Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

Post reply on HN
Print view View original

451–460 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#451

Post by account-5 »

qbasic_forever wrote: post #336
arcastroe wrote: post #127

This guy is a (hobbyist?) security researcher who responsibly alerts companies of vulnerabilities. However are his actions of downloading the no fly list and offering to share with journalists legal? Or does that cross into overreach and criminal activity?

The laws around digital access to networks are archaic and very broad, they were mostly defined in the 80s and 90s. I believe any unauthorized access (i.e. not having consent from the owner/operator) to a private network is technically a crime. Even if the Jenkins server was open, I bet finding and using the S3 credentials would have crossed the line of the law. Those S3 buckets are private and if you didn't have per…

Regards the archaic laws I'm not convinced, they tend to just parallel real world crimes. For example if you parallel it to the real world then the crime of trespass covers the Jenkins server situation (you can trespass on land that is open and easy to access) and you still commit a crime if you enter a house where you found the key on the floor outside the door, which covers the S3 situation.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#452

Post by mst »

greenhorn360 wrote: post #361
kristofferR wrote: post #295

Earlier quoted context omitted.

Guys doesn't refer to men anymore, it's now a neutral word that can refer to both genders.

So how many guys have you slept with? It's not neutral but guys like to pretend it is.

Depends which register of english.

If I'm in a mixed group down the pub I won't at all be surprised if somebody (usually female) walks up to the table and says "hey guys" as a greeting, intending to include male, female and enby members of said group.

If I'm on the internet I'm not going to try and use "guys" as gender neutral because I fully expect I'd be misunderstood by a decent percentage of people reading if I did.

So I wouldn't say people are necessarily pretending, it's entirely possible they're just used to it being neutral and forgetting that for a bunch of people it very much isn't.

That's socially though - when talking about people I've slept with, I acknowledge I'd expect people to read 'guys' as only referencing the male-identified ones. Though I'm more likely to use 'dudes' for that purpose myself, because confusion around 'guys' can go in both directions.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#453

Post by counterfoil »

kuschku wrote: post #364
LastTrain wrote: post #108

Earlier quoted context omitted.

She goes by it, so go look in the mirror. We're all trying our best here.

Maia uses both she and it pronouns. The poster before me misgendered it though, which absolutely isn't okay.

[flagged]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#454

Post by [deleted] »

jcq3 wrote: post #449
implements wrote: post #430

Earlier quoted context omitted.

Technically easy, operationally virtually impossible - everyone will slip up eventually. Also, the need for recognition often drives any human endeavour - and that leads hackers, criminals, etc to boast of their exploits to at least someone … who might be under observation, or under pressure to give up information to escape severe punishment for their own activities.

Prolly the need for recognition because if you hack from public wifi with tails tor mullvad, brand new laptop with specific hardware and so on I don't see how you can get caught up

[deleted]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#455

Post by kleiba »

komali2 wrote: post #394
japanman425 wrote: post #386

Earlier quoted context omitted.

What a Wally. What purpose did it serve doing this?

Are you asking, what purpose was there in bringing the hammer of the American Justice Department and down onto a random grey hat hacker? The same as always: enforce rigid authoritarianism and blind bureaucratic SOP. Remember kids, clicking the "next page" button on court document websites is legal, doing it with javascript is a felony, off to jail with you, join the rapists and murderers!

[flagged]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#456

Post by some_furry »

danuker wrote: post #445
dekken_ wrote: post #439

Earlier quoted context omitted.

> doing it with javascript is a felony Wut

I suspect they're talking about circumvention of technical DRM measures. https://www.law.cornell.edu/uscode/text/17/1201

They could also be talking about the Apple email leak caused by incrementing an UUID.

There's probably other notable cases with the same failure mode.

One of the things you learn working in computer security: history doesn't repeat itself, but it does rhyme.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#457

Post by samastur »

vanderZwan wrote: post #447
veltas wrote: post #392

Earlier quoted context omitted.

Not to start a flame war, but no, people use vim and Emacs because they're productive with them. I've certainly tried alternatives like vscode seriously and find I prefer vim.

Arguably you need a bit of fetishization to get started with them though.

Or just start early. I learned vi in Uni as part of our course and it's always there so I keep using it (but not solely).

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#458

Post by iamtedd »

taurath wrote: post #446
concordDance wrote: post #396

Earlier quoted context omitted.

Amusingly, "they" is not one of the pronouns it prefers.

Feels like a passing of the generational torch as elsewhere in the thread there’s large arguments about pronouns while younger people who are way past that are out here getting into wide open Jenkins servers for active airlines lol

Love this take.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#459

Post by thaumasiotes »

rightbyte wrote: post #407
thaumasiotes wrote: post #359

Earlier quoted context omitted.

> the homepage really does say "hello i am maia arson crimew (it/she)". > I'd feel uncomfortable referring to anyone as "it" though In Five Children and It (published in 1902), the "It" of the title is a magical creature. However, one of the characters is a human baby who is always referred to with the pronoun "it". I glossed right over that reading the book as a child, but I found it pretty disturbing rereading as a…

"Child" is gender neutral and was historically neuter when English had genders. I guess calling a child "it" is impersonal. Calling it "it" to its face is just strange since "it" is 3rd person.

> "Child" is gender neutral and was historically neuter when English had genders.

By 1902, that time was several hundred years in the past.

> Calling [a child] "it" to its face is just strange since "it" is 3rd person.

Sure, but I haven't mentioned any such usage.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#460

Post by Someone »

Dylan16807 wrote: post #393
Someone wrote: post #382

Earlier quoted context omitted.

There is no “true CSV”. https://en.wikipedia.org/wiki/Comma-separated_values : “The CSV file format is not fully standardized. Separating fields with commas is the foundation, but commas in the data or embedded line breaks have to be handled specially. Some implementations disallow such content while others surround the field with quotation marks, which yet again creates the need for escaping if quotation marks are p…

I think it's valid to argue that you shouldn't be able to put some of commas, quotes, and newlines inside fields at all. And comma versus semicolon. But that doesn't extend to using backslash escapes in something that's legitimately trying to be CSV. That's someone getting confused and implementing a mix of data formats, or trying to be clever and making an extended CSV format.

It’s valid to argue that, but that means you can’t use CSV for many real-world data sets.

That, in turn, means you almost cannot use CSV in any robust solution. Even if, today, your input doesn’t have commas, quotes or newlines, can you guarantee it won’t tomorrow, next year, etc?

Post reply on HN