Hacker News: lakerz16

New comment by lakerz16 in "Reverse engineering Ticketmaster's rotating barcodes"

lakerz16 — Tue, 09 Jul 2024 12:59:48 +0000

"Should happen remotely" – according to who? What is the security risk for the end-user?

"this suggest a fundamental lack of security practices at the company" – that's a stretch of a conclusion to make. You're being as hyperbolic as the original post.

What didn't I understand about the article? This still offers a slight increase in security over static barcodes, without introducing any new vulnerabilities.

New comment by lakerz16 in "Reverse engineering Ticketmaster's rotating barcodes"

lakerz16 — Tue, 09 Jul 2024 12:57:04 +0000

Do you have a source for this? What platform are they selling multiple copies of the ticket through, and what app are the buyers using that allows multiple buyers to receive and show the same animated barcode?

New comment by lakerz16 in "Reverse engineering Ticketmaster's rotating barcodes"

lakerz16 — Mon, 08 Jul 2024 17:58:43 +0000

Assuming that you can actually do that.

If the seller re-opens the TM app and it generates a new token and invalidates the old one, then that's not the case.

New comment by lakerz16 in "Reverse engineering Ticketmaster's rotating barcodes"

lakerz16 — Mon, 08 Jul 2024 17:52:59 +0000

I'd argue that a few extra people sneaking in on the same ticket (assuming this is even possible) is more like sharing your Netflix credentials than ripping Netflix content and having it be shareable with the entire world.

You're also walking into a stadium/concert in plain view of security cameras, so the stakes and deniability are different as well.

New comment by lakerz16 in "Reverse engineering Ticketmaster's rotating barcodes"

lakerz16 — Mon, 08 Jul 2024 17:16:28 +0000

I hate TM and ridiculous fees as much as anyone, but this article is overly hyperbolic.

There's a section named "Pirating Tickets", that just explains how to re-create a barcode that you already paid for. You're not using this to rob anyone of anything.

And at the end, "Have fun refactoring your ticket verification system". Why? There are no vulnerabilities here. A rotating barcode (even if following a known pattern) is still more secure than a static barcode on a piece of paper.

New comment by lakerz16 in "Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide"

lakerz16 — Fri, 08 Jan 2021 20:58:39 +0000

starting a fire at a Target is not quite the same thing as raiding the US Capitol filled with congress, staffers, and confidential documents (in an effort to overturn a national election).

New comment by lakerz16 in "People think they're calling restaurants directly but Grubhub is getting a fee"

lakerz16 — Wed, 03 Jun 2020 00:54:57 +0000

If GH takes a 25% cut, then they need to be adding 25% more revenue to the takeout market. I would bet good money they are not.

Instead, they are paying for ad space to siphon the traffic of already hungry customers looking to order from a restaurant.

GH then shows the numbers to the restaurant and says "Look how much business GH brings you. You need to pay us for this"

In many cases they are extorting restaurants over what would be organic web traffic. In these cases they are not adding new revenue to the industry, and are instead choking the restaurants that already operate on thin margins.

New comment by lakerz16 in "Chicago will now require food delivery apps to disclose itemized cost breakdown"

lakerz16 — Wed, 13 May 2020 18:08:13 +0000

I'd much rather get my food from someone that has not been interacting with the previous 100 customers.

And now every customer after me won't be exposed to me, either.

New comment by lakerz16 in "Google, You Creepy Sonofabitch"

lakerz16 — Thu, 18 Jan 2018 17:26:57 +0000

Their incentive is to make money by providing goods or services to customers, which is the same as every business. Go buy something from the department store, give them your phone number when they ask for it, and tell me you don't receive spam calls afterward.

Given all that Google knows about you, i'd say they're actually quite polite in how invasive they are. I'd much rather them have this data than 99% of the other companies out there.

It sounds like you basically just hate businesses that collect data. I'm sorry to break it to you, but there are a ton of them.

New comment by lakerz16 in "Show HN: Monica, an open-source CRM to manage friends and family"

lakerz16 — Tue, 06 Jun 2017 18:39:54 +0000

Have you considered the ability to "Share" a Contact? For example, if my Wife wants to share the info she collected about our niece?

Or is the entire idea that each person is logging a unique POV or set of information about someone, rather than the system gravitating towards there being a single, cultivated profile about each person that is shared around?

(right now it's kind of the anti social media -- which seems like a refreshing take. Just curious if that's on purpose)

New comment by lakerz16 in "Fingerprints Are Usernames, Not Passwords (2013)"

lakerz16 — Fri, 24 Oct 2014 19:03:13 +0000

OpenID does not provide your password to each site that you use it on... It uses a token that only that site can use, for the permissions that were shown when you created the token. If someone did acquire that token, you could just change your Facebook password and the token would expire

New comment by lakerz16 in "How to Drink All Night Without Getting Drunk"

lakerz16 — Fri, 25 Apr 2014 13:48:45 +0000

"Weighs 165 lbs, out drinks the 275 lbers"

New comment by lakerz16 in "One World Trade Center: The Top of America"

lakerz16 — Sat, 08 Mar 2014 03:12:27 +0000

These are always really awesome. But for the love of god, invert the controls. Or maybe a button to switch between methods

New comment by lakerz16 in "Microsoft U-turn sees Start button back on Windows 8"

lakerz16 — Thu, 30 May 2013 14:47:15 +0000

The Start Button is just a symbol for the larger issue, which is the shafting of Desktop users. There were only a small handful of things in Windows 8.0 that I felt offered an improved Desktop experience, whereas there were tons of things that I felt required more buttons clicks, more steps, etc

I hope 8.1 addresses the Desktop users in more ways than just the Start Button.

Android bug reports are bugs themselves

lakerz16 — Mon, 09 Jul 2012 02:17:12 +0000

I hit the sleep button on my Galaxy Nexus, but right before I put it in my pocket I felt the phone buzz.

I turned it back on to see what it was, and saw that the gmail app had been opened, and was in the process of sending a bug report to Google.

Being curious, I inspected the contents of the bug report. It contained a screenshot and a system dump inside a txt file. So far so good, until I noticed the size of the e-mail. Between the two attachments, the e-mail was 7MB.

Firing up the 4G radio and sending off 7MB comes at a cost. I have trouble keeping my phone charged all day if I use it a lot. The biggest offender here is the system dump, which is 5MB.

A simple solution to this is to throw the bug reports into a queue, and only send them when the phone is plugged in and fully charged.

Comments URL: https://news.ycombinator.com/item?id=4216384

Points: 4

# Comments: 1