Hacker Newsnew | past | comments | ask | show | jobs | submit | j16sdiz's commentslogin

Netscape 2 support javascript on 16-bit Windows 3.1

What does "zero-day" even meant?

> ... decade-old ...

> ... was exploited in the wild ...

> ... may have been part of an exploit chain....


The vulnerability has been present for more than a decade.

There is evidence that some people were aware and exploiting it.

Apple was unaware until right now that it existed, thus is a 'zero day' meaning an exploit that the outside world knows about but they don't.


I don’t see any evidence it was there for a decade

Meaning unknown to the public/vendor


Well whatever the zero means, it can't be the number of days that the bug has been present, generally. It should be expected that most zero-days concern a bug with a non-zero previous lifespan.

“Zero day” has meant different things over the years, but for the last couple-ish decades it’s meant “the number of days that the vendor has had to fix them” AKA “newly-known”.

It still weirds me out that a term w@r3z d00dz from the 90s coined is now a part of the mainstream IT security lexicon.

Consider that there's probably a large overlap between those groups

Old-timers, at this point, but I take your point. I guess, for that matter, the terms "social engineering" (as it relates to manipulating people into divulging secrets, etc) and "doxxing" both came from the same community, too. How bizarre. Terms that were bandied about by kids in text files became actual industry jargon (and, in the case of "doxxing", arguably mainstream).

Right, I think the use of "0-day" as "stolen, unreleased software by software pirates" predates the current use.

The other commenter is right, there's a lot of overlap in the communities. It's strange to me that I was in the "field" a good 20 years before I ever thought it would be a career opportunity. This is not a complaint by any means. :-)


If you check the linked issue..... the speed up was inconclusive, and it was meant to be an exercise for new contributor.

Their life are pretty stable - consistently bad, you can say. They know what their kid have is more or less same as what they did - not improving, but not getting worse either

Can you say the the same in a city where housing is getting less and less affordable,?


> electricity that is largely coal.

Kind of. China is at 55% Coal and 40% Renewable, with renewable climbing each year.

Compare to USA 40% Gas, 20% Coal, 20% Renewable, with renewable more or less steady.


Brother if you believe that I have a bridge to sell you.

It depends on you thread model and how much you trust government.

In your model, government now know you are on discord -- they know where to ask when they want to find you.

It really depends which government you are under.


That is because Facebook have already gone out of scale and no reasonable human can handle those appeals anymore.

If you mix in the spammer and bad actors, it makes sense to just say no.

The solution is, of course, have smaller social networks.


> That is because Facebook have already gone out of scale and no reasonable human can handle those appeals anymore.

You've been brainwashed. How can you seriously make this statement?

Meta has $200 _billion_ revenue.

Amazon employs _1.56 million_ people worldwide.

Meta could absolutely hire a million support workers and handle the appeals. They don't, but they could. Smaller social networks would be ideal, but not the only option. You can legislate a requirement of human support availability for gatekeeper platforms.


I wholeheartedly agree companies are doing so bad on customer support nowadays, but I'd argue that there will slways be more fake users than any size of human customer support can take, especially in the age of AI.

I honestly believe it's a battle no one can win.


Fake phone support users? Of course not. Maybe in a few years.

This all goes away if you require social media companies to charge users for access. The addiction to free stuff is what’s really killing the internet.

You think feds won't pay for bot accounts? Record labels already pay for botted streams, so I'm pretty sure MOSSAD would pay to bot Facebook. Hell, it already happens on X.

The problem mentioned in the parent comment was the volume of fake accounts overloading customer support. If it’s no longer free to create spam accounts for phishing etc, the profitability of scamming will shrink and decrease the incentives. I don’t think feds are exactly slamming the support queue.

More importantly than the bot problem, it would decrease social media usage in the aggregate while also encouraging more competition. Much easier to bootstrap a business if you’re not having to compete with big tech offering the same thing for free because they can subsidize the losses.


You should read report from those support workers. How many disgusting image they need to see each day.

Adding more support staff just more complexity. Facebook need to break down into small networks. (ie. make less revenue, if that's all you care)

You suggest they should scale up the support team, I said they should just scale down their whole business.


You should read reports of how Amazon drivers and warehouse workers are treated.

In any case, hiring more support staff doesn't change the quantity of that stuff.

> You suggest they should scale up the support team, I said they should just scale down their whole business.

Oh no, I always agreed with you that what you're saying should be what happens. But there's zero chance of that happening, as only the US can really do this, and it won't unless the candidates for 2028 are not the current frontrunners.

Requiring human phone support however is something e.g. the EU could very reasonably do and get away with.


> You should read report from those support workers. How many disgusting image they need to see each day.

Nonsense. You're talking about image moderation when somebody else is talking about appealing when their account is shut down after an accusation of being automated. There is 1) no one being (overly) traumatized by basic customer service, and 2) no reduced responsibility for removing child pornography from your platform if your customer service is terrible.


Somehow I can't see Facebook volunatarily scaling down, and even if they did, it would leave a gap for a "global" network to take its place.

Companies as large as Facebook (really all of the American Big Tech) should just be illegal.

It's long overdue that we remembered that the very notion of a corporation is a creation of society. Corporations have no natural rights whatsoever because they don't naturally exist. It follows, then, that societies have the right to impose any limits and prohibitions when chartering corporations that don't discriminate against their owners (i.e. so long as restrictions apply uniformly). This includes limit on company size, its marketshare etc.


They already are illegal, laws are just not enforced. We don't need more laws, we need enforcement. It's the same in the EU. If GDPR laws were probably enforced the yearly fines would be a magnitude higher than they currently are. But they're still too scared because of the defense and gas reliance.

It stems me positive to read this by a user with a 2012 HN account though! Nice.


In US at least, the current interpretation of our anti-trust laws (after Bork's https://en.wikipedia.org/wiki/The_Antitrust_Paradox) is such that it is not illegal - you have to prove harm to users, mere market dominance isn't sufficient.

>... we run an unusual workload

ya, right. just make up some reason not following the best practices


placing State Farm's testimonial first really tell you something

There are many ways to interpret it. What’s your interpretation?

It is also interesting to contrast calling them by name vs. the other example, “a major semiconductor company”, not called by name. Though of course, there are also different reasonable ways to interpret that.


The core "design" not bad, but the "code" quality is .. mid.

They are basically keep breaking different feature on every release.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: