Hacker Newsnew | past | comments | ask | show | jobs | submit | gettingoverit's commentslogin

Yeah, I've first seen it over 15 years ago. Usually you use operator of the same priority as you'd like, and also #define xor &xor_i& to get all that detail out of sight.

The last time I remember, the green company did the same HTTP thing literally with their driver downloads from the website, and refused to fix it.

Makes me wonder, how much of that 4 month delay was spent deliberating with the state actor. As if there was Prism, and both companies were legally bound to allow MitM to happen, and thus don't have a bug bounty for it.


It doesn't smell like a state actor to me, just gross negligence. Brushing up on the Reddit comment we wrote, the MITM isn't exploitable by default, since the client will error out at the 301 redirect and leave an obvious black window on the user's desktop. Exploiting a user would require replacing the 301 redirect with a direct download, which requires the same amount of effort whether the default disclosure was broken or not.

Now if they could've started shipping a modified AMD auto update that followed redirects, that would allow them to pwn users of the updated program. But it would do nothing to people who had installed older versions, up to the version the author installed (which left a black window open indicating the downloads never completed)...


Actually, the whole website is fire. There are articles on the same level on how to select T-shirts and pants.

This is the second time I see a reviewer online doing the thing that was common a couple decades ago: actually doing the research.


What was the other time?

Do you propose taxpayers to shoulder compensations to AI companies that robbed them of data and jobs? I guess not being absurd is communist now :)

I'm not proposing anything. I don't think it's the government's remit to be honest. But government seizing the means of production is literally the definition of communism.

Shouldn't be a problem, as AI companies expropriated knowledge and jobs.

Nice to see someone going the same path as me!

Haven't read the book or used Hashcat, I have a question. Is there anything yet to generate rainbow tables out of password regex?


Like detecting constriction or loss of integrity of blood vessels, and doing the corresponding intervention.

The saddest thing here is not that it requires some future nanotechnology, but is achievable at the present scientific level, yet too expensive to develop, and wouldn't see FDA permission in a decade or two anyway.


It's quite easy to check responses to other customers in other threads there, and somehow I see quite a lot of "oh, go to that other support" and ghosting.

If you create support ticket on hacker news, then yes, you will probably get it waved. It's somewhat sad that HN is their support forum now.


Send me a PDF of your bill, and I will happily print out 10 copies so I can wave them all above my head


It would make even more sense to rename it to ollama, get a copyright for the name, and see how thieves complain they've been robbed :>


So basically they got fined a cost of single tractor repair, and it didn't even create a legal precedent due to settlement? Someone believed that "will make available" has any consequences, given decades-long tradition to just ignore such agreements? Well, great.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: