Hacker News: rtev

New comment by rtev in "CrowdStrike Update: Windows Bluescreen and Boot Loops"

rtev — Fri, 19 Jul 2024 18:42:15 +0000

Solarwinds is still dealing with the reputation damage and fallout today from that breach. People don’t forget about this stuff. the lawsuits will likely be hitting crowdstrike for years to come

New comment by rtev in "SAPwned: SAP AI vulnerabilities expose customers' cloud environments and privat"

rtev — Thu, 18 Jul 2024 16:03:06 +0000

About to be acquired by Google for $23 billion as well!

New comment by rtev in "Hacker Tool Extracts All the Data Collected by Windows' New Recall AI"

rtev — Wed, 05 Jun 2024 00:58:07 +0000

It’s supposedly only accessible to LocalSystem. If they were to encrypt it, it could just be decrypted anyway. Still, it’s a huge liability and a major blunder by Microsoft.

New comment by rtev in "Hacking millions of modems and investigating who hacked my modem"

rtev — Tue, 04 Jun 2024 23:58:39 +0000

Sam is a very famous security researcher, so I would be shocked if he wasn’t making upwards of $350,000 a year. These articles he writes make him a significant amount of money via reputation boost.

New comment by rtev in "Home buyers need 80% more income to buy than 4 years ago"

rtev — Sat, 16 Mar 2024 23:42:09 +0000

This appears to be what happens when rich people that don’t need houses buy them anyway as investments. There should be laws preventing a person from owning more than three houses in the United States.

New comment by rtev in "Kagi Changelog 2/13: Faster and more accurate instant answers and Wikipedia page"

rtev — Fri, 16 Feb 2024 16:13:55 +0000

Yahoo returns thousands of results for dorking queries where Kagi and Google return an identical list of 5-6 results. Pretty disappointing for me as a paying customer to learn that Kagi is basically a Google wrapper

New comment by rtev in "Homemade Pasta. Now Is the Time (2021)"

rtev — Fri, 02 Feb 2024 16:48:23 +0000

Anyone know why this is happening?

error: subprocess-exited-with-error python3 setup.py egg_info did not run successfully.

New comment by rtev in "Security researchers collect awards for Tesla exploits at Pwn2Own Automotive"

rtev — Wed, 24 Jan 2024 20:10:49 +0000

A vendor pays to have their software included in this competition, where many of the world’s best offensive security pros compete.

New comment by rtev in "SEC.gov – approval of 11 Bitcoin spot ETF [pdf]"

rtev — Wed, 10 Jan 2024 21:23:16 +0000

Looks like the “hack” on Twitter was just a botched rollout as suspected?

New comment by rtev in "Apple Shuts Down Flipper Zero's Ability to Shut Down iPhones"

rtev — Fri, 15 Dec 2023 18:09:04 +0000

Weeks after defcon, I saw they had a job listing asking for someone with Bluetooth experience and experience preventing denial of service attacks. Sounds like they finally hired someone that knew what was going on here.

New comment by rtev in "Q-Transformer"

rtev — Thu, 30 Nov 2023 21:46:35 +0000

Lucidrains also created the much-missed EpicMafia, which still doesn’t have a good replacement after shutting down. Exceptionally skilled person!

New comment by rtev in "Common pesticides in food reducing sperm count worldwide, study says"

rtev — Thu, 16 Nov 2023 03:05:18 +0000

This is the most sus thing I’ve read in a long time

New comment by rtev in "The urgent need for memory safety in software products"

rtev — Fri, 22 Sep 2023 17:02:16 +0000

i don’t feel that this is true in the slightest.

so many critical exploits use the same characters and lengths as intended inputs. Also, if firewalls were a replacement for secure code, no one would be talking about memory safety.

New comment by rtev in "Gitlab Critical Security Release: 16.3.4 and 16.2.7"

rtev — Tue, 19 Sep 2023 16:02:23 +0000

I don’t think it is.

Microsoft has a track record for delaying fixes and marking important issues as “not a bug”, so I’m less impressed with their security.

As terrible a corporation as Oracle is, their security response team has been one of the most effective and fast-paced I’ve ever reported to. With that said, they pay nothing to researchers, so Gitlab certainly shows they care more about security.

New comment by rtev in "Gitlab Critical Security Release: 16.3.4 and 16.2.7"

rtev — Tue, 19 Sep 2023 14:24:45 +0000

The reason you see so many critical Gitlab security fixes is because they take security so seriously.

They pay huge bounties for security vulnerabilities in their products, so they get the best researchers responsibly disclosing bugs.

New comment by rtev in "CWE Top Most Dangerous Software Weaknesses"

rtev — Thu, 13 Jul 2023 17:00:37 +0000

Typescript applications suffer from many of these vulnerabilities. JS apps have a specific class of critical vulnerabilities as well, prototype pollution. If I had to write a web application with security in mind, I personally would pick Python. It’s possible to make mistakes in any language though, and the environment an app is deployed in can independently introduce many vulnerabilities.

New comment by rtev in "Excess weight, obesity more deadly than previously believed"

rtev — Sat, 25 Feb 2023 00:11:31 +0000

It’s very weird that out of 95 comments in this thread (at the time of writing), practically half of them are one person.

New comment by rtev in "1Password Park – St. Thomas Ontario"

rtev — Sat, 18 Feb 2023 03:17:41 +0000

LastPark has child predators under the bridge that the park officials haven’t noticed yet

New comment by rtev in "Amazon funds seaweed farming at offshore wind farm to test CO2 capture"

rtev — Fri, 17 Feb 2023 23:36:16 +0000

I should have added “/s”

New comment by rtev in "Amazon funds seaweed farming at offshore wind farm to test CO2 capture"

rtev — Fri, 17 Feb 2023 22:54:57 +0000

This is all just a scam run by Big Cow to get some tasty Asian flavors in the trough.