HNHacker News
TopNewBestAskShowJobs

chmars

5,951 karma · joined August 6, 2011

Aviation and technology enthusiast living mostly in German-speaking Western Europe
submissionscomments
chmars··on Should you be concerned about LastPass uploading your passwords to its server?
1Password does not support sharing (or transferring) of single passwords. You can for example not create an account for a user and send him the credentials through 1Password.
chmars··on Proton Technologies awarded €2M from the EU
Let's be honest: Romanian taxpayers do not contribute any money to the EU or to ProtonMail. Romania is a net recipient state within the EU.
chmars··on Proton Technologies awarded €2M from the EU
Switzerland is NOT a more secure location for data hosting / processing than many other countries.

Switzerland's data protection laws are way behind the GDPR. Switzerland is struggling to adapt its data protection laws to keep its adequacy status with the EU. It has still not signed Convention 108.

Switzerland's surveillance system is growing and growing. The latest revision of the relevant law was targeted at services like ProtonMail and ProtonVPN (Federal Act on the Surveillance of Post and Telecommunications). Switzerland's federal secret service has got almost unlimited power without any meaningful control and is known as a close partner of the US (thanks to Snowden leaks). Every communication in Switzerland is under mass surveillance 24/7, the metadata is stored for at least six months (civil security authorities) or longer (secret services). Switzerland's armed forces work in close cooperation with NATO.

I am actually wondering whether Proton is a honeypot.

chmars··on Google proposes changes to Chromium which would disable uBlock Origin
Gmail users let third parties access their data, i.e., their e-mails. We should not blame Google if Gmail users can decide whether a third party can access their e-mails.
chmars··on USB Type-C to Become More Secure with Authentication Standard
My main issue is that sometimes my iPhone is charging my MacBook and not vice versa … In the end, my iPhone is empty in the morning.
chmars··on Schedule – 35th Chaos Communication Congress
Why is it day 0 and not day -1?
chmars··on Quora User Data Compromised
As a reminder: Last year, Quora moved to 'new anonymity', i.e., no more anonymity. I had received the following message on 16 March 2017:

Hello! We will be moving to the new anonymity on Quora experience very soon. If you would like to edit or delete your existing anonymous content in the future, please provide your email here before March 20, 2017. You are receiving this message because we have not yet received an email from you. Please note that if you do not provide your email by March 20, 2017, you will need to contact us using our Contact Form and selecting “I need help with my account.”

chmars··on Quora User Data Compromised
https://blog.quora.com/Quora-Security-Update seems to be misleading, especially the introduction. They start with 'some user data was compromised', however, it seems that for 'approximately 100 million Quora users' – that's basically all users! – all user data was compromised …

In addition, many questions remain open, for example: Which ' leading digital forensics and security firm' is working for Quora?

I hope for Quora that they met their 72-hour deadline according to the GDPR. Looking at https://www.quora.com/about/privacy, it does not look if Quora was / is GDPR-ready. They do not mention any legal basis for the processing (art. 13 GDPR) and they do not inform about their GDPR data representative in the EU (art. 27 GDPR).

chmars··on Quora User Data Compromised
Quora does not only want you to sign in, they want you to show your real identity instead of a handle or another pseudonym. For a simple online service, it should never be necessary to use your real identity, if only as a privacy-enhancing measure.
chmars··on Story of a failed pentest
How did they even notice Powershell?
chmars··on Show HN: Gmail Classic – CSS for Reverting Gmail's New Look
IMAP drafts have never worked and still doesn't work. You have to use local drafts as a workaround if you don’t want to end up with many drafts for a single mail in progress …

In addition, many Gmail features, especially security-related features, don't work with Mail.app.

chmars··on Sprint Is Throttling Skype, Study Finds
Do you really still need to dial? Haven’t all the persons you call a computer (smartphone!) with free VoIP capabilities?
chmars··on Is Gutenberg the End or a New Beginning for WordPress?
Gutenberg makes blogging actually very difficult. You can’t just write because everything is a block or some other element …

https://www.manton.org/2018/10/23/wordpresss-gutenberg-vs.ht...

chmars··on Firefox removes core product support for RSS/Atom feeds
http://fivefilters.org/content-only is your friend. I use the self-hosted version.
chmars··on The iPhone XS and XS Max Review: Unveiling the Silicon Secrets
I use https://1blocker.com/ on the iPhone. It’s not uBlock Origin but good enough.
chmars··on Prepare for changes to macOS Server 5.7.1
We wanted to switch to a Linux-based NAS. There was a major issue though: EXT4 does not support long enough directory / file names (or paths). As a result of our extensive folder structure and file naming scheme, we ran into all sorts of issues. In the end, we made the jump to Google Drive where security is probably better anyway in comparison to a local NAS.

(Your mileage may vary as usual.)

chmars··on Hardening macOS
Yep, but why can't I run Night Shift without locations services? My time zone is, after all, known … And I would even enter my exact location if possible.

(I don't really mind location services with regard to Apple, however, for an iMac, location services are pretty useless.)

chmars··on Hardening macOS
Thanks for mentioning Fleetsmith, I have been looking for such a service for some time!

(Jamf Now usually gets mentioned but it's not my thing …)

chmars··on Hardening macOS
Just one example: In Safari, Open 'safe' files after downloaded is enabled by default …

(Yep, 'safe' files, not safe files, it's almost like a long-running joke by some Safari developer.)

chmars··on Hardening macOS
Interesting: If I deny System Services location access for 'Setting Time Zone', my iMac 5K changes the color temperature …

(Security & Privacy / Location Services / System Services / Details / Setting Time Zone)

chmars··on Melatonin: Much More Than You Wanted to Know
Thank you!
chmars··on Melatonin: Much More Than You Wanted to Know
You are right, my use of "Europe" was too broad.
chmars··on The next ten years of Instapaper
Users too – and developers are following suit, except for some special use cases …

(Unfortunately, useful notifications for iPhone apps depend on an Apple Watch app.)

chmars··on The next ten years of Instapaper
The app and website have been working for me. Geoblocking is obviously not that easy …
chmars··on The next ten years of Instapaper
Same here. I don't even dare that by paying for a premium subscription, I lost my 6-month trial period …
chmars··on The next ten years of Instapaper
How's the privacy record of Pocket?

At first sight, https://getpocket.com/privacy doesn't look GDPR-compliant. It doesn't mention rights of the data subject, there's no address of a data protection representative in the EU and so on … In addition, Read It Later Inc. is apparently not Privacy Shield-certified – the don't mention it and I cannot find their entry at https://www.privacyshield.gov/participant_search.

To be fair, https://www.instapaper.com/privacy includes some GDPR-related information, however, they don't have a data privacy representative in the EU or a Privacy Shield certification either.

chmars··on SpiderOak removes its warrant canary
Isn't it anyway safe to assume that Internet providers worldwide have to give access to security services etc. (or are even happy to cooperate without any legal pressure)?
chmars··on Melatonin: Much More Than You Wanted to Know
Melatonin is usually not (freely) sold in Europe while it can be easily bought in the US like vitamin pills or cod liver oil.

Is there a recommendable online option with international delivery?

(I don't consider the usual 'online pharmacies' recommendable. Even when buying Melatonin in a store in the US, there's still the issue that Melatonin manufacturers and sellers mostly control themselves …)

chmars··on Warning to devs making VPN apps for iOS that block content
Some background (as linked in the tweet):

https://adguard.com/en/blog/adguard-pro-discontinued/

chmars··on Twitch streamers who spend years broadcasting to no one
Many folks are obviously not that busy. Simple TV consumption for example is still a few hours a day … And I am not included in that average, so a lot of folks spend a substantial time of their day with passive screen use.
← PreviousPage 3 of 27Next →