News for hackers. Stuff that matters.

Slackwise

I was trying to say, nobody should be using Passkeys via browsers because they all fail to secure them. You need a password manager of some sort. But this is also true of passwords. My ultimate point was, passwords are a burden because unless you use a password manager and unique passwords for every single account, then passwords are strictly a burden. The average user doesn't use a password manager outside of the junk in Chrome, so... they're really just creating a security disaster for themselves.

So, therefore: passwords shouldn't exist, and you should create sessions via email links/tokens. Then also offer Passkeys as a faster login.

I recently logged into my CVS.com account after not touching it for years, and I couldn't find the password reset..... turns out they no longer use passwords at all; only Passkeys and tokens via email/SMS.

Aside from email accounts potentially being compromised or SMS interception, this is honestly the way all sites should be going now. But more seriously, there should be a way to use only Passkeys with a backup identification method in case you lose your Passkey.

The new threat? Browser password managers are insecure. Anyone can sit down at my machine if it's unlocked and Passkey their way into any of my accounts. What good is that? Why doesn't Chrome use my Google account password before allowing auto-fill/login? (Obviously I don't use Chrome's password manager, but it's a real concern for everyone else.)

Re:YouTube to automatically label AI-generated videos on Thursday May 28, 2026 @09:51AM (#48308967)
If you asked an "agent" to make something for you, you yourself did not create it. By definition. Whether it's AI or a person. You contributed only a piece. It's no longer yours. This is why any piece of art/music has everyone involved documented in credits. The phonies in the industry have ghostwriters write songs for them, like a majority of pop artists. Pop music is going to be even more fake soon.
Re:Ask HN: When did computers stop being fun? on Saturday May 16, 2026 @07:39PM (#48164764)
When smartphones took over computing and landed in everyone's pockets, and the shareholders realized they have access to every single eyeball on Earth, and so the squeezing of tech for profit began. The big watershed moment for me was when Google Reader was killed off; it signaled the end of the web for users.
Re:The Future of Everything Is Lies, I Guess: Culture on Wednesday April 15, 2026 @06:14PM (#47786031)
This is not a safety filter. The owner/author is explicitly geolocation IP blocking UK users:

https://aphyr.com/posts/379-geoblocking-the-uk-with-debian-n...

Re:DoppelBot: Replace Your CEO with an LLM on Tuesday February 04, 2025 @12:36PM (#42935760)
> Your life isn’t tied to a company

Health insurance isn't tied to a company? Your ability to survive and feed your family isn't tied to your company? Lack of opportunities in the job market? Lack of equal salary/benefits at alternative companies? Non-competes, H1-B visas....

> so if you don’t like how they chose the leader or what they’re doing, you can leave.

Just one small thing Ben: leave to work for who? Who isn't hiring CEOs and running businesses the same way as everyone else?

Re:The evolution of a structural code editor on Monday January 06, 2025 @10:40AM (#42611458)
> Glad to see more exploration in this space.

I mean.... ParEdit [1] and ParInfer [2] have been around for a long time now. Structural editing is basically ancient. Lispers have been doing this for a long while, `slurp`ing and `barf`ing their parens.

[1]: https://paredit.org/

[2]: https://shaunlebron.github.io/parinfer/

Re:Hy 1.0.0, the Lisp dialect for Python, has been released on Monday September 23, 2024 @10:33AM (#41626592)
The actual statement in the video is:

> ...because this is a frontend like LLVM or GCC that compiles instead of bytecode, uh, to Python AST, um, so this Lisp compiles entirely to Python

@ https://youtu.be/1vui-LupKJI?t=1020

> because it is fast and keyboard-driven

How is it faster to press `*` than `Ctrl-I` in any other rich text editor?

> The idea that it is meant to be seen is no more than a personal preference.

Actually, the entire philosophy of Markdown is that, even if you didn't process it into HTML or some form of rich text, it uses common conventions that have been used across Usenet, IRC, and plaintext files for years, and is thus readable without ever being processed. In fact, you can likely take various plaintext files and process them and they'll gain many incidental markups and highlights.

Meaning, Markdown is Markdown without needing to be turned into HTML or rich text. It is, in itself, a great way to universally markup text as people have been doing online for years.

Re:Is Tableau Dead? on Monday February 26, 2024 @11:00PM (#39520006)
> Is Tableau dead?

Yes, Salesforce consumes companies whole. Just like they did with Heroku and others.

Re:Guix on the Framework 13 AMD on Friday February 16, 2024 @09:55PM (#39405899)
Since it's all just Guile Scheme, a full programming language, you can extend it in any way you want, and use the Scheme libraries you want, doing whatever network access you please.
Re:Guix on the Framework 13 AMD on Friday February 16, 2024 @10:15AM (#39398114)
> An old employer used this instead of Docker for managing build distribution. Can the Guix stuff be used the same way?

Yes, and, Guix is actually a "meta" package manager that understands other packages like Python PIPs and Node NPM packages, so you can define all of that in one build config file.

Looks like Google is pushing or at least trialing full-screen, non-media-content, loud advertisements on their "Google TV" branded products. While this is for Chromecasts, it is possible it's coming to regular Google TV next...
Re:In 2024, please switch to Firefox on Friday December 29, 2023 @11:18AM (#38806574)
I use PWAs extensively and Firefox decided they won't bother to implement them, so that's going to be a no from me.

Rather than wanting the web platform to be first class, they really want it to languish as a second-class citizen. Really sad, seeing as they also fired devs, and invested in "AI" instead.

Re:Obsidian 1.5 Desktop (Public) on Wednesday December 27, 2023 @10:15AM (#38782755)
They're in a GitHub repo, so I just use that since GH renders Markdown.

I could probably use Obsidian/Logseq mobile if I wanted to. (Again, because it's Markdown... which is about universal now.)

And like, it's Markdown. It's meant to be readable as-is, so I can probably figure out any alternative method. I'd obviously miss out on tag searching and graphing, but I don't have heavy mobile use right now.

Edit: Yeah, the GitHub mobile app ain't the worst. I can probably find a way to get local git on my phone, and then just use Obsidian Mobile if I want to get fancy.

Re:Obsidian 1.5 Desktop (Public) on Tuesday December 26, 2023 @03:56PM (#38775981)
No mention of Foam? https://foambubble.github.io/foam/

Fine, I uhh, I'll speak for it.

Foam is to VSCode, what Org (and Org-Roam) are to Emacs.

As a former org-roam user, I ended up preferring it because my end goal was to convert my notes to HTML and blog posts, and org is poor at that as HTML is not valid org code whereas it is in Markdown. There's just a whole host of markdown-it plugins [1] out there to add footnotes and all sorts of things to Markdown, and Foam also understands Jekyll frontmatter YAML, which is perfect for blog post tags/categories.

[1]: https://www.npmjs.com/search?q=keywords:markdown-it-plugin

And because it's just an extension to VSCode, it works with every other extension: https://foambubble.github.io/foam/user/getting-started/recom...

This gives it similar power and flexibility to Org-Roam, as you can extend the model to improve the editing experience.

So why don't I use Obsidian, Logseq, and others? Because they're dedicated apps, and now I have to bring various half-baked plugins into them to give me the power my editor already affords me. With notes, half your time is spent editing, so why wouldn't you want your editing to be as close as possible?

Secondarily, nothing stops me from using everything altogether, since it's all Markdown, I can load up my note repo in Obsidian or Logseq and others, and continue editing in VSCode and Emacs!

Re:The Final Speech from The Great Dictator on Monday December 18, 2023 @11:59AM (#38685073)
I prefer this turtabalist trip-hop version that samples it:

https://youtu.be/LOypHvuSDIo

It's just chill and sets the mood.

Re:Gemini "duck" demo was not done in realtime or with voice on Thursday December 07, 2023 @05:11PM (#38562524)
Uhh, no, not really; quite the opposite in fact.

Under Eric Schmidt they were engineer-driven, during the golden era of the 2000s. Nowadays they're MBA driven, which is why they had 4 different messaging apps from different product managers.

Re:Charlie Munger has died on Tuesday November 28, 2023 @11:19PM (#38455523)
> These are people who invested and created long-term value for shareholders

https://pbs.twimg.com/media/B5-lDJWCUAAwfya?format=jpg

Re:Max Headroom Signal Hijacking on Thursday November 23, 2023 @11:40PM (#38400686)
Like in iCal format? You can get that here: https://calendar.google.com/calendar/ical/9t07jqib63if4kecnd...
Re:Max Headroom Signal Hijacking on Thursday November 23, 2023 @12:49PM (#38395373)
Thanks! Fixed.
Re:Max Headroom Signal Hijacking on Thursday November 23, 2023 @12:45PM (#38395334)
There's also a button in the bottom-right that people seem to always miss. They should put it up top.
Re:Max Headroom Signal Hijacking on Thursday November 23, 2023 @09:53AM (#38393350)
I celebrate this and other geeky events, and maintain a public calendar of them:

https://calendar.google.com/calendar/u/0/embed?src=9t07jqib6...

Of all the places to publish a talk that criticizes big walled garden platforms....
Thanks, and I agree! I was there for the talk and Julia was absolutely electric. When Alex Miller introduced her, he said he wanted someone who makes him happy when they're on stage, and he was right to have chosen Julia!
Re:US Military Asks for Help Locating Missing F-35 Fighter Jet on Monday September 18, 2023 @10:28AM (#37556587)
Wow, the Warthunder forum arguments are getting way out of hand
> I have to question any article that claims task manager items are "randomly moving around."

"Randomly" is colloquially used to mean "chaotically" in a lot of contexts, and the chaotic they mean is "unpredictable enough as to seem or feel random".

So, why not a steno keyboard instead?

While DVORAK may only be a 5% improvement over QWERTY, a steno keyboard is vastly superior in typing speed and ergonomics, as it's used by courtroom stenographers keeping up with recording speech. (And if you learn on a proper steno keyboard, your muscle memory won't get all confused because the keys are entirely different.)

Older »