News for hackers. Stuff that matters.

liberia

Re:Tell HN: MS forcing Edge shortcut on desktop on Sunday January 22, 2023 @11:35AM (#34479059)
Here's a guide on how to prevent this from happening: https://www.ghacks.net/2023/01/21/how-to-block-microsoft-edg...

> The workaround requires edits of the Registry. There is a global edit that applies to all Edge channels and edits for each individual version of the web browser.

Re:Explore Wikipedia's New Look on Wednesday January 18, 2023 @03:21PM (#34432472)
I browse with Safari on iOS with JS disabled by default. I do this for privacy and accessibility reasons (gotta stop those annoying popup modals, trackers and other annoyances).

One thing I noticed with Wikipedia with JS /enabled/, all the sub-categories of a topic are by default, closed.

But when I browse with JS disabled, all the sub-categories are /opened/ and I have the full article.

Since most people browse with JS enabled, this means they have to make additional clicks just to read the sub-categories.

Which leads me to question: which version is better? The JS where you have to make additional clicks, or the no-js version where you get the full article?

Re:Do Facebook ads work for you? on Saturday January 14, 2023 @01:28PM (#34382604)
Sorry to hear about your bounce rate. But even though ADs do not correlate to more sales, your message / slogan / unique selling point is in the minds of prospects, and the purchases will be potentially delayed.

I'm only saying this because as a consumer, I bought stuff roughly a year later when I had the money, even after seeing the AD a year ago! ADs plant the seed, then sales naturally follow, albeit delayed.

Re:Mastodon client from the people behind Tweetbot on Saturday January 14, 2023 @01:14PM (#34382444)
> the current list of Mastodon servers feels very limited

Try this site: https://instances.social/

It helped me find some instances that matched my interests. Just keep in mind, most instances will die out if they're not sufficiently funded either by donations or the pocket money of the owners. This is why I treat all my Mastodon accounts as potentially ephemeral accounts that will die out given enough time. The more popular instances seem to be in it for the long haul, so go with those (as much as you enjoy the smaller instances).

Re:Ask HN: What made programming “click” for you? on Tuesday January 10, 2023 @06:09PM (#34332783)
The 'View Source' in browsers is what got me started initially in webdev. It was amazing seeing how sites were pieced together, and it was all progress from there. In the start I copied a lot of code, but then got comfortable writing my own.

Also the ability to write code in an editor and see it instantly reflected in the browser by hitting refresh was a game changer. No compiling. No writing code in a black box where you don't get instant feedback or don't know if the code is behaving correctly.

Recently I went to sign up for Rackspace and their systems flagged me as 'Suspicious'. I tried registering without a VPN in a brand new session, and again: 'Suspicious'. I provided all the right details for them, correct contact and address, etc I wonder what their churn rate for auto-flagging away potential customers is? They are in the business of taking people's money in exchange for services right?
Re:Tell HN: How to close your LinkedIn account on Saturday December 03, 2022 @02:52PM (#33846667)
I got a hard lockout to my LinkedIN account a few months ago, since I enabled 2FA and lost the device. I had to send a passport scan to support so they could verify it was me, so I could close my account. Not that I minded that much.

It goes to show you their support team is actually active and don't ignore queries (even if the service is free).

There's an interesting movie called Don't Look Up[0] which is a metaphor for climate change politics.

> The impact event is an allegory for climate change, and the film is a satire of government, political, celebrity, and media indifference to the climate crisis.[6][7]

After watching, I agreed that when the world eventually burns, people will be live streaming and tweeting about it instead of going out and actually doing something about it. We all have a part to play in this, and armchair activism behind the comfort of social media will do jack shit to solve this problem. Addressing climate change head on will be the biggest amount of cooperation humanity will ever have to do. After we address it, it will not be as hard to maintain decent temps. We can sail on this rock for millennia once we get out there and make shit happen.

[0] https://en.m.wikipedia.org/wiki/Don't_Look_Up

I trust this over Bitwarden or Lastpass since you have to trust those services with your data (and I don't). Web-based password managers can be hacked, or have their login interface laced with third-party code that could be exfiltrating your master passphrase. My strategy is using KeePass and keeping multiple copies of the database in various cloud providers in case my local copy is lost/corrupted. It takes under a minute to sync my local copy to Dropbox, Google Drive, Box, etc
Re:Ask HN: Alternative to Google Analytics for user flows on Tuesday September 06, 2022 @11:39AM (#32738631)
https://goaccess.io/

Might be a bit overkill, but it's more accurate since it captures raw logs and captures even users with JS turned off or blocking your analytics script.

There's also:

https://clicky.com/

https://www.plerdy.com/

It's hard to code secure PHP. When starting, I was like: 'So I can just pass a query parameter with <script>alert(1)</script> and do trivial XSS on random sites if I wanted to?' Smart PHP coders always sanitize, but for PHP newbies, it's easy to introduce some vulnerabilities if you don't do defensive coding practices.

There's things like directory traversal attacks too (putting ../../ in requests etc) which you have to prevent. PHP doesn't do it for you, you have to be very defensive with it. Which is why I use PHP sparingly and use Python and Perl more. Those languages even still have potential vulns, but not nearly as bad as the ones you can introduce in PHP IMHO.

Re:The problem isn't that you're too busy on Monday September 05, 2022 @01:19PM (#32726719)
Worth reading this gem from 2010 too:

https://scottberkun.com/2010/the-cult-of-busy/

Older »