Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dtx1
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
68 ms
·
781.
▲
by
dtx1
6y ago
> Your scientists were so preoccupied with whether or not they could, they didn’t stop to think if they should.
782.
▲
by
dtx1
6y ago
Do they encrypt the data end-to-end? Are they private and privacy friendly? If the answer is no, then they don't message 'just fine' but are an obvious liablity.
783.
▲
by
dtx1
6y ago
if you are a security researcher, the publicity of such a blog entry might make it worth your while
784.
▲
by
dtx1
6y ago
Depends if you are dumb enough to disclose any vulnerability without a bug bounty program without protecting your identity. There are enough horror stories out there that an anonymity-first strategy is obviously a good idea.
785.
▲
by
dtx1
6y ago
I don't get why security researchers have so much patience with companies and lawyers like this. If I did a responsible disclosure and were threatened with legal action i would do my utmost to cause as much damage to that company as hu
786.
▲
by
dtx1
6y ago
Do you mean Apps on your phone relying on SMS?
787.
▲
by
dtx1
6y ago
Jordan Peterson was right... God i hope this BS stays contained to north america...
788.
▲
by
dtx1
6y ago
That's impressive, in fact I would argue that this is as close to best-practice as you can get. I would love to read a blog post with details how you set this up!
789.
▲
by
dtx1
6y ago
> I don’t see why storing hashes of a number makes it a profile. > even if it isn't a profile as facebook might define it And this is the problem. It's a profile because you are storing information about me, without my cons
790.
▲
by
dtx1
6y ago
saving, even in hashed form, my phone number or mail address to later be able to connect me to people i already know is a shadow profile even if it isn't a profile as facebook might define it. Anyone can easily verify this by adding th
791.
▲
YouTube Algorithm Perfectly Balanced with Exploits
(youtube.com)
2 points
by
dtx1
6y ago
|
0 comments
792.
▲
by
dtx1
6y ago
That's such a nice response that i just want to thank you for it. Thank you, it really made my day! I'm just depressed from being stuck inside due to covid for such a long time, maybe that made me lose hope there..
793.
▲
by
dtx1
6y ago
I wish i could show you what lawyers in germany did with their lawyer-specfic mail service. I don't have any non-german sources but they are a security nightmare and e2e encryption was deemed "unnecessary". Even vulnerable gr
794.
▲
by
dtx1
6y ago
They should but rarely do and even if a tiny victory like GDPR is won, it's immediately dismantled by big corps. Facebook hasn't been fined any significant amount yet it violates GDPR every day. As it stands right now, the average
795.
▲
by
dtx1
6y ago
Yeah, i'm tired and hangry. you're right. I'm just happy SOMEONE understood my argument and saw the same issues i did
796.
▲
by
dtx1
6y ago
> I saw this at eBay and PayPal a few times, where the user rejected a free security token despite having been scammed multiple times. People here downvote me for this but this is the issue. Those people cannot be helped and they don
797.
▲
by
dtx1
6y ago
privacy isn't just encryption. Forcing users to link their phone number as an identifier like signal does is just one of the myriad of questionable choices signal has made. And with their coin based payment they just painted a large bu
798.
▲
by
dtx1
6y ago
> or unwilling to invest even the tiniest amount of effort into their privacy.
799.
▲
by
dtx1
6y ago
to prove a point here, use a browser without adblocking and other extensions like chrome for a week and look at how they are targeting you. That's what they do to anyone without the willingness to fight it with technical knowledge. And
800.
▲
by
dtx1
6y ago
the average person doesn't use signal they use phones, whatsapp and facebook. You can use the public matrix node and i can use my own node and we can talk. No setup needed. If they care they can buy a hosted matrix service package like
801.
▲
by
dtx1
6y ago
Then the reality is that those users cannot expect privacy anymore
802.
▲
by
dtx1
6y ago
> This is an unhelpful attitude, IMHO. I agree. I gave up fighting for privacy for other people because they don't care. I'm now fighting for my privacy because it's a war that the normies don't care to fight. They ne
803.
▲
by
dtx1
6y ago
Got a source for matrix group encryption issues? EDIT: From their [FAQ]( https://matrix.org/faq/ ) > End-to-End Encryption is fully supported in Matrix. New rooms have encryption enabled by default, and all existing r
804.
▲
by
dtx1
6y ago
Having developed for windows phone 8, 8.1 and 10 i can say with certainty that it was bad in a plethora of ways and microsoft's constant over promising and under delivering made it worse.
805.
▲
by
dtx1
6y ago
> most people will have at least a vague idea what html and pixels are. there's no further need to dive into the details where that description is less than 100% accurate (e.g., sreen readers). I doubt very much the average person o
806.
▲
by
dtx1
6y ago
Southpark said it best when it comes to censorship of mohammed and criticism of islam: KYLE: That’s because there is no goo, Mr. Cruise. You see, I learned something today. Throughout this whole ordeal, we’ve all wanted to show things that
807.
▲
by
dtx1
6y ago
Not really. If your rendering engines does the spying for you than blocking other tracking and adware still leaves you without real privacy. Coupled with a lack of fingerprinting protection, simple content blocking may not even be enough to
808.
▲
by
dtx1
6y ago
Doesn't surprise me at all. The reality is that journalists are just that, journalists. They rarely have any relevant expertise about what they write. Coupled with strict limits on content size enforced by publishers and an audience th
809.
▲
by
dtx1
6y ago
I too have a helios4 and i like it for it's ECC Support but it has a plethora of drawbacks. * 32bit OS means maximum 16TB Partition Size * it's not fast at all. It can barely saturate a Gbit connection without any encryption using
810.
▲
by
dtx1
6y ago
What difference does it make if it's just serving static HTML?
More ›