News for hackers. Stuff that matters.

hoophoop

Don't be fooled by the rain of downvotes that some comments are getting: the HN crowd is incredibly biased towards hyped stuff and CV-driven development.

I worked in FAANGS where simplicity really mattered over hype.

Re:Brave disables Chromium FLoC features on Sunday April 11, 2021 @11:21AM (#26770902)
> there is nothing wrong with advertising per se, it's a natural part of a free market economy.

There is plenty wrong. Even Adam Smith's purely theoretical concept of "free market" requires buyers and sellers to be purely rational actors and be fully and correctly informed.

Advertising has one goal: making customers less rational and more biased towards a given product.

> getting your app into repository isn't really easier than getting it into app store ... and good luck if you're trying to make money from the app.

Good. That's why the quality is so high.

> when does it make sense to track anything against trader bonuses

It's another a measure of the ever increasing inequality in some countries.

Such topic that certainly impacts the life of people commenting on HN.

> Let's say people thought Bozo the Clown invented the printing press

People write articles to provide information. Reader read the article and learn.

Re:Amazon workers vote against unionizing in Alabama on Friday April 09, 2021 @08:11PM (#26757711)
> When did tombert assume that poor = "crazy" = criminal?

It's implied here:

"I think being really broke greatly hinders your ability to think rationally."

...by putting that sentence out alone without clarifying the context.

> psychological pathways

> unfairly reify

Are you feeling ok?

> that's not why we remember him

99% of people believe that he single-handedly invented the press with movable type. Ask around.

Re:Screw it, I’ll host it myself on Friday April 09, 2021 @06:34PM (#26757056)
No, there are no backports of security fixes for the applications.
Re:Tell HN: Today I learned Epub is just HTML/CSS on Friday April 09, 2021 @06:32PM (#26757035)
Browsers don't block any homecalling either.
Re:Amazon workers vote against unionizing in Alabama on Friday April 09, 2021 @06:29PM (#26757009)
> I think being really broke greatly hinders your ability to think rationally.

No: being really broke can cause a lot of anxiety that can lead to irrational behavior.

But often a person has to choose between homelessness and crime and picks the latter as a rational choice, given the alternative.

So please don't assume poor = "crazy" = criminal, it's a bit unkind.

Re:Hacking a $200 Under Desk Exercise Bike on Friday April 09, 2021 @06:06PM (#26756786)
As a non-native speaker I might make other grammatical errors but not the ones related to phonetics.

Often I found more difficult to understand English written by native speakers than by others because of that.

> Is it even possible to do anything else? I can’t imagine keyboards report their physical layout..

You can easily ask the OS what layout is being used or even ask the user.

Re:Docker without Docker on Friday April 09, 2021 @04:48AM (#26748163)
What do you need exactly? OS packages or tarballs are more than enough most of the time.
Re:Perfect Motherfucking Website on Thursday April 08, 2021 @01:11PM (#26741286)
> #ffffff is the color of looking directly into the sun and absolutely painful bright, #000000 is the color of the deepest, starless night

No. There's no definition of what they map to.

That's why we need USERS to be able to scale the ranges of brightness and contrast.

My environment changes during the day. I want to be the one in control of my screen, not some random website.

Re:Tell HN: Today I learned Epub is just HTML/CSS on Thursday April 08, 2021 @12:14PM (#26740574)
Epub can do all sort of homecalling / user tracking using HTML or CSS or javascript.

What's even worse - almost all Epub readers don't do proper sandboxing.

This is what [big] Linux distributions are for: vetting packages and vetting the vetters.
> I understand that as a US citizen I have more freedoms than most people throughout history

Maybe on paper or as long as you are lucky.

In most EU countries such stories of police abuse are way, way less common.

Including things like unwarranted searches, seizing money with no good reason, swatting, aggressive questioning.

> If it's "we the people", it's totally fair and indicative of a very progressive and tolerant society. Or something.

This is a very dishonest framing.

Re:Screw it, I’ll host it myself on Wednesday April 07, 2021 @04:59PM (#26731177)
FreedomBox is the only one that security updates from Debian. And for more than five years. Without breaking changes.
Re:Signal Server code on GitHub is up to date again on Wednesday April 07, 2021 @11:17AM (#26726133)
No.

If Signal /was/ federated it would be a strong hint that the server code stays the same.

And even if it's not the same, people would be able to run their own trusted servers.

Re:Streaming subtitled box sets is the new Eurovision on Wednesday April 07, 2021 @09:53AM (#26724961)
There's nothing morally neutral in exploitation.
...the simple fact that there's no guarantee that either the server or the client would receive updates.

That means hard-forking the old server and client and maintain them as an independent project forever.

That's what's stopping me and many other people from creating a community and federated version.

> It's a purity test and nothing more.

Wrong. Publishing the server sources allow people to create a parallel and independent service.

> So the client is open source and guarantees end-to-end encryption regardless of what the server does. Ok, then I honestly don't care. Why should I?

You should because any successful centralized messenger is one update away from becoming entirely closed source.

If Signal will reach say a billion users it will be able to do that without significant userbase loss, due to network effect.

> safety characteristics, which as stated are apparently ensured by the client regardless of what the server does

In reality, the contact social graph and the frequency and pattern of messages between users is leaked.

Any global observer can do a correlation attack thanks to the centralized servers (and absence of onion routing).

Re:Streaming subtitled box sets is the new Eurovision on Monday April 05, 2021 @02:31PM (#26702737)
> Hollywood is based on their ability to create films that cut across all the cultures

Hollywood is widely caricatured outside of the US for its disconnect from reality. Flat characters, childish good VS baddies dichotomies, bombastic action movies...

Let's stop with the performative cynicism on HN.

There is overwhelming scientific evidence that (mentally healthy) humans are pretty capable of empathy https://en.wikipedia.org/wiki/Empathy

> They motivate their selfish actions, to others but also to themselves (Motivated Reasoning) with noble sounding arguments

You are claiming that selfishness is the only driver but https://en.wikipedia.org/wiki/Motivated_reasoning goes both ways.

Besides, why do you refer to people as "they"? Are you a bot?

Re:Ask HN: Why did you leave the tech industry? on Wednesday April 15, 2020 @01:26PM (#22880503)
I fully agree - but the problem is not just in the tech industry.

Everything you describe is about capitalism: putting profit before any other priority.

Re:Curl to shell isn’t so bad (2019) on Tuesday January 28, 2020 @10:31AM (#22170265)
But you can trust the large userbase of a popular Linux distribuiton, especially when big companies use it.
Re:Curl to shell isn’t so bad (2019) on Tuesday January 28, 2020 @10:30AM (#22170251)
That major point is plain wrong.

https://sysdig.com/blog/friends-dont-let-friends-curl-bash/

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

These attacks can be mounted on the network side.

Also you can inadvertently execute data from a benign captive portal or a server error page and so on.

Not at all. Monorepo is merely a detail around VCS and it does not remove complexity and the need for versioning.

Older »