8 ms·

So what? There's people who need remote support

• nusl 2y ago
  [flagged]
  • hoppyhoppy2 2y ago
    >Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that". https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
• croes 2y ago
  This what >According to iVerify, once activated, the application downloads a configuration file via an insecure connection, which can result in system-level code being executed. The configuration file is retrieved from a domain hosted by AWS over unsecured HTTP, which leaves the configuration and the device vulnerable to malicious code, spyware and data wiping.
  • homero 2y ago
    HTTP means nothing
  • deleted 2y ago
    [deleted]
  • diffeomorphism 2y ago
    https://xkcd.com/463/ https://xkcd.com/463/ The "unsecured HTTP" is about as relevant as lactose is for a butterfly.
    • throwuxiytayq 2y ago
      Huh? Are you really saying that downloading configuration files over HTTP is fine? (I’m really struggling to find a charitable interpretation)
      • homero 2y ago
        Of course it's fine. You sign the files
      • chgs 2y ago
        I think their argument is it shouldn’t download any configuration via any connection.
        • homero 2y ago
          No it's that HTTP means nothing
      • diffeomorphism 2y ago
        Of course it is. If you want security, you should secure the files (i.e., signatures, public key, whatever), not the carrier pigeon used to send them.
    • croes 2y ago
      The app isn't used by Verizon anymore. How long will they keep the domain they used for that?