sneak

23 ms·

1. 661.▲
   by sneak 10mo ago

   Because it has been out and published and used for weeks/months. The longer an artifact is public and in use, the less chance it has of being malicious.
2. 662.▲
   by sneak 10mo ago

   It’s admirable that this is the policy. It’s sad that YC (as separate from to HN) doesn’t have a better policy about the types of investments they make. Mass surveillance systems should be a bright line, I think.
3. 663.▲
   by sneak 10mo ago

   We really should be referring to them as “Flock (YC S17)”. Credit where credit is due.
4. 664.▲
   by sneak 10mo ago

   Over a certain popularity it is. 56k downloads is nowhere near the threshold.
5. 665.▲
   by sneak 10mo ago

   Every docker image specified in a k8s yml or docker-compose file or github action that doesn’t end in :sha256@<hash> (ie specifying a label) is one “docker push” away from a compromise, given that tags/labels are not cryptographi
6. 666.▲
   by sneak 10mo ago

   Speeding tickets are not related in any way to why Flock (YC S17)* is bad. * how I will now always refer to them
7. 667.▲
   by sneak 10mo ago

   I tried that, but my HN addiction ended it.
8. 668.▲
   by sneak 10mo ago

   it’s important to contextualize that quote: he called them dumbfucks specifically because they trusted him with their data.
9. 669.▲
   by sneak 10mo ago

   ToS is not law except in the most draconian and authoritarian interpretations of the CFAA.
10. 670.▲
    by sneak 11mo ago

    199GB, only metadata released for now. Magnet link found here: https://annas-archive.li/torrents/spotify Are magnet links allowed on HN?
11. 671.▲
    by sneak 11mo ago

    I have a Supermicro 24 bay 2U in my house with an array around half that size in it. It’s not prohibitive.
12. 672.▲
    by sneak 11mo ago

    The metadata scrape might not be.
13. 673.▲
    by sneak 11mo ago

    They’re doing it for everyone, so, yes, they are doing it for AI companies.
14. 674.▲
    by sneak 11mo ago

    I assume a company like Apple either has custom server boards with tons of unified memory on M series with all the i/o they could want (that are ugly and thus not productized) or just use standard expensive nvidia stuff like everyone e
15. 675.▲
    by sneak 11mo ago

    The US also has no trouble bringing their large companies into line. Apple willingly preserves a backdoor in the e2ee of iMessage for the FBI et al in the form of effectively unencrypted iCloud Backups. The whole “Apple won’t decrypt stuff
16. 676.▲
    by sneak 11mo ago

    I use syncthing to synchronize my computers and I use Ente to store and sync my photos. My computer files aren’t on my phone or vice versa. I use IMAP email so it’s accessible on both. I use Signal instead of iMessage.
17. 677.▲
    by sneak 11mo ago

    > So say if my UK friend connected directly to my PC with SSH/RDP, both uses end-to-end encrypted link, to chat with me using `wall`, `write` or Windows Task Manager, then all of sudden this is a hostile and Mr Big Ben will just la
18. 678.▲
    by sneak 11mo ago

    > The real problem is that companies do not offer any accessible, powerful, and intelligent customer support. No, the real problem is that we have no reasonable alternatives when companies misbehave. There is no meaningful way to exis
19. 679.▲
    by sneak 11mo ago

    Strong encryption is necessarily at odds with the state. It's somewhat crazy that states allowed private citizens to use it freely as long as they did.
20. 680.▲
    by sneak 11mo ago

    I've been using all of my macs for years now without Apple IDs. I use them only reluctantly on iOS devices to install apps, and don't use iCloud (it's a privacy nightmare). Relying on Apple to remain benevolent when the ince
21. 681.▲
    by sneak 11mo ago

    https://www.reuters.com/article/world/exclusive-apple-droppe...
22. 682.▲
    by sneak 11mo ago

    Wrong. Apple explicitly preserves a backdoor in the e2ee of iMessage for the USG.
23. 683.▲
    by sneak 11mo ago

    Many metros, including Las Vegas and LA, have rolled out thousands of facial recognition traffic cameras above the signals at intersections. The ALPR situation is trivial by comparison. Transportation privacy is a historical oddity. You c
24. 684.▲
    by sneak 11mo ago

    Write a spec, or the developers will write one for you, in a much less clear language.
25. 685.▲
    by sneak 11mo ago

    People want to call their software open source, because it attracts customers. They don’t believe in software freedoms or open source, otherwise they’d never try or want to restrict Freedom 0. If your SaaS can’t compete on the service part
26. 686.▲
    by sneak 11mo ago

    So buy a number from a different country.
27. 687.▲
    by sneak 11mo ago

    https://sneak.berlin/20181022/sneaks-law/ sneak’s law: “Users can not and will not securely manage key material.”
28. 688.▲
    by sneak 11mo ago

    Signal accounts do not require a SIM. There is no requirement that the phone you use for running the app Signal has the phone number you use for Signal login. My Signal number is a Google Voice number that has nothing to do with any mobile
29. 689.▲
    by sneak 11mo ago

    This is the same thing that sent weev to jail when he and JB did it against AT&T to determine the email addresses (instead of PINs) of every iPad 3G user.
30. 690.▲
    by sneak 11mo ago

    This is why ULID exists and why I use them in my ext_id columns. For the actual relational IDs internal to the db I use smaller/faster data types.