Hacker Newsnew | past | comments | ask | show | jobs | submit | ckdarby's commentslogin

The article has a post that says this happened across 14 bases at the same time.


Then I would suspect that this is either down to the common control system, or there has been a batch failure of the controllers in the freezers that were presumably ordered and supplied at the same time.

I've seen batch failures in radio equipment where I could predict 100% accurately which devices would fail based on the range of serial numbers.


There are a couple hundred US armed forces bases each with commissaries that would be managed by DeCA.

An attack like the author hypothesized would require a LOTL modus operandi, and doing so on 14 locations wouldn't justify completely blowing up an entire LOTL operation, because it exposes indicators, registers, and tradecraft that is then shared amongst all security vendors.

The way it's framed is clickbait at its worst with the added issue of limited security experience, but the same can be said of HN in general.


Or someone somehow got into one web interface (e.g. by popping a random workstation used to monitor all these sites) and clicked buttons.

So what's the denominator? Every base has some kid of refrigerator, and there must be 100s-1000s of bases.


OTOH how many bases are effected and we didn't hear about it? Those 14 bases are only the ones we know about.

Not just any failure, specifically heating the food (defrost) so it goes bad. Happening overnight, so it wouldn't be caught before it's too late.

All that could still be a coincidence, but the more coincidences start to pile up the more we have to consider other possibilities too. I do agree it would be unusual to 'waste' a vuln like that, but perhaps the implant/CVE was about to be exposed anyway.

Interesting times...


And how many shipboard stores have been affected? Hardly something they’re going to talk about, and a far stronger candidate for attack. This could be spillover.


Oh that's interesting. what if the issues w/ toilet spillover were hacks? Hilarious.


The backbone of the US military is the logistics. It's why a US carrier being undersupplied was such a big deal. Making the US military look incompetent can very well be the goal.

Considering Iran is looking for any possible avenue to make the US look bad especially directly before an election with a president who cheerleads the military strongly while not actually putting the time or thought into what makes it strong.

This would be worth far more than the vulnerability itself to Iran right now. No real injuries causing escalation. Making a more capability adversary look foolish.


Not just that, the position to stick a thermometer into the food before serving was axed as DEI, and the position to clean the food prep surface areas of the kitchen is too beneath the warrior ethos. Buying above single ply is too expense and it's too heavy, so have fun with the ED (dual meaning).


> I learned that commissaries (of which there are ~235 worldwide) aren’t actually independently operated by whatever military installation or base they happen to sit on.

according to the article, the denominator is ~235.


If we limit ourselves to these, then that's a 0.5% known failure rate.


6%


Owning my failure and moving on. More coffee next time.


It's really not that hard but people are addicted and don't want to admit it.

Buy an Amazfit 6 watch, has alarms, clock, health stats, memos, weather, maps, and GPS workout.

Turn off nearly all phone notifications. Do not allow any phone to AmaZfit notifications. Don't have your phone physically attached to you.

You need your phone with you? Backpack. Never in pockets.

All sudden it is incredibly easy to focus.


Phone in the backpack is a crazy simple hack. Every time you want to reach for it you get a slight punishment (anti-reward), this is operant conditioning.


This does work, especially at the library where you feel like you're drawing a little attention for going in your bag.

I also put my phone in a kSafe by Kitchen Safe for 20-30 minutes to break out of doomscrolling with no takebacks. I keep a wireless charger in the safe so it can charge while it's in there.

Another thing I realized by working at a job where I couldn't take my phone is that you can just go to the library and leave your phone at home.


very true.

I just bought [product placeholder] and it has [features placeholder].

I am no longer distract by phon.


Take a step back and realize what they're saying.

* Monitor your health and track your time to help stay focused.

* Disable as many spurious notification types on your phone as you can afford to do. My recommendation: All notifications that aren't live messages from individuals.

* Keep your phone out of immediate reach so that you break the habit one likely has of instinctively reaching for it to fill in moments of boredom.


> Turn off nearly all phone notifications.

You should do this regardless, no watch needed. The only phone notifications that should be turned on are ones that could be urgent. Phone calls, maybe text messages, alarms, and calendar reminders. No email, no social media, no stupid random apps telling you about some discount.


I suggest doing this everywhere, not just your phone. On your laptop, disable Teams notifications, remove email notifications, etc... Leave on Meeting notification if you need the reminder to join.

Notifications are absolutely abused by everything. Phone calls from known numbers, texts from known numbers on my device and then meeting start reminders on my laptop are the only notifications enabled.


Is this an ad plug lol


Creators are shifting to skills & mcp to achieve this. Even if underneath it is ffmpeg.


This is in preparation for their IPO when the market is attractive.


Does this put Germany's car insurance in the lowest cost?


Car insurance in Germany exists in 3 categories.

The mandatory one, liability insurance, which pays out others' damages in case your car is in an accident and the driver of your car is found to be at fault. Base rates for those are by law based on the rate of payouts per car model and per owner's county at that insurance company. A multiplier makes the base rate more expensive or cheaper respectively for new drivers, accident-prone drivers or long-time accident-free drivers. No other external statistics are allowed to play a role.

The two non-mandatory ones are "Vollkasko" and "Teilkasko", which pay for damages your own car suffered from various factors like animals, weather, accidents, road conditions and stuff like that. Vollkasko even pays for accidents you caused yourself, Teilkasko only for some of the aforementioned things. In both, insurers are still required to do some classification by county, but they are allowed to factor in statistics about your car's repair cost.

But none of those will pay for your car just randomly breaking down and needing repairs, that is something you get a manufacturer's warranty for. And none of those is directly related to the mandatory inspections. I think I've read some statistics that driver behaviour and skill is also a large factor in why there are less accidents in Germany, at least compared to some regions of the world... But make of those what you will, that might as well be jingoism and often also comparing apples and oranges...


In Sweden some of faults can be covered if the mileage is low enough, usually the limit is between 120000 and 200000 km. Usually engine and tranmission is covered.


On average car insurance is cheaper in Germany, but I am unsure if this has anything to do with the required inspections. (Since it is mandatory anyway, it isn't a differentiator). I think it may be more about how insurance is structured and dealt with.

For instance US has a civil tort based system which tends to push prices up quite a bit because outcomes are entirely unpredictable. In Germany insurance is not litigation centric, so there are literally no punitive damages, pain-and-suffering awards are modest and predictable and compensation is based on standardized tables. So insurance cases very rarely make it anywhere near courts.


Looks heavily inspired by Wealthsimple


Haha, I'm a big user and fan of Wealthsimple :) I created the app initially to have a unique experience for all my other accounts in other banks. I took inspiration from other fintechs as well.


Does that mean if one's investments are mostly with Wealthsimple that it'll be easy to set up?

How do the integrations work, is it all file (csv) based or is there direct access as well?


For now, it's CSV and manual editing using the UI. I'm looking to have direct integration with major brokers when possible to avoid third-party aggregators and managing users' data/credentials (or at least have the option to).


This would be amazing, though I realize it's not straightforward and not easy to do. I have so many accounts across different companies that this connection piece is basically a requirement for me to use your app on a regular basis. I'm sure that applies to a lot of people, and I'm sure you already know that. I appreciate the focus on building the tool first and then getting that connection stuff working later.

I just want to also commend you on the UI/UX here, it looks and feels really solid.


Really interested in how you do this. When I as looking into building my own finance-related app, you have to pay a ton to get market data (stocks, crypto, ETFs, options) and connecting bank accounts if it's not for individual use (you still have to pay for individual use, but not significantly as much).


from the docs:

"Wealthfolio does not currently support integration with online brokers or aggregators. Data must be imported from CSV files or by manually entering transactions."


So data has to be imported since the start then I'm assuming, like a complete ledger? Otherwise how would we know the complete list and the value of the investments over time. Won't that get out of sync with the ground truth (what's in the account) over time?


You can also start from one snapshot of your current holdings and just add transactions as you go to build the timeline.


Currently a sweet spot with Steam games if you price them correctly to the value they bring.

I'm working on a very simple incremental game that has exploded in popularity called, A Game About Feeding A Black Hole.


Did you pay DangerouslyFunny on Youtube to play that or does he just play every new steam demo with incremental features? It is his business basically.


Just looked it up: looks cool & added it to wishlist. Did you happen to play "Solar 2" years back?


Was going to reply the same thing.

I buy 1 mg tablets and even that is too much for me. I use a razor blade to cut them into 1/6th pieces.

Takes less than 30 minutes to kick in.

A lot of other comments here about poor sleep I believe are the result of drinking caffeinated products past 1 PM.


Don't say that too loud of Trump might want them next after Greenland & Canada.


If we could convince him to buy them that would be quite good for the UK.


Depending on the valuation

And with that guy, make sure you get paid up front. He has an extremely long and well-documented history of abusing the system to not pay contractors, workers, counter-parties, etc...


It’s a loss making endeavour, just like all the remnants of empire.


The present president of Argentina is a Trump-testicle-gargler. That would make me nervous if I were a Falklander.


Hey, looked at careers, but didn't see anything that fits well.

If you're still looking at expanding eng leadership I'd be interested in chatting.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: