Hacker Newsnew | past | comments | ask | show | jobs | submit | Abby0's commentslogin

MIT and CMU are some of the top computer science schools worldwide, not everyone will be able to get into them.

Also, University of Maryland (the school that the author is talking about here) is a really decent school with great faculty. So, its strange that this was the author's experience with some of the graduates.

Shouldnt the students have pursued side projects outside of school to learn more about how to apply their knowledge in real life practical example.


Yeah, Maryland must offer courses on system building, just like dozens of excellent US universities. I suspect that skills of system design come with experience, and not every student can master the basics in schools. Indeed, not every student can master the basics of algorithm analysis. If we ask questions about algorithm analysis of the same difficulty level as the design questions, some students would fail miserably.



I appreciate the effort that went into collecting this content, but dont you think promoting paid content like this on hacker news would have negative effect on the quality of submission ?

there is other more proper places to promote this type of material.


Quoting from the article:

> Vietnamese government agents tried to plant spyware on the phones of members of Congress, American policy experts and U.S. journalists this year in a brazen campaign that underscores the rapid proliferation of state-of-the-art hacking tools, according to forensic examination of links posted to Twitter and documents uncovered by a consortium of news outlets that includes The Washington Post.

and a second report by amnesty international about hacking tools/targets: https://archive.ph/n9BQ0

so, its not likely that someone looked the source IP being from Vietnam and made the conclusion, it seems there is more analysis and evidence behind this article.


> its not likely that someone looked the source IP being from Vietnam and made the conclusion

Yes it's not likely simply because the phrasing of the article suggested that. My point is that we should stop trusting such phrasing. The article also mentions that it started with social engineering on Twitter, so do Twitter have some sort of tool that somehow allows them to conclusively identify government hackers?


Reminder of comments/discussion etiquette:

https://news.ycombinator.com/newsguidelines.html


Fair. I apologize. My point remains though.

If he wants to lock work down to unions, the exact-opposite mirror comment... is to say 'as your peer and equal, I'm not going to work with unionists'.

Individual freedom is severly curtailed by unions.

Bad management is a cost worth paying to have individual freedom, sorry.


I was interested in finding one of those infected TV boxes for research purposes, I have yet to be able to find one that contains actual infected apps or malware.

In fact when the article that brought this to light (a security consultant interviewed by Bleepingcomputer), there was zero technical details, only the linked github account showing steps to delete/remove some random apps.

I would love to find any actual technical analysis/writeup of anything malicious here.


I dont know if the pixel he was referencing is new or refurbished but I'd keep an eye on Swappa/BackMarket, if you're in the EU and looking to buy a used relatively new phone for a cheap price.

I would also appreciate an answer to the same question FirmwareBurner has asked.


Cisco has poor software quality and control when it comes to IOS (Cisco OS not Apple's iOS) implementation that differs based on the end client or customer using their networking devices. This includes small/medium companies, universities, Large enterprise, Internet service providers, Data center, network storage...etc.

Each of the previously mentioned groups have their own implementation and licenses for specific IOS version running inside the network device (whether a Firewall, Router, Switch, or Switch with routing capabilities...etc). It has been long known that Cisco's poor software is due to the hundreds of modules/features they try to support on these devices (you never know which device will receive updates and for how long).

System administrators/Network Engineers alike always complain about the poor quality of Cisco's Software[1][2]

[1] https://www.reddit.com/r/sysadmin/comments/cpcxjx/has_cisco_...

[2] https://www.reddit.com/r/networking/comments/137csr0/why_the...


Actually, the current router I have does have a security feature that prevents the user from downgrading the firmware.

I think its more common on recent routers as well.


I dont understand this point, Almost all (really all) SRE job postings ask for the skills covered in the posted github link here.

I can see the need for project management, ownership and processes being needed on top of the previously mentioned skills, but skills in the link are exactly what most SRE jobs ask for.


> Almost all (really all) SRE job postings ask for the skills covered

Hiring managers are morons. They don't know what SRE or DevOps actually is. They think it's a systems administrator who can write Python.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: