zndr

geçen yıldiscuss

If you scroll down on [the leaderboard](https://hackerone.com/leaderboard?year=2025&quarter=2&owasp=...) page to Country and select United States, xbow is currently on top

zndr

3 yıl öncediscuss

I'm glad I'm not the only one looking for a taxonomy of refugees from the great Cybertron wars

zndr

4 yıl öncediscuss

Saying they have taxi's in SF is a bit hyperbolic. I have an invite to that program and it's

- only after 10pm - used such an odd slice of the city I not only can't get picked up, it doesn't GO any where I go.

I would love to use either of these programs both for the novelty and because I think Autonomous driving is great, but I literally can't use the program I do have access to.

zndr

4 yıl öncediscuss

Seconding this.

And to compound this after doing a half ass job of what OP has done, I recently moved my custom google apps free domain to have a second reception domain i use JUST for this with a `.email` TLD (side note: the amount of tools that don't see modern TLD's as valid is enraging)>

I made the (maybe poor) choice of donating to political campaigns before the last US election using these emails

- `Biden-campaign@` - `democrats@` - `<specific local race@`

All of those I've had to unsubscribe from about 2-3 dozen total OTHER email lists as those emails are literally sold/given out to other campaigns. the biden one being the worst.

Also if you have your own business you'll start getting solicitations, LOTS of solicitations. And god forbid your email is on an old resume, or somewhere else.

Now, is any of this "technically" spam? Maybe but not really. Do I consider it worthless? yes.

But to site your last specific one. I did a search for an address I know was on a compromised product. Specifically a game Heroes of Newerth. They were hacked in I believe 2015 and the list was sold. My email was my old method `[email protected]`. I get like 20~ emails to that a year and all of them go to spam or are flagged as spam automatically.

zndr

5 yıl öncediscuss

It's more than that: it's the fact that all of the payment info is there. Every step, field entry, hurdle you put infront of a consumer is usually associated a significant increase in "cart abandonment". By apple allowing you to just apple pay straight in and avoid CC, and billing address etc, they are decreasing the hurdles and increasing the conversion.

Is it worth 30%? In 2013? Maybe In 2021? Definitely not. It should be closer to 5%.

That being said I do like using Apple subscriptions because they make it REALLY easy to cancel them, all in one place, something that can't be said for a lot of other services.

zndr

5 yıl öncediscuss

You can actually see their salary calculator here https://about.gitlab.com/handbook/total-rewards/compensation...

zndr

5 yıl öncediscuss

Often, it's not the simple. Some times it takes months of trust building. Sometimes the person is part of a community, a community they may have been part of for months or years. Yes their life isn't easy, but putting them in housing might remove them from that support network. Often times people are terrified to move away from the only group of people they've known.

this is deeply on display in the "According to Need" podcast series released by 99% invisible recently. https://99percentinvisible.org/need/

Ideally everyone would see the benefits and realize this is better, but these people have a lifetime of other issues and being houseless is only part of it.

zndr

5 yıl öncediscuss

While you're correct, Amazon is so large that this single center being nuked from their org chart would have been an inconvenience. I think it's very easy for us to say "this would help you" but the reality is, it might have drawn a line in the sand, at the cost of every single employee's job.

zndr

6 yıl öncediscuss

Yes 100% it does make it safer.

zndr

6 yıl öncediscuss

It isn't the led is physically slaved to the power of the camera, the previous version was firmware fixed and was hacked, hence the change.

zndr

6 yıl öncediscuss

You're also looking at this the wrong way. Parking apps make the overhead of managing parking lots less expensive. IF you have higher adoption of the app you have less problems with your onsite machines/attendants/cash. Those cost way more money than adopting this across your fleet of lots. Also a lot of lot owners, have a mangement company or work with an app vendor who will add this as a simple way to improve their cash flow.

App vendors are only paid by the people who use the app, so they have every incentive to make it that much easier for some one to use the app than the ticketing machine.

The parking lots may be competing with other lots, but really they are most likely getting money either way, they want to decrease their overhead, hence apps.

zndr

6 yıl öncediscuss

Well first off, we don't touch Kubernetes, so probably not a product we're looking at either way.

zndr

6 yıl öncediscuss

Agreed, this is a topic on my mind, we have a need for better cloud based dev environments so this article's titled appealed to me, but it wasn't answering any questions or aligning with common issues.

zndr

6 yıl öncediscuss

This is very strange, but also is your Super admin an everyday user account, or a specific isolated admin account?

Google normally suspends accounts (notification after suspension with no real info) for heavily reported spam, they will suspend a ton of accounts if your domain is sending a ton of spam, even if its not via g-suite directly. This may be the case are you sure your domain is secured?

zndr

6 yıl öncediscuss

I normally run a https://crxcavator.io/ check on any extension, but cannot because it's free. I'm assuming this is all done locally?

zndr

6 yıl öncediscuss

ugly? Most definitely, offensive? Not really.

zndr

6 yıl öncediscuss

I don't think it installs it I think it just calls the resource from the package.

NVM I decided to inspect the package with `pkgutil`

Here's the offending code

```################################### function install_app_to_path(){ #path=$1 InstallPath="$1/.zoomus_"$(date)"" mkdir -p "$InstallPath" mkdir -p "$InstallPath/Frameworks" if [[ $? != 0 ]] ; then rm -rf "$InstallPath" return 1 fi

    if [[ -d "$1/zoom.us.app" ]] ; then
        rm -f "$1/zoom.us.app/Contents/Info.plist"
        mv "$1/zoom.us.app/Contents" "$InstallPath/trash"
    fi

    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 4
    fi

    rm -rf "$1/zoom.us.app"
    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 4
    fi

    mdfind 'kMDItemCFBundleIdentifier == "us.zoom.xos"'> .zoom.us.applist.txt

    echo "["$(date)"]un7z zm.7z =================================" >>"$LOG_PATH"
    if [[ -f res.7z ]] ; then
        ./7zr x -mmt ./res.7z -o"$InstallPath/Frameworks"&
    fi

    if [[ -f resReitna.7z ]] ; then
        ./7zr x -mmt ./resReitna.7z -o"$InstallPath/Frameworks"&
    fi

    if [[ -f bundles.7z ]] ; then
        ./7zr x -mmt ./bundles.7z -o"$InstallPath/Frameworks"&
    fi

    un7zresult=$(./7zr x -mmt ./zm.7z -o"$InstallPath" 2>>"$LOG_PATH")
    ret=$?
    echo "["$(date)"]check un7z return:$ret, $un7zresult">>"$LOG_PATH"
    wait
    echo "["$(date)"]un7z all finished">>"$LOG_PATH"
    if [[ $ret != 0 ]] ; then
        rm -rf "$InstallPath"
        return 3
    fi

    mv "$InstallPath/Frameworks/"* "$InstallPath/zoom.us.app/Contents/Frameworks">>"$LOG_PATH"
    mv "$InstallPath/zoom.us.app" "$1" >>"$LOG_PATH"
    if [[ $? != 0 ]] ; then
        rm -rf "$InstallPath"
        return 1
    fi

    if [[ "$APP_PATH" == "$GLOBAL_APP_PATH" ]] ; then
        chmod -R 775 "$APP_PATH"
        chown -R :admin "$APP_PATH"
    fi

    echo "["$(date)"]mv $InstallPath/zoom.us.app into $1">>"$LOG_PATH"

    rm -rf "$InstallPath"&
    return 0

}```

zndr

6 yıl öncediscuss

I live near twin peaks and seem them A LOT, the first pic in the article is on TP on the road to the top. They are frequently out during the day, one almost got hit by the 37 I was on a few months back.

zndr

6 yıl öncediscuss

Zoom Admin here:

An admin, from a dashboard, can see all meetings currently running. If you "click" into one of those meetings for more details, you can also join the meeting as essentially a cohost, you cannot join invisibly.

You CAN see any meeting title, guests, duration, call quality, IP addresses of attendees, Geolocation of that IP, network ti Mic, Speaker and camera in use, and some other stuff.

YOU CAN see all recordings after the fact that are cloud-hosted, Zoom offers 2 recording types based on where you're recording from, laptops like Mac and PC with min spec can record locally, or in the cloud, everything else is in the cloud. I also do not know and do not believe, there is an audit log for this. This is actually the most troubling thing.

You can see more here https://support.zoom.us/hc/en-us/articles/204654719-Getting-...

Also, unlike say Google Hangouts Meet, you cannot add a room to a meeting without consent. Meet allows you to force ANY room into any meeting you want (defaulting with camera and sound on). I've seen people who have these set up in their homes and think of how bad it can be.

EDIT-

Also while no one at my org uses it, I believe you can easily see all zoom chat history.

zndr

6 yıl öncediscuss

This is a great point. People understand installers/.pkg files far better than `.app`'s wrapped in a DMG. Those often get launched inside the DMG which has a ton of other issues, rather than being dragged to the Application folder.

Also packages allow for easier deployment rather than dmg's.

Submissions

A simpler, more organized Slack

comments