News for hackers. Stuff that matters.

blitblitblit

Re:How Does the Internet Work? on Saturday February 06, 2021 @07:51PM (#26051627)
Pretty simple. Google sets the standard, Microsoft and Mozilla play patsy and implement whatever they ask. That's pretty much how the internet works in 2021.
Re:Show HN: CopyPasteTaxes on Saturday February 06, 2021 @04:04PM (#26049922)
Not trying to sound harsh, but you have nothing to show. Why should people crowd fund this thing without even a rudimentary prototype?
Re:Security Bulletin: Vulnerabilities in OpenSSL Affect AIX on Saturday February 06, 2021 @03:27PM (#26049641)
Should have used LibreSSL or BearSSL.

Ask HN: Where to find free/volunteer programming apprenticeship or mentoring?

I've done some online bootcamps, and made a few contributions to open source software projects. However, the quality of code on many of the projects I've contributed to is very sub par, and when I ask questions the developers they themselves don't always understand how to fix it and are of little to no help on continuing education. I also do not feel the coding practices are up to commercial...

( Read More... | 1 comment | on HN )
Very cool! One issue with this is, depending on your security slider setting, this does not work in Tor Browser and presumably Firefox. In Private Browsing mode IndexedDB is apparently restricted, so it is only working in non-private windows for me, and of course JS must also be enabled.
Re:Cloudflare Waiting Room on Friday January 22, 2021 @09:37AM (#25871955)
The fact no one else here has considered that all your private healthcare data is going through an MITM that can strip SSL before reaching the endpoint is rather terrifying. Even if we assume CloudFlare is trustworthy, they are US based, which means little to no GDPR.
Re:Ask HN: Should I learn arch Linux or Debian Linux? on Friday January 22, 2021 @09:34AM (#25871935)
Neither, try KISSLinux or Gentoo on a VM to actually learn. Arch and Debian are both binary based and don't really teach you much in the way of development and command line.
Sounds like they are getting ready for more KYC on the block chain.
It's a sarcastic joke, nothing there but a place holder for your own API key and you would have to set it up. There's no place like 127.0.0.1. :D
Re:A Mini Browser War in Linux on Tuesday December 22, 2020 @05:36PM (#25512200)
> Two new Web browsing alternatives widen the field of browser choices for Linux users. The recent introduction of Microsoft Edge for Linux, and the Dec. 8 release of Vivaldi version 3.5 offer the freedom to experience a Google-free vehicle to navigate the Internet.

Sorry, but that the "Google-free" claim is just BS. Both browsers now run on the Google Chromium engine, and no matter how much lipstick you can put on a pig, it's still a pig. The only few independent browsers right now are Safari (Webkit) and Mozilla Firefox (Gecko), both of which are struggling in market share because everyone in their mother is creating their own Google rebranded browsers. There's also Goanna / UXP which is forked from Gecko Pre-Servo, but in the grand scheme of things there are very few Google-free vehicles left to navigate the Internet.

Re:Why FSF Endorsing PureOS Matters on Tuesday December 22, 2020 @05:27PM (#25512114)
And in still other ways this endorsement is hypocritical to their own dogma: https://web.archive.org/web/20161010040458/https://blogs.cor...
Re:Let’s Encrypt moving to new CA root on Sunday December 06, 2020 @06:13PM (#25327592)
While true it is a good reminder that a ton of legacy devices are going to break after 2021-01-11.
Re:Let’s Encrypt moving to new CA root on Sunday December 06, 2020 @06:11PM (#25327581)
Assuming you aren't able to update via a custom ROM on unsupported hardware, it should still be possible to import the new Root Cert on Android.

> System-installed certificates can be managed on the Android device in the Settings -> Security -> Certificates -> 'System'-section, whereas the user trusted certificates are manged in the 'User'-section there. When using user trusted certificates, Android will force the user of the Android device to implement additional safety measures: the use of a PIN-code, a pattern-lock or a password to unlock the device are mandatory when user-supplied certificates are used.

Source: http://wiki.cacert.org/FAQ/ImportRootCert#Android_Phones_.26...

Re:Areweyet on Sunday December 06, 2020 @05:54PM (#25327454)
arewedefunctyet?

arewebankruptyet?

Re:GPG and Me (2015) on Sunday November 29, 2020 @09:00PM (#25250025)
Someone did make an alternative to GnuPG called OpMSG, but I'm not certain that it is reliably more secure, other than not depending on an online Web of Trust / key server.

https://github.com/stealth/opmsg

I'm very impressed that the entire site is functional with NoScript.
Re:Why AWS loves Rust, and how we’d like to help on Tuesday November 24, 2020 @02:05PM (#25201807)
From the link:

> Uses that require explicit approval

> Distributing a modified version of the Rust programming language or the Cargo package manager and calling it Rust or Cargo requires explicit, written permission from the Rust core team. We will usually allow these uses as long as the modifications are (1) relatively small and (2) very clearly communicated to end-users.

Patching for a specific architecture, distro, OS, et. all is going to result in "a modified version". You can't expect users as far down as the Debian Source DVDs to be able to submit that back to Rust for approval. Us folks using MIPS patch all the time, and redistribute binaries to help others.

Re:Federation is now enabled for lemmy.ml on Tuesday November 24, 2020 @02:01PM (#25201746)
Great news, now hopefully they implement a CSS fallback for older browsers. I can't get their site to load at all in Pale Moon because it's white and unreadable.
Re:Robots Invade the Construction Site on Tuesday November 24, 2020 @01:48PM (#25201556)
This is seriously disruptive technology for a lot of low-wage workers. I wasn't aware robots were already this advanced for drywalling.
Re:Why AWS loves Rust, and how we’d like to help on Tuesday November 24, 2020 @01:45PM (#25201531)
Any OS distribution, e.g. Debian maintainers should be asking permission to patch rust per Media Guidelines, but it doesn't always happen.
Re:Viewable with Any Browser Campaign (2011) on Tuesday November 24, 2020 @01:31PM (#25201384)
Thank you kind sir. As an eLinks and PaleMoon user that is being constantly blocked from accessing Google Chrome exclusive content, you are making a difference.
Re:Why AWS loves Rust, and how we’d like to help on Tuesday November 24, 2020 @01:23PM (#25201294)
Does this mean the "Media Guidelines" is going away? If we want to redistribute cargo or rust with some patched changes, I'd like to be able to do it without coming back and asking for trademark approval every time. Even if the resulting binary says "unofficial/unsupported build".
Re:CSS Conic-Gradient() on Monday November 23, 2020 @07:15PM (#25193616)
While cool, this was literally just implemented in FF83. It's not safe to assume all users will be able to view the feature, always have fallback for older browsers using standard gradients to ensure webcompat.
Re:Torontonian is turning his bar into a VHS rental shop on Monday November 23, 2020 @07:07PM (#25193564)
While cool, DVD and BlueRay are more common. Not sure who all still has a working VHS player these days, they are kind of rare.
Re:Neopets Was Run by Scientologists on Monday November 23, 2020 @01:36PM (#25189973)
> Neopets

Now that's a blast from the past, I remember growing up with NeoPets and NeoPlanet Online. Good times.

Unfortunately "investigative journalists" like Sharyl Attkisson are respected and of influence to the right's audience. She is posting and continues to post anti-mask studies as "proof" that masks do not work. This type of thing justifies more and more anti-mask activity because she is someone who is "unbiased" and getting the "facts". Only half the facts don't equate to the whole picture, and Chinese cloth masks you can read through are far different than dual cloth masks or respirators.

TL;DR: Not enough independent media is reporting all the facts. Simply having reputable people link to and explain the mask particulate logarithmic analysis would go a long way: https://advances.sciencemag.org/content/6/36/eabd3083

Older »