Sarien
Sarien on Hacker News
I'm not sure how that is supposed to work. You would have to rewrite every webapp so that it's data can be protected by sandstorm. Which seems hugely impractical. And as long as the webapp has access to it compromising it will compromise the data.
I compromise an app, add myself admin account, log-in, download everything. What's stopping me?
That's just marketing bullshit. Unless the API is magic (and I don't mean advanced technology "magic" but Harry Potter "magic") it has no way of knowing what the application is allowed to send or not and therefor cannot filter. It's like saying it cannot leak data because it has to use HTTP.
How can a COMPROMISED WEBapp ever not be able to leak data while being usable?
Host authentication is a job of SSL though. So you should simply not log-in on a website if it cannot be verified that it is actually Paypal. This holds for both SQRL and passwords and seems to be an independent issue.
It also applies to this case because the ssh server is supplied by the website.
@nly How does this system prevent me from setting up a website that looks like Paypal and giving you the address of my ssh server?
It's pretty much the same thing but using QR codes.
One thing that SQRL has is automatic management of different keys for each site. It wouldn't be hard to add that to the ssh version, though.
Using QR codes for getting the challenge is also nice because you can just read them with your phone on an untrusted computer.
It's better because your browser doesn't have a button to clear your ssh private keys. Cookies simply aren't meant for storing important data.
Q: "What does it do?"
A: "A utility library delivering consistency, modularity, performance, & extras."
Q: "Yeah, but what does it do?"
A: "Oh, nothing but it does it consistently, modularly and performant. We also have functions for string handling in the extras module."
"there are legitimate uses for such keys" - not for crypto
Doesn't this violate the minecraft ToS?
But paypal/ebay is a third party. Something that this system tries to avoid.
In short: The protocol is not even remotely thought through. It is incomplete and cannot work the way it is described.
I wonder if it is theoretically impossible to create a protocol that punishes cheating when the cheating occurs outside the system (when the physical goods change hands).
And even if it isn't you would also somehow have to consider the fact that things get lost or damaged in the mail and assign blame to one party on the protocol level.
Well, at least I'm not the only one who apparently didn't pay attention for half of the tutorial. :)
Oh, I thought it was in the same row. Well, that makes more sense. I treated it like a form of sudoku with only 2 symbols and 3 repetitions allowed.
I would like to know how this is different from jabber/xmpp and how likely it is that these differences are worthwhile. They say their API is more "pragmatic" and writing a full-blown XMPP client certainly is very tricky but I wonder if improving the way XMPP works wouldn't ultimately create a better result. After all, a lot of thought and experience has by now gone into it.
It is a shitty generalization slandering all articles which (possibly poorly) chose a question as headline.
This is obviously an "article" where the author was legitimately interested in answering the question in the title. This is one of the cases where Betteridge's law does not apply.
Betteridge's law may be useful to remind people to watch out for poor journalism and fact checking. In that case, I propose that all articles shall henceforth use questions as titles because people should do that anyway.
Well, could anybody sum this up? Because I'm definitely not going to read Part 2 since it seems Fowler didn't even bother to produce correct sentences.
Another headline completely bereft of any information.
It's true and important why wouldn't it be enough?
I am totally in favor of good tools with good visual representations but those almost always have to be handcrafted for every specific problem. Which is probably why Bret has never delivered anything useful.
And if you're going to talk about ideas and inspiration: Lighttable does nothing that emacs didn't do 20 years ago except a little prettier.
This! And tons of other things that would have been better if this had been made using inform.
How does this kind of crap make it to the front page? What's next a vegan programming language? Gluten free mathematics? Dear god, for years I have been using a terminal with a black background and I AM WHITE!
Posted by
Sarien on Monday November 04, 2013 @03:39AM
from the ask-hn dept.
There seems to be a hype around websites which provide no controls except scrolling like this http://www.mozilla.org/de/firefox/os/This is a terrible user interface. It is basically a video where you have to scroll for it to play. You keep ending up with half complete animations all the time and sometimes it is really hard to see that you even can scroll. (The above site even provides helpful...
Contrary to common belief the Great American Invention of soap is being imported and used in large parts of Europe now! ;)
I have tons of possessions and when I don't feel like it I just don't maintain them! Guess what, plants aside my possessions don't give a shit and I have just the same time gain.
"What I've been up to for the past year" another one of those hn typical "I'm not telling you anything until you click me"-links.