Hacker Newsnew | past | comments | ask | show | jobs | submit | more monsieurbanana's commentslogin

If your password is compromised they still don't have access to your OTP, so 2 factor. If your password manager is compromised then they have both, 1 factor.

I'm no math wiz but pretty sure that makes it a 1.5 factor


Right, presumably with a password manager you’re using a totally random string as your password too, coupled with different passwords for each site. so there are a combination of factors that make it still much more secure than just “both factors in one place” since neither factors can easily be guessed.

The main threat vector would be, as you mentioned, compromise of the actual password manager.

As far as I can tell, 1Password’s end to end encrypted architecture makes this less probable.

That would reduce the main risks to our actual devices.


Or the Incas, experimenting with micro climates 500 years ago

https://en.m.wikipedia.org/wiki/Moray_(Inca_ruin)


You're right, it's just an inconvenience for the users, but a real problem for the developpers.

Some upfront thinking would help us (developers) save a lot of effort and frustration


It’s not just the developers, but the entire organizations they work within that prioritize shipping new features rather than reliability, because that’s generally what’s most profitable (at least in the short term). It’s hard to change those incentives for an entire organization.


It seems like a very blurry line for any non-trivial piece of code.


It is a blurry line, like many legal tests. Human judges and/or juries apply this test in case of litigation, as advised by whatever experts the parties are able to to offer.


> It seems like a very blurry line

Opinion me, this statement could apply to the vast majority of copyright law in the US.


Haha, imagine they make all the noise now and get language models to solve attribution, but as a side effect all human plagiarism that is hiding in plain sight will be revealed as well. Be careful what you wish for.


I'd like to hear how you decide which piece of code is creative and which isn't.


It's for a court of law to decide. GP was merely stating (what sounds like a fairly accurate) description of how copyright on code currently works in most jurisdictions.


GP was stating that AI couldn't own copyright because it wasn't creative enough. Now you're telling me (and I agree) that whether it's creative enough is up to a court of law to decide. Feels like we're agreeing then, and disagreeing with GP?


AI can’t own copyright because only humans can get copyrights.


As long as the money does go to the maid, which is far from being certain. Even in a country as strict as Singapore, some are hostages rather than free workers. I'm sure it's much worse in others.

https://www.straitstimes.com/singapore/some-bosses-holding-o...


If you're the employer, you get to be a part of the system that ensures this.


Seeing how it's a different person that replied to you, I assume he was (poorly) trying to make a joke about how her business plan was to scalp human listings the same way people scalp PS5.


I'm like you. But boy would the world be boring if everyone was like us.


We need to hurry and invent a new synonym of play for profesional athletes, all this time they haven't been playing at all!

More seriously, what constitutes playing is such a subjective feeling I personally wouldn't tell someone that's not what he's doing.

Now using that to gauge someone in a interview is a much more tricky discussion.


I'm certain you didn't read the article. The link between the woman and the litige case is very tenuous.

She doesn't work on the case, and the venue has nothing to do with the case either, besides that a huge corporation owns both the venue and the restaurant under litigation.


I did read it. MSG notified the law firm of their policy while the litigation is ongoing, twice.

> "MSG instituted a straightforward policy that precludes attorneys pursuing active litigation against the Company from attending events at our venues until that litigation has been resolved. While we understand this policy is disappointing to some, we cannot ignore the fact that litigation creates an inherently adverse environment. All impacted attorneys were notified of the policy, including Davis, Saperstein and Salomon, which was notified twice," a spokesperson for MSG Entertainment said in a statement.


Also from the article:

(a) Conlon does not practice law in New York where Radio City Music Hall is located.

(b) Conlon is not an attorney pursuing active litigation against the MSG Entertainment. She works for a NJ-based law firm who representing another party in litigation against an unrelated restaurant which now happens to now be owned by MSG Entertainment. She's not part of that ongoing litigation.

(c) > A recent judge's order in one of those cases made it clear that ticketholders like her "may not be denied entry to any shows."

(d) > "The liquor license that MSG got requires them to admit members of the public, unless there are people who would be disruptive who constitute a security threat," said Davis. "Taking a mother, separating a mother from her daughter and Girl Scouts she was watching over — and to do it under the pretext of protecting any disclosure of litigation information — is absolutely absurd.

Refusing her entry doesn't even make sense according to their stated policy, and it is absolutely _draconian_. She doesn't work on the case—she just happens to work for the same company. If this firm was representing a client suing Meta or Google or Apple, would it be okay for Meta/Google/Apple to ban all attorneys from using all of their services? This type of behavior just discourages firms from taking on clients suing large companies.


The law firm was notified ahead of time, twice. Lawyers expect others to abide by such notifications, do they not? They act like this was a crime against humanity, when they were told ahead of time that they were not allowed in their venues during the ongoing litigation.

Does the law firm have 100,000 employees? According to their website, they have about 29 attorneys in the firm. Bringing up companies the size of cities compared to that is completely ridiculous and irrelevant. And companies like Meta, Google, Apple, etc. will absolutely enact draconian policies when IP and other litigations are going on. The secrecy and policies those companies put in place likely go well beyond simply not letting a lawyer part of a law firm that is suing one of your businesses into your building.

Why does it matter where she's licensed? It's irrelevant.

Lawyers play these little games all the time. I'm not necessarily for the policy or the use of facial recognition to enact it, but they were told ahead of time. They should know better. If they wanted to argue the points ahead of time and get approval, they could and should have.


> The law firm was notified ahead of time, twice.

How is that relevant? A stupid and harmful policy is stupid and harmful, regardless of who was notified and how. If I send an email to Google to notify my displeasure, it is not reasonable to expect all Google employees to be aware of it and avoid my business.

Despite the fact that personally punishing individual employees for a beef your holding company has with some of their colleagues is stupid. There is no other way of putting it.

> Lawyers expect others to abide by such notifications, do they not?

There is so much wrong here. Lawyers are not omniscient. They also expect companies to abide by their own terms of use, and routinely ignore unfounded or groundless “notifications”.

> Bringing up companies the size of cities compared to that is completely ridiculous and irrelevant.

So, where’s the limit? What company size makes this reasonable?

> And companies like Meta, Google, Apple, etc. will absolutely enact draconian policies when IP and other litigations are going on.

So, it is draconian after all. Show an example of individuals being booted off Google’s or Apple’s platforms only because of their employer.

> Why does it matter where she's licensed? It's irrelevant.

But then, none of the points you’ve made are, either.


Yea, I am with you on this one.

I started out reading the article wondering 'OMG, what is it that this mom could've possible done that she's banned?' and then when it says "lawyer at adversarial law firm" I immediately switched to "oh yea, makes total sense".

None of the counterarguments here stand up to scrutiny.

"Isn't involved in litigation" and "not a Security threat" - she is totally a security threat: today she's a mother of a girl scout and is not working on the case, and tomorrow she's a loyal employee helping out with the case.

"Part of girl scouts trip" - Does she have a firewall in her brain between personal and professional?

'Conlon said she thought a recent judge’s order in one of those cases made it clear that ticketholders like her “may not be denied entry to any shows.” - You know what the best thing about America is? Our endless appeal system.

This entire article is a non-story (someone denied access to a business), and yet, it's somehow making the rounds. The paranoid cynic part of my brain is interpreting this entire situation as "A law firm that sent in an employee for some snooping, and then got caught, and now is making some noise in the papers." The lady doth protest too much, methinks.


What she's alleging seems to be: the MSG conglomerate is using their large footprint to punish law firm employees unrelated to their dispute using venues also unrelated to their dispute. Doing it out of spite sounds possibly legal, if petty. But the other possible intention would be to try to dissuade law firms from taking a case against any MSG property, to try to deny legal representation to the plaintiff. Not a lawyer, but surely there's a law against that?


"Unrelated to their dispute" is a fuzzy category. How would the venue actually know that she's unrelated to the dispute? They're not going to have access to the internal management chart of the law firm in order to be able to precisely delineate in every case exactly who gets admitted and who doesn't. And it's unreasonable to force them to create some sort of bouncer appeals board to let people present evidence to show that their position at the law firm is unrelated to the dispute.

Remember everyone arguing that Twitter pre-Musk is a private company, so they could ban anyone they wanted? This is the same thing, only in a physical location.


> How would the venue actually know that she's unrelated to the dispute? They're not going to have access to the internal management chart of the law firm in order to be able to precisely delineate in every case exactly who gets admitted and who doesn't.

The venue knows not, but that venue is a tiny cog in an empire owned by the parent group.

The parent group compiled the ban list by trawling the large law firms website for images .. and the parent group knows which offices and groups of personnel are involved in a specific case.

With large and potential trans national groups doing this it has a parallel with, for example, one country banning an entire countries citizens from entry or doing business .. on the basis that a small group of citizens took action that was undesired.

Very large companies have very large numbers of employees and many different activities on the go.

Should, for example, several thousand people be banned from watching streaming television because 15 people in the company they are associated with are involved in a class action against a media group?


> The parent group compiled the ban list by trawling the large law firms website for images .. and the parent group knows which offices and groups of personnel are involved in a specific case.

Do they? I don't work in law but at every company I've worked we adjust who is working on what based on needs at the time. Why wouldn't a law office temporarily shift more people to a case if they needed some extra manpower?


>Very large companies have very large numbers of employees and many different activities on the go.

Someone else posted that the law firm has 29 members, not "very large numbers of employees".


Assuming that whether or not the lawyer is working on their case is the deciding factor, the venue (actually the conglomerate that owns them) are the ones who chose to come up with this retaliatory scheme so the onus is on them.


Calling not being able to be a consumer of the company their firm is suing punishment seems to be a bit of a stretch. And it's only during the duration of the lawsuit.

And again, why are the lawyers so surprised when they knew ahead of time? If they had asked, it could have even been pre-approved, and thus a non-story. If anything, I'd almost consider this to have been an intentional act by the law firm because they knew ahead of time and took their Girl Scout troop anyway, knowing it could look bad for MSG.


> Calling not being able to be a consumer of the company their firm is suing punishment seems to be a bit of a stretch. And it's only during the duration of the lawsuit.

What if the company was Google? What if it was a healthcare provider with a patented/proprietary treatment?

As a matter of fact, didn't we recently have articles in hn where people were commenting they are reluctant to charge back to Google because they don't want to risk losing their gmail and the rest of it?

> I'd almost consider this to have been an intentional act by the law firm

Good for them. The legal system is the only way corporations can be effectively held accountable. You can hate lawyers as much as you want but this is directed at us via proxy. Lawyers litigate for clients.

"Sorry we can't take your case. We use Google products extensively."


For whatever reason, I’m just not seeing it. Everyone keeps bringing up Google. Why? They are in a completely different industry and largely irrelevant from what I can see. And like I said, those companies will absolutely shut stuff down during IP litigations. When I was at a company being sued and vice versa for IP infringement, the entire company was told not to use the other company’s software products, and if you absolutely had to, then you needed to apply for specific one-off permission. That happens all the time, and it’s practically the same thing.

The law firm is a personal injury firm, which in my experience and understanding can be (not always) very shady. Why is it required that MSG let lawyers suing them come into their venues while being sued? One could argue that the policy should be targeted towards certain venues and lawyers, but that is a lot of overhead that is solved by a simple, blanket policy.

I honestly don’t see the outrage here. Sure, there are a lot of what ifs that make this seem worse, but those hypotheticals are not what seemed to happen here.

And it’s the law firm showcasing punitive action. They’re now suing MSG for the denial for something that basically seems like a stretch of a loophole. I almost would guarantee the law firm did this on purpose, and that’s why I can’t stand lawyers. They don’t play by the rules everyone else has to, and they get to make the rules.


> For whatever reason, I’m just not seeing it.

This is not a black and white issue, and there are valid points that can be made pro or con of either side. Even the likely possibility (I agree with you on that) that this was all planned does not change this. This fuzziness of the line that would obviously delineate right vs wrong is the issue.

That is why I added that "proxy" bit in there. One could argue for the position of law firms or the position of corporations, and I am urging you to now consider it from the pov of lonesome you, the possibly innocent bystander, caught between these two powerful social forces. You may still reach the same conclusion but it is a distinct analysis and you should do it if you haven't already.


That does sound pretty draconian to me, you haven't adressed my point.


What is your point?


It's obviously a terrible thing if firms stop blocking people who might have some problem. It's going to be used in terrible ways. I hope that because lawyers are involved they'll manage to destroy this as a general thing companies can do.

This is kind of an ironic case because I've noticed that lawyers make themselves immune to non-compete clauses via state laws in most states. In California famously, regular employees are generally immune to N.C. In my state lawyers are not impacted by NC by law, but regular devs are subject to them, even sandwich makers have been blocked from changing jobs. There's been a big battle from devs to get rid of them, it hasn't yet passed the state legislature. My own leg rep said she didn't think there was a problem - of course she's a lawyer. The lawyer and business class wants to keep them.


Notifying the target of an insane policy doesn't make it less insane.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: