Hacker Newsnew | past | comments | ask | show | jobs | submit | freeplay's commentslogin


You want to be able to launch apps without unlocking your phone? Slippery slope.


If the app doesn't have any sensitive information, then yes. We already do this with home screen widgets today, so clearly there's no real barrier.


Apps can have vulnerabilities (intentional or not). It's a contrived example, but maybe some weather app has a custom icon feature, which means you can then browse photos by opening it on the lock screen and going to that setting.


Widgets can't have vulnerabilities?


They can, but scope and features increase surface area: their limited functionality intrinsically limits that.

Widgets are just apps with limited scope and surface area. There’s no reason they can’t apply this to the weather app which already has (or should have) a limited scope.

Camera app does it.


Nope; the lockscreen camera is actually an entirely different app, or not-quite-app thing. (Note what happens when you open the camera roll in the lockscreen camera.)


But what if someone discovers a iOS 0day worth several million dollars and burns it to compromise your app specifically? /s


Nailed it. Assume your client is compromised and/or malicious regardless of how it was built.


This is the most naive take on security ever. For the backend, you assume your client is compromised, but you still don't want to allow your client to be compromised.


If your clients are compromised then what's even the point of backend security. Users will login and do legitimate actions while their compromised client does whatever behind their back, while still looking normal. And the backend can't tell the difference.


If the wiki was configured to allow anyone to edit, they may have broken ToS at the very worst. Nothing illegal happened.

That's very different than popping an artifactory server with a 0day.


If you take the matter from the spirit of the law perspective, I believe this can be illegal.

IANAL though, this is not legal advice.


A “swarm” and “hijacked” reads like DoS and spam at the very least, doubt any of those is legal in german law.


They murdered Swartz for TOS violations


Oh I thought make it official meant consummating the marriage in front of everyone. If it meant making it an official marriage, I agree.


Gotta go over to Orgy Dome for that.


Agreed. Before I had finished reading, I honestly thought you declined the $100 because everything ended up alright, you got to see some dolphins, and have a cool story to tell.


Same. I really thought that was going to be the next sentence. Was honestly shocked when I kept reading. Such a strange attitude.


I only get mad when an airline temporarily misplaced my luggage.


I got mad when airline checked us in for a flight, during a blizzard, took our luggage, then cancelled our flight and refused to give us our luggage back promising to fedex it to us. Fortunately we noticed a lot of luggage on the ground and eventually found ours and just took it despite protests.


Exactly this. I know HN is obviously a very pro tech, pro science demographic, but I can't believe there's so little opposition to having our coasts littered with wind turbines.

I don't care how energy efficient it is. It's dystopian and depressing.


This makes the assumption that humans are needed to drive these AI assisted workflows. I don't think that's going to be the case at all.

The majority of office jobs are comprised of many simple tasks that current and, to an even greater extent, future, models can handle with ease.

Not all companies are looking for 10x productivity gains. I assume most of them probably just want to do exactly what they are doing now but with lower costs.


Elysium is playing out right before our eyes


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: