Hacker Newsnew | past | comments | ask | show | jobs | submit | SmileyRedBall's commentslogin

How did this malware compromise the iPhone in the first place. Did Apple insert a backdoor for the spooks that was discovered by a third party. It wouldn't be the first time as Google is reported to have inserted a government backdoor that was subsequently used by the Chinese.

https://support.google.com/mail/forum/AAAAK7un8RUqYupi59QYXM...

https://web.archive.org/web/20190322185231/http://edition.cn...


https://www.apple.com/newsroom/2019/08/apple-offers-customer...

“There is no cost to join Apple’s independent repair program. To qualify for the new program, businesses need to have an Apple-certified technician who can perform the repairs. The process for certification is simple and free of charge. To learn more and apply, visit support.apple.com/irp-program.”

https://support.apple.com/irp-progra

“Becoming certified to repair Apple products requires passing exams through an online Authorized Testing Center. Certifications are updated on a per product basis annually. The certification exam fees are waived for businesses that have been approved to be an Independent Repair Provider.

Detailed information about Apple Certifications preparatory courses and exams can be found here.”

https://support.apple.com/en-us/HT205332

“To pass these exams, you need to have access to the training in ATLAS.”

“How do I pay for the exams? When you register for the certification exams, you can pay with Visa, MasterCard, or American Express.”

https://support.apple.com/kb/HT206048

“To access ATLAS, you need to have an active Global Service Exchange (GSX) account or buy AppleCare Technician Training.”


>Apple’s repair tools, training, service guides, and diagnostics must be kept confidential.


@docker_up: "Shareholders definitely have a great chance to sue Musk"

Your concern for the shareholders is duely noted :]


The full title is ‘“HE’S FULL OF SHIT”: HOW ELON MUSK FOOLED INVESTORS, BILKED TAXPAYERS, AND GAMBLED TESLA TO SAVE SOLARCITY’. Makes me wonder are we in the middle of yet another Tesla shorting cycle. Buy some shorts, trash Tesla in the media, wait for stock to drop, then cashout.


Stranger then Fiction, you couldn't make it up, no one would believe it:

“This tendency towards pseudoreligiosity surfaces most clearly in Campbell’s relation with that mountebank and founder of exploitative cults, Hubbard”

L. Ron Hubbard had a talent for grifting people. Later on he joined Jack Parsons magical order 'Ordo Templi Orientis'. At Parsons Pasadena mansion, Hubbard and Parsons engaged in the occult task of raising a moonchild, before Hubbard ran off with Parsons money, girlfriend and yacht. There's a fictionalized version on 'CBS All Access' called "Strange Angel". Hubbard turns up at the end of season 2.


@NeedMoreTea: “What if your friend sees no value in their body after they're done with it” ..

Yea, why not just dip the corpse in silicone epoxy, mount it on a plinth and put it on display. Oh wait, someone else has already thought of that.

https://bodyworlds.com/city/london/

“The first Matrix I designed was .. [a] monumental failure .. Thus, I redesigned it based on your history to more accurately reflect the varying grotesqueries of your nature.”


That got a laugh.

Once I'm dead, I'm done with it. I have no remnant of silly medieval ideas like the saintly sanctity of a corpse or any need of special religious consideration or ceremony. The most fitting use to my mind is, as ChrisRR suggests, returning to the natural cycle of the earth adding as little pollution as possible. Composting, repurposed as dog food, feed worms, fish or even birds via sky burial, I don't much care.

Epoxy filled as a display piece is rather high impact for my taste, I'd prefer to feed the soil with a forest burial thanks. If the "artist" were to offer my descendents a large enough royalty for my use as inside out epoxied exhibit, along with appropriate carbon offset I would gladly reconsider... :)


> Needs some '2FA', like actually putting the key in the ignition. :) Or a tiny motion sensor in the key, if it's still then don't authenticate.

Or use infrared to unlock the car, that requires you to stand next to the car and therefore shielding the device from any leakage :]


Would being continously shorted by Wall Street have anything to do with this? For example, take yet another short position in Tesla and then trash it in the financial press, like this article is doing.

It is curious that since 2013 Tesla sales have jumped from approx 20,000 per year to approx 30,000 per month and yet the stock price hasn't shown an equivalent increase. If I were of a cynical nature I would suspect the rest of the US car industry (what's left of it) of punishing Musk for being sucessfull. Despite this, an increase of 1,889 percent on an initial investment in the IPO in 2010 is not too bad.


The financial press has gone very easy on Tesla & Musk. They will routinely write "Elon Musk says" articles which are little more than stenographic regurgitation of some statement by Musk or Tesla. Longs and Tesla touts like Ron Baron, Cathie Wood, Gene Munster, and even the utterly inexperienced Galileo Russell are routinely given long CNBC segments to hold forth with their bullish theses. And even if it can temporarily push the stock price one direction or another, press coverage has little to nothing to do with their audited financial results.

Netflix attracted a ton of short interest back when the stock was around $100. Somehow that didn't, in and of itself, hold back the company at all.

> It is curious that since 2013 Tesla sales have jumped from approx 20,000 per year to approx 30,000 per month and yet the stock price hasn't shown an equivalent increase.

Yes, it's almost as though the company has a complete lack of operating leverage and is losing more money the more cars it sells.


> It is curious that since 2013 Tesla sales have jumped from approx 20,000 per year to approx 30,000 per month and yet the stock price hasn't shown an equivalent increase.

For the Nth time that this conversation has to be had on the internet: That’s Not How The Market Works.

Tesla’s stock has been _very_ optimistically valued for quite some time because the market collectively determined that the company was likely to do very well. If a company does well and that performance isn’t surprising then there wasn’t an inefficiency and the market doesn’t need to correct for it.

Likewise, if a collection of market participants believes that Tesla’s valuation is overly optimistic then the can short the company. In doing so, they will be incentivized to show evidence that the valuation isn’t realistic and hopefully validate their short position.

There is an argument to be had over which incentives may or may not be good for society here, but that is completely orthogonal to the discussion of market valuation and short/long positions.


“The U.S. military has conducted a flight test of a type of missile banned for more than 30 years by a treaty that both the United States and Russia abandoned this month, the Pentagon said”.

No not all all, the US arbitrarily abandoned the treaty. It's to do with the US trying to distract from economic and social problems at home by picking a fight with someone, anyone.


2002 is calling and wants it's shatter attack back.

“Shatter Attacks - How to break Windows.”

https://web.archive.org/web/20060904080018/http://security.t...


That exploit seems limited to applications that are designed to execute arbitrary commands based on user input (consoles). This exploit goes a step further and finds vulnerabilities in the CTF protocol's implementation so that any process's privileges can be hijacked to run arbitrary code.


IIRC shatter attack was exploiting a badly designed general purpose window message protocol that by design quasi-directly allowed arbitrary code execution (especially at the time, with no mitigation).

This one is way more indirect and goes through obscure and less reviewed channels, but the end result is kind of the same, even worse; because the integrity level was supposed to fix that mess, except MS was not lying when they said that this was not a security boundary... only they did explain the full picture properly explain so that we could understand that UAC is this much worthless -- lots of people thought of it as reasonable enough when set on Always notify, turns out it seems just plainly broken -- and because there seems to be no proper design comprehensively focused on that topic, it is very possible that there are other avenues to achieve the same result.

I think I now understand way better why they want so much (and have started since some years) to leverage virtualization for security purposes: it seems impossible for them to evolve their historical crappy design to something sound (without breaking all kind of crazy 3rd party applications) otherwise.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: