phlo

16 ms·

121.
by phlo 11y ago
As I said, forcing companies to pay dividends was the parent poster's idea. If anything like that were to be entertained, I'm sure the forced dividends would be in relation to the corporation's profit. As for privately traded
122.
by phlo 11y ago
Either (as the parent comment proposes) force them to pay dividends. Or don't: in order to profit from the higher share price, investors either have to sell some of their shares (realizing their capital gains) or use them as collateral
123.
by phlo 11y ago
One possibility might be to charge capital gains whenever shares are traded. Then require shares to only be traded at exchanges with an agreement to report trades (or anonymously collect capital gains and send them your way, for privacy).
124.
by phlo 11y ago
Sorry, I might not have made that point clear: they wouldn't be taxed at all. Not at the corporate level, that is. As far as I can tell, money will exit corporations in three ways: 1) salary, 2) shares and 3) payments for goods/se
125.
by phlo 11y ago
Stories like this make me question if corporate tax even makes sense. However well designed, a tax code with today's complexities is going to have holes. If a savings of even one per mill may mean millions, corporations are going to sp
126.
by phlo 11y ago
On the other hand, if you can be compelled to divulge the passphrase to any encrypted container, what happens if you forget it? What happens if you happen to have a block of random-looking data? It might be an encrypted container -- or it m
127.
by phlo 11y ago
We used to have something similar in a previous workplace of mine. Doors were unlocked by touching an RFID badge to a reader and then entering a PIN. If you entered PIN+1 instead, everything worked as normal and a silent alarm was triggered
128.
by phlo 11y ago
SOFORT(.com) has built a strong market presence in Germany and is expanding throughout Europe. They basically do the same thing you are talking about: provide an easy "check-out" experience using customers' banking credential
129.
by phlo 11y ago
Reminds me of the Pinto case in the 1970s. Back then, Ford saved a couple dollars on each Pinto sold by not adding some protective parts to the fuel tanks of the vehicles. In rear-end collisions, the connection from the tank to the filler n
130.
by phlo 11y ago
> [...] JS crypto isn't going to do anything. It may have provided a little bit of extra protection in some scenarios. For example, many trojans will grab any HTTP(S) POST data from your browser. If such a trojan is not specifically
131.
by phlo 11y ago
> encrypting clientside and not decrypting serverside [...] ...will also enable anyone with the encrypted password to log in, in a sort of pass-the-hash scenario. To protect against plaintext password leaks, you'll want to run PBK
132.
by phlo 11y ago
Brilliant. Measuring how well typical users understand/implement security measures has long been overdue. Personally, I find Figure 2 (on Page 5) of the paper most interesting: it shows the difference between expert and non-expert ment
133.
by phlo 11y ago
Systems with moving parts undergo lots of stress. At some point, they will fail. Regular maintenance limits this; and the maintenance prescribed even for light aircraft keeps it to a minimum. Still, no system is ever 100% reliable. The typi
134.
by phlo 11y ago
Password Safe [1] was designed by Bruce Schneier, that could fit the bill. It seems to have done quite well in the paper cited by xenophonf in [2], too. [1] http://passwordsafe.sourceforge.net/ [2] https://news.y
135.
by phlo 11y ago
I don't even disagree with you. It's just that my perception of "caring about something" differs from yours. My point being, building a search engine can be done (and done well) with little resources. For comparison: App
136.
by phlo 11y ago
This is a business play, not a privacy one. > No you wouldn't. A search engine is difficult to build, expensive to build, and hard to do right. DuckDuckGo appear to do pretty well for themselves, running on $3m of funding and with a
137.
by phlo 11y ago
Instead of a SIM with one number that works across countries, the article discusses routing both a belgian and a luxembourgian number to the same SIM. The customer is then apparently billed by both telcos, depending on where they currently
138.
Eclipse Attacks on Bitcoin’s Peer-To-Peer Network(cs-people.bu.edu)
4 points by phlo 12y ago|0 comments
139.
by phlo 12y ago
2-3 Gallons of fuel, or about $10-$15. The time spent on flying the penis' outline is slightly less than 30 minutes. According to flightradar24 the plane is a Vans RV-12, which consumes about 5 Gallons per Hour. A Gallon of AVGAS 100-L
140.
by phlo 12y ago
As someone who found a bit of an interest in fountain pens some years ago, I understand and shared your penchant to go for super-premium when it comes to timeless items. I have bought the occasional $500 pen (Graf von Faber Castell and Cara
141.
by phlo 12y ago
The dichotomy of premium products and the shitworld makes a fun read, but between Shitphone, Premium Shitphone and iPhone, the author skips right over the most worthwile category: price-performance, value, or whatever you want to call it. E
142.
by phlo 12y ago
As underlines mentioned, Switzerland has a similar concept of apprenticeships. The aspect I appreciate most (and as far as I am aware somewhat separates the Swiss system from others) is the permeability between the trade and academic sphere
143.
by phlo 12y ago
Previous discussion on the Up3: https://news.ycombinator.com/item?id=8560644
144.
by phlo 12y ago
I disagree with that argument. Great solutions require great problems, and moving things between LA and Tokyo just isn't anymore. Right now, shipping a person costs some $1k (return included) and takes less than 12 hours; a 40 ft conta
145.
by phlo 12y ago
Somehow I managed to break every single link. Fixed them now. Thanks for the heads-up!
146.
by phlo 12y ago
The link points to version 20 (August 2014) of the draft, a more current version 21 (October 2014) is available at [1], linked in the article. Chrome has been doing public key pinning out of the box for about three years now, though the fea
147.
by phlo 12y ago
> I think it's missing a verb? Gervase may have meant to write "Currently, it is not permitted by the CAB Forum Baseline Requirements to [remove] revocation pointers out of a cert, ever." For more details, see Appendix B (
148.
by phlo 12y ago
This seems to be a case of a slightly unfortunate wording. Google calls for the use of 2048-bit key certificates , a very reasonable demand. In the forward secure use case, the certificate key is only used for authentication. Using, say, E
149.
by phlo 12y ago
> what's the reasoning behind this? Fair, per-kilometer pricing. Quoting from the english version of the page linked above[0]: When you travel on credit, a boarding fare will be debited from your card when you check in. When y
150.
by phlo 12y ago
> SSL Strip still works and banks don't care about anything other than providing the illusion of security and standard SSL. Speaking as a security officer for a (non-US) bank, this is not true. We use EV certificates (to increase vi

More ›