tombrossman

This thing called "Identity Theft" does cause damage, but it's important to remember that if fraudsters trick a bank into thinking they are you, it is the bank's fault for failing to properly verify it was actually you. Doing so would cost them more money and it is much easier to do cursory checks instead.

No doubt fraudsters impersonating you is a hassle and you must spend some time and money dealing with it if you are targeted, but do not lose sight of why it happens and who is ultimately responsible.

I note that equifaxsecurity2018.com is already registered, but equifaxsecurity2019.com is available.

Clarkson wasn't doing the bank any favors by posting his info, however this is the bank's failure to properly verify the transaction(s). The bank was tricked, and the bank is responsible for this error. It's fraud, plain and simple.

The article ends with him saying "I was wrong and I have been punished for my mistake" but this is just his schtick, it's factually incorrect.

I live in a small community and many local charities and non-profits post their bank info online, so that people may make donations by bank transfer or standing orders. Fraudsters periodically manage to trick the local banks into transferring money from the charity accounts and everyone freaks out, which is complete bullshit. The banks always restore the funds, and scold the charities for having this info online. I've experienced this myself at two different organisations. As a result charities become more reluctant to publicise their bank info and predictably, donations lessen.

It's important to keep perspective and hold the responsible party accountable, instead of trying to compensate for the bank's failings.

Why not try a different approach, and start posting nonsense or content that breaches their T&Cs instead? Send annoying messages and make requests to lots of random LinkedIn employees. Embrace the fact that they want to keep your account open and keep shitposting until they decide to quit (by closing your account or banning you).

Google has assets within the EU which means ignoring EU laws is not an option, unless Google are prepared to forfeit those assets. It's not really a decision they have the authority to make anyhow. Imagine the shareholder lawsuits!

Funny you should mention that. I just watched Brian Lunduke's latest show talking about the Librem 5, which will include a hardware switch for the separate baseband chip which will be physically isolated from the rest of the system. Not here yet but it's good to see the awareness building: https://www.youtube.com/watch?v=4SwE9W8JasA

I know this is a stretch but do any other HN users have a Turris Omnia router running Pi-hole? I had Pi-hole running on a Raspberry Pi no problem, but now that my router should be able to run it I'd love to learn how.

The only reference I found online is a single deleted blog post. Can someone please point me in the right direction?

Same set up here, and it's very easy to install and use. Non-technical users have no problem using it either as the desktop and mobile sync clients are intuitive and reliable.

I have mine configured as a public website with most data protected by the inbuilt encryption, and I use EncFS directories to sync more sensitive data across machines. Some things require client-side encryption and this is easy to achieve.

> To address your concern with the privacy, WhatRuns do not collect or log any visitor information including IP address, location etc

That's not the whole truth - you are using Google Analytics to track visitors and you fail to disclose this in your privacy policy, despite this being mandatory under the Google Analytics T&C's.

Well done launching what looks like a very cool project, and I hope you can further improve it by informing visitors that you are using Google Analytics to track them (or even drop GA completely in favor of something privacy friendly).

> In the unarmed scenario, you need two trained police officers. Two people, well-trained and with good teamwork, can usually restrain even a huge, out-of-control person.

This simply is not true. There are plenty of videos out there showing one out of control person fighting off more than two cops. I used to work in a busy hospital ER on a military base, and the military police would frequently bring in drunks they arrested. On a regular basis, it would take four military police plus me and maybe another medic (if they were available) to properly restrain people. Some would fight so fiercely that they were at great risk of harming themselves, and controlling this was often the biggest part of the problem. You can't just sit on them, you have to subdue them properly. If someone is threatening your life you can choose to use deadly force in self-defense, but if not then you have to restrain them, and this takes a lot of work. Put two 'well trained' cops against one determined drunk or druggie, and you get three injured people. This is not a trivial problem.

My 'quick and dirty' attempt to show that minimalism should extend beyond just visuals - The same graphic as PNG which is about 60% smaller: http://imgur.com/mLdDj04 (admittedly I don't know the exact original font but the point stands).

Also, what are visually impaired people meant to do? A minimalist site should be much easier to keep screen-reader friendly. Pictures of text are not recommended.

Whoops, sorry I guess my understanding of the setting was incorrect. I remember troubleshooting this a while back and I thought this is what resolved the issue I was having.

NoScript definitely improves most sites, but scroll can be hijacked with CSS alone: https://developer.mozilla.org/en-US/docs/Web/CSS/scroll-beha...

Firefox users can set "layout.css.scroll-behavior.enabled = false" in about:config and never have to worry about this nonsense again.

Admittedly there are edge cases and military planners like nothing more than dreaming these up and devising countermeasures. The Suez and Panama Canals are not small, so it's not as if all the ships have to crowd together and be trapped in a small area. But yes, there are threats and their probability of success is never 100%.

Here's an interesting lesson from WW2 which shows the danger of previously unknown coastal torpedo batteries: https://en.wikipedia.org/wiki/Battle_of_Drøbak_Sound

> how are you going to stop someone from scuttling a ship? sink it?

Yes. A carrier group is able to project military power for a great distance around itself. Long range missiles, submarines, aircraft, you name it. Presumably it would monitor the canal along its entire length, and destroy anything that approaches by land or sea before it is able to create or become an obstacle.

Not a Googler, and I deleted a couple Google accounts I had several years ago due to concerns about privacy.

If we met and interacted regularly, I suppose I could learn to trust you. Let's assume we get along and you are a nice person, which is likely true. However what you are asking of us only scratches the surface.

You are asking if we trust you, and the handful of co-workers you have interacted with. Even if we accept this premise, you have to see it as part of an enormously larger picture. Do I trust that you have carefully evaluated the personal integrity of all Google employees with access to user data? Do I trust that you regularly screen all new employees? Of course not, these are preposterous assumptions. But in order to do as you ask, these would have to be true. It's too big an ask.

To replace what Google used to provide, I moved to FastMail for email and mostly self-host the rest. Open Street Maps are excellent where I live, and Duck Duck Go is now "good enough". It's been a good learning opportunity for me and I'm very pleased with the results and with how much more proficient I have become with a variety of new tools. I will never switch back.

I don't hold any resentment towards Google or its employees but I do wonder how they feel about what they do. Do they see it as some noble cause, and not an effort to manipulate users with relevant ads? That's not a very charitable description of what happens at Google, but it does accurately describe how many of us see it.

This has been widely reported, is ongoing for years, and is the source of frequent complaints from both users and manufacturers.

Here are a few examples, starting with Amazon's own website explaining commingling:

https://www.amazon.co.uk/gp/help/customer/display.html?nodeI...

https://cblr.columbia.edu/amazons-war-on-counterfeits/

https://www.wsj.com/articles/on-amazon-pooled-merchandise-op...

Looks like this breaks fetching OpenGraph assets for some popular services, does anyone know which are not compatible? I went TLS 1.2 only a while ago for a personal site, but only tested with Twitter (which does work).

https://twitter.com/AliceWonder32/status/894468549720260608

Just to clarify, a violent reaction (in self defence) might be justified. It's not automatic, and would have to be proportional. For example, it might be enough to simply grab the person and hold them down on the ground until the police arrive unless it quickly became obvious that it was just a harmless prank. If they sprayed you with something harmful, or decide to resist being detained then yes, it may be necessary to use increasing physical force.

I wonder what percentage of these people end up recording themselves getting their asses kicked instead? Imagine you are in a foreign city and someone sprayed yourself or a loved one with an unknown substance. I'm not talking about a child with a squirt gun innocently playing around, I mean another adult behaving differently from social norms. I have to think the probability of a violent reaction is pretty high.

The amount of bleach left on your dishes after washing and rinsing isn't going to poison you. Also, bleach breaks down to mostly salt and water.

The real problem with using bleach to clean dishes or eating utensils is that some of us can taste it very strongly, even hours or days later. For example, the first job I had was at a fast food place and we had one idiot who used bleach to soak the plastic soft drink dispenser nozzles in overnight, instead of the provided cleaning solution (which was tasteless). I was the only one working there who noticed but I knew every single time he did it without fail.

At present I'm using a provider in Lithuania called time4vps. Overall the service is good (assuming you are connecting from Europe) but to use their website I have to disable my ad-blocking & privacy add-ons, which I don't have to do on other providers' sites. Not sure why that is.

I'll probably try Delimiter once they start offering service in London, as they also have some similar low cost + high storage plans.

You realize the name Borg comes from the Attic author, Jonas Borgström, right? No one else calls it Attic as the two are different projects.

How much data and what's your monthly cost? I have a 2TB storage VPS for under $10/month. rsync.net looks very good but is possibly total overkill for my needs. Definitely don't need >1 snapshot/day as that's what my hourly local backup is for.

> Is anyone using such tools as a backup for their NAS (and then using their NAS for time machine?).

Do you mean backup to the NAS or for backing up the NAS itself to a third location?

Either way, there's no need for an either/or approach. Just do both. I've tried multiple backup applications and many support local and remote backup options as standard. I'm using Borg and Back In Time and with Borg it's just a second cronjob with nearly identical scripts for the off-site backup over SSH. With Back In Time I was using the AWS CLI to push the backups to S3, but I found a better deal with cheaper storage. I have about 200GB data in total but want a 1TB archive available online for older backup sets.

Side note - OP's review is helpful but Borg Backup is oddly listed under 'Attic', which it was forked from years ago. Don't bother looking for Attic if you are comparing backup tools available today.

Add the filter "www.1843magazine.com###seckit-noscript-tag" (minus the quotes) in ublock or another ad-blocker and it won't bother you again. Page works perfectly after that for me.

Yes! Everything else in this thread is interesting but without automated backups it's all just temporary.

I would add that it's a good idea to automate backups using more than one method as well. For example, use a popular software package but also copy important stuff to an extra drive. A cheap setup with a Raspberry Pi + USB drive plugged in to your router will do just fine.

Google Analytics T&Cs[0] make it explicitly clear that users must disclose to visitors that they use it. "You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies that are used to collect data. You must disclose the use of Google Analytics, and how it collects and processes data."

I know many people ignore it just like with all the other "I agree" check-boxes that pollute websites, but it is a breach of the Terms to sneak it onto your site or service.

Mozilla just launched a new podcast called "IRL" and in the first episode they warn people about all the creepy third-party tracking out there[1]. To listen to the podcast you have to allow third-parties to track you, and there is no privacy policy on the website to warn you.

It's actually a good podcast episode and I recommend checking it out.

[0]https://www.google.com/analytics/terms/us.html

[1]https://irlpodcast.org/ , https://twitter.com/tombrossman/status/883972350387134464

How do you feel about the security of the products? 20 year old PHP versions and the company itself was scammed out of tens of millions of dollars. I see good reviews from bloggers on the hardware, but the company doesn't seem to have made security a priority.

One recent example, there are plenty more out there: https://www.theregister.co.uk/2017/03/16/ubiquiti_networking...

I'm now using the 256GB drive (a 850 EVO Pro) as primary with the old 128GB holding my music collection and it's a pain to manage. Ubuntu FDE with multiple drives under /home isn't as simple or reliable as I would like, and I want to move everything back to one single fast drive.

I should probably take the time to reformat & reinstall across both as a ZFS partition, then wait another year for 1TB prices to come down. 1TB SSDs just aren't cheap enough yet for me to justify buying one. 500GB will fill up again very quickly once everything is on one drive.

I'll frequently shoot a few hundred camera raw photos, then export many as 16-bit TIFF to be stitched into large panoramas or fused together (using exposure bracketed photos). This uses huge amounts of disk space and I want a minimum of 100GB free space as a buffer.