Also just from raw corporate penny pinching. Why would they make payouts like that if they're not forced to, yes there's reputational risks of making that promise and then not following through with it but faced with a choice between that and a few lawsuits (with the usual corporate advantages of arbitration clauses and vastly more resources they're likely to win too) a corporation looking to shed people is likely to take the win of reducing their severance payouts.
In practice, the money you save long-term by reducing headcount is one or two orders of magnitude larger than the money you pay out in severance. Losing your reputation and a lot of legal fees over (basically) pennies tends not to be sound business.
There's a reason corporations almost always settle lawsuits (if they aren't dismissed).
I'm not sure the rep damage actually spreads that far and given a hard enough push the business will be more than willing to spend a little bit of reputation for survival.
Litigation is a rich man's game. Companies almost always have more resources to dedicate to litigation than individual employees, especially if those individual employees have been laid off and are now without an income.
The company knows this, the employees know this, the company knows the employees know this, and vice-versa.
A promise like that just isn't binding, things can change in 2 years, the managers themselves may have moved and been replaced with different people. A bird in the hand is worth many birds three years from now.
I guess it depends on what you mean by "aware". Does awareness imply that someone simply knows that what they did was immoral, or does it also imply remorse? Psychopaths know that their actions are immoral but are incapable of feeling remorse.
lol the exploit is patched, why are people acting like it's a a zero-day? anyone you attack with this, in any case, has to be someone who hasn't yet upgraded their PHP version. it's worth nothing to hide/sit on.
Banks absolutely make money on retail deposits, and you definitely are doing them a favor by putting your money in.
Banks do spend a lot on marketing to acquire a given customer, and will then upsell that customer on more profitable products like loans and credit cards. But having a high customer acquisition cost and then upselling is not quite the same as being a "loss leader" (which sort of implies that marginal profit is negative, which is definitely not true).
> which sort of implies that marginal profit is negative
Was it not when interest rates were low, like when LIBOR was near zero? My understanding of that era was that many retail banks were working to shed retail deposits. Holding money was not profitable in that era, especially retail. And today I would still suspect it's not what banks are going for big picture.
interest rates being low doesn't mean banks stop making money on retail deposits. there is still a spread between the interest they pay to the account holder and the interest they make loaning out that money.
I'm not seeing any source for the claim that OpenAI discovered this in February. The source that the article links (a tweet by OpenAI) doesn't claim that.
No matter who discovered it, there was a patch in late February. One can excuse them for describing the commit as something ordinary to avoid alerting the baddies (traditional "disclosure window" etc. stuff) but it's absurd to me that the corresponding releases, with no other code changes (per the commit history), took almost 8 months.
When I owned an iPod touch, the advantage of jailbreaking was to give your device certain features that the OS just didn't support. (Hell, I remember early days when iOS didn't even have a concept of wallpaper, the background was just black.)
iOS has come a long way since those days so a lot of the most common use cases of the past are no longer necessary. But the principle is the same - the hardware is a general-purpose computer but the software is locked down unnecessarily in many ways. Jailbreaking lets you do things that are outside of Apple's box.
A much-needed advantage is also keeping old devices useful. Every Apple phone slowly outlives its supported software to the point where the official AppStore has almost nothing in it. Today, it's extremely difficult to find 3P apps that work with my current iPhone 7, which is not that old, because the ecosystem cuts off old phones very quickly.
I think they wouldn't have cracked down on it so much if there wasn't in-app purchase crackers (IAPCracker, IAPFree) that directly threatened their revenue bottom-line, and forced developers to deal with in-app piracy.
I think, if a deal was struck with Saurik/Cydia Team and Apple to explicitly not do that, there was a much better chance the jailbreaking community would have held.
I agree, and, if you have a developer certificate from Apple, the list of wants I have is ... not that long? zero? I'd love to be pitched on it. In practice, I wanted freedom, but didn't really want to do anything with it.
The value of general computing freedom is like any other freedom: it is needed when it people are trying to express you.
And not just you. Anyone! So evaluating whether a freedom is necessary turns into a much more nebulous question of “would anyone really need this at one point now or in the future? Is this a thing we should protect in general, even if it does seem like we need it exactly now?”
For example, could Apple/Google at one point be strong armed (by any government) into including spyware onto all devices? And listeners to make sure no one ever says bad things about $DEAR_LEADER?
If the probability of yes is anywhere around 10% over the next decade, maybe it’s a good freedom to have.
You are correct in the implication not many people at all care.
Just like most people don’t care about freedom of speech, since they don’t “utilize” it. It’s only utilized when you get sued, and then you can exercise that freedom in court.
IMO we, the techy people, have a responsibility to society to argue for this freedom. Since no one else cares or understands it. But without it it’s too easy for history (in this aspect) to go down a not so good path.
The point the parent commenter is making is that they want Apple to allow people the freedom to intentionally mod the functionality of their device. Not that they literally want single-click PDF exploits to be a thing.
Cursor's security announcement was posted on Oct 29 and says that the malicious extension was live "between about 2:27am PT and 1:35pm PT today"
This article says the attack took place "on Thursday" (which means Oct 29) and began at 4pm ET (which is 1pm PT)
and Binance has been tweeting that the cause of the hack may be a compromised employee laptop. yikes
reply