Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I pwned half of America's fast food chains simultaneously

mrbruh.com

Post reply on HN
Print view View original

501–510 of 513 posts

Re: I pwned half of America's fast food chains simultaneously

#501

Post by ziddoap »

forward1 wrote: post #500
ziddoap wrote: post #371

Earlier quoted context omitted.

This reply seems rather… unrelated to my comment. But perhaps it'd be a fun philosophical debate at some other time.

It's directly related, perhaps you just struggle with comprehending the message? Where does your entitlement come from? I bet working in tech too long.

Personal insults, nice.

It's related in the same way that I can say "nothing matters at all" in reply to literally anything. Which is to say, very loosely, and entirely lacking substance.

Re: I pwned half of America's fast food chains simultaneously

#502

Post by Eisenstein »

redcobra762 wrote: post #495
Eisenstein wrote: post #492

Earlier quoted context omitted.

It isn't letting me reply to you above because it locks down comment chains that get replied to quickly to avoid flame wars, so I will reply here and be done. > So you admit that shame can be bad? Then you’re close. Next you need to realize that shame’s effectiveness is dependent on a person feeling shame the way you want them to. But that’s not how it actually works, is it? Instead, shame is sourced from the judgeme…

That’s not how HN works, individuals are slowed by IP, there is no “slow a specific conversation”, but thanks for making it clear you’ve been flagged by dang as a troll. And one of the clearest indicators to me that a person knows their argument is weak is when they declare themselves correct (or me wrong). Of course I’m free to be wrong, the problem you have is you’ve done a terrible job demonstrating that fact.

You talk about how others 'want people to feel bad', but have you considered that you are expressing the most desire to belittle others and make them feel bad? Your abrasiveness and need to triumph in what should otherwise be a genial conversation must really make it difficult to engage with people without them disliking you. Have you considered self-reflection?

Re: I pwned half of America's fast food chains simultaneously

#503

Post by gretch »

leoqa wrote: post #405
gretch wrote: post #386

Earlier quoted context omitted.

> Not worth it for anyone in the US or even Europe. Lots of crimes are not "worth it". And yet criminals do it anyway. Because criminals (nor most humans) are not perfectly rational. There's routinely reports where people try to rob a gas station with a loaded gun - a $200 haul if everything goes perfect. It doesn't and now they have 10 years in jail...

One crime is skilled, one crime is not. The skilled person has more options to earn 2BTC than the unskilled person does to earn $200. If you’re a felon and unskilled you’re as desperate as it gets in America.

Yeah Sam Bankman Fried probably had the skills and connections and trust to coast through life. But instead he chose to commit the most egregious of financial fraud.

I would strongly argue that almost all crime is irrationally - take it to the game theory strategies of tit-for-tat and such.

Re: I pwned half of America's fast food chains simultaneously

#504

Post by redcobra762 »

Eisenstein wrote: post #502
redcobra762 wrote: post #495

Earlier quoted context omitted.

That’s not how HN works, individuals are slowed by IP, there is no “slow a specific conversation”, but thanks for making it clear you’ve been flagged by dang as a troll. And one of the clearest indicators to me that a person knows their argument is weak is when they declare themselves correct (or me wrong). Of course I’m free to be wrong, the problem you have is you’ve done a terrible job demonstrating that fact.

You talk about how others 'want people to feel bad', but have you considered that you are expressing the most desire to belittle others and make them feel bad? Your abrasiveness and need to triumph in what should otherwise be a genial conversation must really make it difficult to engage with people without them disliking you. Have you considered self-reflection?

Oh yeah, I'm a terrible person, no doubt about that. Doesn't change the argument one bit, however.

(See how your attempt at shame failed? That's why shame is not a useful tool.)

Re: I pwned half of America's fast food chains simultaneously

#505

Post by Eisenstein »

redcobra762 wrote: post #504
Eisenstein wrote: post #502

Earlier quoted context omitted.

You talk about how others 'want people to feel bad', but have you considered that you are expressing the most desire to belittle others and make them feel bad? Your abrasiveness and need to triumph in what should otherwise be a genial conversation must really make it difficult to engage with people without them disliking you. Have you considered self-reflection?

Oh yeah, I'm a terrible person, no doubt about that. Doesn't change the argument one bit, however. (See how your attempt at shame failed? That's why shame is not a useful tool.)

The problem with thinking you know everything is that you miss genuine opportunities to learn things -- I wasn't trying to shame you, I was pointing out the irony of your crusade in this thread (which is completely apparent to everyone) and urging you to self-reflect on things that could improve your life.

Even if you think I am an asshole, self-reflection can only be beneficial. One thing that may be helpful is to take a look at your actions over the thread and think about it from the other perspective, and seeing how you may appear from someone else's point of view. I do that often and though it isn't always pleasant, it does give a reality check in some key areas.

Re: I pwned half of America's fast food chains simultaneously

#506

Post by redcobra762 »

Eisenstein wrote: post #505
redcobra762 wrote: post #504

Earlier quoted context omitted.

Oh yeah, I'm a terrible person, no doubt about that. Doesn't change the argument one bit, however. (See how your attempt at shame failed? That's why shame is not a useful tool.)

The problem with thinking you know everything is that you miss genuine opportunities to learn things -- I wasn't trying to shame you, I was pointing out the irony of your crusade in this thread (which is completely apparent to everyone) and urging you to self-reflect on things that could improve your life. Even if you think I am an asshole, self-reflection can only be beneficial. One thing that may be helpful is to t…

Nope sorry; I didn't say I know everything, I just provided an apparently undefeatable argument (why attack my character otherwise?).

Re: I pwned half of America's fast food chains simultaneously

#507

Post by DirkH »

jjeaff wrote: post #130
cedws wrote: post #56

It's not clear if the author was hired to do this pentest or is a guerilla/good samaritan. If it is indeed the latter, I wonder how they are so brazen about it. Does chattr.ai have a responsible disclosure policy? In my eyes people should be free to pentest whatever as long as there is no intent to cause harm and any findings are reported. Sadly, many companies will freak out and get the law involved, even if you are…

Do you feel the same about physical security? It's fine for people to walk around your building, peak in the windows, maybe pick the lock on the door, maybe even take a little walk inside, as long as they don't steal anything?

There's a huge fucking difference between "yo, the neighbourhood and country is unsafe and there is no strongly upheld norm here of people not seeing if they can enter someone else's house if their door is easily unlockable. You must be new here since I noticed your door is pretty insecure, I recommend you do x,y and z if you are to live here safely. Take care." Versus "yo, I just entered your home and snooped around since it was easy to lockpick. There are actually strong norms here of people not doing this so I know this is quite the social violation and something like this had a very low probability of happening otherwise but, you know, your door is weak so it was my right to enter. You should fix it btw"

The internet is like the former not the latter and taking a moral high ground stance that it just should be otherwise is just screaming underwater while doing nothing to actually protect yourself from an actual real threat.

I'd be very thankful if I moved to some place I'm unfamiliar with where people lockpicking is just a cultural norm and someone warned me I should get a better door.

Re: I pwned half of America's fast food chains simultaneously

#508

Post by troupe »

jacobsenscott wrote: post #353
troupe wrote: post #335

Earlier quoted context omitted.

I'm curious if the best monetary approach for a white hat hacker would be to show them the problem, give them time to fix it, and then give them an option to pay a consulting fee for the discovery in exchange for NOT publishing the exploit (after it has been fixed). The idea being the showing what you have found on other sites has marketing value for a white hat hacker, but had the company hired you to discover the f…

The best approach is not to do it. Demanding money from someone that didn't hire you is never ethical - just childish. Would you like it if I showed up at your house, mowed your lawn, and then started banging on your door demanding $100 for mowing your lawn? Also, what marketing value - if you're just pwning random web sites rather than getting hired to test a site's security you aren't in any market.

> what marketing value

Most people who are doing this type of things offer consulting services to help make sure your site / app are secure.

> The best approach is not to do it.

Don't do what? Don't tell them there is a security problem?

> Demanding money from someone that didn't hire you is never ethical - just childish.

Lets say my front door is open. Someone takes a picture of it and sends it to me so I can close and lock it. Once it is closed, they explain that they offer a service where they will help homeowners make sure that they keep their doors closed. They plan to use the picture they took to illustrate how they help identify open doors to show why people might want to be their client. However, if I want to pay them for the service the provided, then I get to decide if and how any information about my door being open is used.

Re: I pwned half of America's fast food chains simultaneously

#509

Post by Eisenstein »

redcobra762 wrote: post #506
Eisenstein wrote: post #505

Earlier quoted context omitted.

The problem with thinking you know everything is that you miss genuine opportunities to learn things -- I wasn't trying to shame you, I was pointing out the irony of your crusade in this thread (which is completely apparent to everyone) and urging you to self-reflect on things that could improve your life. Even if you think I am an asshole, self-reflection can only be beneficial. One thing that may be helpful is to t…

Nope sorry; I didn't say I know everything, I just provided an apparently undefeatable argument (why attack my character otherwise?).

You can lead a horse to water...

Refusing to acknowledge that other people have valid arguments and continuing to repeat the same thing over an over again is indeed 'unbeatable'.

People then ceasing to continue to argue with you because you aren't listening to them is them recognizing they are wasting their time.

Re: I pwned half of America's fast food chains simultaneously

#510

Post by filoleg »

redcobra762 wrote: post #490
filoleg wrote: post #417

Earlier quoted context omitted.

> people shut down or ignore you if you attempt to shame them Sure, but large businesses entities (as opposed to individuals) often cannot afford such luxury. Try being a bank in a western country and ignoring a public security blog post, outlining exactly how one can exploit your online banking auth flow to gain unauthorized access to customer accounts.

That’s not shame, that’s risk. Corporations don’t have the capacity for shame, it’s the major thing people gate about corporations in the first place…

> That’s not shame, that’s risk

Risk of what? Risk of losing credibility and revenue due to… people shaming them, perchance?

Post reply on HN