drpossum

21 ms·

301.
by drpossum 2y ago
The bug only affects Windows machines
302.
by drpossum 2y ago
https://news.ycombinator.com/newsguidelines.html > Please don't use HN primarily for promotion. It's ok to post your own stuff part of the time, but the primary use of the site should be for curiosity. So, expl
303.
by drpossum 2y ago
Stop spamming your site repeatedly. You've done at least three of these in the last few hours and five in the last two days
304.
by drpossum 2y ago
I've unlearned over my years that trying to come up with what malicious actors can do under what scenarios and conditions isn't worth the effort, because they are many, know more than me, have different goals than me, and I am one
305.
by drpossum 2y ago
The case here was just injecting a domain. There's another thread for this post pointing out you would also need to inject a malicious root cert for https traffic, which is correct, but not impossible (and given some bad/lazy pra
306.
by drpossum 2y ago
Good thing all networks everyone connects to are always known by that user to be secure
307.
by drpossum 2y ago
I did one on my local network and didn't fill out anything
308.
by drpossum 2y ago
Or anyone who controls your DNS resolution which has a number of paths (for example a local hosts file, possibly a router, changing your config or how you get your config to a malicious DNS server, etc)
309.
by drpossum 2y ago
I like this discussion around problems that are hard or unsuited for TDD. I've tried to tackle numerical problems like an iterative root solver (ultimately via a well-known algorithm like Newton's method) and it felt awkward. Th
310.
by drpossum 2y ago
I argue this should have been the link posted rather than to some blog that says very little other than to host the link
311.
by drpossum 2y ago
I use pass for all my TOTP and keep my passwords separate with KeepassXC. It works really well. I agree and wish for Calendar to use much better integration
312.
by drpossum 2y ago
This is an egregiously bad clickbait headline that implies SpaceX is building something nefarious. This is for a planned end-of-life deorbit in several years and technically it is not the craft that will destroy it (that's the reentry
313.
by drpossum 2y ago
I think any given day here you can find at least one article getting attention that, no, it has not always been like that and has been getting worse. The most obvious being the Recall debacle. That is in my memory the first time outrage g
314.
by drpossum 2y ago
> Learning how to store passwords or add OAuth2 to your toy web site is not fun Hard disagree. OAuth2 is a neat technology and every personal thunk you run across or find yourself asking "why the heck do I need to do this? why can&
315.
by drpossum 2y ago
This is a good answer and one I've put into practice successfully more than once. Automated tests are very key here.
316.
by drpossum 2y ago
> Even Linux isn't safe anymore Linux is a kernel and everything else you see is a product of whatever distro you choose to use. Linux is literally as safe as the user wants it to be
317.
by drpossum 2y ago
It's not market value, it's the forces in the middle skimming off the top as much as they want and then using that to enforce their position as a de facto monopoly. Did you even read the article on how much the market is paying a
318.
by drpossum 2y ago
A functional society and government that values creative workers would provide protections against this kind of effective monopoly.
319.
by drpossum 2y ago
I was trying to coerce gpt-4o to talk about the gcd and lcm in terms of sets of the prime factors where the product is the union of the sets, gcd is the intersection, and the lcm is the union less the intersection and it kept telling me I w
320.
by drpossum 2y ago
https://archive.fo/SgCxt
321.
by drpossum 2y ago
I'm deeply against advertising and the harms that social media cause, but if you just removed ads entirely it would not fix the problem (even if you could because where do you draw the line on what "influencers" do). Unless y
322.
by drpossum 2y ago
You say that like US states didn't have boundaries cut or decisions on when states were admitted to affect elections. For example: Missouri Compromise, Kansas Nebraska Act, Nevada, Utah, and the Dakotas' existence, Washington DC
323.
by drpossum 2y ago
You should back up your claim of "they have all the keys", because for things like email and file contents they claim they cannot decrypt them because they do not have those keys (which you have said they do). I believe it was s
324.
by drpossum 2y ago
https://archive.fo/UKuNX
325.
by drpossum 2y ago
Why is this notable? It was flagged as fixed years ago
326.
by drpossum 2y ago
I am entitled to ad-free Youtube because I pay them to not see ads.
327.
by drpossum 2y ago
I genuinely think Proton as a company would prefer to cease to exist rather than offer insecure products. In fact there's a lot of offerings I would use (and pay more for) and they could make but choose not to (like a calendar that is
328.
by drpossum 2y ago
You post this like people are doing some mass exodus
329.
by drpossum 2y ago
I have seen this hyped several times over the last week with little traction and engagement.
330.
by drpossum 2y ago
No, that's not the point. The point is neither of those companies could have the same values you have for your data and you are then leaving the security of that data in the hands of someone else. Even Apple, who is better than mo

More ›