piracykills

Is it bad if I'd say absolutely none? If any I read started charging I'd find similar content somewhere else.

I miss the silly 90s microsoft hate, it actually made me look outside the MS bubble and learn other platforms.

Ah, the classic "Who needs privacy if you've got nothing to hide". I'm just glad most people don't think that way.

Yeah, that's actually surprisingly common, I remember working with a few before that did it. StartSSL and a Comodo reseller of some sort I think.

I'm done with these companies, Let's Encrypt seems to be the only people doing it right.

I found this challenge actually harmed my productivity - I wound up reading more reddit comments and playing less little puzzle games (think Flow Free, not Clash of Clans). The little puzzle games were relaxing and I could pay attention to music or a podcast while playing them. Reddit comment threads are often political and angry and reading text draws my focus entirely - leaving me feeling mad about things I really have no control over and which actually have fairly little impact on me. Uninstalled the reddit app when I realized it had this influence for me at least.

Wasn't it shown recently that LastPass literally downloads JS from their servers to run on specified pages for compatibility? I suppose that's good for ease of use, but pretty scary from a security tradeoffs perspective and indeed KeePassHttp doesn't require you to make any sort of tradeoff like that.

Well, in my amateurish opinion - there was nothing wrong with the existing AES encryption implementation. But they also had a key derivation function based on running many iterations of AES, which was weird and non-standard, I mean it seemed like it would work, but it's not proven in the cryptographic community. Now they've switched to Argon2 which is a very well reviewed KDF and I have a lot more faith in that.

Code for the old KDF is here if anyone's interested: https://github.com/keepassxreboot/keepassxc/blob/7a55ab64d83...

> Add support for KDBX 4.0, Argon2 and ChaCha20 [#148, #1179, #1230, #1494]

I can finally give this a shot without having to use the weird custom AES-based KDF Keepass used to use. Awesome.

Congrats on the release.

I assume GDPR would only impact you if you operate a business from European locations, right? Not like they can enforce their laws on my small business run from the other side of the planet.

So long as my country isn't willing to extradite me, I don't really care what their laws are and I will adamantly refuse to comply with them as they're entirely irrelevant to me.

Is there a word for people who are extremely skeptical of expensive things? Maybe I'm just cheap, but my attitude is simple - unless you can show me an objective benefit, I ain't paying for it. When I see a "story" driving a product like the article mentions, I often react in total disbelief or outright disgust, it's something that quickly sends me to a competing product.

The audio industry is particularly bad with this kind of thing, only a few people actually looking at numbers and doing blind ABX tests.

If it's anything I need to care about privacy with, I'm not uploading it to someone else's server even if I pay for it, I'm doing it locally.

But if it's say, as a friend recently experienced, a handout from a teacher in Corel Draw format, you bet your ass I'm uploading it to whatever the top google result for "convert corel draw to pdf online" is.

Yeah, they tried to do this to me so I complained to support and they refunded all my credits. At least their support staff treat you right, if not their software.

Worse still, this sort of simple manipulation of the analog data to the sensor would allow the camera to lend a sort of credence to faked images.

You have some choice native apps - Sublime is Python, which is rather horrible with memory usage and Thunderbird essentially embeds a browser just like Electron apps.

Compare VSCode or Atom with Emacs or Gvim for something more native.

To pick some apps off my desktop right now:

- Emacs with a pile of extensions, 22 MB

- SpeedCrunch, 13 MB

- SumatraPDF, 19 MB

- MS Word, 101 MB

I see a few attempts -

https://github.com/Microsoft/react-native-windows

and http://reactdesktop.js.org/

The Windows one is from Microsoft, but is single platform. Nothing officially supported by react devs as far as I can tell.

It'd be cool to have and it's relatively straightforward from a software engineering perspective, but it's so much boring grunt work that finding someone who wants to implement it might be challenging.

If this is something you need to do a regular basis, you might consider hosting your own DNS and using BIND's nsupdate tool.

The thing about certificate authorities is the whole system is as insecure as the worst of them, so you may as well go find the cheapest.

I've even managed to get wildcards for $30/year from an alphassl reseller.

Nvidia is pretty big in the machine learning space in general, not game specific these days - GPUs are pretty general purpose highly multithreaded number crunchers and Nvidia's been making moves further in this direction with their own CUDA-based training tools, the DGX-1, the Jetson and other products.

Yes, but there's already scripts handling many of the most popular.

Check out acme.sh and remember, changing your DNS provider or hosting it yourself really isn't that bad.

https://github.com/Neilpang/acme.sh

So what? At least only my snazzy file manager and media player get access to /sdcard - they still can't access other application's data to dump my browser credentials or modify those applications binaries to behave differently, the most harm they can do is delete my downloaded TV and pictures.

Only my backup tool gets root and can access other application's data - random trash games I download or even if I were to install them from pirated sources are unable to do that.

It's a vast improvement at the very least, even if not a perfect one.

Yes - I basically use indented lists of tasks like this for everything. Indented because often times you realize you didn't quite break that down enough and need more steps underneath it for them to be approachable.

Lots of tools are great for this too, I've used Tomboy, OneNote and org-mode, all of which do this very well.

Yeah, I'm always amazed when someone my company hired as a developer doesn't understand what "open a terminal" means on Windows or I have to coach them through digging up the environment variables screen in control panel.

I assume it's because I was a power user before I became a developer and so had that foundational knowledge and interacted with OS APIs to build on it... now people just go right into mashing JS code at web browsers which seem to be hacked into everything.

The original artist had licensed it freely, both 2600 and the Trunk author had used that freely licensed work.

Seems more like a few hour long hacking session than some serious systemic problem to me.

Is OSM not doing this? I swear I've seen them importing and updating street level address data in my city - it directly referenced some city GIS server. Maybe not officially, but someone must be running scripts that do this?

I don't think people are doing that so much as there's just not much to discuss there - sure, you can yell at people to parent better til the cows come home or talk about how our society is somehow collapsing because of this but no one will care. There's no proven fix, so not much to say on the matter.

Instead, people here are looking for realistic fixes - like making the chat box not automatically open so only those who need support will go out of their way to get it. I think the author would have been much less likely to receive abuse if people were actually there to ask her questions about her service than because they had just searched for a way to to generate a shitty meme. I could be wrong about that, but it'd be an interesting thing to do an A/B test with I think.

Perhaps it makes more sense to put it into security terms - In the same way that it doesn't make sense to don't go around talking about how we could live in a dream world where bots don't scan the internet for weak SSH credentials all day, it doesn't make sense for us to go around talking about a dream world where sexism simply doesn't exist. The author found a good compromise to defend herself against that threat - many people on HN are just suggesting other possible defenses.