Notices by hackernews (hackernews@die-partei.social), page 5

hackernews (hackernews@die-partei.social)'s status on Wednesday, 12-Jun-2019 11:30:03 UTC hackernews

Show HN: I made a Latex based resume building app - http://www.expresscv.co
In conversation Wednesday, 12-Jun-2019 11:30:03 UTC from die-partei.social permalink
Attachments
1. Untitled attachment
hackernews (hackernews@die-partei.social)'s status on Tuesday, 11-Jun-2019 15:15:02 UTC hackernews

Apple’s U.S. iPhones Can All Be Made Outside of China If Needed - https://www.bloomberg.com/news/articles/2019-06-11/hon-hai-has-enough-ex-china-capacity-to-make-u-s-bound-products
In conversation Tuesday, 11-Jun-2019 15:15:02 UTC from die-partei.social permalink
Attachments
1. Untitled attachment
hackernews (hackernews@die-partei.social)'s status on Tuesday, 11-Jun-2019 00:25:02 UTC hackernews

HBO Ending Its Nightly Newscast Produced by Vice Media - https://www.bloomberg.com/news/articles/2019-06-10/hbo-ending-its-nightly-newscast-produced-by-vice-media
In conversation Tuesday, 11-Jun-2019 00:25:02 UTC from die-partei.social permalink
Attachments
1. Untitled attachment
hackernews (hackernews@die-partei.social)'s status on Monday, 10-Jun-2019 18:25:02 UTC hackernews

Periscope Goes Down for Hours - https://status.periscopedata.com/incidents/5d93ddlgl23d
In conversation Monday, 10-Jun-2019 18:25:02 UTC from die-partei.social permalink
Attachments
1. Periscope Data App Not Loading
hackernews (hackernews@die-partei.social)'s status on Monday, 10-Jun-2019 17:50:02 UTC hackernews

CCN Is Shutting Down After Google’s June 2019 Core Update - https://www.ccn.com/ccn-is-shutting-down-after-googles-june-2019-core-update
In conversation Monday, 10-Jun-2019 17:50:02 UTC from die-partei.social permalink
Attachments
1. CCN is Shutting Down after Google’s June 2019 Core Update
  
  from CCN Markets
  
  TweetFacebookLinkedInDear readers, Let’s get straight to it. Google’s June 2019 Core Update rolled out on June 3th 2019 and CCN’s traffic from Google searches dropped more than 71% on mobile overnight. As data from SEO analyzer Sistrix shows, our visibility on Google dropped from 1.2 to less than 0.6. You might say we ought not to face any issues since we’ve been at those levels and lower, in the past. What you need to realize is that we have added more people to the team, both full-timers and part-timers. We do not want to downsize the team, we do
hackernews (hackernews@die-partei.social)'s status on Sunday, 09-Jun-2019 16:05:02 UTC hackernews

Fortune 500 company leaked 264GB in client, payment data - https://www.zdnet.com/article/veteran-fortune-500-company-leaked-264gb-in-client-payment-data/
In conversation Sunday, 09-Jun-2019 16:05:02 UTC from die-partei.social permalink
Attachments
1. Fortune 500 company leaked 264GB in client, payment data | ZDNet
  
  from ZDNet
  
  Updated: The data leak impacted Tech Data’s client servers, SAP systems, and more.
hackernews (hackernews@die-partei.social)'s status on Sunday, 09-Jun-2019 13:25:02 UTC hackernews

Impossible Foods and Beyond Meat's plant-based burgers aren't healthier - https://www.businessinsider.com/beyond-burger-vs-impossible-burger-vs-fast-food-burger-nutrition-2019-6
In conversation Sunday, 09-Jun-2019 13:25:02 UTC from die-partei.social permalink
Attachments
1. Impossible Food and Beyond Meats' plant-based burgers aren't actually healthier than the fast-food originals
  
  from Business Insider
  
  In most ways, plant-based burgers are similar to the fast-food icons — but they actually tend to contain significantly more sodium.
hackernews (hackernews@die-partei.social)'s status on Saturday, 08-Jun-2019 16:35:03 UTC hackernews

BGP mishap sends European mobile traffic through China Telecom for 2 hours - https://arstechnica.com/information-technology/2019/06/bgp-mishap-sends-european-mobile-traffic-through-china-telecom-for-2-hours/
In conversation Saturday, 08-Jun-2019 16:35:03 UTC from die-partei.social permalink
Attachments
1. BGP event sends European mobile traffic through China Telecom for 2 hours
  
  from Ars Technica
  
  Improper leak to Chinese-government-owned telecom lasts up to two hours.
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 21:40:02 UTC hackernews

Four in 10 Americans don't see retirement ever happening - https://www.bnnbloomberg.ca/retirement-four-in-10-americans-don-t-see-it-ever-happening-1.1269777
In conversation Friday, 07-Jun-2019 21:40:02 UTC from die-partei.social permalink
Attachments
1. Retirement? Four in 10 Americans don't see it ever happening - BNN Bloomberg
  
  from BNN
  
  Almost 40% of Americans lack confidence they will ever save enough money to retire. That number climbs even higher among older Americans, age 54 or more.
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 21:15:02 UTC hackernews

Barnes and Noble taken private; sold to hedge find for $683m - https://www.npr.org/2019/06/07/730638739/barnes-noble-set-to-be-sold-to-elliott-management-for-about-683-million
In conversation Friday, 07-Jun-2019 21:15:02 UTC from die-partei.social permalink
Attachments
1. Barnes & Noble Set To Be Sold To Elliott Management For About $683 Million
  
  from NPR.org
  
  That price tag includes all of the book megachain's debt. Elliott's acquisition of the largest retail bookseller in the U.S. comes less than a year after it bought Waterstones, the largest in the U.K.
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 19:50:02 UTC hackernews

Fedex drops Amazon - http://investors.fedex.com/news-and-events/investor-news/news-release-details/2019/Statement-Regarding-FedEx-Corporations-Relationship-with-Amazoncom-Inc-/default.aspx
In conversation Friday, 07-Jun-2019 19:50:02 UTC from die-partei.social permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  Statement Regarding FedEx Corporation’s Relationship with Amazon.com, Inc.
  
  June 6, 2019 FedEx has made the strategic decision to not renew the FedEx Express U.S. domestic contract with Amazon.com, Inc. as we focus on serving the broader e-commerce market. This decision does not impact any existing contracts between Amazon.com and other FedEx business units or relating to international services. As previously disclosed, Amazon.com is not FedEx’s largest customer. The percentage of total FedEx revenue attributable to Amazon.com represented less than 1.3 percent of total
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 13:40:02 UTC hackernews

Win10 is going to start including Python 3.7 - https://blog.adafruit.com/2019/06/04/new-guide-python-is-in-the-latest-build-of-windows-10-adafruitlearningsystem-python-adafruit-win10-windows-adafruit/
In conversation Friday, 07-Jun-2019 13:40:02 UTC from die-partei.social permalink
Attachments
1. NEW GUIDE: Python is in the latest build of Windows 10 #AdafruitLearningSystem #Python #Adafruit #Win10 @Windows @Adafruit
  
  from Adafruit Industries - Makers, hackers, artists, designers and engineers!
  
  New in the Adafruit Learning System: Using Python on Windows 10 – wait no more! Microsoft has added Python 3.7 to the May 2019 update for Windows 10. Using the steps in this guide, you can ge…
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 12:25:02 UTC hackernews

Huawei must raise 'shoddy' standards, says senior UK cybersecurity official - https://www.theguardian.com/technology/2019/jun/07/huawei-must-raise-shoddy-standards-gchq-senior-uk-cybersecurity-official
In conversation Friday, 07-Jun-2019 12:25:02 UTC from die-partei.social permalink
Attachments
1. Huawei must raise 'shoddy' standards, says senior UK cybersecurity official
  
  from the Guardian
  
  GCHQ technical director says he hasn’t seen anything that reassures him company is taking necessary security steps
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 12:20:02 UTC hackernews

Large European routing leak sends traffic through China Telecom - https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-through-china-telecom/
In conversation Friday, 07-Jun-2019 12:20:02 UTC from die-partei.social permalink
Attachments
1. Large European routing leak sends traffic through China Telecom
  
  By Doug Madory from APNIC Blog
  
  Large European routing leak sends traffic through China Telecom
hackernews (hackernews@die-partei.social)'s status on Friday, 07-Jun-2019 00:45:02 UTC hackernews

Amazon's Satellite Project Will Cost Billions, Jeff Bezos Says - https://www.bloomberg.com/news/articles/2019-06-06/amazon-s-satellite-project-will-cost-billions-bezos-says
In conversation Friday, 07-Jun-2019 00:45:02 UTC from die-partei.social permalink
Attachments
1. Untitled attachment
hackernews (hackernews@die-partei.social)'s status on Thursday, 06-Jun-2019 16:50:03 UTC hackernews

Why the “Digital Ocean killed my company” incident scares the hell out of me - https://blog.checklyhq.com/why-the-recent-digital-ocean-killed-my-company-incident-scares-the-hell-out-of-me/
In conversation Thursday, 06-Jun-2019 16:50:03 UTC from die-partei.social permalink
Attachments
1. Why the "Digital Ocean killed my company" incident scares me
  
  from The Checkly Blog
  
  Digital Ocean recently locked out a small startup. I'm scared I could be hit by a faulty abuse algorithm and a broken customer service process too.
hackernews (hackernews@die-partei.social)'s status on Thursday, 06-Jun-2019 12:40:02 UTC hackernews

Australia May Well Be the World’s Most Secretive Democracy - https://www.nytimes.com/2019/06/05/world/australia/journalist-raids.html
In conversation Thursday, 06-Jun-2019 12:40:02 UTC from die-partei.social permalink
Attachments
1. Australia May Well Be the World’s Most Secretive Democracy
  
  By By DAMIEN CAVE from The New York Times
hackernews (hackernews@die-partei.social)'s status on Thursday, 06-Jun-2019 09:45:02 UTC hackernews

The IA Client – The Swiss Army Knife of Internet Archive - http://blog.archive.org/2019/06/05/the-ia-client-the-swiss-army-knife-of-internet-archive/
In conversation Thursday, 06-Jun-2019 09:45:02 UTC from die-partei.social permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  The IA Client - The Swiss Army Knife of Internet Archive
  
  By Jason Scott from Internet Archive Blogs
  
  The IA Client – The Swiss Army Knife of Internet Archive
hackernews (hackernews@die-partei.social)'s status on Thursday, 06-Jun-2019 01:55:03 UTC hackernews

High-flying ladybug swarm shows up on National Weather Service radar - https://www.latimes.com/local/lanow/la-me-ln-ladybugs-on-radar-20190604-story.html
In conversation Thursday, 06-Jun-2019 01:55:03 UTC from die-partei.social permalink
Attachments
1. High-flying ladybug swarm shows up on National Weather Service radar
  
  from latimes.com
  
  The ladybug bloom appears to be about 80 miles by 80 miles, but the ladybugs aren’t in a concentrated mass that size; they’re spread throughout the sky.
hackernews (hackernews@die-partei.social)'s status on Wednesday, 05-Jun-2019 21:40:02 UTC hackernews

How does Apple (privately) find your offline devices? - https://blog.cryptographyengineering.com/2019/06/05/how-does-apple-privately-find-your-offline-devices/
In conversation Wednesday, 05-Jun-2019 21:40:02 UTC from die-partei.social permalink
Attachments
1. How does Apple (privately) find your offline devices?
  
  By Matthew Green from A Few Thoughts on Cryptographic Engineering
  At Monday’s WWDC conference, Apple announced a cool new feature called “Find My”. Unlike Apple’s “Find my iPhone“, which uses cellular communication and the lost device’s own GPS to identify the location of a missing phone, “Find My” also lets you find devices that don’t have cellular support or internal GPS — things like laptops, or (and Apple has hinted at this only broadly) even “dumb” location tags that you can attach to your non-electronic physical belongings.
  
  The idea of the new system is to turn Apple’s existing network of iPhones into a massive crowdsourced location tracking system. Every active iPhone will continuously monitor for BLE beacon messages that might be coming from a lost device. When it picks up one of these signals, the participating phone tags the data with its own current GPS location; then it sends the whole package up to Apple’s servers. This will be great for people like me, who are constantly losing their stuff: if I leave my backpack in ~~a tour bus in China~~ my office, sooner or later someone else will stumble on its signal and I’ll instantly know where to find it.
  
  (It’s worth mentioning that Apple didn’t invent this idea. In fact, companies like Tile have been doing this for quite a while. And yes, they should probably be worried.)
  
  If you haven’t already been inspired by the description above, let me phrase the question you ought to be asking: how is this system going to avoid being a massive privacy nightmare?
  
  Let me count the concerns:
  
  If your device is constantly emitting a BLE signal that uniquely identifies it, the whole world is going to have (yet another) way to track you. Marketers already use WiFi and Bluetooth MAC addresses to do this: Find My could create yet another tracking channel.
  
  It also exposes the phones who are doing the tracking. These people are now going to be sending their current location to Apple (which they may or may not already be doing). Now they’ll also be potentially sharing this information with strangers who “lose” their devices. That could go badly.
  
  Scammers might also run active attacks in which they fake the location of your device. While this seems unlikely, people will always surprise you.
  
  The good news is that Apple claims that their system actually does provide strong privacy, and that it accomplishes this using clever cryptography. But as is typical, they’ve declined to give out the details how they’re going to do it. Andy Greenberg talked me through an incomplete technical description that Apple provided to Wired, so that provides many hints. Unfortunately, what Apple provided still laves huge gaps. It’s into those gaps that I’m going to fill in my best guess for what Apple is actually doing.
  
  Some quick problem-setting
  
  To lay out our scenario, we need to bring several devices into the picture. For inspiration, we’ll draw our scenario from the 1950s television series “Lassie”. This involves several devices.
  
  A first device, which we’ll call Timmy, is “lost”. Timmy has a BLE radio but no GPS or connection to the Internet. Fortunately, he’s been previously paired with a second device called Ruth, who wants to find him. Our protagonist is Lassie: she’s a random (and unknowing) stranger’s iPhone, and we’ll assume that she has at least an occasional Internet connection and solid GPS. She is also a very good girl. The networked devices communicate via Apple’s iCloud servers, as shown below:
  
  (Since Timmy and Ruth have to be paired ahead of time, it’s likely they’ll both be devices owned by the same person. Did I mention that you’ll need to buy two Apple devices to make this system work? That’s also just fine for Apple.)
  
  Since this is a security system, the first question you should ask is: who’s the bad guy? The answer in this setting is unfortunate: everyone is potentially a bad guy. That’s what makes this problem so exciting.
  
  Keeping Timmy anonymous
  
  The most critical aspect of this system is that we need to keep unauthorized third parties from tracking Timmy, especially when he’s not lost. This precludes some pretty obvious solutions, like having the Timmy device simply shout “Hi my name is Timmy, please call my mom Ruth and let her know I’m lost.” It also precludes just about any unchanging static identifier, even an opaque and random-looking one.
  
  This last requirement is inspired by the development of services that abuse static identifiers broadcast by your devices (e.g., your WiFi MAC address) to track devices as you walk around. Apple has been fighting this — with mixed success — by randomizing things like MAC addresses. If Apple added a static tracking identifier to support the “Find My” system, all of these problems could get much worse.
  
  This requirement means that any messages broadcast by Timmy have to be opaque — and moreover, the contents of these messages must change, relatively frequently, to new values that can’t be linked to the old ones. One obvious way to realize this is to have Timmy and Ruth agree on a long list of random “pseudonyms” for Timmy, and have Timmy pick a different one each time.
  
  This helps a lot. Each time Lassie sees some (unknown) device broadcasting an identifier, she won’t know if it belongs to Timmy: but she can send it up to Apple’s servers along with her own GPS location. In the event that Timmy ever gets lost, Ruth can ask Apple to search for every single one of Timmy‘s possible pseudonyms. Since neither nobody outside of Apple ever learns this list, and even Apple only learns it after someone gets lost, this approach prevents most tracking.
  
  A slight more efficient way to implement this idea is to use a cryptographic function (like a MAC or hash function) in order to generate the list of pseudonyms from a single short “seed” that both Timmy and Ruth will keep a copy of. This is nice because the data stored by each party will be very small. However, to find Timmy, Ruth must still send all of the pseudonyms — or her “seed” — up to Apple, which will have to search for each one.
  
  Hiding Lassie’s location
  
  The pseudonym approach described above should work well to keep Timmy‘s identity hidden from Lassie, and even from Apple (up until the point that Ruth searches for it.) However, it’s got a big drawback: it doesn’t hide Lassie‘s GPS coordinates.
  
  This is bad for at least a couple of reasons. Each time Lassie detects some device broadcasting a message, she needs to transmit her current position (along with the pseudonym she sees) to Apple’s servers. This means Lassie is constantly telling Apple where she is. And moreover, even if Apple promises not to store Lassie‘s identity, the result of all these messages is a huge centralized database that shows every GPS location where some Apple device has been detected.
  
  Note that this data, in the aggregate, can be pretty revealing. Yes, the identifiers of the devices might be pseudonyms — but that doesn’t make the information useless. For example: a record showing that some Apple device is broadcasting from my home address at certain hours of the day would probably reveal when I’m in my house.
  
  An obvious way to prevent this data from being revealed to Apple is to encrypt it — so that only parties who actually need to know the location of a device can see this information. If Lassie picks up a broadcast from Timmy, then the only person who actually needs to know Lassie‘s GPS location is Ruth. To keep this information private, Lassie should encrypt her coordinates under Ruth’s encryption key.
  
  This, of course, raises a problem: how does Lassie get Ruth‘s key? An obvious solution is for Timmy to shout out Ruth’s public key as part of every broadcast he makes. Of course, this would produce a static identifier that would make Timmy‘s broadcasts linkable again.
  
  To solve that problem, we need Ruth to have many unlinkable public keys, so that Timmy can give out a different one with each broadcast. One way to do this is have Ruth and Timmy generate many different shared keypairs (or generate many from some shared seed). But this is annoying and involves Ruth storing many secret keys.
  
  A slightly better approach makes use of key randomization. This is a feature provided by cryptosystems like Elgamal: it allows any party to randomize a public key, so that the randomized key is completely unlinkable to the original. The best part of this feature is that Ruth can use a single secret key regardless of which randomized version of her public key was used to encrypt.
  
  All of this leads to a final protocol idea. Each time Timmy broadcasts, he uses a fresh pseudonym and a randomized copy of Ruth‘s public key. When Lassie receives a broadcast, she encrypts her GPS coordinates under the public key, and sends the encrypted message to Apple. Ruth can send in Timmy‘s pseudonyms to Apple’s servers, and if Apple finds a match, she can obtain and decrypt the GPS coordinates.
  
  Does this solve all the problems?
  
  The nasty thing about this problem setting is that, with many weird edge cases, there just isn’t a perfect solution. For example, what if Timmy is evil and wants to make Lassie reveal her location to Apple? What if Old Man Smithers tries to kidnap Lassie?
  
  At a certain point, the answer to these question is just to say that we’ve done our best: any remaining problems will have to be outside the threat model. Sometimes even Lassie knows when to quit.

After
Before

Public

Notices by hackernews (hackernews@die-partei.social), page 5

Internal Server Error

User actions