rdslw

but but but, you have "SIX FUN SEASONAL COLORWAYS" !!

TL:DR: don't waste your time. There are literally security features not implemented since 2017.

E.G: no proper support for webauthn (CTAP2) in firefox on macos (abysymal situation shown here: https://fidoalliance.org/fido2/fido2-web-authentication-weba...) linux not much better. Safari, Chrome, even Edge have it, while firefox is stagnating since 2017 (bug report: https://bugzilla.mozilla.org/show_bug.cgi?id=1530373 ) :-(

When I hear about features like Colorways being prioritized over things like proper webauthn support on important platform (4 years now) it makes me sad.

Would have helped personally, but moving parts of firefox to rust not even decimated the contributors margin, but probably reduced it 100x. and here we are with rs_webauthn lib lacking necessary fixes in security important area :(

p.s. I knot how my post sounds, but I'm frustrated with (some) mozilla decisions.

I personally use doh_blacklist with around 170ips, where I block outgoing traffic for known (publicly and not so) internet reachable doh resolvers. There is no problem(+) - everything works perfectly.

ipset create blist_doh hash:ip hashsize 1024

for ip in `cat /etc/bin/blist_doh.txt`; do ipset add blist_doh "$ip"; done

iptables -A <insert some iptables placement specific to your outgoing/forwarded traffic> -m set --match-set blist_doh dst -j DROP -m comment --comment 'SPY:all ext DoH BLOCKED'

Still, as of 2021, doh rule is around 2% traffic logged compared to my other rule, where I simply block outgoing 53/udp (except my resolver). a LOT of your devices ignore your dhcp dns settings and try to circumvent it going directly to shady 8.8.8.8 etc.

(*) you shall every few months check and update it.

Please, do not repeat false version of the story, promoted by Lukashenko.

Plane crew change squawk code to intercepted (7700) not 7500 which would indicate terrorist act.

What happened is clear even before crew and passengers start giving press interviews in Vilnius.

And please do not compare it to Bolivian case, then crew decided (to land) and was not put under duress by fighter plane.

It is not. hundred+ MB electron app, instead Rufus being few hundreds of KB and around 10x more flexible in corner cases.

I really despise BE from engineering perspective.

let me disclose my secret: i meticulously every week add bookmarks to my pinboard as troves of internet knowledge to be used by me.

After 6 yrs (still adding), I admit I never came back to fetch any of them.

can you share vendoor name/url ? thanks!

It is even worse.

This article is (yet another) attemp to romanticize and put to pedestal 'startup with a novel idea'. It is worth to mention that trying to trick/persuade/convince (choose freely) thousands (literaly) of people to go this path, benefits tremendously ycombinator - not the persuaded founders. Because for YC if only few are (hugely) successfull they win. Not so for the other thousands. The fact that few means 200 here, does not change that 'other' means around dozens of thousands.

Startups with 'right but not novel' are also GOOD. But they are muuuuch worse for YC. YC is not seeking all investments to end with modest returns. YC is seeking few, but with HUGE returns.

Pay attention also, that ycombinator itself is in the 'right, but not inventive' camp. It's like 'selling investing advices', while in the same time, author makes money on sth completly different (advices :). BAD ADVICES, to be exact.

p.s. I'm also tired on romanticizing airbnb in literally 3 paragraph (search for airbeds if you missed it). This is a pattern.

side topic: could you elaborate how FIDO1 (not FIDO2) yubikeys do 'ykman fido reset' ?

my question is (in domain of U2F/FIDO1 and non resident keys), what exactly is resetted, and if RP (websites) will provide the same initial data on enrollment, will the second enrollment end in the same keys EVEN after reset? If not, what exactly is storred and resetted on yubikey (again, OLD ones with only U2F)

Yes, because it is worth in pentesting services 180k USD, no more no less. I mean, you can pay around 360k in London or SV rates and 180k in European for _similar_ skills people.

Calc based on 3 months, 5 people, 600USD/md rate.

EDIT as I can't reply to tpaceck below: no, those 2000usd/day rates do not exists in projects in size of 300MD like here. In general they do not exist for big projects.

Yes, I agree, you have rates around 1200 in high cost countries, yet as I wrote earlier, you can have similar/the same skill level at 600 usd/md if you're willing to work with guys not from HCC.

As to the skills I'm talking this level: https://research.securitum.com/mutation-xss-via-mathml-mutat...

Simple linkedin lifehack:

1. put utf8 emoji at start of your name with space following it and then your first and last name. whatever emoji do: smile, country flag, beer. you name it.

2. discard any connect request or inmail or message that starts with 'Hello <emoji>' - it is automated

3. profit :)

I dont agree with bowdlerization happening on Hacker News, wrt legitimate titles. This is effectively censorship @dang (I'm addressing it to you because you speak most often here, and set the tone, not because you personally did it. ) https://en.wikipedia.org/wiki/Expurgation

I do understand that having less clickbaity _content_ is noble goal (and reason we read HN), but let US do our job in giving upvotes to good topic or flaging bad ones, while having ORIGINAL titles author of the post intended, not the one the censor considers proper.

Nope.

Lets stick to the ‘no lower pirce than apple store’. This is very and clearly anti competitive tactic. Only side (apple) with significant leverage can use it. In every other situation it is not possible.

And to make it clear: this point is anti competitive, while you re completly skipping this topic concentrating on apple vs developer, because it harms (increases of price) consumers.

Multiple datapoints on this available, the best one is the very own of apple: mac os store. It is a ghost town.

Ios store would be instantly the same ghost if there existed even one ios app store alternative.

P.S. reminder: im addressing your mistake of ‘this is not anticompetitive’.

Please.

jetbrains is a russian company with russian owners. The very fact they (similarly to wargaming of belarus) etablished venues in czech, cyprus etc, were:

1. to whitewash 'russia' label from they brand

2. to avoid potential economic sanctions (esp. post 2014 and Crimea)

3. tax evasion (yeah, cyprus is hq, truly like egshell apple/google ireleand is not for tax evasion)

4. able to recruit some westerners which were needed for sales/marketing to out-of-russia markets (skills, local market, local connections).

to make it clear: I consider both products really good, and both companies successfull and well managed on a worldwide scale. They success can be also measured by the very fact that you fell prey to their marketing strategy 'we're not russian company'. they are.

For me, trying to say, that total net economic impact of covid is _zero_, is like gross negligence in analytical thinking. Sorry for being strong here.

funny fact: I'm using (as we're hiring) 'What do you think of covid' as nice and quick question to judge reasoning ability.

Conspiracy? bam.

Flu like? bam.

ends in a month? bam.

Unfortunately 25% at mozilla, 25% at booking, 25% at uber, 20% at linkedin, more at airbnb (obviously) shows how internal management teams are seeing revenues HUGELY shrinking.

This tells a lot about fact that stock prices are bad measurement of situation we're in. It's funny to observe that S&P and Nasdaq are at the February all time high, pre-covid levels. Let that thought sink in.

Please, do NOT link nor read techcrunch.com on hackersnews or elsewhere. It is harmful.

Techcrunch is using double redirect trick via https://guce.advertising.com/ to plant cookies in your browser as first party ones.

That's right, thats a reason of mozilla firefox ETP 2.0 which you read about today, WHILE most of users and us are currently NOT protected from it: https://blog.mozilla.org/blog/2020/08/04/latest-firefox-roll...

> there are some verticals where charging a "positive-ROI" amount gets you no business at all,

if you do, you're just selling dollar bill for 80c. You may drink growth-kool-aid, or someday-monopoly-hope or VC-subsidizes-business.

In the end, somebody pays for it either from stupidity or hope.

I appreciate you responding.

I would say 250+ and no more than 1000 should be more than enough. Usually doing 20..40 new DAILY is a max if you are doing anything bigger.

I would allow users bigger db (1000..5000) but would limit to the moment they will reveal (open) 250 new cards.

You want them to create habbit. This needs more than few weeks. Completly dont worry about them using 200 or 500, if habbit do not kickin, they will leave you no matter what you offer.

p.s. my experience come from doing 20k rep spacing english. It took me around 10 years of daily doing it.

p.p.s. I paid for my 20k english course, 15 USD. that was for the app, complete 20k cards with phrases and VOICE audio. Mind it. 15 usd. Your tool would cost 10yrs125 whooping 6000 usd :)

Please, do not use white lies on your web.

This is not free to use. This is useless on free. It's like tesla saying that chargers are free to use on front page, then on pricing: but only first 0.1kWh.

this is dark pattern.

Is Notion one of YC companies? Thats my first though after seeing this.

plus clickbaity title in disguise. writing 2req/sec would show that it's slower than my fridge.

Well no. Controlled bankruptcy is restructuring.

Anyway, how my last sentence went? ;) who couldnt care less?

I find it funny+, that well into XXI century, somebody on hackersnews is trying to persuade me that digital native disruptor has very high bar to disrupt brick&mortar old fashion behemoth, WHEN goliath is forced into digital space by external force (covid).

+) or significant, why US edu is so bad in terms of price to earnings ratio comparing to what you can get elsewhere. time to say that king is naked.

> Tuition can't be changed because (whatever)

Nope. What you're saying is "I cant restructure my business becasue I have high costs".

Your competitor disrupting your business could not care less.

LOL. But this was supposed to be argument in regards to "General lack of funding for education"

Now you're stating what? That F500 companies have general lack of funding? So who has? Mom & Pop shop?

No it's not, and your thinking is completly bad from privacy standpoint.

PASTE operation is where I give consent, to MY clipboard content. Not COPY. Thinking that COPY gives consent is like all the ideas that i-take-user-date-unlsess-user-opts-out . It is not fine.

You shall NOT paste without my permission.

Is it you Elon? DId you return from a few years trip to Mars? ;)

and how do you manage secrets that let you define that ServiceAccounts?

As OP wrote, you did not solve it, just moved it to a different level.

Feature parity with Amazon Firebase?

Let me assess this, with the tip of my napkin:

1. linkedin 'firebase' + amazon (current employer) -> 695 people.

2. 10% of above = 70 FTE

3. They started (googled): They founded Firebase as a separate company in September 2011 and it launched to the public in April 2012.

1+2+3 = It's impossible you will have feature parity in next 10 years.

BUT it's possible you can achieve pareto parity, leaving off the table most complicated 20%. Good luck :)