9 ms·

Ask HN: What tech advice are you giving to those around you for 2023?

• birdymcbird 4y ago
  If you consume online content that makes you angry at one group or another group, the reality of it likely isn’t so black and white. You’re likely being fed a narrative to shape your opinion.
  • skyyler 4y ago
    I've been trying to tell people about this since the lead-up to the 2016 election. It's lost me some friendships, which is sad, but I'm not going to stop.
    • markus_zhang 4y ago
      Yup, and TBH it's OK to lose friends who ignore this rule.
  • pydry 4y ago
    I dont think the people who most need to hear this message are receptive to it.
  • c7DJTLrn 4y ago
    Reddit front page is a good example. Pure propaganda.
  • kgwxd 4y ago
    Including the narrative that some objectively bad groups aren't as bad as some people say they are.
• heliophobicdude 4y ago
  If you grant an application access to your contacts, you are sharing the private data, perhaps PII, of others.
  • worldsavior 4y ago
    While they share mine.
• roey2009 4y ago
  If you question whether your electronic device is compromised, it probably is. If you question if your electronic device has exploitable vurnabilities, the answer is absolutely yes. Don't store private info on your electronics, if you can't handle them leaking. (Nude photos, bank credentials) Commercial VPNs are not as useful and secure as you think. I personally cover the front facing cameras on my laptop and mobile, on the assumption that if someone were to gain access to my phone, that's the first thing they would look at. Don't connect to random public WiFi. If you do, don't login to any online account on it, or send confidential information.
  • leftcenterright 4y ago
    > Don't connect to random public WiFi. If you do, don't login to any online account on it, or send confidential information. While this is good advice in general, I have seen that people do end up having to connect to public WiFis in general (airports, traveling in a foreign country, lost LTE connections). I advise people never to accept "Insecure connection" warnings in browsers, with TLS in place and HSTS, practically the risk is very low.
    • SeriousM 4y ago
      MitM on android works very well if you just use an app without a browser view. Android don't tell you that the certificate was changed and the app developer usually don't care to pin the certificate or check for the issuer. When using a random wifi, use a vpn just to be sure.
      • ericpauley 4y ago
        Which certificate authority does this new cert chain from? No reputable authority will issue valid certs for public WiFi MitM.
        • SeriousM 4y ago
          People can't distinguish the official wifi from a rouge one if it "sounds" official. Just go to a crowded place, name your wifi "Joes Coffee Shop" and people will connect to it in no time.
• leftcenterright 4y ago
  - Use 2fa everywhere - Showed them how to use ublock origin, they love it - If you have to enter your PII and the site/service doesn't really need it, try to not give them correct information (fictitious date-of-births for example work on a lot of sites which honestly don't really need it but do ask for it to harvest data or do age verification etc.) - Take a phishing quiz to be aware of what's out there: https://phishingquiz.withgoogle.com/ https://phishingquiz.withgoogle.com/ - Request data deletion under GDPR (if applicable) for sites which you no longer use but still have accounts on
• wildrhythms 4y ago
  Use the unsubscribe links or 'mark as spam' feature in your emails. It takes an extra few seconds, but you'll be happy when your inbox only contains things that matter to you.
  • goralph 4y ago
    I have a Gmail filter for email bodies containing “Unsubscribe”. Works wonders
• nonoesp 4y ago
  Learn how to encrypt and decrypt sensitive data
• lloydatkinson 4y ago
  Disable browser push notifications or do it for them https://www.lloydatkinson.net/posts/2022/consider-disabling-browser-push-notifications-on-family-and-friends-devices/ https://www.lloydatkinson.net/posts/2022/consider-disabling-...
  • toastal 4y ago
    That's over the top. Why? Because keeping applications sandboxed and adblocked inside the browser is better than downloading some proprietary app (doesn't apply to FOSS clients). Some of those applications, you'll definitely want notifications, like the web app for work chat, etc. What you don't want to do is discourage using the browser as a platform, but you definitely should proceed with caution for enabling those notifications rather than outright disabling them.
    • lloydatkinson 4y ago
      If you’d read the article you’d see that I specifically call out disabling browser push notifications, not web sockets or server sent events.
      • toastal 4y ago
        I know exactly what the Push API is--and I resent that iOS won't enable it making PWAs not really work for a lot of use cases because developers need notifications. I currently, and purposefully, get push notifications from Element, Mattermost, Slack, and (for the time being while traffic has been low) replies on Mastodon--when I was using a web client for email, I did there as well. I think project managers would be pretty mad if I wasn't responding to messages, as much as I'd be angry if they required that I install some Electron app with tracking onto my system, where I can't make modifications via userScripts and userStyles, just to get notified (or an inbox full of "You have 100 unread message on ACMEChat from 1 hour ago"). > I have never seen them used for any legitimate or useful purpose > They take advantage of non-technical users and frighten them > Non-technical users habitually click “OK” [..] in any dialog The article is written in a way that's myopic, belittling, and alarmist--and the author, you presumably, should think about this tone when there's a good reason browser vendors agreed on a standard included the API to solve a real-world need. Communicating time-sensitive information is a valid use case--especially with PWAs where the web is the platform. This very important to Linux, BSD, KaiOS, Capyloon, etc. users where developers aren't making their application source available, but users can run a properly built web app, and it can also be good for the developer that doesn't have the time and budget to build native apps for all platforms or users that don't wish to install an "app" for everything.
• solardev 4y ago
  Stop using so much tech and get outside more. Let go of the FOMO and you'll be much happier. Delete all your social media. (I should listen to this advice too).
  • agumonkey 4y ago
    I did that to an extent but depending on the weather and moods (sometimes both) I get FOMOing again. There was a documentary about a solitary girl shepherd in the mountains. Most things in her life were source of life and liveliness. Nature, hill sights, calm, animals.. the more she did, the happier she got. So even if her life looks poor or lacking .. its quite the opposite.
    • Obscurity4340 4y ago
      Name of doc please?
      • agumonkey 4y ago
        It's a 20min youtube video in french https://www.youtube.com/watch?v=GLqKmkWQlPk https://www.youtube.com/watch?v=GLqKmkWQlPk Hopefully you'll get the gist of how she feels.
        • solardev 4y ago
          Seems like your typical instagram vanlifer... how did she make a living to afford all that gear? And I guess being French she at least has socialized healthcare and welfare to fall back on... harder for an American to do, especially later in life :( Not that I don't admire her -- I wish MORE people could live like that!
  • markus_zhang 4y ago
    I finally deleted Twitter a few days ago. I don't miss it at all. FB is going to be the next. But now HN is the new hottie for me :D
• karp773 4y ago
  Do not use Telegram. It is an FSB (ex-KGB) operation.
  • whydat_whodat 4y ago
    Thanks! Very interesting. I wasn't aware of this. Looks like there's a discussion here: "Telegram Cooperates with FSB (Rus)" https://news.ycombinator.com/item?id=30661335 https://news.ycombinator.com/item?id=30661335 I'll research this more.
• whydat_whodat 4y ago
  A couple bits of advice I've recently given are focused on IT-skills knowledge sources. - Explore KodeKloud.com as a Udemy alternative, especially to learn more about general internet infrastructure (especially if you lack a CS or CIS degree, as I do), cloud providers, etc. (From what I've read it's more recently updated than ACloudGuru) - Explore Roadmap.sh for a roadmap of knowledge necessary to become a web app, infrastructure, or phone app engineer.
  • monetus 4y ago
    Thank you for sharing links.
• nathanaldensr 4y ago
  The advice I'm giving people is to avoid tech as much as possible--to simplify one's life. Tech has long ago left the realm of useful tool and is instead being used to spy on people, foment and continue addiction, manipulate our brains' chemistry, and, in general, to do evil. I'm not saying all tech is evil, but a sufficient amount of it is for me to try and eliminate it from my life as much as possible. You should see my kids' behavior when grounding them and banning video games; they are addicts going through withdrawal. Source: 28 years in software development and adjacent roles.
  • xpe 4y ago
    Many people find it useful to go cold turkey for a while. Many of those end up finding a better balance afterwards. I’d suggest that mindfulness is a goal to strive for. If you use a product and you cannot stop and reflect before consuming more media or replying to another post, then this is a pretty good sign that the product is carefully designed to manipulate you.
• CharlesW 4y ago
  My single, multi-step recommendation is to commit to improving password hygiene. 1. Use a good¹ password manager for everything. 2. Upgrade at least critical logins to use 2FA, which becomes much easier when using a password manager. 3. Use password manager features that allow you to detect weak and compromised passwords, and fix those. ¹ I'm recommending 1Password to less-technical friends/relatives, and 1Password or Bitwarden to tech-savvier folks.
  • kevdev 4y ago
    Why would you recommend 1Password over Bitwarden for less technical folks? Asking because I am about to setup a family plan on Bitwarden for me and my less-technical wife. I already use Bitwarden and have for some time, so seeing if there may be a compelling reason for us to go with 1Password instead.
    • CharlesW 4y ago
      > Why would you recommend 1Password over Bitwarden for less technical folks? Primarily out of personal unfamiliarity with Bitwarden, although I feel safe recommending it to certain users because of its reputation with HN users. Because 1Password is my (and my family's) daily driver, it's easier for me when people who are new to password managers invariably come back to me for help. Other considerations: My impression from reading "vs" reviews is that 1Password edges out Bitwarden in terms of user experience and features. Also, I do (possibly unfairly) assume that Bitwarden is focused more on corporate IT and technical users based on the availability of self-hosting, etc.
• throwaway378037 4y ago
  Stop using LastPass
• fsflover 4y ago
  * Use Linux (and I install it for them) * Use Firefox (same) * Use PrivacyBadger Firefox plugin (same) Works like a charm (fortunately they do not require any Windows-specific apps)
  • glasss 4y ago
    Which distro do you recommend?
    • monetus 4y ago
      Not the op, but having done this a few times now, I've had the best success with manjaro - I've seen others say elementary is best, but I have hesitations
      • jonas-w 4y ago
        Just leaving my two cents here https://news.ycombinator.com/item?id=30776698 https://news.ycombinator.com/item?id=30776698 https://news.ycombinator.com/item?id=33173531 https://news.ycombinator.com/item?id=33173531 (Elementary is based on Ubuntu) https://news.ycombinator.com/item?id=30611748 https://news.ycombinator.com/item?id=30611748 https://news.ycombinator.com/item?id=32503090 https://news.ycombinator.com/item?id=32503090 I wouldn't recommend manjaro nor elementary. If you want some of the ArchLinux experience (like Manjaro promises) try EndeavourOS or Garuda Linux. (Have tried them both and didn't hear much negative things about them) If you just want to get going with linux without much hassle and just want to explore everything i'd recommend linux mint (it is also based on ubuntu but only inherits the good stuff and for example doesn't use snaps). It has many tools that help you if you don't want to do everything in the terminal (although i'd recommend to get warm with the terminal). And IMO it just has a good out of the box eperience. (Haven't used it myself but have set it up for some non tech people who were only familiar with windows or macos and they learned to use it relatively fast) I personally use plain Archlinux and wouldn't want to trade it for something else, but the pure archlinux experience may not be what you want and is definitely not for everyone.
        • 4y ago
• 1270018080 4y ago
  - Switch off of Chrome to Firefox if you can and install ublock origin. - Don't do anything crypto/blockchain related (this is more of an annual reminder). - Stop getting news from Facebook, it's melting your brain. - Set up 2fa on everything you can.
• jesuscript 4y ago
  Print back up codes for iCloud/gmail. Get a small bank lockbox and put it there. And stop giving data to these companies. It may not matter in the broader society since the average person won’t stop, but we devs can stop giving data to things like copilot. Switch off GitHub. Use Brave or Firefox.
  • askiiart 4y ago
    Or better yet, use Librewolf
• insomniacity 4y ago
  De-Google your life. Perhaps Search is fine - but absolutely remove all dependency on Gmail or Google Accounts.
  • culi 4y ago
    same with Twitter. Elon's been explicit about the need to sell users' data more. I'd update your privacy settings at the very least
    • andrei_says_ 4y ago
      Haven’t used twitter, Reddit, Facebook, Instagram or TikTok in a month … love my life.
  • deleted 4y ago
    [deleted]
• mimiminimi 4y ago
  If you value your privacy, don't own/use a mobile phone.
• culi 4y ago
  We should make a browser extension that encapsulates all this advice. Or at least the ones relevant to the way you use the web. Much easier to get your non-tech savvy family install an extension that will continuously help them (and that we can continuously update) rather than just giving them a wall of advice they'll forget
• devinegan 4y ago
  If you are in the Apple ecosystem of products update all your devices and turn “Advanced Data Protection” on.
• seydor 4y ago
  download their files and delete them from cloud systems. Not only have all passwords been leaked by now, but there is a vicious downturn coming in which crime will increase in magnitude and sophistication. This is time to decentralize Don't download apps - use web versions
• plaguepilled 4y ago
  Use FOSS whenever you can. Use proprietary blobs if you're "just trying to get it to work", and give yourself the grace to do things piecemeal while you learn. If you can stomach it, delete your tiktok, twitter, and Facebook. Learn about your country's data laws. Get outside more, preferably with exercise (this is a big one).
• shsteimer_1 4y ago
  Ignore crypto. 98% of it is bullshit and fraud, and you (and I) aren’t smart enough to pick out the 2% that isn’t.
• eternityforest 4y ago
  * The algorithm likes it when you're angry or sad or anything that makes you engage more. Your idea of what "everyone" is into these days is probably what the algorithm tells you. * 2 Factor authentication. Always. Ignore anyone who says it's useless. It's just as important than strong passwords if your goal is to keep out random script kiddies. * Don't buy anything linked to a cloud account that doesn't work without it. Unless it's like, really cheap, I can't blame you for that even though it's a minor environmental concern. * Use Bitwarden to manage your passwords. Let it generate them for you. Use 2FA on your vault. * Stay away from wannabe Apple companies selling some expensive luxury thing made of delicate real glass that needs their subscription to work and is missing 90% of the features everyone else has. You probably don't need whatever Juicero-alike they invent next or some expensive headphones with no bluetooth or noise canceling. * Look for standards and ecosystems everyone else uses. Matter, USB-C, MicroSD cards, etc. Avoid things that do everything different for no reason. * Back. Everything. Up. Do NOT use anything that makes that hard. Use. Backups. * If you have to ask, it's probably spying. You decide whether you care or not for yourself. * If it's not spying, you're probably using it to talk to other people who do use spy devices, like me. * FOSS is often good now. You probably don't need to pay for software.
  • markus_zhang 4y ago
    Regarding backups, I found Google Photo makes it harder. I decided to just use harddisks for that.
    • eternityforest 4y ago
      Yeah, I think in theory I would say everyone should get a consumer level NAS with redundant disks, plus SyncThing between devices for important small stuff, and some kind of cloud solution for offsite. But NASes are more than I want to spend and I've never used one, so I can't really suggest something I haven't tried. I just do manual incrementals to an external drive, plus of course GitHub for all software related stuff.
      • markus_zhang 4y ago
• markus_zhang 4y ago
  Just curious, regarding privacy in general, are the new iPhones still better than the Android phones?
• toastal 4y ago
  • Ditch proprietary platforms for communication (Facebook, Twitter, Instagram, TikTok WhatsApp, LINE, Discord, Telegram). Consider XMPP with OMEMO, Matrix, IRC, Mastodon, Discourse, etc. • Ditch proprietary code forges (GitHub) and offer at a minimum an email to send patches for folks not interested in creating accounts on your platform. • Enable 2FA, and email support and bitch when SMS and TOTP is only supported through a proprietary app. Buy a hardware token if you can afford it and it's not a massive inconvenience (and message support to add that too). • When meeting new contacts, share a VCF file so we don't end up in a situation where the only way to contact you is a closed platform that now imploded (Twitter) where email is the lowest common denominator • Add or reenable your Atom/RSS feed for your content. Consider following others to break out of algorithms. Bonus: • Give Linux an honest go this year (or BSD, OpenIndiana, or other 'weird' FOSS option)
• gardenhedge 4y ago
  * use mfa * don't use tiktok
• cheri9 4y ago
  [dead]
• thiht 4y ago
  - Block ads: uBlock Origin on desktop or Firefox Android, AdGuard on iOS, SmartTubeNext on Android TV - Use a password manager, just maybe not LastPass - Avoid Google products
• Fire-Dragon-DoL 4y ago
  Drop Lastpass