unixbane

Has anyone hacked furnaces yet? They have giant PCBs in them.

The end game for the web to be scraped into entries in a database to be displayed by real software instead of a web browser.

It should content block itself.

What rules there are rules? Ban my account I will make a new one until you ban Tor and make an article about how Tor is toxic. YOU ARE PART OF THE PROBLEM, DICKFUCK.

In your world, everything is okay, we can pretend the latest script kiddie software that flings local URLs around is fine. In your world, since everyone is pretending all the broken stuff doesn't exist (in order to be "civilized"), more broken stuff is made, as the developers have the illusion that garbage status quo is good. This is how HN works. It's hilariously true. Everything people here make is clones of the same terrible concepts like convention over configuration (which make auditing harder and shitcoding easier).

Internet moderation is the single most useless concept ever invented.

You just confused me with someone else. Cloudflare gives me a hard time as a user only. When you view a page with a proxy or shared IP address, you have to solve a captcha or enable JS to see any text with @ in it, and such insanities. Scraping is a user use case. Web crap is meant to be automateable and automatically navigible (though as a cattle user who sees it as an interactive one time experience, like someone walking into a shop, I can see how you see otherwise). Anyway it's easy to scrape even with Cloudflare, it just causes more bumps and adds to your fingerprint and makes the internet as a whole more insecure.

First of all, we have this blog post at least once a year, like top commenter has said. Second, uh, no, you're a moron. Open source now is just completely commercialized. Firefox looks exactly like a 90s garbage web browser that shows you some stupid page full of ads, and links to news with ads, on startup. I am an open source developer. I don't expect any gratitude for what I do, I just want to get shit done. People who pretend issues don't exist are annoying. If I am using a typical open source library these days, I expect it to be made by some guy developing it as if it's his job (and accordingly, with lots of corner cutting). Basically all these new sprawl of languages are a stack of half working bullshit from the build system to the GUI all made for clout or on a whim based on some idea thought of last night, or by some extremely inexperienced person. And the only reason none of this stuff works well is because open source devs are literally clout chasing and constantly move all their dependencies (also fixing invalid problems that shouldn't exist like RCE bugs). You're right, I shouldn't expect them to work at all.

I didn't even read your article, I have better things to do. The idea that people are "entitled" in tech is retarded and no spin on your title can make sense. Tech is a sea of festering rot piled up 100 times.

I don't see how being a "gaming" [1] video streaming service implies that you need to take action against gambling that is implemented via it. They will just move somewhere else. Seems like an ultra tunnel visioned political "issue".

1. One which barely has anything to do with gaming other than having 3 lines of code to store a game identifier with a stream to say which game the stream was mainly streaming. They even have entire streams that do non gaming shit and that's what all the top streamers do most of the time.

In other words, this is outrage porn against streaming services (I think, as like with counter strike go loot boxes[2]. i don't understand your culture though [not that i cant, i just dont care] so I could be entirely wrong). This is no different than when cameras or VHS came out and people complained about piracy and whatever. Whatever political takeaway we're supposed to be getting here is invalid. Twitch is just a streaming site. If I make my own streaming site (which I'll never do, because the web is horse shit), I shouldn't have to hire people to purge gambling on it.

> but you are profiting from them looking at your ads while they gamble

And VHS profited from mass piracy. Get a grip.

2. yeah, loot boxes are fucking cancer, i don't care for making them illegal though as that requires paying more tax and they will just come up with different cancer. you cant fix bad developers

> * It's a kind of web-based environment. Each view has a `loopback://` url.

Great sounds like another idiotic thing I can skip.

> * The UI is, indeed, very consistent. All menu operations can be accessed with Alt+( ) combination. This feels very solid and convenient.

This is a feature of all products created by a single entity.

Exactly this. They used a simple formula to grow their company of posting some novice technical articles to HN ~15 years ago. Then the 2010's standard business practice of "contributing" to open source (I don't consider anything they've done as progress, no different than any other web company). Then ~2011 they broke Tor and kept it broken until 2018 when they made it so if you have a big 4 browser (a fork thereof: Tor Browser), you can visit pages once again. But HN already was brainwashed so they couldn't upvote articles pointing this out so it was never fixed.

The most insane backward nonsense is that Cloudflare proposed a browser extension to bypass the captcha. Like wtf will HN react if Microsoft suddenly made 50% of the web block russian IPs by default until you install a plugin they provide?

Now the only thing I worry about is how they will gimp IPFS since they are sort of leaning towards it once it or something similar replaces the web? They have to make money somehow. Any solution requires breaking things in such a protocol.

I'm saying anti-scraping is a misconception and if you buy it (or get one for free) you just paid for a placebo and it's also worse than nothing. Is there anything confusing about this?

It's UN*X. The one thing it actually does good is having documentation on the system, instead of some weirdo's web page covered in ads. Type man <cmd> or info <cmd> in the shell. Also, for most of the world population, this will be a few seconds faster since it avoids loading a web page.

> last paragraph

You can't safely paste anything into the shell ever lol. For multiple reasons. It doesn't matter how much visual inspection you do.

Thanks for saving me a reply lol

And it's an invalid point. Scraping prevention is the most stupid thing Cloudflare has ever done, and that's after a very long list.

Please tell me the specific way you check your stuff before pasting so I can tell you how it's either broken or you're the 0.001% user and nobody else does that. I've always just pasted into a text editor and recopied it from there (and even that may not be safe). On one hand, UN*X is not meant to have paste so you should just never use it. On the other hand, if you're using webshit you have to copy from it because there's no UN*X way to get at the data as the page has to be accessed in a proprietary way. On the other hand, I could just use a real OS that doesn't have deep reaching problems in the most basic things

How is it possible to be so wrong on so many levels in just two sentences?

1. Your epistemic reasoning capabilities are broken (as in, why do you think people should know better?)

2. You are just adopting an ad-hoc philosophy based on how shells work. If interactive languages had separate text inputs instead of just parsing a stream of text from stdin, pasting would always be safe. One may be tempted to call this "UN*X braindamage".

3. You appear to possibly believe in checking a URL before opening it type voodoo as well, regardless of shell issues

Every point in the article is obvious. As a script kiddie pasting stuff from the internet (including stuff from the victim's website) back in the day, I was acutely aware of the fact that you can't paste something and hit enter anywhere ever (unless you strip out ', but even that isn't very reassuring given that the shell probably has undocumented edge cases as well as other problems at other layers such as the terminal [1]).

Anyway, shells are dumb and dangerous. A real interactive language should simply have a text box for text. I guess I could write a usual 10 paragraph rant on this but it really is that simple.

1. Day of the seal soon.

Ah yes, the legendary UN*X hacker who never pastes into his terminal.

> Because it's the easiest way to distribute software.

Not really, webdev is a pain just as much as making a native Windows app or Go binary. Programming is bullshit all the way down. The moment you try to do anything correct in absolutely any modern software stack or framework, you will have to do a bunch of hacks to indirectly force stuff into doing what's needed for your program to be correct. Of course in practice everyone just skips this part, contributing to the said problem.

> Standards killed that and now you can view your bank account on Linux.

But I literally can't view certain bank websites with Firefox.

>Why wouldn't we want to be able to [run interactive apps] web with our devices?

Because the web is for hypertext, which means static content. Images, text, video and audio clips, tables, code snippets, etc. Of course even that subset it does unimaginably bad, okay? Interactive web apps fucking suck, so that takes care of that 50%. For the other 50%, which is document viewing, why in the hell would I want pages to be able to move stuff around and create their own custom UIs and color schemes for every document I view? That use case is for magazines, a content-free medium. It's actually hilarious how people think hosting their library documentation on some stupid website like readthedocs.io, or publishing scientific journals behind IP blocklists (aka misconfigured bullshit from some charlatan sysadmin) is "progress".

Am I missing something or does everyone here unironically believe that Cloudflare should be punished for kicking a customer off? Because your comment has absolutely zero relevance to the point made by the article.

Yeah but probably all vehicles have the same types of vulnerabilities.

This is a good thing. We have to worry once this is no longer the case. Meanwhile tell your clients to stop calling eval on user input.

Nope. You just conflated the parent comment with an argument of rights.

What a stupid fucking article, including "I grew up with cloudflare, therefore know nothing about how the internet works", and "cloudflare is a racket because I said so and give the benefit of doubt to myself". Web hosters never cared about what content they host. It was previously the norm to not even check for child porn and wait for law enforcement to make any decisions, and rightly so, as it's, literally, not their concern. Some web hosters did care about their content, but there were few and you could quickly move to another. Cloudflare are one of the new generation of webshit services, run by little babies, enamored by their big userbase (yeah, I had a big userbase when I was 12 and quickly got over that phase), and feel some sort of moral but mainly pretentious need to save the world, often by limiting who uses their service, or implementing some sort of snake oil.

New conspiracy theory: all these drama about absolutely irrelevant websites like 8chan[1] and kiwifarms are to distract from the fact that cloudflare has killed anonymity on the internet. Since 2011 or so, browsing any website behind cloudflare over Tor or pretty much shared IP address got you essentially blocked. You would have to fill out a captcha to even see the front page, and not just any captcha, but the worst one which almost never works when on a shared connection: recaptcha. THEN you had to open up the cdn.myshitwebsite.com and repeat the same bullshit, and then you can see images, css, scripts, whatever on the site. ONLY in 2018 they fixed this (it was always possible to bypass it by changing your user agent to a specific string and such things, but almost nobody knew about this), and then broke it again, I'm not sure what the current state is. Then around 2020, a bunch of cloudflare imitators popped up, which includes having the pointless captcha at the front of pages. Cloudflare literally killed Tor, it was solely their fault.

1. "But oh no, a jihad thing was posted on it", same with facebook but 1000x worse

> [1]

How do you bring up the boogeyman out of nowhere when explaining that we believe in way too many boogeymen?

because web browsers are a gimmicky product that still have bugs like in firefox where you download something at it says 5MB/s for the next 2 days but it stays at 10/1000mb progress

there were already such bugs before, and my analysis is that even the older ECU cars before the 2000s had such bugs, just nobody bothers to look for them (also ECUs have been causing deaths from bugs but they just assume its the driver's fault). self driving cars will be the next order of magnitude of problems. ECU 1x, smart 10x, self driving 100x.

> In July 2015, IT security researchers announced a severe security flaw assumed to affect every Chrysler vehicle with Uconnect produced from late 2013 to early 2015.[120] It allows hackers to gain access to the car over the Internet, and in the case of a Jeep Cherokee was demonstrated to enable an attacker to take control not just of the radio, A/C, and windshield wipers, but also of the car's steering, brakes and transmission.[120] Chrysler published a patch that car owners can download and install via a USB stick, or have a car dealer install for them.[120]

> https://en.wikipedia.org/wiki/Chrysler#Chrysler_Uconnect

lol get rekt. i wish business people would immediately imagine this every time a software product is pitched to them

these are all unavoidable issues that all corpos have. also, that "endpoint security" thing is straight up gimmick to make the boss feel like he's in control. unfortunately, with unsound operating systems that not even pros can use in a correct way, there is no chance your company will do better. also this article is annoying because all the good boys that agree with it will do straight up stupid shit like accepting unknown SSH keys instead of verifying them and believing sudo does anything, and whatever hare brained manifestations they came up with, the latest being "dependency confusion"