Sure they will, just sign on this dotted line and you’ll pay monthly. Give us your previous $1.5k phone and we will give you credits on your bill every month, but that credit will disappear if you change anything about your plan or want a new phone.

Oh wait.

As a treat.

I have a feeling the claim is no, but wether or not that is truly the case is something that would likely have to be audited to confirm.

Haha I do every year, at least by way of voting. Did it again this year even though it seems like it’ll never happen.

Also voted for the SSO one that comes along every year, but is admittedly not as voted for. Funny thing is, there’s a mostly working HACS integration for SSO, so it should be “relatively” easy to implement natively.

I think you misunderstood. They are asking for things the users find hard, confusing or annoying. The vast majority of users, every year, says that roll based permissions are at the top of that list.

I dunno, multiple years of silence on the issue has soured my hopes considerably.

Except one of the #1 things that has been brought up in every previous one has never been addressed, and that is role based permissions.

If I want a guest to be able to control certain things, I can set them up a dashboard but they can still look at all devices and their history.

If I want my kid to be able to turn on certain lights, I can’t restrict them from opening the garage or messing with my office lighting.

HA is super, super powerful. But that’s a double edged sword when you can’t restrict people from interacting with certain devices.

If that is in fact how this works (I haven’t dug in too far) then technically yes. The problem is, these are one off zero days. You can’t exactly test that this problem exists unless you know it exists, and if you know it exists then Apple knows it exists (in the case of a mainstream antivirus app at least) so there’s no point in actually attempting to exploit it, just throw in a check for vulnerable versions.

There’s no one size fits all “all pdf exploits that ever will exist” solution because there are exploits that will likely not exist for a time.

Please don’t use Kaspersky.

Also, no app would be able to do something like this unless it comes from Apple. Apps are sandboxed, they can’t peer into a different app, or the system itself.

No, that would be a bootloader exploit. It’s happened before, but not for many years now sadly.

The way Frenck handled the tone initially was mostly okay, though he really should have properly addressed the concern with details as he did in his final comment. The comments in between are pretty dismissive, I agree.

That said, there’s no real issue of information being leaked. The first 5 characters of a hash are all but useless to an attacker. Admittedly, it does raise the attack surface very slightly, and should be opt in instead of opt out. Or at the very least be enabled by default and presented during onboarding.

That said, there’s way this works doesn’t ring any alarm bells to me.

The comparison is done by hashing your password, sending some of the first few characters of the hash to HIBP, receiving hashes that match that pattern, then locally comparing the full hashes.

So there’s no concern that credentials are being leaked (despite the other post earlier this month insisting HA was leaking all your secrets) as you can’t really leak a password with a partial hash (you can narrow an attack surface very slightly, I admit), and all actual true comparisons are done locally.

What about mama centers?

Blatant FUD.

I will always point out, I can throw my smart phone in my breast pocket and record all I want…

Your bananas are very likely coming from the exact same place everyone else’s bananas come from. There aren’t many places to get em from.

Most implementations have a way to kill off the Face ID authentication. On modern iPhones you can spam the power button 5 times and Face ID is disabled. If you want a “cold boot” situation which is much harder to get into, just press and hold volume down and power for 10 seconds to hard reboot it.

Extremely lazy copy paste:

Did “Russian bot traffic” really disappear after Ukrainian strikes on Yandex servers?

Despite multiple Ukrainian strikes hitting Yandex servers in Russia, a thread by antibot4navalny, which has long tracked state-sponsored social media campaigns and troll farms, explains that the Cloudflare “Bot Traffic” chart many people have cited is really about automated web crawlers operated by Yandex accessing the web.

It’s not connected to “bots” posting on social media, and Russian bot/crawler traffic overallcontinues to be about the same as normal. Still, are you noticing any difference in the posts and comments you’ve seen online?

You realize companies have and do fire people for actions in their personal lives, right? Especially in the US where virtually everyone works “at will” and having signed a piece of paper stating they would not hurt the reputation of the company or face termination? Other countries and contracts have similar clauses. Sweden is one such country, where there is a process involved but it is still very much a thing.

So why is it when an individual high up in the company, someone with decision power and who directly benefits from sales, does something that hurts the public perception, suddenly you’re asking us to just ignore it?

Why is it that your accusation of astroturfing sounds suspiciously like… well, astroturfing.