HNHacker News
TopNewBestAskShowJobs

tmp538394722

650 karma · joined July 26, 2020

submissionscomments
tmp538394722··on Man who thought opening a TXT file is fine thought wrong
Whether or not a default configuration is vulnerable is a pretty typical component of accessing a vulnerability’s severity.

Unfortunate that the author didn’t mention this.

Obviously this doesn’t excuse the bug, but it’s important to contextualize if we hope to compare relative impact and have frank discussions.

tmp538394722··on Man who thought opening a TXT file is fine thought wrong
“Everything’s a file!”
tmp538394722··on Telegram: Voice Chats 2.0:Channels, Millions of Listeners, Recorded Chats
Getting bought by Facebook for billions?
tmp538394722··on Mouse plague grows to biblical proportions across eastern Australia
“Bait” means poison, right?
tmp538394722··on WhatsApp CEO on the controversy surrounding proposed German communications laws
You don’t think you should be able to report being harassed or spammed?
tmp538394722··on WhatsApp CEO on the controversy surrounding proposed German communications laws
No, that’s not how it works.

If I have received a message I can report that message.

tmp538394722··on WhatsApp CEO on the controversy surrounding proposed German communications laws
1:1 conversations continue to be e2e and will forever be (allegedly).

Communicating with a business will not be e2e, per their new TOS.

Simple “Privacy nutrition labels”, like apple recently introduced in the App Store are a neat idea, but because they are self reported and not standardized they can do more harm than good. Eg it’s not clear from the labels that WhatsApp is e2e for personal comms while telegram isn’t by default and never for groups.

WhatsApp confirms they keep some of your personal data including phone numbers from your address book but doesn’t currently share that with Facebook.

tmp538394722··on Cracking of encrypted messaging service dealt major blow to organised crime
Are you a member of an organized crime syndicate?
tmp538394722··on Signal Appears to Have Abandoned Their AGPL-Licensed Server Sourcecode
A convenient easy to use app that I can use to talk to my mom and my coworkers - all encrypted all the time would go a long way.
tmp538394722··on “This destroys the RSA cryptosystem”
> The idea is that if lots of people add suspicious words to their messages, the agencies will get so busy with spurious input that they will have to give up reading it all.

Wow - so quaint!

tmp538394722··on Void Linux Switching Back to OpenSSL
https://lwn.net/Articles/841664/

Gentoo as well and Alpine back in 2019.

tmp538394722··on [dead]
By “Specifically targets M1 chips” it seems they mean: the malware distributors compiled their old botnet code again but with a new version of Xcode.
tmp538394722··on Bevy: A game engine built in Rust
Also note webgl 2.0 is not enabled by default on safari (includes any iOS browser). There is an option to enable buried in the settings, but it’s not recommended to leave it on.

So it’s not really an option if you’re targeting ios.

tmp538394722··on Swift for TensorFlow Shuts Down
> Added language-integrated differentiable programming into the Swift language. This work continues in the official Swift compiler.

added lots of novel paradigms and rarely trodden code paths to the compiler and then peaced out.

I hope the inherent complexity added doesn’t impede future Swift development much, or is expeditiously deleted.

tmp538394722··on Why Wasn't Ruby 3 Faster?
I was only sort of being sarcastic. I also remember the switch to KDE 4.0 very clearly.

Here’s my entry into the annals of KDE 4.0 Plasma Desktop Release circa 2008:

It basically worked for me. I was a sysadmin, so abused my authority at work to sudo apt install kde-desktop on my mandated Ubuntu work machine. My personal machine was a Gentoo thinkpad running fvwm2, but I did use the excellent Kate editor and AmaroK media player. I was a glutton for punishment at the time.

I think more than anything, seeing how salty people were about the transition taught me the psychology of the downstream user, and how a classic “politics of power” narrative can be applied to almost any situation for rhetorical effect, appropriately or not.

It’s kind of an impossible quagmire. The developers were mostly volunteers working on what they thought was interesting and worthwhile, most users were probably fine and silent, and a percentage of very loud users felt very personally wronged, as if something immoral had occurred. They’re not wrong to give feedback, but the situation is that they basically have to beg volunteer strangers. And, broadly speaking, most of the people complaining didn’t come from a background prone to begging or being told no.

Another thing I chuckle to reflect on, is that iOS has been shifting towards a “KDE 4 AIR” look and feel since 2015. The latest iOS innovation: KDE4 style “Widgets” ;)

tmp538394722··on Why Wasn't Ruby 3 Faster?
It’s amazing the trauma that can be carried.

If you have children, and they have children, I hope that those grandchildren of yours grow up hearing stories about what a travesty the roll out of KDE 4.0 PLASMA Desktop was.

tmp538394722··on Fueling Reddit’s Future
I’m right there with you, but it can’t be “usability” oversight, can it? It’s so bad.

I have to assume it’s a very deliberate effort based on some business metric that the risk of losing people from the site is less than the profit gained from people on the app.

tmp538394722··on Cixin Liu's Postscript for the American Edition for “The Three Body Problem”
The huge cast of characters was definitely a challenge for me as well.

But I wonder sometimes if it’s more a cultural difference than simply some kind of “failure” on the authors part.

Have you seen those videos where old communist leaders gave speeches, they declare some good news, some achievement, and the crowd claps and cheers, and so does the leader. Watch Stalin, watch Mao.

To a westerner it looks like they are clapping for themself - taking credit for the victory.

But in communism, the results are not that of a “brilliant leader”, but rather the results of history unfolding. They aren’t clapping for themselves, but for society’s progression.

I think, similarly in this way, 3bp doesn’t have the “hero narrative” that western authors favor, because the protagonist of 3bp is society as a whole, while the characters themselves are just minor witnesses.

tmp538394722··on Apple watch keyboard developer put off by app store scammers
The more boring reason: some review employees are bad at their job
tmp538394722··on "ERROR: could not open temporary file" after upgrade to Mac OS Big Sur
Go figure... I actually like that the terminal has its classic Ctrl+ characters unimpeded by the GUI layer, which has its own namespace behind Cmd+

How do you copy text out of your virtual terminal?

The Fn key placement on the other hand... I’m with you.

tmp538394722··on Welcome to the club(house)
Right - the bulk of the article is about how the “cool factor” of scarcity and variable rewards induce a demand greater than what might be there if they were simply wide open.
tmp538394722··on Welcome to the club(house)
It’s in the article
tmp538394722··on Welcome to the club(house)
Yes it’s invite only. Yes that is a strategy to draw in users, potentially more effectively than being wide open. It’s in the article.
tmp538394722··on The Battle Inside Signal
it’s hard for me to read something like this and believe you aren’t being deliberately misleading. All this stuff is only stored in an encrypted form that signal never has the keys for.
tmp538394722··on Signal to add social features, employees worried about potential abuse
Edited my response to be less sarcastic. But honestly it’s hard for me to read something like this and believe you aren’t being deliberately misleading.

All this stuff is only stored in an encrypted form that signal never has the keys for.

And all this stuff is only applicable if you choose to set it.

Yes, for Alice to see Bobs profile Alice has to download some bytes. Those bytes live somewhere.

The difference is that, unlike every other app, signal spent a ton of time making this work in a way that The signal service can’t read your data, even if they wanted to.

tmp538394722··on Donate to Signal
Sounds like a bug. You could contact support@signal.org. I imagine they’d be interested.
tmp538394722··on How WhatsApp works with other Facebook products
> Why is this important? I use WhatsApp instead of SMS for contacts who don't have (free) SMS or who want the extra security.

Because WhatsApp (and other messengers) offer a far superior messaging experience to SMS: higher fidelity media, on time delivery, delivery status, e2e, and many more. Better experience means that people actually use it.

As you say, for “extra security”. But not everyone arrived at the decision of “how much security” they need at the same moment in time. People come to and leave the WA platform, and it’s desirable for me to know where people are at now so I can use e2e in new places as opposed to only with the subset of my social graph that I manually copied and pasted in which had installed WA before me.

I don’t deny that you like your setup, but it sounds pretty painful and pretty unlikely to appeal to a broad swathe of people, which is essential when trying to combat mass surveillance.

(is mass surveillance why you jump through these hoops?)

tmp538394722··on How WhatsApp works with other Facebook products
That’s a neat trick, but “Works for me” is not a solution for mass surveillance.
tmp538394722··on How WhatsApp works with other Facebook products
For most people it’s not reasonable to use WhatsApp without sharing your contact list.

How do you know who you can message with it if the app can’t check who has it?

Do you, every time you want to message someone, manually copy in their number? For every person you communicate with?

What if they previously didn’t have WhatsApp installed, but have since installed, so you also need to check again every time you want to message someone who formerly didn’t have WhatsApp.

That’s not going to work for people.

tmp538394722··on Telegram's getting ads
I mean... He tried to make a bazillion dollars with gram crypto currency, but it failed.
← PreviousPage 3 of 5Next →