News for hackers. Stuff that matters.

uconnectlol

discord is shit, poorly designed software, with all the most obnoxious poor security decisions (like requiring phone calls), with poor political decisions on top as well as spying. probably one of the worst pieces of software to ever exist. all it has is momentum. it's like pop music where a million people make bands and one wins the fame lottery.

it's primarily a windows program and they can't even make a proper windows gui but embed a website, so clicking on anything is like a link instead of focusing into it. for instance if you middle click someone's name it opens it in a browser. fuck off. pressing alt+f4 closes discord instead of sending it to the tray (despite being a tray program). it's always updating something and then it just says "logging in" instead of saying what it's doing. it gets stuck indefinitely if you log in on a slow connection or you unplug lan while it's logging in or doing whatever it's doing at any given moment. absolutely the most frustrating crap to use. it has a billion options for stupid "hardcore" gamers (i am, too, but i don't need it) with special needs while not being a basic quality application that conforms to any UI standard.

they openly spy on you, not even trying to hide it.

instead of real software, it's a stupid fucking social media "community", so you can't just use it as a MECHANISM NOT POLICY program, instead every time you do something like log into a different account you have to check whether this is morally correct or will somehow harm their "community". like say i want to work on my blockchain, who are dumb enough to use discord as their main communication platform. i obviously then would want one account for that, then another - completely separate (but perhaps with the same phone number to make it logistically easier which SHOULDNT EVEN BE A THING, this is the internet) - account for playing games (often during work), i can't just log into these simultaneously, i have to go check what their policy is on that. literally, my first thought is that like typical incompetent american software devs, they will think i'm trying to scam people or some other kind of "abuse". and of course, they appear to have conceded to partially implement this "feature" (by undoing their nonsense about forensically attempting to forbid this)

> "Videos of people having sex" is deliberately misleading

it literally isn't. porn is mostly people having normal sex or just nude images of a woman. the existence of fringe fetish stuff doesn't affect that in any practical way. but your confusion seems to be thinking this discussion was about feminism or something when it's really just a decrepit boomer who is against sex being even legal lying through his teeth to justify completely pointless and harmful legislation (see 2 posts up)

lets just skip straight to the logical conclusion, buddy. no amount of "web" or "discord" regulation stops porn consumption. the statistic of "minors viewing porn" wouldn't be affected even slightly, even if all of the regulation in question here were passed to the fullest extent. this is because people can just download and run whatever software they want, and communicate with any party they want. what you want is for people to not have control over their computers/communications made from them. people talk about a middle ground, but there is none, because you will always just notice that the "minors viewing porn" statistic is not affected by your latest law, until you have absolute control over civilian communications. this is completely against what anyone in the open source community let alone democracy, stand for.
Re:Discord runs Powershell on load to find Nvidia binaries on Sunday August 18, 2024 @08:35AM (#41281983)
that's a strange obfuscated way to say "don't ruin my vibes bro". that sentence doesn't actually mean anything but we all know what it means.

now back on topic: discord is pathetic web crap. i used it sometimes to add this and that people in games and the first time it immediately gave me a captcha + required a phone to join a room or make an account. i did not port scan their server or anything, let alone use it at all. from their perspective i did nothing wrong, they just have a horribly broken firewall like all webshit. it was in stock firefox too without any plugins

now i tried installing it later and it turned out to just be the same webshit in a wrapper. i immediately asked myself, hmm where is this discord program all the nerds are hyping over for the last 10 years? i asked my friends where i could get the real app (usually there is real software for a protocol that all the cool kids are using, even if it's unofficial. like with MSN (pidgin, etc), IRC (stuff other than mIRC), playing music (foobar), playing videos (mpv), etc. nope, not for discord, you just use the web shit GUI with, accordingly, worse controls than something a boomer microwave designer would make). it has all kinds of special snowflake behaviors too like alt+f4 just closes it instead of sending it to the tray (while clicking x does send it to the tray), and it cant be muted like a regular program.

Re:The EU's AI Act is now in force on Friday August 02, 2024 @06:30AM (#41137602)
regulation fixes nothing and just makes everything worse in the big picture

> no recording in public

this is the only one that sounds like good common sense but isn't even regulation it's just law any sort of legal system would enforce.

all these "safety" things means ai offerings are all useless like google after 2003 when anything you query like "list of fad diet" is transformed into instead of an answer to that "problematic" question, an answer to "NVM LOL HERE IS A LIST OF HEALTHY DIETS"

> can't train on copyright material

that's so dumb. this world has no interesting copyright content coming out for 2 decades, it's literally all sellouts. losing to AI (which will happen regardless of whether the training material contains any copyright content) is exactly what they deserve. don't forget that these are also people who sue random civilians for "damages" that only exit in their head. sellout culture no longer even applies to musicians and book authors, it's also the majority of software too, with people just creating software for part of their resume, or some crowdsource shit, or a blog. any software anyone makes in a corporation is just to host an ad or be a dev tool for people who just host an ad

Re:Six Dumbest Ideas in Computer Security on Sunday July 14, 2024 @08:29PM (#40964342)
> Please wait while your request is being verified...

Speaking of snakeoil

Re:Six Dumbest Ideas in Computer Security on Sunday July 14, 2024 @08:27PM (#40964334)
Password policies are a joke since you use 5 websites and they will have 5 policies.

1. Bank etc will not allow special characters, because that's a "hacking attempt". So Firefox's password generator, for example, won't work. The user works around this by typing in suckmyDICK123!! and his password still never gets hacked because there usually isn't enough bruteforce throughput even with 1000 proxies or you'll just get your account locked forever once someone attempts to log into it 5 times and those 1000 IPs only get between 0.5-3 tries each with today's snakeoil appliances on the network. There's also the fact that most people already know that "bots will try your passwords at superhuman rate" by now. Then there's also the fact that not even one of these password policies stops users from choosing bad passwords. This is simply a case of "responsible" people trying and wasting tons of times to solve reality. These people who claim to know better than you have not even thought this out and have definitely not thought about much at all.

2. For everything that isn't your one or two sensitive things, like the bank, you want to use the same password. For example the 80 games you played for one minute that obnoxiously require making an account (for the bullshit non-game aspects of the game such as in game trading items). Most have custom GUIs too and you can't paste into them. You could use a password manager for these but why bother. You just use the same pass for all of them.

Re:Second Factor SMS: Worse Than Its Reputation on Thursday July 11, 2024 @12:53PM (#40938476)
Wow SMS 2FA forced bullshit that suddenly got astroturfed right on the day of the Snoweden revelations is actually indeed bullshit. When will they have opt out of this or is this just the end of the web? 20 years ago I did not need or want anything more than a password (obviously cryptographic key auth would be better but not if it's brought to you by X.509). And of course all the HNers who eat this shit up and defend it like little dogs are suddenly on the other side. Email verification is fucking dumb too, and of course now every email forces phone SMS shit.
they also aren't very hot and wont work in northern cities, but people will install them there anyway. "boiler" - is that jargon for multiple kinds of heating units or actually just boilers?
another thing i just remembered like this is how the start menu will fade in in windows XP, and submenus. but after you open one submenu and then decide to open another beside it, it admits that the animation is just a gimmick and doesnt do it again.
> Health advocates praised the Environmental Protection Agency

which ones? which ones didn't? just 2 days ago i heard PFAS is still in the rumor stage.

> Water providers are entering a new era with significant additional health standards that the EPA says will make tap water safer

i thought you already said it's safe?

i have plenty of health issues caused by just about everything, everything has 10 billion perfumes for no reason, and new kinds of experimental plastics in every single possible thing you can buy, that smell terrible and unsurprisingly make you feel awful, just walking in a city and coming in fills my face with irritants and can ruin my day. this is a small difference in comparison. i doubt the PFAS thing is any more than a typical fad and way for gov to make money as usual. nobody actually cares about this stuff, they just pretend.

you don't expect it to work that way, you discover it. once you discovered it, sometimes you have two files that start with e and you press e to get to the one you want, but it got you to the one before it, so you press e again to go to the next one, which is faster than reaching for the down arrow. being able to select files with finesse is important in windows.

windows 9x was probably the last time any user interface tried to be this efficient, now it's just click the arrow and it will make sure to slide the next photo in very slowly in case you forgot that you're waiting for the next photo to appear

how was this not just an exercise of checking the law or amending it for fraud / false advertising with a result like, "a service has to state the actual cost up front and not require the person to calculate a bunch of stuff in his head with 5 equations for 10 competitors before he can even compare them". you can't say "$30/mo" and then put a star once you click 3 pages deep saying "(for the first 3 months)", because that makes it practically impossible for the buyer to compare prices, gating it behind some stupid fucking address entry form that breaks 80% of the time. it's simple fraud and nothing else. you write: "price: $30/mo and then $70/mo after the first 3 months"

and i bet FCC spent 100 million dollars making this

and can you even access these food labels before entering your address? (and why is it not mandated that they provide a list of zones and prices per zone?)

a number like "total latency" is just complete nonsense, as its not a real metric that can fit in one number, and the kind of number marketers love to abuse.

and nothing about what kind of modem the ISP is compatible with. is it cable, adsl, fiber?

wifi extender and battery backup? because someone in FCC needed to work his full shift so he added those during his time? i'm not going to compare isps based on what random bullshit they bundle in, i only care about the actual service. anything more than 3 variables is too much. modem rental is important since they fucked up the chance of having open standards so hard that most people practically have to rent a modem. i guess FCC can't be blamed, they aren't techies or whatever.

Re:Why Can't My Mom Email Me? on Thursday April 11, 2024 @12:08PM (#40003753)
these kinds of stories are such a joke, why can i not just give someone my public key and that should be enough to communicate with him forever? how is that not user friendly? because he can lose the key? you just give it again. you just use some decentralized protocol with a DHT or something and the only step the user ever has to do is get the public key of the person he wants to add. net result is far better off than nonsense like email, dns, and x509. and i had this exact same rant 15-20 years ago too, it's amazing how everyone is still chasing the same carrot.
> she has slowly isolated herself from life and her family, she spends most of her time in her room on the phone and does weird things like get cosmetic surgeries, ordering cosmetics, etc. It's bizarre.

this is not the average social media user. the problem is addiction, not doing surgery to yourself. if social media was banned or age gated you would have to ban wikipedia next as its also very easy to get addicted to doing a tree traversal of interesting articles starting at the single one article you intended to read. also stack exchange. pardon my tone deafness to your tragedy, but this is a political issue, and your post is being used for political purposes. this is also a waste of my tax money and proof that taxation is theft. if i was a parent i would just be a good parent like my parents and slap my kids if they get addicted to upvoting shit on social media just as i would slap them if they get addicted to watching tv, playing arcade games (since i would provide them with real games and not gacha shit, the former which still had the addiction problem and the exact same dumb discussions in the 90s)

hes actually trying to say, "that's stupid". HN and reddit would be so much easier if negative posting were allowed.

your argument is dumb too, it doesn't even deserve acknowledgment, but we are little babies here and have to politely explain to everyone why they're wrong, to the point that the insane people just always win and get their dumb ideas into law because nobody cares anymore and are tired of explaining common sense over and over. having safety controls on hardware is not anything remotely equivalent to the hypothetical problem the article pitches. there is not any world where regulating social media makes sense, and i say this as someone who has never used social media in my life. the entire issue at hand here is like a bear shitting in the woods and someone happens to step on it once in a thousand years, almost none of these so called people who get addicted to social media would have any better off chance at life without it, they would just get addicted to one of the millions of other things one can get addicted to. the remaining one in a million people who actually had their life ruined by social media is like the bear shitting in the woods, its just life.

> It's really not that simple

except it is, because law is dumb, stupid, and slow-witted. if you ban facebook specifically, the next day it will think that means mailing lists should also be banned. btw ive witnessed lots of mailing list and then web forum addicted deadbeats before social media came out but whatever

the legal solution is nothing (i realize not all of you have asked for the legal solution yet but thats essentially the only point of this thread that is brought up routinely on places like HN)

teh fact that every techie and his mom seems to think the law will work out in his favor when it backfires each time (or they just ignores that downsides) is no different than how people keep thinking you can put a web server in every embedded device and they oh so surprisingly have the same RCE vulns as the 90s, every single time.

> We are now 12 years into a public health emergency that began around 2012

yes, yes, and porn is also a health epidemic, and so was covid (yes it was, only technically). so what? until you roll out new laws in reaction to this "problem", it doesn't exist as far as i'm concerned. i don't care that you have a large body of proof for it, i don't have time to read that. and when you make the laws they will be bullshit and not even solve the problem which may or may not exist. you are all redditors.

Re:Porn restrictions are leading to a VPN boom on Saturday April 06, 2024 @06:12PM (#39956116)
this new porn legislation is the most irrational cancerous fear mongering sheep bullshit i've head of in my life. fuck your stupid children, stop wasting my tax money, and stop making laws based on a completely invalid platform (the web) which wont exist in 10 years. if youre a conservative in tech you should jump off a bridge just as much as a liberal. this is coming from someone who fucking hates garbage websites like pornhub too.

> hurr durr my child has internet access its too easy for him to find porn

you had the option to take away his internet bullshit long before making new legislation and setting bad precedents. please fucking kill yourself. and you have no idea what youre talking about too, legally constraining one or two websites changes nothing in a practical perspective, your child is still finding porn. you are an irresponsible piece of shit who values fucking over humanity over a slight inconvenience of your kid not being in the cool club (if he didnt have a phone).

you have the same energy as some dweeb boomer who puts cameras on his front door and lets amazon have a global CCTV of every city in the world (what could ever go wrong), just to prevent a break in that would have never happened in the first place. you security theater buying loser

Re:Anatomy of a credit card rewards program on Friday April 05, 2024 @08:35PM (#39948931)
> One of them is designing roleplaying games

credit cards, and especially points programs, just are roleplaying games and thats all you need to know, just never use them ever.

correct, someone says something right for once. also vehicle theft will happen no matter what since they have physical access to your vehicle. scammy, scummy, corporate pitches like "you just press this button and it opens for you" with zero research on how to implement that securely (even thought it was known in the 70s), which just make the hacker be able to press a button and open it, are not anyone's problem aside from the clout chasing consumer "who doesn't have time" to research any "sophisticated tech" he buys, and the corporation. consumers should know by now that "smart tech" = a teenager can hack it.
Re:Keep your phone number private with Signal usernames on Wednesday February 21, 2024 @08:55AM (#39453816)
i didn't get why any phone number is involved when this software was released, and now it's gone. i safely avoided even bothering to learn of whatever false conundrum these San Fransisco, Twitter scene people had in mind.
Re:Wyze security incident update on Monday February 19, 2024 @10:56AM (#39431151)
connected cameras have been easily hackable circa 2001 and this isnt changing any time soon especially not with node.js smartcrap
Re:Sora: Creating video from text on Friday February 16, 2024 @06:30PM (#39404440)
right, we all new AI would be closer to realization in 2020. of course the first one to do it is some complete sellout asshole, affirming hateful rhetoric like "we have to make thing safe", which is just thinly veiled pro police state sentiment. every single thing you can come up with why this is "unsafe" is just police state mentality.

"porn without consent" - thought crime

"too much porn of whatever you dream of" - yes, conservatives (50% of USA) actually think this is a problem

"spam" - advancing the closed garden model email is heading towards. soon you will simply need government id to make email even though there are plenty of alternative ways to do communication aside from email which was already considered insecure and a bad protocol in 2000. this has nothing to do with AI but they are still acknowledging this absurdity by framing AI as the enabler of that.

"automated social engineering" - just weaponizing the ignorance the bad thought leaders of the industry left us. instead of giving us proper authentication methods, we still have "just send my photo id to these 33 companies, which will ask for it in random ways we dont expect and just have to trust them"

"copyright" - literally not a problem, almost nothing "protected" by copyright matters and the law is just used by aggressive capitalists to shove their products down everyone's throat

"ICBMs being automatically hacked and launched at people" - just stop being bad government and hiring completely uncredible people to implement every mission critical control system while hooking it up to the internet

"racist bias" (or whatever) - this is the dumbest fucking thing i've ever heard of

this website is a perfect snapshot of why tech sucks so hard. its dressed up like cinematic film using a ton of js libs and css hacks or god knows so it can only be viewed smoothly on the latest computer hardware. only on one of the big 3 browsers that each had a trillion man hours of pointless iterations driven by digital graphics marketing companies. and on top of that they have a nice professional tone made by $300K/year PR people. please, sincerely, fuck off.

Re:Michael Bluejay's Saving Electricity on Saturday February 10, 2024 @02:41PM (#39329515)
you live in a bubble on the web.

LEDs - flicker, CRI, incompatible dimmers and/or dc converters. $50USD min price per bulb if you want anything near quality (of just a $1 incandescent bulb). the problem is the price of power, not the product.

"modern" dishwashers - after 1995 or so they don't actually clean your dishes. i used 20. i clean the filter / chopper regularly. i rinse off my dishes which are already barely soiled to begin with since i don't eat fast food. no matter how you place the dishes, there will always be a few with food stuck on them. fucking disgusting.

ac - it exists for a reason, you are more productive as an obvious corollary to being less lethargic. although it is true that lots of people are oblivious and don't just open the window on a nice day. you also need it to prevent moisture build up (to avoid rotting wood, mold) and stagnant air. while we're at it we have to talk about heating: i don't know the numbers but i'd say in winter you need it at 16C-17C at all times to avoid mold / condensation / rotting wood.

front loading laundry - i used 5. they mold in the front after 1 use. you have to leave the door open all the time, not even for just half an hour. and you need a fan in front of it. they construe the fact that it uses "almost no water" as "it's using super advanced methods". given the general incompetence of the tech industry, one with common sense takes this as "it doesn't clean your laundry". the gasket on the front of each and every single one has a unique and overpowering smell if you go anywhere near it that feels like breathing in knockout gas, and it doesn't go away even years after purchase. to put it into perspective, it's like 10x stronger than what comes out of annoying kids' vapes.

clothes line - your clothes will have germs (the dryer is the part that kills them, not the washer) and mold on days when it's not hot and arid.

you require a cell phone to do basic banking stuff and security theater that has to be replaced every 4 years at the bare minimum due to bitrot. and requires being smart for covid or school shit. it still takes 30 sec to load a web page that uses 100% cpu. you're not allowed to talk about being efficient, stop making me pay more for what little tech actually works.

> And if you really want to lessen your carbon footprint, you'll also want to look into eating less meat and driving less.

that's great, i do both of those things more than you, from the looks of your profile picture. now stop charging me (you are responsible as a voter) for the modern versions of basic human needs.

Re:Lag in Cybertruck's drive-by-wire system on Saturday February 10, 2024 @02:18PM (#39329321)
you appeal to authority and yet every "good" company has made this same mistake and only gets worse since the digital era.
Re:Lag in Cybertruck's drive-by-wire system on Saturday February 10, 2024 @01:14PM (#39328697)
i would definitely not engineer my system on what truckers' opinion is

this topic has been beaten to death throughout all aspects of computing, it always goes like this:

1. someone complains about input lag, because he feels it and it's annoying and prohibitive

2. other people who are slow and / or have misconfigured systems with such worse problems that they don't notice this disagree

3. 7 years later its proven to a wider audience that the lag is there and all the people who said it was there were right

4. the company sells an all new "low input lag" model (which doesn't actually require any money to implement, aside from a few hours dev time)

Re:Lag in Cybertruck's drive-by-wire system on Saturday February 10, 2024 @01:11PM (#39328649)
input lag is usually just a bug / because the devs were lazy. this has to be a joke.
Re:Lag in Cybertruck's drive-by-wire system on Saturday February 10, 2024 @01:09PM (#39328622)
here it is, folks. we finally have cars with the shit design where you just shove random components that add lag in because you're too lazy / uneducated to understand your 'stack' or well-established science (such as the fact that input lag matters and the more of it you have, the more mistakes the human makes, even when the total lag is below the human 'reaction time'). the market is driven by who has the most clout, regardless of whether your product is sound. this is also why i don't use drive-by-wire, it was just obvious that they'll eventually mess this up (even if this tweet is not accurate).
the software bugged and said they commited fraud, thats still half the problem and is a good time to repeat "stop putting software in things". we still need 40 more years before software "engineers" grow up and start doing things even anything near correctly. the other half of the problem is those people who just want tech for every problem. they just want shiny buttons, regardless of if they work. i dont know why but everything that these companies like fujitsu, hp, dell, acer, asus, sony, samsung, etc are all complete shit. i would vote to remove the government if they told me theyre going to start using some fujitsu product to decide who should go to jail. i just noticed a $6000 vent hood where if you adjust the fan speed you cant toggle the light within the next few seconds. even lay people understand that there is no reason for this aside from what could only be reasonably understood as absolute shit engineering.

the problem is people asking idiots who cant program even a simple button, to program serious enterprise, government, and military systems.

Older »