Hacker Newsnew | past | comments | ask | show | jobs | submit | weeks's commentslogin

They're referring to the EU not being able to compete.


“Buy, receive, or sell the personal information of 50,000 or more California residents”

If a business engages this type of activity, they need to have a scalable process for providing California residents with their data.

Describing a California law passed by a majority of voters as “idiotic hoops” is a miss.


Is. :D


Do I have a choice not to work with you?


Yes you can choose to work from home.

You can choose to get vaccinated.

You can choose to wear a mask.


Apache Spark and Apache Kafka? It doesn't seem likely that the Apache Software Foundation would consider implementing the SSPL instead of the Apache License.


I'm saying AWS offers EMR and MSK. Which puts Databricks and Confluent in a weird spot.


The technical claims don't seem very far fetched. They're basically describing every banking "anti-fraud SDK" I've ever reversed.


https://googleprojectzero.blogspot.com/2017/10/over-air-vol-...

Even Apple's IOMMU has had vulnerabilities allowing for full memory access from the WiFi modem.


The wifi stack isn't the cellular modem. There's a reason people are particularly concerned about the baseband.


Apple's policy is one certificate per company. So it being a single point of failure is unavoidable.


Could have used a different company for it (although then it possibly would have attracted attention earlier)


You mean, commit fraud? Don’t give them ideas!


Not sure how owning a market research subsidiary would make it any more fraudulent than it already is. (It's of course also not a full protection against Apple deciding the parent deserves to be punished too)


Oops, forgot that they don't play by the normal rules. Indeed, they have committed fraud a few times. Just ask those who buy advertising from them.


Code review, trusted build environments and code signing could entirely prevent a single engineer from modifying the code running on the car.


None of those would stop a tech lead or engineering manager


No, but making an example of him would have reduced the incentive to do it again.

Also, removing him from the the tech lead position would have helped prevent further incidents.


Structure as appropriate for the potential for public harm. If necessary, make it required that an executive sign. If you can’t trust your executives then you shouldn’t have projects that can harm the public. They could have killed the Camry driver.


It is more appropriate to say that the Camry driver who was at fault would have caused a fatal accident.


>>None of those would stop a tech lead or engineering manager

Then something else should. Imagine one guy, gone nuts, changing the code on millions of vehicles in one shot.


"I recommend rolling your own email server"

This is actively harmful advice. Do not roll your own email. Use a well-known provider with a solid security track record.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: