[deleted]
Leaking the email of any YouTube user for $10k
311–320 of 487 posts
Re: Leaking the email of any YouTube user for $10k
#312Earlier quoted context omitted.
Alarms is unreliable for the basic functionality of waking you up. Photos redesign makes it really hard to use. Siri works half of the times, maybe even less than that. Books lacks of basic functionalities such as downloading and keeping books on device.
How are alarms unreliable? Photos redesign maybe something you don’t like, but you can hardly call it half baked. All of the functionality is there and there’s a new consistency in how it works that wasn’t there previously. Books automatically downloads to device. There isn’t a way to read a book without it local.
Probably a few times every quarter I have iOS alarms that didn't go off for some reason on my iPhone.
It's happened for years: it was pretty bad about 5/6 years ago, but Apple claimed they fixed it, but it's still happening a bit.
In fact, when I really need to wake up at a particular time (say for a flight), I set two alarms 1 minutes apart.
Re: Leaking the email of any YouTube user for $10k
#313Earlier quoted context omitted.
How are alarms unreliable? Photos redesign maybe something you don’t like, but you can hardly call it half baked. All of the functionality is there and there’s a new consistency in how it works that wasn’t there previously. Books automatically downloads to device. There isn’t a way to read a book without it local.
> How are alarms unreliable? A simple google search will answer this question https://www.theverge.com/2025/1/9/24340238/apple-iphone-alar... Even an hn search is fine, if you do not trust the Verge (notice these are comments from the last 3 months so not an old issue): https://news.ycombinator.com/item?id=42705217 https://news.ycombinator.com/item?id=41887505 https://news.ycombinator.com/item?id=41962418 > Books aut…
> Have you used Books extensively or just skimmed it? There's no way to keep books on device, make another Google search if you do not believe me.
Once you download a book to a device, it stays downloaded. There is a setting to automatically remove downloads once you're finished with the book, but that defaults to off (and I didn't even realize it was there until I went looking just now).
Re: Leaking the email of any YouTube user for $10k
#314Earlier quoted context omitted.
Where is the profit for the individual product? There are a lot of services at every BigTech company that would not make sense as an individual product. But they make the overall ecosystem better or make money only because they are a part of the larger company. That’s part of the stupidity of the DOJ trying to force Google to sell Chrome. Who would want it? And how would they profit from it?
> That’s part of the stupidity of the DOJ trying to force Google to sell Chrome. Who would want it? And how would they profit from it? All valid questions, but it might be that splitting the tool used to bludgeon everyone around is still worth it, even if pace of development slows down considerably.
There will be no development. Who is going to spend money to develop it and why would they? Microsoft even decided it wasn’t worth it to develop their own engine.
Unless you are using Chromebooks, every desktop user who uses Chrome made an affirmative choice to download it.
Re: Leaking the email of any YouTube user for $10k
#315What can one do with a Gaia ID? I don't think the article went into the impact of having it.
Use it on the block user api and get an email address from what I understood.
Re: Leaking the email of any YouTube user for $10k
#316Earlier quoted context omitted.
I agree, and I like this term "internal weirdware". Real question: Why don't we see more start-ups try to clone old terminated Google services with a freemium model?
People don’t want to pay for things.
I want. And I do. Notable examples are Kagi.com and Raindrop.io. I've also been sponsoring a number of projects for a number of months, from journalism to social media startup.
But I am getting more hesitant as often when I (and others) do it seems companies think they can increase their prices wildly or do other stuff.
I have this exact feeling now with Logseq: I started paying for sync a while ago and it seems so did others and now they are rewriting the whole thing from plain text[1] to some kind of database based storage :-/
[1]: which could be synced over git, transferred effortlessly into another application and was one of the reasons I went with Logseq
Re: Leaking the email of any YouTube user for $10k
#317Earlier quoted context omitted.
MM/DD/YY is an exclusively American standard https://en.wikipedia.org/wiki/List_of_date_formats_by_countr... I have no idea why America settled on MM/DD/YY, which seems like absolutely the least intuitive permutation of D, M, and Y. Except perhaps MYD.
For a person born and raised in metric system, MM/DD/YY is just as bonkers as if someone decided that MM:HH:SS makes sense.
Year month day makes sense. Month day year makes sense because that's how people talk: I'll be there February 5, etc.
Month day year makes no sense because it's backwards, and no one talks that way. So why use that?
Re: Leaking the email of any YouTube user for $10k
#318I discovered my favorite PI via a geographic subreddit, over a decade ago. The amount of information this retired peace officer procures is always incredibly useful (e.g. litigation, applicant screening).
$100.00 is enough to cause most to blush.
Re: Leaking the email of any YouTube user for $10k
#319Excellent find and breakdown of the process
Re: Leaking the email of any YouTube user for $10k
#320Earlier quoted context omitted.
It's an extraordinarily high sum for this kind of finding. Bounties are generally not a referendum on how clever the underlying work is. A full-chain iOS bug is worth hundreds of thousands of dollars because Apple competes with the grey market for it (and even then, it's an apples-oranges comparison and Apple pays substantially less than the rest of the market for structural reasons). Nobody competes for this bug; no…
My commentary was precisely about the state-of-the-practice. That $10k is "an extraordinarily high sum for" what was likely weeks of work on this bug, and probably months of work poking in other places, reflects the very, very low focus on security industry-wide. This is why we need significant civil -- or possibly occasionally criminal -- liability. Civil if it's simple negligence, and criminal if it's gross neglige…
I think you are vastly overestimating the damage of knowing an email address.
I used to get books dropped off at my door with the names, addresses, and phone numbers of thousands of people. The first two are often public record.