Readit News logoReadit News
grepthisab commented on Microsoft says mandatory password changing is “ancient and obsolete” (2019)   arstechnica.com/informati... · Posted by u/Tomte
naikrovek · 5 years ago
do attackers wait to use passwords months after they've compromised those passwords? or, do they give themselves other ways to maintain their access so that no passwords stand in their way from that point on?

it's the latter, not the former. once you're compromised, passwords, changed or not, are no longer an obstacle at all.

password rotation does not increase security.

grepthisab · 5 years ago
Hi, attacker here, I usually use the password immediately but it really depends on the level of user as to whether I can ensure that password changes won't affect me going forward. If you're a normal user, changing the password is helpful. Root? Forget about it.
grepthisab commented on FFMPEG from Zero to Hero   ffmpegfromzerotohero.com/... · Posted by u/wilsonfiifi
grepthisab · 5 years ago
I'm convinced, but their google pay seems to time out on my phone. Will try again later, but if the rest of the book is like the first chapter it's well worth it.
grepthisab commented on Interest surges in top colleges, while struggling ones scrape for applicants   nytimes.com/2021/02/20/us... · Posted by u/smaslennikov
borski · 5 years ago
No, I understand precisely what you're trying to say. Based on my (admittedly anecdotal) experience applying to colleges and working (however briefly) in Financial Aid at MIT, it was not a 20% blanket by any stretch; each case was treated individually and there was an explicit focus on ensuring students were not saddled with insane amounts of debt.

There were exceptions, particularly for wealthy folks and people who were 'on the line' income-wise, but the majority got significant financial aid.

Just to give you an idea, from MIT's stats[1]:

* Average need-based MIT scholarship: $47,593

* Students awarded a need-based MIT scholarship: 59%

* Students attending tuition-free: 31%

* Class of 2019 graduates with no student loan debt: 76%

* Average student loan debt for those who borrowed: $23,226

The trope that the expensive schools are the cause of the massive student loan debt problem is just that; a trope. When only 24% of the class graduates with any debt at all, I'm not convinced MIT (and similar) are the problem. This is largely due to MIT and similar schools having massive endowments from which they can draw for Financial Aid; there are cheaper schools, certainly, but they have coffers that are less deep (referring to private schools), meaning students end up having to take more debt.

[1] https://web.mit.edu/facts/tuition.html

grepthisab · 5 years ago
You kind of buried the lede in your last paragraph:

This is largely due to MIT and similar schools having massive endowments from which they can draw for Financial Aid; there are cheaper schools, certainly, but they have coffers that are less deep (referring to private schools), meaning students end up having to take more debt.

It is reality that expensive schools cause the massive student loan debt problem, but expensiveness isn't totally buried in sticker price but total cost of attendance. Schools like HYSM don't saddle attendees with as much debt despite their high sticker price perhaps because of endowments.

grepthisab commented on Interest surges in top colleges, while struggling ones scrape for applicants   nytimes.com/2021/02/20/us... · Posted by u/smaslennikov
jaykru · 5 years ago
the information available and advertised to most 17-year-olds (back when I was browsing: US News, College Confidential) isn't much of an improvement. In my case the former relies on a bunch of bunk data and weird metrics for evaluation, while the latter mostly revolved around very coarse word-of-mouth reputation.
grepthisab · 5 years ago
I have a hard time believing this. Information was murky and information asymmetry was a big reason lots of people seemed to just apply to a flagship state u rather than look at more far flung or prestigious options, though the state u is prestigious in it's own right. There's certainly more noise now, but there's also a lot more signal (maybe the ratio is the same though). I suspect there's really fantastic info out there that's way more than I had applying to colleges way back when in 2010.

I'd be interested in doing an experiment to act like I'm in high school and want all the info on college applications and to see where I end up.

grepthisab commented on Papercraft Models of Computers   rockybergen.com/papercraf... · Posted by u/laurex
_nalply · 5 years ago
And how would they contact you?
grepthisab · 5 years ago
A reply to this comment would be perfect!
grepthisab commented on The Reddit GME short squeeze game plan (143 days old)   old.reddit.com/r/wallstre... · Posted by u/omarhaneef
anupamchugh · 5 years ago
I don’t think so... if WSB is being criticised for market manipulation, then so should be hedge fund managers. Everyday we see institutional investors setting new price targets for certain stocks—which definitely drives up the price. People are just criticising WSB since newbie investors backed dumb stocks.
grepthisab · 5 years ago
Someone else committing a crime isn't really a defense to one's own crime though.
grepthisab commented on Papercraft Models of Computers   rockybergen.com/papercraf... · Posted by u/laurex
pacaro · 5 years ago
The download links for the models are trying to serve malware. Is anyone else having this problem?
grepthisab · 5 years ago
Yes same here, tried to get me to install something on my android. Please leave this provider asap! But I love these so much I'll happily host them all on my CDN if you'd like.
grepthisab commented on Snopes Under Legal Attack from Salon.com   snopes.com/we-wish-we-had... · Posted by u/jacquesm
voxic11 · 6 years ago
Does it though? Is there any evidence you have that this suite is being brought in order prevent public participation from snopes? The suite seems to be entirely about who is contractually owed the profits from advertising. This may be an abuse of the system but its not a SLAPP.
grepthisab · 6 years ago
Well, for one Snopes filed an anti slapp motion and the court fully granted it. If that's not evidence this is slapp, I don't know what is.

"As part of our defense, Snopes and our CEO David Mikkelson filed separate anti-SLAPP motions against Proper Media, Richmond, and Schoentrup. Those motions were heard in August 2019, and they were both granted in their entirety, with the court striking claims related to defamation and the advancement of legal fees against both Snopes and Mr. Mikkelson."

grepthisab commented on Snopes Under Legal Attack from Salon.com   snopes.com/we-wish-we-had... · Posted by u/jacquesm
grepthisab · 6 years ago
I hadn't heard about this, and there's nothing in the main article posted about the origins. I went to their gofundme and read a bunch of updates, and was able to find this article. Seems to stem from an alleged breach of contract. As an anonymous internet commentator and IAAL, I will say that a skim of the complaints and various actions leads me to believe that Salon group is acting in bad faith, and the various courts who have ruled agree with that view. Poor Snopes. :(

The complaint:

http://www.poynter.org/wp-content/uploads/2017/07/Snopes-COM...

From here:

https://www.poynter.org/business-work/2017/snopes-is-locked-...

A snippet:

The relationship between the two companies stretches back to the fall of 2015, when Bardav founder David Mikkelson inked a deal with Proper Media to manage all content and advertising accounts for Snopes, according to the complaint. Mikkelson terminated that agreement in spring 2017, according to the document.

“Our termination of the contract was fully in accord with the cancellation provisions of that contract,” he told Poynter in an email. “The contract was terminated because it was highly disadvantageous to us.”

A month after Proper Media filed its legal complaint, Bardav filed a cross-complaint in the Superior Court of California in San Diego County alleging four claims, including breach of contract.

“Proper Media failed to perform its contractual and legal obligations, and Bardav eventually terminated the contract in accordance with its terms,” the document reads. “Proper Media is now wrongfully withholding money owed to Bardav and effectively holding the Snopes.com website hostage by preventing Bardav from moving the website, advertising and other back-end functions to another service provider.”

Bardav signed over a share of Snopes’ revenue to Proper Media in exchange for web services such as management of its back-end advertising platform, according to the cross-complaint. Proper Media alleges in its original complaint, which was filed in early May, that it still has a valid, written contract that the company upheld until Bardav withheld the “accounts, tools and data” it needed to manage Snopes’ operations. The complaint alleges that Mikkelson himself breached the agreement by canceling it.

grepthisab commented on Let's Create a Simple Load Balancer with Go   kasvith.github.io/posts/l... · Posted by u/UkiahSmith
AdieuToLogic · 6 years ago
> Some bizarre hair-splitting here.

I was trying to be explicit as to my reasoning. If that came across as "hair-splitting" then I suppose I failed to adequately do so.

The whole point I was trying to make is that people find code in all sorts of ways. And my opinion is that if a public repo, such as GitHub, has a project which could easily be both desired (due to need) and misused (due to intent), then it might be a good idea to put a simple declaration in the project's README.

Given all the blow-back this concept has incurred, I would think the concept is either wholly immaterial or now proven as needed.

grepthisab · 6 years ago
Relevant username?

This seems to be a strange hill to die on. For all intents and purposes there is a declaration in the readme. And anyone who knows enough to want to operate with this will see that it's fairly basic. Others will likely just reach for a more generic or battle tested solution.

In any case, people should be able to do what they want with their repos and code, assuming legality of course.

u/grepthisab

KarmaCake day549November 23, 2016View Original