HNHacker News
TopNewBestAskShowJobs

throwaway2056

207 karma · joined June 21, 2022

submissionscomments
throwaway2056··on KeePassXC pull request to add basic support for WebAuthn
> Buy a second Yubikey

I can (as a geek) but this is a problem for average Joe or a single mum with 2 kids.

This is the reason even banks or <your employer> incl. Federal places uses Cisco DUO not an opensource solution.

Most things are for average customer. passkeys are great

- Assuming a person keeps one password (either Apple or Google OK)

- Phishing for them is reduced

- No need to squeeze brain for was it username or email address (for login field)

- Most phones have fingerprint (even < $60 in developing world too with Android)

- Passkeys work from Android 9 onwards

- At the end some one needs to compromise.

throwaway2056··on KeePassXC pull request to add basic support for WebAuthn
To be honest, I was once like you but eventually it is painful to have tons of harddisks and maintain things. Also when I once visited a FSF event and saw many of those so called advocates (telling amazing things in blogs about Libre) were personally using iPhone and NetFlix or every other proprietary service or M1 Apple. Sure, everyone's choice. Then I learned that we all have cognitive dissonance.

> fellow masochists so they don't miss out on whatever new thing I found that we can all get more angry about :)

Ha ha ha!

throwaway2056··on KeePassXC pull request to add basic support for WebAuthn
> What it does is promotes further centralisation, because most users will use one of the big providers.

Because there are no easy non-centralised solutions (that works for Average Joe)?

Remember

Average Joe cannot

- backup keepass

- 3-2-1 backups using ZFS

BTW, if so many average Joe's lost google accounts then there would be outrage and great chaos (like ticketmaster etc). So some people lost Google accounts - true. Same some people list U2F key.

> the tech industry, including the tech press, n

Pragmatism will win.

This reminds me of IRC vs WhatsApp (or Signal). People want things to be simple.

throwaway2056··on KeePassXC pull request to add basic support for WebAuthn
> FUD such as retail Pixel devices'

At the end of the day pragmatism will survive. Sure, if the OP cant put a simple SIM card to get it resolved then he/she can buy from nitrokey/other installed GrapheneOS.

The basic premise of all these authentication/fingerprint/passkeys/whatever is to benefit the COMMON public. Telling a mother of 3 to keep keypassxc backup elsewhere (in a RAID with 3-2-1 offsite is impractical).

Also all these experts that write in HN often join some company and implement closed-source. Yes, life sucks if one uses 'linux' phone

- Banks don't care - If one is so against passkey gang then they should do something to make sure an average mum can use tech safely - see the state of PGP (very complex) - but signal/whatsapp is awesome. - Whether or not you like Cisco DUO becomes more of less default - Github/gitlab is developers world. Sure codeberg exists: I opened an issue asking them if they can help me configure runners - no help at all. - Also many of the devs say all open/free/etc but finally they do consume NetFlix, Prime etc (Yes, they have Apple TV or chromecast in addition to FrameWork (and RAID + 3-2-1). - Average Joe can't afford Framework. Get an ad-infested smartTV. Live with Google or Apple.

throwaway2056··on Google Analytics alternative that protects your data and your customers' privacy
In all these threads, there is never a project manager from a large establishment telling

- Thanks. we will migrate - we did and it was <good/bad>

More or less everyone is after $.

throwaway2056··on Let's make sure GitHub doesn't become the only option
If one runs the command until last week or so it exited (with failure) but pointed out that it is deprecated and provided a link to https://docs.gitlab.com/runner/register/index.html

    gitlab-runner register
documentation pages that once again stated the obvious. No difference at all. Then you rerun the command - same bounce out. No clue. The docs linked at the URL still say to use the --registration-token.

finally (after digging into stackexchange and gitlab issue) one needs to run the command without

    --non-interactive

No where in the documentation it (until last week) that this should be removed for registering a runner as of today (last few months).
throwaway2056··on Let's make sure GitHub doesn't become the only option
(I wish github does not become one but sadly gitlab is beset with constant pain)

- no proper communication - unclear future plan - poor documentation

See for example

https://gitlab.com/gitlab-org/gitlab/-/issues/380872

throwaway2056··on Scrcpy: Display and control your Android devices connected over USB or TCP/IP
Do I assume you already have adb/dev settings enabled?
throwaway2056··on Scrcpy: Display and control your Android devices connected over USB or TCP/IP
how can you enable ADB/dev settings on the phone with a smashed screen?
throwaway2056··on Aubrey Plaza Is the Unfortunate New Face of the Milk Wars
Comparing hn-ers lifestyle/needs to that of Massai? not the best idea.
throwaway2056··on Lithuanian university locks out students again for not using proprietary 2FA
> Fighting for civil rights often makes you look like a prick, because you keep laser-focused on your goal and need to counter all the reasonable-sounding objections of people who were following their daily routines before this ball-breaker came along; but it is nevertheless necessary.

you are correct. All true.

But there are no easy to implement groupware, open office, email, chat suite. Yes, in hn you can say zoho or sogo or libreoffice. While I totally use OSS, it is a pain for Universities to find talent to implement this at scale.

Also a majority just use MS products and want compatibility. This is similar to tons of devs doing OSS dev but using MacOS (and using VM or remote ssh) as they want their devices to run for 12 hours on battery.

Some European universities tried going open solutions - this patchwork either failed or some even got hacked.

At the end, there are no easy solutions. I sincerely wished some one like Linux foundation implements a total OSS solution based on nextcloud to build all integrated suite to compete with G-suite or MS.

throwaway2056··on Roger Penrose claims our Universe has been through multiple Big Bangs
I am sure a lot of HN do it in private. In modern world (>90s) to be non-religious due to stereotyping people.
throwaway2056··on Western Digital cloud services down for 4 days
> Question is for each of us who are experts in the field: do we continue to encourage this trend or do we encourage people to learn?

This is will not happen. Every other tech fellow I speak to (working in SAP-/Oracle/google/type Giant to a startup) tells me that I just do it as I need $$$. Done. As long as they can afford/get the appropriate help. They dont care about average joe that knows only bestbuy or google photos.

> Do you think people with macbooks etc never encounter issues with software/hardware and all just work automatically always without having to care about anything? Thi

The advantage is that with macbooks/chromebooks/windows (even ubuntu to some level) is that you can google and get some info. Worst case I have seen customers in Apple Store - with a old (i.e) 2 year old macs - asking the Genius to please copy everything to their new device.

With Raspberry or WD - one cant do it. (Sure there are some Linux User Groups where an old fart will do it for a beer but most people dont know this)..

It is a difficult challenge, ideally: one gets some kind of govt authorisation for a FAAANG-account - and it will get backup up with FAANG for some $/month. And one can produce some govt ID to restore it. Of course it has other issues - but for average Joe whose privacy is already lost - they would be too happy to just to get their wedding/holiday pics back.

throwaway2056··on Western Digital cloud services down for 4 days
This.

Plus: people here calling for Raspberry or Synology do not know 'average' users

- People dont know what is ethernet

- Most people cant navigate GUI of synology or other stuff

- Some of the hn gurus need to work as CS for a week. People get confused what USB-A or USB-C cable.

- For hn-gurus with Rpi/nextcloud: These products are sold to average joe that has no clue about tech.

- for average joe people, google is internet, facebook is family and whatsapp is chat.

- The sales guy that sold it just works for commission. Capitalism.

- Same is for WD. They sold the product for $100 8TB so that is the quality one expects.

throwaway2056··on Apple halted M2 chip production in January amid 'plummeting' Mac sales
It is not anti-Apple. Everyone has anecdotal story about these.

> and she abuses the shit out of it.

It is all own stories. Go to any university or school. Give the student a mac. Wait for a few months and see.

throwaway2056··on The Mullvad Browser
Finally something that beats...

https://fingerprint.com/demo/

throwaway2056··on Reviving Chromebooks with Ubuntu
I dont think majority of the lawmakers or population cares. Verizon/carrier locking. Apple app store.
throwaway2056··on Reviving Chromebooks with Ubuntu
There is something called society.

BTW, just because you do not use street lamps (as you use a car) means others still need sidewalk/pavement + street lamps.

throwaway2056··on Reviving Chromebooks with Ubuntu
I assume you never used them for YouTube/zoom/meet? Whether you like or not streams become heavy - older devices cannot handle. With spectre/meltdown patches things became slower for these older devices. For reasons beyond comprehension everyone wants to see only 120fps or hfr. If you see all k12sysadmin forums you can see these are also motivated by the school admin - they get good contracts from Apple/others to upgrade or lose out. Parents too want shiny devices for their children.

> environmental crime, as is a lot of support ending the useful lives of devices.

It is the same like all large companies selling their windows 7 or 10 device (after 3 years of leasing) or TV. Ideally there could be FOREVER updateable windows version with only security support/patches - basic version.

The WORLD business model is bad for environment/world.

At least all these Chromebooks will be sold in eBay (for cheap) via resellers that are used well by linux community.

throwaway2056··on Unpopular Opinion: Don’t Use a Raspberry Pi for That
Please start here. Tons of thinclients

https://www.parkytowers.me.uk/thin/hware/hardware.shtml

throwaway2056··on Web fingerprinting is worse than I thought
Technically one can create this and launch a new profile everytime. It can still detect the device (there are some failures - if I change the screen resolution/dpi). May be after 3 or 4 times, the server may also detect that a certain ip address is trying the same thing.

TEMP_DIR=$(mktemp -d /tmp/chromium.XXXXXXX) ; /usr/bin/chromium-browser --user-data-dir=$TEMP_DIR

At the end as other say they use hardware information + IP + other stuff. It is a lost battle.

throwaway2056··on Web fingerprinting is worse than I thought
I tried live boot of ubuntu. Every time it can detect accurately. Looks like the whole privacy thing is OVER. Unless lawmakers do something - (i.e) not going to happen!

Atleast they can use this to prevent reCaptcha - and make passwords disappear!

throwaway2056··on Web fingerprinting is worse than I thought
It is interesting that the site can fingerprint individual profiles/dir easily:

For example

chromium-browser --user-data-dir=/tmp/profile_A

chromium-browser --user-data-dir=/tmp/profile_A --incognito

chromium-browser --user-data-dir=/tmp/profile_B

chromium-browser --user-data-dir=/tmp/profile_B --incognito

For each command + its incognito it can detect them as separate profiles.

For ultimate privacy one needs to everytime launch browser with a new profile.

throwaway2056··on Norway takes a stance against Google Analytics
> Terrible, having local company's instead of internet controlling behemoths who made it the opposite of a distributed information exchange network (you know the core idea of arpanet).

Please ask any local company to build such infra. Unfortunately, they dont. Or once they become big - founders sell to SV.

> s Germany's problems and not those of Norway.

Do you mean all Norwegian newspapers https://www.aftenposten.no/ (local company) do not track? See ublock origin. Look at https://play.google.com/store/apps/details?id=no.cita playstore app - see number of trackers.

This is a human problem. As long as developers are ready to code this will happen.

throwaway2056··on Qualcomm wants to replace eSIMs with iSIMs, has the first certified SoC
I think OP is right to note that this gives more control to operator. Unless telecom regulators make moving around easy, most operators will tie device IMEI to eSIM (calling it security) and make it hard to move.

Also you failed to notice, all the custom ROM world (yes, they do exist to avoid dumping tons of money onto bloatware infested phones) will be left out. The operator in my country providing eSIM needs no root/jailbreak etc.

(Sure iPhone users do not care)

> are a massive win when travelling, too

Most people in the world are usually in the same place. From my experience, these business travellers are usually not just rich but also have tons of roaming/data plans.

throwaway2056··on Norway takes a stance against Google Analytics
Enough is enough. Why always go after FAANG? If google analytics was dissolved then some one else will take its place.

Remember visa/master card are terrible. Stripe is very organic and nice until it wasnt

Myspace terrible until facebook came

It is not as if VW or SAP or Schufa are decent.

At the end all these marketing/JS/analytics devs will go to some other local company.

throwaway2056··on New F-Droid repository format for faster and smaller updates
Even better...

https://f-droid.org/en/packages/eu.bubu1.fdroidclassic/

throwaway2056··on Ubuntu Is a Canonical Product
Which (reputed) university will allow for a sysadmin to tell students that they need to purchase Ubuntu to attend a course? Seriously, the sysadmin will get fired (at the least). Given costs of education (at least US) asking someone to buy RHEL for about $300 would be PITA (for poor students). Most sysadmins are invisible. And at our University we have about 100 Debian servers. Do you mean if we move them to Ubuntu (I personally) buy so many licenses? Are you working for Canonical?

Both sides should calm down. It is OK to criticise Ubuntu/Debian/RHEL. A restaurant critic does not have a restaurant. CKS anyway says he/they will move to Debian.

throwaway2056··on Android launches yet another way to spy on users with “Privacy Sandbox” beta
Sure the criticism about Privacy Sandbox is valid.

News journalists should dog food Firefox (to encourage end users) and then avoid Chrome. (i.e) they make sure the webpages work great with Firefox. Usually everything works better with Chrome. The reason for the give would be sorry... Our livelihood depends on tracking/ads etc. Oh BTW, I (as a journalist ) am all for privacy but my corporate overlord (CondeNast incase of Ars) forces us to do this/that.

It is the same thing w.r.t. Firefox.

throwaway2056··on India’s government wants total control of the internet
I once saw a former Swiss president answer to question about US gun problem (especially schools). He just answered, well if the majority decide do that then... it is your problem. Not ours.

Same here. If Indians, split from Internet - and if the majority (perhaps boomers etc), decide it is the right decision - may be OK - but likely they will lose in the long term - in terms of education, awareness, global participation etc.

In some ways, top Indian MNC can benefit from talent not leaving India.

Sure some will say, we have our own space program, etc - but lets be honest - it will take decades to even build a new operating system. Cooperation in science, tech benefits all humanity.

← PreviousPage 2 of 4Next →