dns_snek

21 ms·

271.
by dns_snek 8mo ago
> Firewalls don't replace OS permissions, OS permissions don't replace encryption Of course but the crucial difference is that these operate using an allow list, not a block list. If I extend the analogy, if my OS required me t
272.
by dns_snek 8mo ago
This is not criticism of your project specifically, but a question for all tools in this space: What's stopping your agent from overwriting an arbitrary source file (e.g. index.js) with arbitrary code and running it? A rogue agent doe
273.
by dns_snek 8mo ago
> You need to understand, there was good period of peace between Israel & Palestine until Oct 7. What a disgusting and patronizing rewriting of history. This "peace" was enforced by ongoing occupation of Palestine and abuse
274.
by dns_snek 8mo ago
> And the activists are now against it, because the big guys are doing it. The activists are against it because the big guys are exploiting us small guys, again. Nobody would give a shit if Meta was just torrenting Nintendo's IP and
275.
by dns_snek 8mo ago
The point is, that's not the typical experience and people like that can be replaced. We don't willingly bring people like that on our teams, and we certainly don't aim to replace entire teams with clones of this terrible cow
276.
by dns_snek 8mo ago
> Offense is still the best defense. That's a psychotic thing to say about starting new wars and aiding genocides . The only thing that's being defended are the profits of western oligarchs.
277.
by dns_snek 8mo ago
Full system access = it's not sandboxed, it has access to anything that the user can access, and it seems to use systemd user units which don't require root access.
278.
by dns_snek 8mo ago
Maybe this is a social experiment and we're the test subjects.
279.
by dns_snek 8mo ago
> This is a great article. It's why I roll my eyes when someone asks "Show me the data" or the classic "Sources please." That doesn't follow. Yes, there are going to be multiple interpretations of the data,
280.
by dns_snek 8mo ago
> the choice to stay alive shows they see some inherent value in the state of being alive. Eh, you don't choose to live any more than you choose to breathe. Even if you don't want to live anymore you can't simply "cho
281.
by dns_snek 8mo ago
KYC? I'm talking about standard 2FA methods like Time-based OTP codes.
282.
by dns_snek 8mo ago
I don't know what you mean by application logic being exposed client-side. To change the content on the website, nuke articles, and propagate the malicious JS code you need to hijack privileged users' credentials and use them to t
283.
by dns_snek 8mo ago
If they required 2FA every time you wanted to modify JS then it couldn't propagate automatically. Just requiring 2FA when you first log in wouldn't help, of course.
284.
by dns_snek 8mo ago
The amount of javascript is really beside the point here. The problem is that privileged users can easily edit the code without strong 2FA, allowing automatic propagation.
285.
by dns_snek 8mo ago
You say you understand that they're under no obligation to do anything, you already knew their reasoning, yet you still wrote a comment [seemingly] complaining about it. Was there a different purpose to it?
286.
by dns_snek 8mo ago
Good luck with that. Of all the things people don't really care about, I think that might be at the far end of the list. Certification authentication is neat technology in principle, I use it internally, but in my experience anyone who
287.
by dns_snek 8mo ago
That's true. Do those caveats from that older comment still apply? Will apps be able to tell that location is being spoofed when using location scopes?
288.
by dns_snek 8mo ago
That's doesn't seem to be a thing [yet]. All I managed to find was this comment from the developer which talks about it (CTRL+F, "location"): https://news.ycombinator.com/item?id=42536302
289.
by dns_snek 8mo ago
If 25 people have 4 credit cards each and 75 people have none, then we have 1 card/capita, but only 25% of the population uses credit cards. The median seems to be 0.25 cards/capita. Your own source already ~agrees that they'
290.
by dns_snek 8mo ago
I use 5 different banking apps and 3 other financial/investment apps and they all work fine, you should check compatibility with yours [1]. And to be precise, contactless payments work but not through Google Pay - I've heard that
291.
by dns_snek 8mo ago
That's fair, this would still be a valuable development even if Motorola doesn't end up shipping devices with GrapheneOS preinstalled, but if they did I think there's a lot of potential for them to enter the mainstream. A d
292.
by dns_snek 8mo ago
Why are we degoogling, for what purpose? I couldn't care less about giving them what likely amounts to ~10€ of margin per year on the hardware sale. What I care about is not giving them data which is worth a lot more than that, and to
293.
by dns_snek 8mo ago
I looked into this and it seems like Motorola is coming up with a contrived interpretation of the ecodesign regulation (EU reg. 2023/1670, annex II, "Design for reliability"). Specifically they seem to be interpreting this to
294.
by dns_snek 8mo ago
GOS is degoogled in all the ways that I care about - it's about the data they can gather. Among all the smartphone options that I consider usable day to day (leaving only Android and iOS at the moment), GOS is the most private and secu
295.
by dns_snek 8mo ago
It's not too late, Samsung is one of the most closed Android OEMs and they're going in the wrong direction. They just removed most of the recovery menu. [1] Google is dead set on taking away our right to run software of our choi
296.
by dns_snek 8mo ago
> I'm not American, I'm not even Trumpist so your ad-hominem falls flat. You don't have to be American to be a fascist-sympathizer, which you clearly are, since you label opposition to totalitarian methods as "the far
297.
by dns_snek 8mo ago
> Immigration can totally be a problem, and voters in the western world increasingly ask their leaders to address it. Stop equivocating. I didn't say that opposing immigration = fascism, I said that identifying marginalized groups,
298.
by dns_snek 8mo ago
> The best I think is to refer to the historical italian fascist government, to understand it. Sure, why don't we: - leader with a cult of personality - an idealized story of the prosperous past (make america great again ) - pinnin
299.
by dns_snek 8mo ago
> The revolution will be live-streamed I disagree with you on this. The revolution will never be live-streamed because the ability to do so is gated by the same people whom the revolution seeks to overthrow. What's being live-stream
300.
by dns_snek 8mo ago
> That same Tim Cook stood up to the FBI and refused to participate in breaking into phones for them I hope you have more evidence for this than just that press release. As far as I'm concerned that was nothing more than a stunt bec

More ›