Hacker Newsnew | past | comments | ask | show | jobs | submit | JHorse's commentslogin

Survival (post diving accident) as a Service


If you haven't already seen theMcSweemey's classic "I'm Comic Sans, Asshole", I highly recommend you go check it out posthaste

https://www.mcsweeneys.net/articles/im-comic-sans-asshole


My brain read that in staccato "urh urh urh" sounds.

https://undertale.fandom.com/wiki/Sans


One Rich Asshole Called Larry Ellison


Apart from just generally being insecure, I believe google penalizes what it classes as misconfiguration/bad practices on the server side


Personally, I'm more interested in the ideal Bear to Picnic Basket ratio.


I believe the correct spelling is pic-a-nic.


> 'Picnic' began life as a 17th-century French word: it wasn't even close to being an American invention. A 1692 edition of Origines de la Langue Françoise de Ménage mentions 'piquenique' as being of recent origin and marks the first appearance of the word in print. As for how the French came by this new term, it was likely invented by joining the common form of the verb 'piquer' (meaning "to pick" or "peck") with 'nique,' possibly either a Germanic term meaning "worthless thing" or merely a nonsense rhyming syllable coined to fit the first half of this new palate-pleaser.


Could it just be that doctors who attend these meetings are more career (and less patient) focused than their compatriots?


If I'm not mistaken, I think attendance at conferences is sometimes required as hours to keep up to date in medical practice. Not sure though.


I like that framing. Personally, I've always thought of doctors as "professional educated guessers"


A problem is that the inputs are so heterogenous. Hard to avoid "Garbage in, garbage out" in the input-process-output cycle.


Nothing is stopping them from lying.

Signaling that their infrastructure has been compromised is kind of a weird lie for them to make though...


The SEC could throw me in jail. And, sure, you could believe that the FBI or whoever could tell the SEC what to do. We have European and Asian investors too, so their financial regulators could also sue me personally for lying. Perhaps the FBI/CIA/NSA control them too? Gets tricky to believe: the bigger the conspiracy the faster it falls apart. It's really, really hard to be part of some grand conspiracy as a public company.


> It's really, really hard to be part of some grand conspiracy as a public company.

No it's not. Twitter and Facebook have had defacto government censorship collusion, as suspected by the paranoid.

For years and years it was dismissed as conspiracy, but clear evidence has now come out that it was happening in these public companies.


>clear evidence has now come out

Source?


Twitterfiles, various publications on government access to Facebook takedown portal.

Including on this platform...

https://news.ycombinator.com/item?id=33418284


The concern isn't a grand conspiracy, it's that you've been coerced to comply with the kind of surveillance overreach that US intelligence and enforcement agencies have repeatedly engaged in.

Cloudflare isn't the bad guy in this scenario, it's the hostage.


Their Canary has more to do with their infrastructure being compromised. It's likely one or more of these statements are no longer true:

1. Cloudflare has never turned over our encryption or authentication keys or our customers' encryption or authentication keys to anyone.

2. Cloudflare has never installed any law enforcement software or equipment anywhere on our network.

3. Cloudflare has never provided any law enforcement organization a feed of our customers' content transiting our network.

4. Cloudflare has never modified customer content at the request of law enforcement or another third party.

5. Cloudflare has never modified the intended destination of DNS responses at the request of law enforcement or another third party.

6. Cloudflare has never weakened, compromised, or subverted any of its encryption at the request of law enforcement or another third party.


I'll state right here: all these are still true. We'll get the canary updated. Checking with legal and trust & safety why it hasn't been for so long. Likely just slipped someone's mind. Will make sure that doesn't happen again.


How about make `https://www.cloudflare.com/.well-known/warrant-canary.txt`, and use a Cloudflare Worker with a Cron Trigger to trigger an email to legal if it's approaching expiry?


I wonder how pedantic you could legally get with that.

Cloudflare has never been compelled to give up information to an agency called AAA. Cloudflare has never been compelled to give up information to an agency called AAB. ...etc.


As we sort of saw with the Twitter Files (and other incidents with foreign governments, eg the Indian government), they can get extremely pedantic about describing the kind of cooperation they have with government agencies.

(Not to point to a conspiracy to silence political opposition, just to highlight that, at least to me, the extent of their cooperation was really surprising relative to how little they talked about it)


Suuuuper pedantic.

For instance, 2 and 3 narrowly specify just law enforcement agencies, of which the CIA and NSA are not.


I think we'd consider them "law enforcement agencies." But, for the sake of complete clarity, I'm happy to say that we haven't done any of these for the CiA or NSA or any non-US equivalent.


Buuuut, since 703 allows law enforcement agencies to harvest data captured by intelligence agencies any statement that doesn't specifically exclude those intelligence agencies is essentially meaningless.


Why do we have to be pedantic and can't just say when the FBI or CIA come after us?


Because these agencies are horrifically corrupt beyond any usefulness. These agencies could go after any number of human and drug traffickers and make these problems nearly vanish almost overnight because they collect practically all of our communications. But they don't do that. They are used as targeted political cudgels when its handy and when there is much money to be made.


The essence of a canary is you can't say they did, but you can stop saying they didn't.


In the U.S., national security letters (NSL) typically include a nondisclosure requirement:

<https://en.wikipedia.org/wiki/National_security_letter>

A warrant canary asserts that no such obligation has been incurred.

<https://en.wikipedia.org/wiki/Warrant_canary>


Gag orders.


#5 seems most likely.


Agree #5 is the riskiest right now with the Quad9 decision in Germany and some of the cases we're facing in Italy, Austria, and elsewhere. The copyright industry has decided that DNS is their new target; never mind that anyone can setup their own local DNS resolver. Good news: those are extremely public cases. And, if we lose, we'll make a lot of news about how dangerous they are. If you're in Europe, it'd be really helpful for more people to be telling the courts and legislatures: DNS is not the right place to try and censor the Internet.


They all seem likely given that they all have multinational precedent.


Bear in mind that there are multiple ways for Cloudflare to give law enforcement or intelligence agencies customer information that do not breach one of these six statements.

It doesn’t mean that they are not helpful. Just that - as warrant canaries go - they are not complete.


H2 2022 and H1 2023


Give H1 2023 has only just wrapped up I optimistically presumed it would be in production now, but I’ve got no idea what the lead time on these reports historically has been


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: