News for hackers. Stuff that matters.

randomString1

Re:AMP for email is a terrible idea on Tuesday February 13, 2018 @09:37PM (#16372966)
I wouldn't "launch this" because it's not needed in the first place. You should accept email for what it is. The same point the article is defending.

> and was actually trying to make stuff better for users

Now, if we're talking about making communication between users better than yeah you need to go beyond email. E2E, open protocol, something like jmap (imap sucks), focus on privacy and interoperability, yada yada, so many better stuff to "fix" before trying to amplify my inbox and adding more rendering issues between platforms. Do you see a trend? You're now treading a thin line between chat apps, social networks, Android instant apps and glorified iframes. And introducing a whole new set of problems at the same time, not to mention the monumental effort required for something like this to keep backward compatibility (just so you can still call it email and use the superset). And getting the implementation right the very first time.

I too want the worst problems of using email to be solved but since nobody wants to adopt open protocols and work with each other (or eee the whole thing a year later), like history showed us time and time again, it won't happen. So again, let's at least no lose what we have now.

(Sorry I'm a little tired so my writing is bad)

Re:AMP for email is a terrible idea on Tuesday February 13, 2018 @08:34PM (#16372670)
I was typing a long, long reply too but I just realized I wouldn't even use my own suggestions because I don't trust Google anymore, specially to do the right thing in the long run.
Re:Bringing AMP to Gmail on Tuesday February 13, 2018 @10:01AM (#16367586)
Email is already fucked. In my experience Gmail often failed to receive emails from services like Yandex and Zoho. Plenty of people here that setup their own servers, and know what they are doing, getting randomly blacklisted.

Maybe it's fine if email is not central to your life or business but if there's even a, let's say, 10% chance of my emails not getting delivered to Mr Google I have no other option than to bend the knee.

I know nothing about the subject, how does file removal work in decentralized networks? I understand once something is on the internet it's out of your control but what if I accidentally post a naked picture when I'm trying to sell something on decentralized-bay and I try to delete it immediately or a few minutes after? What about illegal content that I don't want to redistribute without my knowledge?
Re:Switch from Chrome to Firefox in Just a Few Minutes on Tuesday February 06, 2018 @08:50AM (#16316170)
?utm_content=buffer48960&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer
Re:Microsoft Office 2019 will only work on Windows 10 on Friday February 02, 2018 @12:26PM (#16292289)
Like I said you can de-anonymize data. I wouldn't know since I'm not a security researcher and haven't tried to analyze Windows traffic with external hardware. It's like asking if nobody would have find out about Spectre in a decade since it's so obvious.

Since everybody else does it now MS, from a competitive standpoint, also has to be a creep with your data. But they own the OS and I don't want that bullshit there.

You can go with the "it was a bug" narrative about all the privacy settings getting reset, saying that the tool showing what they collect is enough, that not being able to pay to stop the data collection is ok (if they "really" have to collect data to be competitive), well for me it's shady business and I don't want my OS doing that. Just tired of this subject to be honest, here's more info if you want to dig deeper https://google.com/#q=Windows+Restricted+Traffic+Limited+Fun...

Re:Microsoft Office 2019 will only work on Windows 10 on Friday February 02, 2018 @11:35AM (#16291839)
> In regards to trust, you can actually view the diagnostic data since the insider build half a month ago using windows diagnostic data viewer.

Once again a matter of trust (or not wanting ANY data to be sent, a radio silent OS aside from updates and features that actually require internet access and you opt-in on using them). Would be trivial to lie about the data in the UI. I don't know if it's possible to intercept the data for analysis, so people can verify that it matches the UI.

> Regarding businesses: I do think you can disable all of that using group policy in Windows Enterprise

Nope, even the Security setting still collects data.

https://technet.microsoft.com/en-us/itpro/windows/manage/con...

Re:Microsoft Office 2019 will only work on Windows 10 on Friday February 02, 2018 @11:13AM (#16291656)
With all that's going on with the world (especially the last decade) a lot of people, like me, feels that having telemetry at the OS level is going too far. And think again about data being anonymized when they have so much of it (e.g. https://news.ycombinator.com/item?id=10456855). Even if I trust MS (or Google, or Apple, anybody) 100% it's still too much responsibility.

Even worse for people that are forever locked to Windows because of their line of work, clients or something else. They have no option, they can't even pay more to stop the data collection. Not to mention HIPAA and other problems that may affect small business owners.

Re:Ask HN: What should I do with my life? on Thursday February 01, 2018 @10:27PM (#16288159)
Maybe the original version. I heard things got lost in translation.
There are several referer settings.

https://raw.githubusercontent.com/pyllyukko/user.js/master/u...

user_pref("network.http.referer.userControlPolicy", x);

// TODO: https://github.com/pyllyukko/user.js/issues/94, commented-out XOriginPolicy/XOriginTrimmingPolicy = 2 prefs

user_pref("network.http.referer.spoofSource", x);

user_pref("network.http.referer.XOriginPolicy", x);

Re:Kexi Project – “Microsoft Access for Linux” on Thursday February 01, 2018 @01:07PM (#16284106)
"When you compare Linux and Windows applications feature for feature, there is very little, if anything, that Microsoft has that Linux hasn't yet perfected."

https://i.imgur.com/PcHtYWC.png

Even if they define a 5 to 10 years warning before "deprecating" it is better than finding ourselves in the same hole the same amount of years from now.
Re:Google and Facebook are watching our every move online on Wednesday January 31, 2018 @12:49PM (#16275790)
I register all my accounts using Gmail because I feel DNS/domain security is a joke (this was debated here in the past but I don't have the technical knowledge to explain it any better). I'm saying that because IMO using your own domain is crucial for privacy and control.

I choose Google one day randomly blocking my account over losing it to some random person from the web. At least I can make a blog post and try to make to HNs frontpage to get some customer support.

Re:Google and Facebook are watching our every move online on Wednesday January 31, 2018 @12:45PM (#16275755)
I wish that was enough. The articles that show up here on HN from time to time make me think they can cross-reference data and fingerprint you through many data sources and more advanced tracking (things that we discover from time to time like canvas, css). People that have you on their contact list, your e-mails that hit their servers even when you don't have a Gmail, DNS, CDN, cloud services, your phone unless you go full tin foil hat, data they acquire from other companies. I try to protect my privacy but I think it's all futile, they have too much power.
Re:Google closes its $1.1B deal with HTC Corp on Tuesday January 30, 2018 @11:31PM (#16271320)
And if you want things like "receiving updates" and "no bloatware, stock android" you have to compromise on the hardware side. Gets even worse when you add phone carriers and warranty to the mix (depending where you live).

I just hope Treble will allow us to install a signed stock ROM (custom ROMs don't count in my book) on any device so all that matters is the hardware and customer support.

I know what you mean and my frustation goes beyond that. All my servers and many tools are all Linux based, but my desktop dev environment haven't change in years (even when I hop from LTS to LTS). It's mostly abstracted with my own GUI code so when people start fucking with the underlying and regular components I can just do a quick fix on my side. When I'm customizing my Linux desktop (CLI aside) I feel like I'm wasting my time just to make things work, not have a prehistorical workflow and minimize the GUI toolkit hell. Ironically, on Windows I feel like an actual power user when I'm making scripts and automating workflows. Not sure why, it's just how I feel.

Maybe the annoyances are from the lack of a core desktop experience/"interface" (not talking about GUI) that feels familiar (especially for new users). I bet it also scares developers from other platforms and commercial initiatives. I'm all in for freedom but a "default stack" is desperately needed.

Re:Extensions in Firefox 59 on Friday January 26, 2018 @07:01PM (#16243930)
Too bad the new model to not review and approve extensions made me stop installing and experimenting with them (except uBlock and a couple more). Same BS as Chrome but what can you do. My browser is very boring now.
Re:Firefox 58 on Tuesday January 23, 2018 @05:28PM (#16218438)
Let's hope they don't decide to serve Firefox users JSON output and call it a day

https://www.reddit.com/r/firefox/comments/7oxiae/i_had_to_us...

Re:Firefox 58 on Tuesday January 23, 2018 @03:36PM (#16217410)
> I especially have issue on Google sites (Docs and Drive)

And YouTube. And Search. Hangouts, Gmail, Maps, Calendar, Groups, everything else? I don't buy it for a second that it isn't on purpose, even with the polyfill justification.

You only make it easier for people like me to continue ignoring Chrome (if I even needed more reasons).

Re:Show HN: HTML5 webcam pics to email with motion detection on Monday January 22, 2018 @06:22PM (#16209121)
You could use something that is not e-mail. From uploading the images to a shared/cloud folder and/or a messenging protocol to notify you.
What's wrong with .\example.exe? Or .example.exe, .$exampleWithPath for PS1 files? Just examples that I see in the wild
I disabled the firewall and alerts in the control panel.

This might be outdated but it's in the Control Panel or Action Center somewhere (Security and Maintenance area?). https://blogs.technet.microsoft.com/networking/2010/12/16/di...

I'm also using this simplewall option:

> Enable boot-time filters – Prevent data leak during system startup, even before "Base Filtering Engine" (BFE) service starts.

https://github.com/henrypp/simplewall

> Simple tool to configure Windows Filtering Platform (WFP)

So much better than anything else I tested. Easy to import/export rules (XML) and there's also portable mode and advanced options (that goes beyond the simple UI you can see in the image).

Looking at how they behave the only thing I would expect from them is to not give free shovels when people are trying to dig. They will keep turtling until there's a new product they can push and rush everybody to ditch the "insecure predecessors".
Re:Ask HN: TinyWall or something else? on Friday December 08, 2017 @02:40PM (#15881355)
That's probably just what I need. Thank you!

Ask HN: TinyWall or something else?

Since Glasswire 2 didn't solved long standing problems I have with it I'm looking for an alternative. Would be better if there was an open source alternative.I want to be able to whitelist applications and block everything else by default, basically a better frontend for the Windows Firewall.What do you think about https://tinywall.pados.hu? Does it send data back (telemetry)?

( Read More... | 3 comments | 4 points | on HN )

Older »