Congrats to the team for tracking this down, it was a great write-up!
Twitter has some great networking/kernel engineers. When I was working at Twitter a few years back we isolated and fixed another insidious kernel bug; a large group was critical to making it happen (including Cong, who worked on this bug): https://tech.vijayp.ca/linux-kernel-bug-delivers-corrupt-tcp...
I'm always shocked at how the kernel seems to mostly work, with such meagre test coverage. I guess testing in production does kind of work at scale?
The design is terrible. I never use the touchpad for anything regular keys wouldn't do better. The keyboard on my 2017 MBP13 failed three times in the year I've owned it. The first time, the Apple Store person "cleaned" the keyboard, fixed things for a while. A couple of weeks later, the problem came back. I insisted on a better solution, and they replaced the keyboard.
Five months later, a different key failed, and the Apple Store people sent it to Memphis. This time, it came back with one of the "new and improved" keyboards. They also replaced the screen because of 'delamination' which I hadn't noticed. The total amount they spent to repair this computer is approaching the cost of the machine at this point! So far, the new keyboard hasn't failed yet but I'm not holding my breath…
You can sort HN by date, and few URLs are updated every day. So you can push a new bloom filter every day and a different list of updates every 5m. Then just check your URL against both of them.
EDIT: "By surface area, it was the largest airport in the world that had ever been envisioned, with a planned area of 39,660 hectares (396.6 km2; 98,000 acres)"
Agreed -- I feel far safer biking around in Manhattan then sf. There are way more separated lanes in NY, traffic moves much more slowly, there are no tram tracks, and the lack of right on red makes it less likely I'm going to get run over by an inattentive driver.
If he actually flew out of YVR, he was probably in a us preclearance area -- us customs are located in some Canadian airports so flights can go directly into us domestic terminals.
Since those screenings are on Canadian territory, us agents do not have police powers or the right to detain people. They can deny entry but people can leave at any time unless they have violated Canadian law. (https://en.m.wikipedia.org/wiki/United_States_border_preclea...)
If this was the case, he could have simply left the airport at any time.
Yeah, maybe human review is not the most scalable solution; if data analysis shows that certain patterns of behaviour are highly predictive of an account takeover, there are almost certainly product solutions for them.
I guess the real question is what the data actually show
Yeah, a couple of years back, I went to a t-mobile store (I think it was on Broadway and Park Pl) to get a new SIM card; I'd lost it in Europe when I was on holiday. They gave me a new SIM card and let me pay cash without even checking my ID…
That's a good point. Though I think it would be challenging to have a phone number that no one knows which you also carry around with you.
It's possible if you use something like Google Voice for most of your regular calls, but you still need to make sure that the telco can't tie your name to your number…
Yeah, I'm also scared of LastPass being a SPOF. While LastPass does do a good job, no one is perfect, and the cost of having my account compromised is really high
I'm now leaning towards encrypting backup codes with a passphrase and putting the encrypted blobs in LastPass. I haven't actually done this but as long as I don't forget the second passphrase, that might work…
oh man, I remember browsing FTP servers over email back in the early 1990s, when I had email access but not FTP access. It was incredibly slow and typos were to be avoided at all costs! https://en.wikipedia.org/wiki/FTPmail
Well, YHOO's total market cap is now about $37.36B, so it's not a complete travesty. (MSFT would have gotten the Alibaba investment with the $45B offer)
Hardware verification IS performed. For various reasons, the nic never itself drips packets that are corrupt, packets are instead marked by HW as either verified or unverified. When a packet is marked as unverified, the kernel should verify and potentially reject the packet before delivery to the application. The bug in the veth driver causes the kernel to treat packets marked unverified as "verified"
Twitter has some great networking/kernel engineers. When I was working at Twitter a few years back we isolated and fixed another insidious kernel bug; a large group was critical to making it happen (including Cong, who worked on this bug): https://tech.vijayp.ca/linux-kernel-bug-delivers-corrupt-tcp...
I'm always shocked at how the kernel seems to mostly work, with such meagre test coverage. I guess testing in production does kind of work at scale?