Hacker Newsnew | past | comments | ask | show | jobs | submit | naldb's commentslogin

Encrypted? Encrypted how? How would the employees tasked with age verification access them if they were encrypted?


By decrypting them with a hardware token or passphrase or memorized password or timeboxed token of another kind.

But honestly just delete them ASAP, that's the issue


And if all the employees have access to this hardware token or passphrase or memorized password or timeboxed token of some kind, does that actually prevent a hack, or does it just let you bullet point "encrypted"?

The main thing encryption prevents is someone that steals a physical device getting access to the data inside. It doesn't do much about unauthorized access to live servers.


Check out Defense in Depth as a security concept


It's not defense in depth, it's defense against a different threat entirely.

You want to have encryption, but I doubt their encryption or lack thereof has anything to do with this attack. Do we even have evidence the data wasn't encrypted?.

If someone gets access to a ticketing system they shouldn't have, talking about encryption is about as useful as talking about seatbelts. Important for general safety but irrelevant to the problem at hand.


I mean, this is the problem for all companies with sensitive data (ensuring that "ex" employees no longer have access to <stuff>).

Generally it's done via accessing some 3rd party secret storage system where employees need to verify themselves to get access (eg. Vault, or AWS secrets or what have you)


Do you think this breach had anything to do with ex-employees retaining access? That also sounds like solving the wrong problem.


I mean this is posted on this page too.

z> nomilk 8 minutes ago | prev | next [–]

> The hacker claims an outsourced worker was compromised through a $500 bribe Also interesting:

> The hacker claims government IDs were just sitting there for months or even years... I have spoken to people familiar with Discord's Age Verification system, and they said after some period of time Discord will delete (the copies of IDs), but they should be deleting them the second they're done

Source (pinned comment, and 7m20s respectively): https://www.youtube.com/watch?v=NnuyT8FgSpA

reply


Security is not a binary state. You can pay as much as you want but there’s no assurance that you won’t be hacked.


That requires cultural changes through a timescale of generations, so it’s not a feasible solution.


I was curious and obviously there is no single exact source but it seems like ~30% of web users have an ad blocker of some kind. Remember that some quite popular browsers include a built-in ad blocker.


How will you ignore it when they outlaw cash?


The EU doesn't have anything close to the police force necessary to enforce a cash ban in the face of public opposition, and doesn't have the money to pay for one.


If there are no ATMs, and no shops accept cash, and they no longer mint Euro currency, what is there to enforce?

This is effectively already the case in parts of Scandinavia.


> This is effectively already the case in parts of Scandinavia

Ironically this isn't quite as consequence-free as some people thought:

"In 2018 a former deputy governor of Sweden’s central bank predicted that by 2025 the country would probably be cashless.

Seven years on, that prediction has turned out to be pretty much true. Just one in 10 purchases are made with cash, and card is the most common form of payment, followed by the Swedish mobile payment system Swish, launched by six banks in 2012 and now ubiquitous. Other mobile phone payment services are also growing quickly.

In fact, according to the central bank’s annual payments report, published this month, Sweden and Norway have the lowest amount of cash in circulation, as a percentage of GDP, in the world.

But in the context of today, with war in Europe, unpredictability in the US and the fear of Russian hybrid attacks almost a part of daily life in Sweden, life without cash is not proving the utopia that perhaps it once promised to be.

Such is the perceived severity of the situation that the authorities are trying to encourage citizens to keep and use cash in the name of civil defence..."

https://www.theguardian.com/technology/2025/mar/16/sweden-ca...


Can you elaborate why they would need more police to ban cash?


I also learnt a lot from your tutorial of Flask. Thank you.


I’ve never heard of Reddit revealing the nationality of members of any sub. Do you have a source for this?


Unfortunately I seem to have conflated facts. 4chan pol has flags, and spez had a bit of a tiff with The Donald users where he changed their posts without consent (removing his name I think) that led to some consternation.

There were also investigations showing Russian activity in The Donald. But somehow the flag story is something I seem to have dreamed into this story. Doesn’t seem have happened (even though I have oddly specific memories about it).


Spending all day drinking and socialising is a waste of a day? As opposed to what, working? Or maybe watching Netflix at home?


Commenting on the internet is the best way to spend the day. Obviously.


Socialising is good, but consuming large quantities of alcohol as part of that seems wasteful to me as you're also intoxicating (which is another word for poisoning) yourself at the same time, which probably means you have less time afterwards due to possibly sleeping in more the next day and even after that still not as inclined as you normally would be for doing anything else (perhaps like at least chores).

Then you're possibly putting on weight from drinking (having lots of beers definitely contributes to getting a "beer belly"), which is another potential health issue, which although can be mitigated by doing physical exercise (which you should be doing anyway), part of your time exercising is to just undo the "damage" from the drinking meaning you need to spend even more time exercising now.

Perhaps instead consider other healthier (or at least less unhealthy) forms of socializing, like board games, multiplayer computer games, outdoor physical group activities, etc.

As a business owner, I ultimately get more money if I manage to get in some extra work in on weekends or after hours, but between family, friends, children's extra murals and generally managing that I don't burn out, I absolutely don't have time to waste sitting around intoxicating myself for half the day.

Oh, and most people I know aren't proud to say they spent all day watching TV, although I confess that I used to do it on occasion when I was younger with less responsibilities. TV watching can be as good an activity as any when you need to take a break from anything mentally or physically challenging and the negative health effects do pale in comparison to the consumption of large amounts of alcohol.


Honestly, it’s pathetic. I know someone will come up with pragmatic reasons for this, but it’s simply pathetic.


It works well. I didn’t know what language it was written in, nor did I care, until months after starting to use uv. I still don’t care.

Sure, it’s a bit silly (I don’t think I’d go as far as “pathetic”, just silly) that the implementation language is above the fold in the description/readme. That’s a cosmetic gripe; it’s still a good tool.

Rust or not, writing a tool to manage installation of a language platform in something other than the language it manages is a good idea, it avoids bootstrap problems. Using something statically-ish linked is also good; it avoids problems caused by the bootstrap dependencies. Tools like pyenv have taught us that shell is a poor choice of bootstrap language. Rust seems as good a choice as any given that.


The humorous thing to me is how keenly aware of performance issues w/ Python the community is, but they continue to trudge along with it and develop tooling to support their Python efforts in other languages (C, Rust, Java, etc.) instead of just writing the entire program in another language.


Nothing in my post is about performance (of Python, Rust, or anything else).

While e.g. numpy might support your claim that Python being slow is reason to abandon it, I don’t think uv does.

My understanding is that the poor performance of pip is due to two things: a combination of slow-in-any-language solver and query/probe behavior that they’re stuck with for backwards compatibility reasons, and very poorly parallelized network and disk IO.

Parallel IO and better disk cache behavior are options because uv is a new system not tied to pip’s behavior and expectations, not because uv is a new system in rust.

Again, I think Rust is a fine choice here with some strengths in the dev-tools area, but those strengths are not (opinion, based on poking through a fair amount of uv’s code and reading Astral blog posts) the reason for uv’s success. The behavior choices that make it good are well supported in most languages.


In Spain there are half a million more people living off the government than those working in the private sector: https://theobjective.com/economia/macroeconomia/2024-09-16/a...


I think this comment is, while factual, slightly misleading. Only around 16% of people "living off the government" are public servants, from which over 50% are for essential services like education health or public safety.

Over 50% of those "living off the government" are pensioners, so mostly coming from a pool of people who already worked (and most of them in the private sector), and paid their share in taxes. In spain, the private sector makes 70% of the active workforce, while the public sector around 13%, self employed 13%, and unemployed 10%.

I know Spain (and Europe) have quite a lot of structural problems, but I fail to see how having so many pensioners has anything to do with AI regulations.


If pensions come from government funds it matters if you are looking at the impact on the economy. The taxes pensioners paid have presumably been spent, so while their past contribution is an argument for their entitlement to pensions, it does not solve the problem of where the money will come from.

Its even worse in the UK where we have a special additional income tax (NI) on earned income (things like investment income are exempt), that is higher on people with low to moderate incomes, that is primarily used to pay (current) pensions (a little bit is set aside for future pensions, but there is only enough set aside for less an an year of payments).


It does not really make a big difference if the pensioner saved 100k while working and put it in their couch, or if they payed it in ekstra taxes which got saved by the government, or if the government presses new money.

The important part is how large fraction of the population work, not where the money for the remaining fraction comes from. Money is only a representation of value, value created by the working fraction.


True, but that is at a different level and a bit more complex. I was talking about the problem of government finances - i.e. government revenue vs expenditure.

Setting aside money, and where you put it, makes a big difference. It might be in a sovereign wealth fund, or used to finance govt debt (as in the small fund that exists in the UK) or invested in shares by a private pension fund, or be a liability of a past employer. In some of those cases value might be generated in another country.

You are right in principle but there are big practical differences too.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: