Hacker Newsnew | past | comments | ask | show | jobs | submit | kevincloudsec's commentslogin

flock says customers own their data and control access. but their national lookup tool means 5,000+ agencies can search your city's cameras without your city's permission. 'customer-owned data' that anyone in the network can query isn't customer-owned in any meaningful sense.

5,000 flock networks searched per query. cities that approved cameras for local burglary investigations are now having their data searched for immigration enforcement by fish and wildlife cops in florida. nobody voted for that.

yo, livekit acts as independent controller for call detail records under their own dpa. that means proton's privacy constraints don't even apply to that data. livekit can hand call records to us law enforcement without notifying proton

palantir is a US company subject to the cloud act. patient data from 123 hospital trusts is now one mlat request away from us law enforcement regardless of where the servers sit.

Only if Palantir owns the servers and the storage. A lot of what Palantir does is on a clients infrastructure. The entire platform is installed on client infra. At least the one we have where I work is.

> Only if Palantir owns the servers and the storage.

I believe no, MLAT scope is not limited to servers/stored owned by the target entity.

If it was, MLAT would be routinely defeated by targets hosting on AWS, for example.


How would Palantir extract the data if nhs specifies the security infrastructure?

Send Palantir engineers to vault over the data centre wall and extract it on a USB stick like James Bond, presumably.

the attestation is a real step forward for silicon provenance. the problem is your board, firmware, bmc, and nic still come through the same opaque supply chain as before. the processor is rarely where a hardware implant goes.

rpki adoption is the new ipv6 adoption. it looks great until you realize it only validates who owns the prefix, not the path to get there lol


the privacy manifest declares no data collected while the app sends your device model, ip address, session count, and a persistent tracking id to onesignal on every launch. false attestation anyone?

I think everyone's glossing over that this extends to anyone who knows the password. Your sysadmin, your business partner, your spouse. Hong Kong just turned your company's entire key management chain into a legal liability.

Forget the Iran attribution for a second. The FBI director's personal email was already in leaked credential databases from prior breaches.

Every now and then something happens that makes me wonder how the fuck America is number one, this being one of them.

America had the advantage of getting through WW2 relatively unscathed with lots of resources and intact infrastructure that it used to leverage against the reconstruction of Europe, Japan and the USSR and entrench its cultural and economic hegemony. Also the US essentially colonized the West with nuclear weapons under the guise of "Pax Americana" and making the dollar the reserve currency.

That's really it. Not moral superiority, not technical ingenuity, not the indomitable American spirit. Just imperialist opportunism.


Plus huge amounts of braindrain from all over the world after WW2 (originally from Europe, but nowadays mainly from India and China).

Loads of natural resources, no local military threats, and historically a government that stayed out of the way and allowed individuals to reap the rewards of their efforts.

The first is almost impossible to screw up, though we're really trying on the last front.


We're ranked number one based on the summation of all the angsty teen America bad comments on social media. At least that is the stat the press goes off of I believe

One of the largest populations, and by extension, GDPs.

Also the only major economy which didn't fight World War 2 on its own territory.

Boy are there some angry Pearl Harbour comments incoming...

Bretton Woods, Petro dollar and Lindy effect?

Don't worry, it's on its way out.

Number one based on what metric other than they constantly say they're number one?

Because America is a lot more than a podcaster put into a position that he has no qualifications for.

FBI director was asked point blank if he'd commit to not buying Americans' location data. he said no.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: