Hacker Newsnew | past | comments | ask | show | jobs | submit | oxide's commentslogin

I can take my business elsewhere and do.

but do I blame the average person for not caring? The kind of person who would use GoDaddy for hosting? I find it really hard to blame them.


Also your data will probably just be leaked somewhere else sometime anyway. Punishing a single company once unfortunately does next to nothing at this point.


Game loads on firefox desktop, but is a black screen. Debug didn't show anything out of the ordinary. loads fine on Chrome though.


Even better - give the customer the $10k.


I lived in east Oakland for awhile, I'm pretty sure that driving stolen cars and torching them afterward don't give a fuck about auto insurance rates. The people who are driving like that on the 580 or @ 90th & Bancroft probably are uninsured as is.

Do you really think everyone is just insured because it's the law? If so, you're fairly naive. Try leaving the bubble you live in now and then. Oakland cops stopping responding to anything less than murder at lot sooner than 2020 lmao.


I always conceded that Google would have this data, I always told myself you have to trust someone eventually. There was an implicit agreement that they would go to bat if the government came knocking for it. I see now that was a naive perspective on my part. They spent years just handing it over.


This is a fascinating piece of software. I played with it briefly, it's quite the little evolutionary sandbox.


anecdotal evidence is what I usually base my purchases on, which is why I've never bought a Google device after being burned (literally) by the Nexus 6P battery issues.

you can pretend it doesn't matter, but bad word of mouth is all it takes for me.


> but bad word of mouth is all it takes for me.

That's fine, but it's also entirely different from saying that the phones are objectively unstable and bad for everyday use.


I have been burned twice by iPhone battery issues (specifically my iPhone X).

Battery started discharging rapidly, I got it replaced, barely a year later it’s dying again.


This is me + wife with Pixel 3 despite "Battery Saving" mode and killall apps.

The screen is eating up the battery like me drinking water on a hot California weather.


Sounds like it'd still cost something to operate it, however, I agree that you might as well send something up there if you already agreed to pay for the trip.


Unless something like a battery fire happens in your untested rover, that compromises other mission goals.


I agree. I think it's reasonable to expect companies to safeguard that information from malicious actors.


I don't agree. I don't think it's reasonable to expect it, because companies show over and over that they cannot do it. And let's face it, the only reason your company hasn't fallen victim to a data breach or ransomware is that you haven't been seriously targeted yet.

We need to change our approach. We need to look at why these kinds of data are valuable, and then make them not valuable. Then nobody will bother with hacking to get it.


This data is valuable primarily for spam mitigation and perhaps customer profiling.

Expect every SMS and MMS sent or received to be part of a spam mitigation and profiling program where it's stored indefinitely.

Apple not encrypting RCS is likely due to similar factors, where they have seen existing spam problems on RCS that are much harder to root out when you have end-to-end encryption.


In my not so humble opinion, the biggest problem with phone numbers in general is the general ability to spoof any number. Please correct me if I am wrong but stir/shaken is only available on the new stuff and even then there is no good way to track the origin of a phone call. This is beyond ridiculous and clearly leadership is asleep at the wheel.

There needs to be a firm timeline -- maybe a year maybe a decade, I don't know the details but something that allows customers to transition to a system where all calls can be traced through the network with 100% guarantee.

Step zero is actually having a process/protocol where any phone is tamper evident meaning we can tell 100% that this call came from this operator and the operator knows the call came from this user.

Perhaps the first phase allows individual users to opt in. So we would ask our operators to only route us calls and texts that positively identify themselves as fully traced with whatever the new protocol is that will replace SS7/sigtran so the origin of a call or text is positively identified. If this guarantee is not available, route the call to spam inbox somehow.

Then the hard part I'm guessing is fixing all the defects?

The second phase is to say after this date, no operator in the US is allowed to relay calls that are from legacy systems. This will likely take many years as I don't know how we will handle international calls and texts. But at some point we have to put our foot down and say enough is enough.


> Step zero is actually having a process/protocol where any phone is tamper evident meaning we can tell 100% that this call came from this operator and the operator knows the call came from this user.

This basically doesn't work because the mapping between phone numbers, users and operators isn't exactly 1:1:1.

Some businesses have a single number that they use as Caller ID on all their calls , despite having one corporate HQ in New York, one branch in New Orleans and one customer support callcenter in New Delhi. All of these use different carriers and are based in different countries, yet they're all legally authorized to use that number.

If you want to read more about why this is such a hard problem to solve, see https://computer.rip/2023-08-07-STIRred-AND-SHAKEN.html


> ...yet they're all legally authorized to use that number.

But why? I get that they want a unifed appearance, but as a phone subscriber I want to know if it's BigCo calling from New Delhi vs. BigCo calling from Chicago.


Amazing article about why phone spam is so much harder to fight than email spam.

Thank you for sharing it!

Now I need to lean SS7 signaling.


Finally, some sense. My first though when reading the article was why are we even allowing these companies to collect that data in the first place.


How would they bill customers and other providers for usage if they didn't keep call/text metadata?


These are records from 2022. The hack wasn't carried out the second the calls were made. You really need to keep the records that long to do your billing? That's absurd.


I don't think it is. I assume everyone gets hacked eventually. It's really hard (I would argue impossible) to make a 100% secure computer system, and if they're operated by people, you're terribly vulnerable.


The Cold War never ended and criticism of Russia is not criticism against Russians.

If the Cold War was truly over when the wall fell, we'd have welcomed Russia into NATO. That would have been a huge mistake, as Russia has proven to be antithetical to democracy and an aggressor against the interests of the West, despite dressing up in its skirt.

Instead we've engaged in proxy war after proxy war with very little changing in the best part of 40 years or so. That's no accident.

Suggesting otherwise IMO is to take talking points from the mouth of the Kremlin. I get tired of the "Russia is being bullied by the mean ol' United States" narrative, they're malignant and hostile. I think you're right to raise this point.


| If the Cold War was truly over when the wall fell, we'd have welcomed Russia into NATO.

This was offered by NATO: Partnership for Peace, NATO-Russia Founding Act https://en.wikipedia.org/wiki/Russia%E2%80%93NATO_relations It's Russia that wasn't interested.


When one of the parties of a "war" elects not to leave that "war", can you argue the "war" ever truly ended, even if one side sent an olive branch?


Absolutely. Most Western leaders (though not all) deluded themselves thinking Russia wanted better relations and that all the problems were somehow the fault of the West. Countless confidence-building measures were taken. Most Western countries reduced defense budgets. Russian leaders, ridiculously claiming that they were threatened by NATO, were dishonest the whole time. As the USSR collapsed, Russia surrounded itself with, and fueled, many "frozen" conflicts: Transnistria in Moldova, Abkhazia and South Ossetia in Georgia, Nagorno Karabakh in Azerbaijan, Japanese Islands. Gestures of goodwill, escalation management, appeals to political solutions were seen as weakness by Russia. Putin attacked Georgia in 2008 and Ukraine in 2014 and 2022 not because he felt threatened in any way, but to the contrary because he thought that no one would do anything about it.


I'm pretty sure he spilled the beans, I don't think he has to worry about prison, staying alive is his new main story line.


Yeah, everyone made this a comment about a specific candidate. But objectively one candidate is pro-supporting Ukraine and one is against it this time around. Regardless of your prior beliefs, Putin benefits far more from a specific candidate this time around.

And they have repeatedly been caught meddling directly in Western countries (see i.e. multiple assassinations in the West).


Exactly. I treat anyone suggesting Russia should be treated with kid gloves with suspicion. The sentiment that they are being bullied is flatly offensive. Russia made its bed in the 90s and complains about lying in it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: