Hacker Newsnew | past | comments | ask | show | jobs | submit | Nerada's commentslogin

Right? I feel like rainbow tables for NTLM have been around for decades, though at-cost. This seems incredibly low effort on Google's part.


Is there a reason you chose to roll your own software instead of just using Anki? Custom algorithm you think is better than FSRS? UI preferences?


I don't exactly think I have an algorithm better than FSRS yet, but I have an algorithm I like better. Hopefully I'll have more to say about this soon.


"Employee surveillance" sounds a lot more nefarious than the reality of these systems for most organizations.

Your network admin has had access to the proxy, and by extension, all your browsing history since forever. Now, your UEBA does that, but mainly just sits there and flags things like a user normally hitting a single host to suddenly hitting 300 hosts on the network, or a user having an average data upload of 500MB/week to 200GB in a single session.

Very few people care if you're using the corporate network to listen to YouTube Music (or even looking for other jobs), most just want to be notified of data exfiltration, compromised accounts, or malicious network activity.


It's not that simple. The more data points there are, the stricter the rules can get. A user having an average data upload of 500MB/week would be flagged at 50 MB in 5 minutes. I expect that the system self-adapts until it flags at least some users and I expect those flagged are not the technologically challenged users that browse anywhere and click anything, but the most competent users that perform "weird" actions such as ping, ftp, open the command prompt, etc.


> Very few people care if you're using the corporate network to listen to YouTube Music (or even looking for other jobs),

In many jobs, you will be fired on the spot for looking for other jobs


Probably for usage with [the now sold off] HP Records Manager.


I work in a heavily regulated industry, and 'yes' is the answer for us, even going as far as mobile-first IM platforms. There's a very small number of vendors who pull in lots of money making UI hooks for things like WeChat and WhatsApp just so we can store the messages for the people in Risk and Compliance.


I can’t remember what the case was but I recently read an article where somebody was joking about a company doing something illegal and the response from the legal department in Slack was “ha ha shut up”


This is the norm at big companies.

During your Company Ethics training (when you learn about insider training and not bribing government officials) they also tell you "never comment on the legality of something unless you're a lawyer. But if you do, say it in a meeting and not digitally."


I stopped buying anything Samsung for essentially the same reason. I was overseas and my S7 switched off and wouldn't turn back on. I walked into the flagship store and was immediately turned away because I didn't purchase it in that country.


I had a different experience, I bought a S21U overseas. While in UK the screen wouldn't turn on while the phone was on. I went to Samsung KX in London and a day later I had my S21 with a new screen and battery for no cost.


I think it's worth comparing to Apple here. I bought an iPhone from Amazon in UK and the screen developed a defect. Walked into an Apple Store after 19 months, without AppleCare and they gave me a new phone and migrated all the stuff over for me right there and then.

Not sure if they're that good now but I sure hope they are.


The UK has strong consumer warranty laws (extending to several years), and that rather than Apple's kindness of heart could be the reason. Thank the famous European red tape!


19 months is less than the 24 month minimum warranty for consumers across the EU (which used to include the UK).


There is no such thing anywhere in the EU, it's a very common misconception. What there is is a 24 month(actually 6 years in some cases) seller's responsibility for the product against manufacturing defects and being "not as described"(which can include lack of described performance too). What the law also says is that within the first 6 months(12 in the EU) any defect is automatically presumed to be a manufacturing fault and the seller has to rectify it free of charge. After that time the seller is also responsible, but you as the buyer have to prove that the defect happened because of a manufacturing problem. If your macbook stops working 23 months after purchase the seller doesn't have to fix it unless you can prove that it's because of a manufacturing problem.


In some places it is a minimum you describe and in other cases (a percentage of) the expected life of the product. Washing machines have different lifespans than phone for instance. Here we only have the 12 months of proof by seller/manufacturer and then it is the reasonable lifespan of the product.


For all practical purposes it works like a warranty though.

I just checked my local amazon clone, and for a mac mini the warranty is listed as 24 months for consumers and 12 months for companies.

There is no official Apple presence in Romania so I can't check their official position.


There’s a difference between a guarantee and warranty. You only have a guarantee for the first 12 months. The next 12, you have a warranty. It’s almost Impossible to prove a warranty.


I’m in Europe in a country where it works like this (not sure about the exact numbers). Last time I exercised my consumer rights was when the bottom glass fell off my Samsung smartwatch. I handed it over to the seller literally one day before the end of the 24 month period. There were some remarks about it being almost too late, but I got it repaired for free. I’ve never had a seller dispute my warranty claim at any point of the two years. I’ve never had to prove anything.


Well, I guess you were lucky - legally the seller didn't have to repair it unless you proved that the glass fell off due to a manufacturing defect - just because they don't have to do it doesn't mean they won't(it's less hassle and I guess you left a happy customer not one that will go and write them a bad review).


Where I am I don't have to care about that, it seems.


It’s probably a mix. I’ve had lots of stuff incl AirPods fixed for free well beyond warranty multiple times (I think because Apple knew they were prone to a defect causing cracking) and an Apple phone case replaced that others would probably say is “normal wear and tear” but legitimately degraded quicker than it should have etc. Apple online chat is also awesome!


Actually when I got my iPhone 13 Pro they said they said keep the receipt for the case in case it falls to bits so they can replace it free. YMMV.


Apple has a long history of being generous with repairs, nothing to do with the EU. Friend of mine, here in the US, got an entirely new laptop when his failed just out of warranty. Goodwill repair. And because they didn't have the old laptop available as a refurb, he got the current equivalent -- which was actually a pretty substantial upgrade.


It's hit or miss. My wife had keys failing under the butterfly keyboard replacement program, and the Apple Store tried to charge her to fix it. Apparently the technician who examined it "didn't know" about the warranty extension program.

How do you have a major repair program covering every laptop sold in the last 5 years and the technician doesn't know about it?


I’ve had similar incidents happen with Apple and other premium things, nowhere near Europe. It’s market forces that created an upmarket company with stuff like this as part of its identity. Thank goodness for global capitalism.


Same here. I have Apple iPhone 14 Pro Max with AppleCare+ which I broke during a trip to US (I'm in Canada). They were able to swap it with replacement at the Apple store in LA without any hassle. Too bad the SIM Card was also busted though :(


This is honestly something that would be interesting to own. It's not $950 interesting, but interesting nonetheless, just for a conversation piece about an elaborate forgery.

I've always wanted to either create or purchase intricate set props like the journal from Supernatural [0]. Fantastically fake, but just interesting to have.

[0] https://waywardjournal.tumblr.com/post/187259600588/reapers


You know, you could also have a forged forged employee badge. Give me a hundred quid and I'll forge one for you. Throw in some extra and I'll make sure it's extra forged and you'll have a story to tell to your friends.


But please don't send him the original #10 Apple employee badge. That would be fraud. In a sense, it would be a forged forged forged badge.


Maybe, but I wouldn't pay more than about $50 for such a forgery...


DDR5 comes with on-die ECC. My understanding is this only checks errors occuring within the RAM itself, not errors that occur during transmission to and from RAM.

My question is, how common are transmission errors over errors happening within RAM?


On-die ECC is so they can give you a memory array with a few faults. It's a yield enhancement not an introduction of ECC as you think of it.

Adding protocol-level ECC on top only helps, although it is somewhat inefficient.


Similar to SSDs, which are constantly switching to less and less reliable cells for density and now need fault correction built in to function at all.


Another problem with on-die ECC is the lack of reporting.

You have no idea if you have tons of errors and how many were corrected.


Sort of. It's not the same as extended ECC like ChipKill.

https://en.wikipedia.org/wiki/Chipkill

DRAM Errors in the Wild: A Large-Scale Field Study (2009)

https://static.googleusercontent.com/media/research.google.c...


LPDDR4/4X has also had on-die ECC for a while (at least the chips I'm used to, like in the Raspberry P); with such small lithography it's basically required to get the ram to work reliably.


I've been a happy MailInABox user for many years, but this looks great.


Essentially you hook up all your log sources to a User and Entity Behaviour Analytics (UEBA) platform, it comes up with a model of "normal" behaviour, and flags users for investigation when they start acting outside of those norms (or things you want to explicitly flag on).

No data egress for 6 months, then 20GBs of outbound traffic? Someone's getting notified to take a look and see what that was and where you sent it. You only authenticate against one host on the network, and suddenly you're hitting thousands of hosts? Someone's getting notified to investigate, &c.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: