they behave externally are often also perceived as unethical in how they behave towards employees. So you might object on pragmatic grounds of how you'd be treated, before you ever get to, say, altruistic grounds.

Also, sometimes fashion is involved. For example, many people wouldn't work for company X, because of popular ethical objections to what they do being in the news, but some of those people would probably work for an unknown company doing the same things, without thinking much about it.

But often it's just "I don't like what company Y is doing to people, and I wouldn't work on that, even if they treated employees really well, and it was really fashionable to work there".

(See, for example, the people who refused to work for Google after the end of Don't Be Evil honeymoon phase, even though they generally treated employees pretty well, and it was still fashionable to work there.)


I don't think that's diagnosis (as a clinical term); closer to defamation.

Is it necessary to a point you want to make?

You can just point to behavior of a given entity, such as to conclude it's untrustworthy, without the problematic area of armchair psychoanalysis.


I redacted the comment because you’re right. I need a better form to express the point.

Good move. We all have second thoughts on occasion.

You might want to include an "Edit:" when substantially changing or replacing a comment.


I noticed that they didn't ban "walkie talkies" or "radio transceivers", and I wonder...

Some of the more niche/hobby transceivers could be used by a group of bad actors at an event, for comms that are less-monitorable than smartphones and mainstream COTS handheld transceivers.

And such hobby transceivers/transmitters might not operate on the list of RF bands that would be jammed by authorities when there's a suspected terrorist situation.

Many of these devices have exposed PCBs (either general-purpose SBCs, or specialized). So, saying "no Raspberry Pi" could be an attempt to ban all exposed PCB devices. And "no Flipper Zero" is the non-exposed-PCB problematic device that everyone has also heard of.

Kudos to the people keeping the event safe, especially given all the recently emboldened bad actors right now, who might be attracted to the event.

For hobbyists, there are numerous opportunities to advocate for your right to, e.g., carry electronics hobbyist gadgets, or to wear an artistic blinking LED jewelry piece strapped to your chest. Some of those opportunities need help, while some other opportunities could be counterproductive to your cause.


Or pagers

What's also hacker-unfriendly is giving all your hacker-friendly article's traffic to Cloudflare, and then letting Cloudflare block Tor exit nodes from reading your article.

I'm using Firefox on a Linux workstation (without Tor) and I still got the CAPTCHA. The statement "blog.adafruit.com needs to review the security of your connection before proceeding" is misleading at best. Shame on Cloudflare, this kind of dishonesty makes me not want to trust your RCA marketing pieces.

I received the same prompt from a Windows 11 machine at work. This probably has nothing to do with Tor or Linux, but their Cloudflare settings.

In addition to Cloudflare's usual nonsense (e.g., give us all the cleartext because reasons, and also unblock our bad-UX code that doubles as an additional tracker), it looks like Cloudflare here might also be blocking Tor exit nodes (either proactively, or in response to detected abuses from those addresses).

Probably because the HN hug of death looks like a DDOS attack.

Probably because they're using the cloudflare defaults which are terrible like everyone else.

Same with Firefox Focus on Android.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: