Yeah, I've first seen it over 15 years ago. Usually you use operator of the same priority as you'd like, and also #define xor &xor_i& to get all that detail out of sight.
The last time I remember, the green company did the same HTTP thing literally with their driver downloads from the website, and refused to fix it.
Makes me wonder, how much of that 4 month delay was spent deliberating with the state actor. As if there was Prism, and both companies were legally bound to allow MitM to happen, and thus don't have a bug bounty for it.
It doesn't smell like a state actor to me, just gross negligence. Brushing up on the Reddit comment we wrote, the MITM isn't exploitable by default, since the client will error out at the 301 redirect and leave an obvious black window on the user's desktop. Exploiting a user would require replacing the 301 redirect with a direct download, which requires the same amount of effort whether the default disclosure was broken or not.
Now if they could've started shipping a modified AMD auto update that followed redirects, that would allow them to pwn users of the updated program. But it would do nothing to people who had installed older versions, up to the version the author installed (which left a black window open indicating the downloads never completed)...
I'm not proposing anything. I don't think it's the government's remit to be honest. But government seizing the means of production is literally the definition of communism.
Like detecting constriction or loss of integrity of blood vessels, and doing the corresponding intervention.
The saddest thing here is not that it requires some future nanotechnology, but is achievable at the present scientific level, yet too expensive to develop, and wouldn't see FDA permission in a decade or two anyway.
It's quite easy to check responses to other customers in other threads there, and somehow I see quite a lot of "oh, go to that other support" and ghosting.
If you create support ticket on hacker news, then yes, you will probably get it waved. It's somewhat sad that HN is their support forum now.
So basically they got fined a cost of single tractor repair, and it didn't even create a legal precedent due to settlement? Someone believed that "will make available" has any consequences, given decades-long tradition to just ignore such agreements? Well, great.
reply