HNHacker News
TopNewBestAskShowJobs

_factor

639 karma · joined August 21, 2022

_-
submissionscomments
_factor··on Juicebox: Squeezing the hassle out of encryption key recovery
Interesting idea, but the logging aspect still leaves it up to the shard holder to perform.

This essentially reduces counting to a promise.

_factor··on Show HN: I made a discrete logic network card
I think visibility is one aspect, but not the whole story. An average home user runs Windows and doesn’t necessarily care if a hypothetical backdoor could exist in their hardware/software stack.

They browse the web, do their banking, and share photos on SM after checking their mail and searching for Tiramisu recipes.

The existential threat to themselves is low, so they don’t dig further into the ramifications. Journalists, whistleblowers, activists, “undesirables”, those are the primary concerned parties.

The civic cybersecurity aspect needs to lay out a clear benefit to free speech and oppression which makes tangible sense to day to day life. I’m not quite sure how to spread this level of awareness, or highlight the importance of such measures in a way that hits home.

_factor··on Show HN: I made a discrete logic network card
A network card with opaque firmware is a 0-day away from becoming a global catastrophe.

Even RISC-V based switches like the Vega use proprietary switch chips (Wuhan China designed FSL91030M specifically), which is no better.

You can verify input/output to a certain extent, but this doesn’t preclude a timer based function call or a tailored packet activation.

I wonder why our society tolerates these unknowns. With the push towards WiFi replacing the majority of home networking, I’m not confident it will change any day soon.

_factor··on How engineers at Digital Equipment Corp. saved Ethernet
At this rate, why not just use UTF-8 and combing IP and DNS into one.
_factor··on KDE6 release: D-Bus and Polkit Galore
It’s hard to sell enterprise support if your product is simple and easy to understand.
_factor··on Best Buy Geek Squad employees report mass layoffs
It’s also a ARM problem.
_factor··on Understanding and managing the impact of machine learning models on the web
If you’re the middle man, sounds like a great deal. Pay less, charge more, waste less paper.
_factor··on So you wanna de-bog yourself
My biggest problem is contemplating all of the steps and future work that will go into a project, then getting disheartened as I begin. Eventually I delude myself into believing it’s not worth the effort as it might fail anyway.

It’s probably a self-confidence thing, but so are most of the funny names in the article.

I should probably just focus on step one once I decide the end result is valuable.

_factor··on A Lego model of financial capitalism
If you were to invest the money, you might come out a little ahead, but the value of having somewhere to live outpaces that.
_factor··on Cloudflare acquires PartyKit to allow developers to build real-time multi-user
If you’re concerned, another alternative is to use WebRTC for peer to peer connections. Bypass the server entirely and use it only for signaling.

https://github.com/dmotz/trystero

_factor··on Show HN: Kyoo – Self-hosted media browser (Jellyfin/Plex alternative)
Even the FTC commissioner can’t get air time. As far as Apple is concerned, an informed public is competition with Apple.
_factor··on Develop in Swift Tutorials
And how many features are unavailable for the web? It’s not apples to apples.

The point is that you don’t need to pay if you’re hosting a github pages pwa. The backend costs are shared.

There’s a reason Apple got into the credit card business, the extra a fee for every transaction model has been their core for a very long time, it was natural.

_factor··on Develop in Swift Tutorials
I think you’re mistaken in regards to Apple. https://www.forbes.com/sites/siladityaray/2024/01/17/apples-...
_factor··on A first look at Europe's alternative iPhone app stores
Android is a good example. Open a few different apps an note the pop up diffeences base on whatever API was used.

The biggest questions were widgets and audio issues. Apps they couldn’t find etc. I’m not advocating for Apple, but their system does have a few advantages that open source projects could take cues from.

_factor··on Develop in Swift Tutorials
Let’s do a test. Write a hello world application and make a subscription for it for $1/mo. Publish it in git and offer it on the web, Windows, iOS and Android.

Beyond your time investment, which platforms costs more than $0?

_factor··on A first look at Europe's alternative iPhone app stores
Apple does a lot of things right, for better or worse.

Want copy paste? It’s consistent across the whole system because you have one choice. You don’t have to guess how the pop up is going to work beyond context. Other more open platforms get messy and fragmented hoping the developer chose a good implementation.

Want encrypted messaging? Easy, just talk to other iPhones. Want less infection risk? Live in Apple’s walled garden. I get less calls from grandparents asking for iOS assistance than Android, the interface is more intuitively laid out.

Have years of apps purchased with no way to transfer without paying again? You’re probably not switching.

_factor··on Develop in Swift Tutorials
“As low as 15%”

Great! That’s so much cheaper than the 0% you can get on other platforms.

This used to be acceptable when Apple was innovating and providing extra value, today it doesn’t fly.

_factor··on Develop in Swift Tutorials
That depends. You’ll start encountering dark patterns when the address bar and underlying Safari browser appears and ruins the experience.

PWAs are the alternative App Store we need, not a just a bandaid.

_factor··on Develop in Swift Tutorials
Thank you, but no thank you. I don’t need to promote a proprietary ecosystem charging yearly fees with my addition.

PWAs or nothing.

_factor··on Our tools shape our selves
Like most things, it’s probably somewhere in between. There’s a reason stages exist where a small percentage output, while the rest input. Look at amphitheaters for an example.

The problem isn’t the human nature, it’s the ease of accessibility to the quick superficial info. You can feel like an expert for a few minutes, then forget a topic and never use it.

Before computing existed, boredom was a driver for creative pursuits. Now boredom is an anxiety sink because we lose the urge to “play” creatively. The issues start with children and continue into adulthood. Boredom is good, it squeezes new ideas out with pressure. As it stands now, the pressure is constantly pushing ideas back in, no internal thought stands a chance.

There are mathematicians opposed to hearing new theories before they contemplate them personally, so as not to be influenced. It’s easy to think in terms of some else’s structure, and I believe that society is moving there on the whole.

These internet behemoths love the profits the eyeballs bring, but long term I envision a far less creative populace.

Thanks for the work on BrowserBox, I’m going to give it a run.

_factor··on Our tools shape our selves
I think it’s worse than that. Web browsers are primarily designed so that users digest content. Creation is an afterthought. It’s the same with most media. It trains viewers into accumulating knowledge, not necessarily using it.

Doom-scrolling and time wasting are aftershocks of a consumer driven technology.

_factor··on Redis' license change and forking are a mess that everybody can feel bad about
People don’t complain about the license or cloud companies, they complain about losing control and features they’ve grown accustomed to.

If this were a divorce, Redis would be paying alimony.

_factor··on Ask HN: How bad is the xz hack?
Imagine a state actor offering retirement money and a plane ride to a non-extradition island nation for a few commits. Assuming the contributor is using a VPN already, no one would know they were adding surreptitious backdoors in their code.

The only solution is to scope security relevant functions and add a multi stage formal verification process before freezing the commits. This assumes no collusion.

_factor··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Let’s not get started on how large the kernel is. Large code bases increase attack surface, period. The only sensible solution is to micro service out the pieces and only install the bare essentials. Why does the an x86 server come with Bluetooth drivers baked in?

The kernel devs are wasting time writing one offs for every vendor known to man, and it ships to desktops too.

_factor··on How Radicle Works Under the Hood
It seems to address data centralization issues. Government activists and pirates will likely find it attractive.

For the average GitHub user, it adds a lot of complexity for undetermined benefit. It basically ensures your repositories can’t get pulled if someone at Microsoft doesn’t like what you’re doing.

_factor··on Battle testing ZFS, Btrfs and mdadm+dm-integrity (2020)
Anecdotal, but ever since running my workstation with >64GB ram, I’ve had stretches of unexplained behavior. Switching to ECC for the past 3yrs, these random errors no longer surface. It’s a 24/7 only reboot for patching machine.

I thought it was just a luxury feel good investment, but the longer I run without errors, the more real the problem seems.

The larger the memory capacity, the higher the probability of bit flips, so that likely plays a role.

_factor··on What Computers Cannot Do: The Consequences of Turing-Completeness
I haven’t seen anything yet that a Turing machine can’t do that we do. A better question might be: Can we do things “faster” than a Turing machine theoretically can?

If there is any quantum effect either used directly or measured within our brains, it might provide a speed advantage.

_factor··on Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques
The issue is the “just works” philosophy. Most defaults are insecure and require technical expertise and hardening.
_factor··on Commission opens non-compliance investigations against Alphabet, Apple and Meta
The web as designed by Tim Berners-Lee was a decentralized system where you could host a website and others could see it.

Google came along and made finding these websites much more convenient and accessible. Along the way Microsoft IE began using monopoly advantage to make the web in Microsoft’s image. It was a clunky unstandardized mess for many years as only Microsoft could officially push a standard. You could build for Netscape/Firefox, but you would be breaking 90% of your users due to undocumented and tailored code.

Now Google has the market share. The standards are much more aligned amongst the major players, and it would be a stretch to call it a monopoly. That’s the goal.

Google unofficially pushes the new browsers standards towards Google’s image, just as Microsoft had before. Just look at Chrome extensions for an example. It’s not a coincidence ad blockers are becoming weakling in the name of “security”.

Apple has their entrenched user base, solidifying with every iOS app unavailable to other ecosystems. Compound the issue when people have paid real money for useful apps that they don’t wish to sink the cost for.

It’s better than before, but companies will never have your best interests at heart. Profit is incentivized first, then product (including you).

A decentralized web is possible, we have the technology. There is no reason a static site server couldn’t be implemented with a proxy hiding feature, even using IPFS potentially. Large plates can still cache and serve data to get paid, but your data doesn’t have to be centralized.

Moreover, serving up a web server from your local machine could be as easy as opening a custom pinned tabbed and sharing it out. CRDTs and homomorophic tech open worlds of possibility with secure p2p applications at scale.

But this is not what a cloud provider wants. It is not the direction we are heading. We are trained to be paranoid (rightful so unfortunately), and cloud providers tout themselves as the panacea. In some ways they are, but at what cost?

We no longer trust the user to have a direct connection. All of your services should be on the cloud if you’re “enterprise” enough, and you’ll pay for it accordingly.

What I want to see: Governments recognize that the internet is a public utility at this point, and reduce the roadblocks to hosting your own data. Allow all GUA IPv6 addresses to be static if requested. Don’t allow carriers to give special preference to business accounts vs personal for static assignment. There is no technical reason for this if a customer requests it. We’re not running out of IPv6 addresses.

This fixes the STUN/TURN debacle created by NAT, and opens up the field for new possibilities. It also allows for real decentralized competition with cloud providers.

It used to be that I got excited about the random blog posts I could find. Simple HTML sites from interesting people, which I mostly get on Hacker News now. Search engines filled with ads and SEO/AI garbage only exist because of the profit structure and centralized control.

With ID verification a certainty due to AI advances, we’re going to be even more locked into these monopolistic systems. We need competition, and as long as they hold the search screen, we’re only going to move towards higher profits for them. Yet something tells me our governments have something to do with it. Data collection isn’t just profitable, it’s potent.

_factor··on Scientists have traced human tail loss to a short sequence of genetic code
You’re getting all the furries chiming in here.
← PreviousPage 8 of 11Next →