Comments URL: https://news.ycombinator.com/item?id=46214601

Points: 6

# Comments: 1

Last time I bought a car, I found the one I wanted with the note that it had been in a minor accident. I paid for the carfax, and learned that it had some damage and repairs, and had somehow traveled across the country in the process. Limited details, except, the accident had occurred in Florida. $10 later I had the police report. It was a 4wd car and suffered 2 broken axles & broken drive train. not minor in any way.

Sounds like buyer was scammed.

> The term "salvage" was a complete shock, but a deeper dive into the CARFAX vehicle history report, which he didn't pull until after the sale, uncovered a "minor accident."

> Photos of the damage made it look more than minor, and a Tesla technician told him the repair work as shoddy.

"undergoing maintenance" but spot check of data looks correct to me.

Street cleaning tickets are given efficiently and enforcement is conducted to minimize the time that people can't park. 2-4 parking officers drive in front of the street cleaning vehicles and ticket everyone parked. if you're watching at the time you'll see almost every car on the street pull out in front of the officers, circle the block and park right back in the same -- but now clean -- spot. those that don't get tickets.

Comments URL: https://news.ycombinator.com/item?id=45000913

Points: 3

# Comments: 0

1. zendesk allows you to add users to a support issue and view the complete issue history by sending a response email to a guessable support email from a person associated with an issue and cc'ing the person to add.

2. Zen desk depends on a spam check for inbound email validity. This check does not appear to catch instances where sender email is spoofed. Zendesk claims this is bdue to DKIM/SPF/DMARC config but I have trouble imagining that 50% of Fortune 500 would get this wrong. There are many automated checks available.

3) Apple issues an Apple ID account to anyone who can receive a verification email Sent to the mailing address (support@company.com)

4) Slack allows you to sign in to a workspace using any Apple ID associated with the workspace domain (e.g. support@company.com)

This researcher reported #2 to hackerone and was declined. Researcher later discovered full exploit with 3 and 4. Did not update hackerone, contacted affected companies directly.

it would have been prudent to update hackerone on the additional finding, but it feels like an easy oversight for a 15 year old after getting rejected on the first round.

Zendesk should take the higher ground and recognize the mistake and correct it. Not get all "ethical mumbo jumbo."

Many would hire an agency to create an ad for you but that would 10x the cost, not to mention dealing with the opinions of an outsourced creative director...

Comments URL: https://news.ycombinator.com/item?id=38623582

Points: 2

# Comments: 0

Cruise can only operate in a small region between 10pm and 5:30 am when bus service is limited and there will be few interactions to report.

Waymo rides are still significantly limited. No clear data on service rates or range.

All other programs have a safety driver in the car who is able to quickly react and prevent reports of an incident.

And then come back and keep playing.

The tunnel is not curved. it's straight.