HNHacker News
TopNewBestAskShowJobs

Elyra

140 karma · joined March 30, 2022

submissionscomments
Elyra··on OpenSnitch is a GNU/Linux port of the Little Snitch application firewall
Unfortunately without sandboxing, these sorts of tools just add an extra layer of maintenance to your system for a false sense of security [1, 2].

This can actually be harmful for less experienced Linux users who may trust something like this to keep them safe for running random scripts, especially since I see this tool often recommended for such a use case.

[1] https://news.ycombinator.com/item?id=22208223

[2] https://news.ycombinator.com/item?id=14254679

Elyra··on Purism Librem 14 review (part 1): The ethical flagship
In order to argue that, you have to list your goals, what you want to do with your phone, and the goals of an attacker. On Android, other than a few minor inconveniences, I can still achieve everything I want to with my phone, where an attacker will have a difficult time achieving their goal, of presumably stealing some data from another app.

This is compared to PureOS where you may have free reign, but so would an attacker if you install their app on your device. If you used QubesOS I'd argue that restricts the user a similar amount as Android does, not to mention missing out on a number of mobile friendly apps.

Elyra··on Purism Librem 14 review (part 1): The ethical flagship
Which app and Android version is it? I've never had that issue where it prompts me every time without letting me save the permission, although if I recall requesting one time access is different than requesting permanent access for some permissions that an app has to declare, so maybe the app never declared the latter. (I admit, this is sort of silly)
Elyra··on Purism Librem 14 review (part 1): The ethical flagship
> restricted file access so much that a third-party app can't move files between directories without the OS prompting you to allow the "delete"

What use case do you have where you have an app that you want to be able to move files but you don't trust it with the "delete" permission?

Elyra··on Purism Librem 14 review (part 1): The ethical flagship
I completely agree with that comment you linked, Purism is either deliberately selling snake oil or are completely clueless.

Here's another example of this with them bashing Android/iOS security:

> One of the problems with the security measures implemented in Android and iOS is that they restrict the user as much, if not more, than they restrict an attacker. [1]

When Android actually has pretty decent sandboxing [2] which I've never felt restricted me as a user, and can actually protect you from malware, unlike their recommendation which is just security theater without a sandbox when it comes to malware.

Unless you don't plan on ever installing any apps and personally audit every update yourself (since it's unlikely someone else will audit every single one thoroughly enough), malware and malicious third parties are a much greater threat than Google who is actually pretty transparent about what data they collect and handle it securely and responsibly.

[1] https://puri.sm/posts/snitching-on-phones-that-snitch-on-you...

[2] https://source.android.com/security/app-sandbox

Elyra··on We think this cool study we found is flawed. Help us reproduce it
Exactly, and their "good" dice roll sequence, 3 1 5 6 2 6 3 4 4 1 contained the full set which should only happen ~1/4 of the time for 10 rolls. It also contained no number more than twice, which should happen < 7% of the time. This looks to me like they purposely tried to make this sequence look like their idea of "random".

I'm curious about how they scored this section because my overall age was reported to be 60+ with the sequence 2 1 5 2 6 2 2 4 6 6.

Elyra··on The Uber Bubble
Or when they "accidentally" make a wrong turn, or purposefully take a "shortcut" just to take you a longer/slower route to drive up the meter, almost making you late.
Elyra··on Ask HN: What methods do you use to focus and stay relaxed?
> Instead of trying to jmcut out time sinks, just make them more deliberate.

I agree with this 100%. I was so much more productive and relaxed when I was on my own. My parents, and now my girlfriend, always berate me for playing too many games, watching too much anime, etc, and when living with them find myself browsing mindlessly a lot more.

Elyra··on Privacy-Respecting Software
I want to revise my claim of "nothing inherently wrong with a having lists like that".

This is not just a simple list of software with summaries, and after looking at it more it's worse than I thought. And you're right about propagating bad/out of date advice being a problem.

> I always feel people who put together these lists are in a competition to list as many products and cover as many areas as possible, without evaluation.

Unfortunately this seems to be the quickest and easiest way to get the most attention. Proper curation takes lots of effort, and is hard to get noticed by people who don't know any better.

Elyra··on Privacy-Respecting Software
There's nothing inherently wrong with a having lists like that to serve as a starting point to see what exists for your own research, the bigger issue is that it claims to be curated when it's more like a wiki.

It feels as if their project was ill-defined and grew too quickly, and they're not really sure exactly what it's supposed to be yet.

Elyra··on Ask HN: Tech Salaries and Wealth Inequality
Yep, and also just want to add that the engineers making ~400k are paying around ~150k in taxes, probably have a PhD so they didn't even earn much of anything and lived off of instant ramen packs until they were 30, with over 100k in debt. This is the boat I'm in, and unless I get lucky and get one of these jobs when I graduate, I probably won't be able to afford having kids until I'm 40, while my buddies who started working right away already have a house and a kid or two. We're all part of the same working class, and the ones with equity love to see us squabble over what is pennies to them. You also don't pay as much tax on capital gains as salary.
← PreviousPage 2 of 2