Hacker Newsnew | past | comments | ask | show | jobs | submit | xfitm3's commentslogin

Fixing things that aren't broken. Changing things just because they can be changed. Sometimes boring and stagnant is good.


I wouldn’t go as far to say sudo is broken but have you considered why would people create things such as doas and run0 if sudo is good enough?


This now has wifi in the elite version. I have one for research purposes.


When you own your own business you can easily make 6 figures, it just takes years of sweat equity and rough times. A friend of mine has grown his business from 100k/y in sales (and 5-10k profit) to millions per year (~300k profit) installing TVs and stereos in 13 years. He worked his ass off for a long time.


Is he doing the installations himself or does he have employees


Definitely has employees (or contractors he works with). From experience, beyond $300k (~$1000/day excluding Sundays), for blue collar jobs like that, it is hard to grow revenue without the additional help.


Doesn't really sound blue collar when he's mostly managing the blue collar workers. Is management a blue collar job?


Do you recommend any specific external GPU? I had one from Black Magic, it was not that great performance wise.


Alaskan Airlines is notorious for taking maintenance shortcuts, this is likely not an inherent problem with the airframe but rather this operators SOP.

Alaskan Airline flight 261 is one example.

> The subsequent investigation by the National Transportation Safety Board (NTSB) determined that inadequate maintenance led to excessive wear and eventual failure of a critical flight control system during flight.

Source: https://en.wikipedia.org/wiki/Alaska_Airlines_Flight_261


Although I can sympathize with the story, this particular aircraft had been in their hands just a couple months. Its first commercial flight was just a couple weeks back. Maintenance isn't the issue here, clearly.


Fixing known problems as you learn of them is maintenance is it not? That's just as important as changing out the lubricants and checking that the working parts are working.


When you hear hoofbeats think horses, not zebras. A pressurization fault on the ground where the plane is not pressurized almost certainly doesn't hint at problems with a permanently installed door plug.


> Maintenance isn't the issue here, clearly.

It is. Maintenance was aware of the pressurization warnings on this plane. They did nothing.


No, they logged it. Logging is not nothing.

Planes are incredibly complex and have little problems like that all the time. It's not a safety issue.

This was a brand new aircraft, this is almost certainly a manufacturing defect of some kind.


Do you have any examples that aren't from a quarter century ago?


isn't alaska airlines rated one of the safest airline? What airline is safe these days?


I get an error on https://drs-web.amazon.com/settings – has it been taken down? I also have a Brother printer, which I bought from Amazon.


removes glasses... MOG... That is INTERESTING.

Here is an image of the email I received

https://imgur.com/a/fhvZlsd

and the current status of the web page:

https://imgur.com/jkTD4Xp

I am speechless. This link brought up a narrow page of blue. Is there any way to recover that? Firefox browser. I would love to capture that .. oh I kick myself now for not grabbing a SS.


"You are receiving this message because you connected your Brother MFC-J485DW to Alexa on 5/4/21"

What happened on 5/4/21? You say you bought the printer after July 2019, so it probably wasn't the printer purchase date. Does that line up with the date you bought or installed an ink cartridge from Amazon, or set up Alexa?


When you found that page originally you must have either got there from a POST from another page, or a prior page set a cookie which this page gobbled.


SponsorBlock


SponsorBlock is a wonderful tool. I use uBlock origin and have not seen an ad for a long time, perhaps years with one or two exceptions.


Security is a SG&A line item, I am sure they are far more fixated on physical security due to their business vertical and had a gap. There will be many cyber companies chomping at the bit to get a piece of the inevitable (I made this number up) 100m MGM will spend on Cybersecurity over the next 5 years.

They won't make the same mistake twice and will build a comprehensive cybersecurity program, and it will succeed. Up until someone questions this cost and they forgot what they are paying for because everything was so smooth and repeat the cycle.

The objective of security is risk identification and management, not creating an impervious barrier for potential adversaries.


Ha, that is funny. I have literally never met a CISO who shares your confidence. Not a single one of the companies chomping at the bit can protect MGM against a multi-million dollar ransomware attack. Companies get hacked because commercial cybersecurity by the big names is useless against the modern, prevailing threat landscape of organized crime. The sum total of their ability is stopping unskilled children, and even then only sometimes.

Just ask any CISO if they would bet their job on surviving a $1M unrestricted red team exercise with a year-long timeframe. They would all be scared shitless by the thought. I bet if you asked the CISO of MGM three days before the attack: "How much would it cost to hack MGM and cripple operations?" they would answer like every other CISO I have heard answer that question and say something on the order of $100K. They know it does not work; they are there to be sacrificed and just hope it does not happen on their watch.


You're mistaking compliance with a competent security program.


I am not. Name one competent security program certified and verified to stop total compromise by a $30M unrestricted red team exercise which is the ransom amount demanded by the attackers on Caesars just a few weeks prior.

Keep in mind that amounts to around 100 person-years of dedicated hacking labor. I get a team of 50 and 2 years to achieve total compromise. I get to burn 5-10 zero click RCE zero-days. The idea that any of the commercial cybersecurity companies or any commercial IT organization could design a system that could resist such an attack is laughable. This is not a question of resources, it is one of ability.

I agree, compliance is not an above-average security program. But an security program that is merely above-average is woefully underprepared for the modern threat landscape. You need a security program 100x better than “best practices” to stand a meaningful chance and you are not finding that amongst the charlatans in the big cybersecurity players.


“ They won't make the same mistake twice and will build a comprehensive cybersecurity program, and it will succeed. Up until someone questions this cost and they forgot what they are paying for because everything was so smooth and repeat the cycle.”

You couldn’t have said it better.


You sacrifice privacy – societal norms change over time and what was once acceptable can no longer be.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: