Hacker Newsnew | past | comments | ask | show | jobs | submit | karl_nerd's commentslogin

i guess this is the actual section they talk about:

(i) Sell any new motor vehicle directly to a retail customer other than through franchised dealers, unless the retail customer is a nonprofit organization or a federal, state, or local government or agency. This subdivision does not prohibit a manufacturer from providing information to a consumer for the purpose of marketing or facilitating the sale of new motor vehicles or from establishing a program to sell or offer to sell new motor vehicles through franchised new motor vehicle dealers that sell and service new motor vehicles produced by the manufacturer.


So i'd wager there'd be quite a few celebrity dick picks available too if hackers wanted them. We know men like to send them unsolicited, and I'm sure those celebrities had received more than a few. But there are none. And why? Because those women were specifically targeted by people with a lot of resources and patience. (it's important that they were targeted specifically for being women).

To all of you idiots blaming the victims out there right now "should have used 2fa, should have used stronger passwords":

1. You don't know if 2FA was in place, you don't know what strength the passwords were.

2. Again: those women were highly targeted. Can you defend yourself if someone takes a week/month long project to break into your phone? (Also this was during heartbleed and other big vulnerabilites)

Come off your bullshit high horse. Don't blame the victims here.


Re: 1) 2FA wasn't in use by these individuals. If you read the Apple release they not only neglect to mention 2FA as a source of the breach but actively encourage users to sign up for it. If 2FA was in place I doubt that this vector would have been successful.

That being said, I think the culpability is on Apple here as much as it is on the individuals responsible for obtaining the links. Security questions were never good security and companies need to start moving away from failed models.


Security questions are just horrible. 2FA is good, but these celebs have people that handle their social media, so even if the technical leaks are plugged, things would just move to social eng. tactics, bribe an assistant, etc.. Probably a number of people have a celebs Twitter password.

Pretty worthless statement by APPL. "happpens all the time", "not our fault", etc.. They should be called out for security questions in the 1st place if that's what they use at all. Even after Sarah Palin which was greatly publicized. These companies learn nothing.


if your comment is intented to mean 'foreigners are coming over stealing our jobs', feel free to leave it as it is. Otherwise, you might wanna rephrase what you wrote..


Iceland had 0.00021 UNHCR refugees per capita in 2013. same number for sweden was 0.0097 (almost 50x). I think its fair to say that iceland could take a bigger reponsibility internationally. As a small country they cant carry a major reponsibility (and remember that the biggest refugee countries are mostly neighbouring countries of conflicts: pakistan for example) but they could definitely do more.


>Iceland had 0.00021 UNHCR refugees per capita in 2013. same number for sweden was 0.0097 (almost 50x). I think its fair to say that iceland could take a bigger reponsibility internationally.

Why do they have a "responsibility" in the first place?

What about the responsibility of those responsible for the refugees, including Western countries fucking up the refugee countries (igniting conflicts, maintaining colonies and neo-colonial pals as leaders, putting diplomatic pressure, helping topple and de-stabilize those places, etc) to install their lackeys and grab their resources, to stop doing it?


hey there! kudos for the simple explanatory, no-sound, no-parse-style-hollywood production videos! this is one of the examples where autoplay makes a lot of sense, and it's very easy to get a grip of what i can do with your product. Good job!


This is some really good UI code. You're storing the state in a very clear way and do the geometry calculations in one place, making it easy to understand what's going on. Nice!


I understand where you're going here: pubsub communication can be both a blessing and a curse, it can be hard to ensure a consistent usage, hard to debug when there's long chains than one place -> the other.

I think the sandboxing from aura.js is pretty interesting here, since you can always look up which widgets are allowed to talk, it makes it easier to narrow down the problem.


What I think is interesting to see, is that the patterns from Nicholas zakas' "scalable Javascript architecture" spreads into new frameworks.

Enforcing components w/o return values, communicating via pub/sub is also seen in aura.js and backbone marionette. I think this thinking will lead to more stable, easy to change js apps. Exciting!


I second "writing a thumbdrive from scratch"! There's much more to it than it sounds like. Travis talks for example about the possiblity of the drive being able to fingerprint the system it's mounted on, recognizing it's 'home' machine. From there he suggest counter measures like recognizing an indexing process by the read patterns and have the drive erase itself, or giving a different checksum every time the content is hashed.


I'm getting very tired of hearing this. It's like we make up excuses for startups being dicks. There has to be a way to find business model that involves showing respect for your users and the content they're creating, while still making money on ads, offers, etc.

It also completely ignores the fact that paying customers get ripped off all the time, by the companies they pay money to. In the wider perspective, being a dick doesn't seem to correlate to receiving money from your user-base.

Here's an excellent text about it: http://powazek.com/posts/3229


There has to be a way to find business model that involves showing respect for your users and the content they're creating, while still making money on ads, offers, etc.

I agree with the first part but not the second. What if the best way to show respect for your users is not to pester them with ads and offers, but to let them pay you directly for the value you are giving them?


I think that's my biggest hangup with this. There was never a "Well, we're thinking about doing this with your photos, but we were wondering if you valued the service enough to pay for it instead?"

There would have still been outrage, but people pay to get rid of ads on services all the time.. particularly if they want to continue a streamlined experience. If not, they can tolerate the ads. But using my photos as ads? If I opt-in, sure. But I don't want that by default. I'd rather see something irrelevant than have my likeness potentially supporting a business I don't want to.


I think it's important to keep saying it so that the general population begins to understand it. Eventually it will trickle out. I don't think it has yet. So, while I agree with you that it's an old saying in our circles, your friend's sister may not realize it.


I'd like to see people become more aware of this sort of risk, but I don't think that slogan will take off outside geeky circles, and I don't think we want it to.

There are companies which - by most people's standards - quite reasonably make money from free services. Telling people that they're all stupid sheep for using Google isn't going to get much traction. We need to highlight real problems, like this move by Instagram.

Lots of us also work on open source software, in which case telling people not to trust anything that's free is shooting ourselves in the foot. I don't pay for Linux, Libreoffice or Firefox, but I'm not 'the product' there.


It's not really calling them stupid sheep, but rather a reminder that they are interacting with businesses and they should pause to think about the business model when they do that. It's really about educating, not name-calling.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: