DownrightNifty
Joined 3 years ago
Karma
117
Submissions
62
Member since
Dec 29
https://downrightnifty.me/
View on Hacker NewsRecent submissions
Comment · 1 day ago
To be fair, that sounds pretty bad?
Comment · 1 day ago
Android 15+ has Private Space which is basically an additional work profile but managed by the system and not a third party app.
Comment · 1 day ago
Under Signal's original leadership, there was definitely a hard stance against third party clients connecting to the network. I think they've been quiet on third party clients since Moxie left.
Comment · 1 day ago
It's unlikely that their ToS would be enforceable in court. The fact that Apple never tried to sue Beeper speaks to this.
Comment · 1 day ago
> Even if you change Signal's code to add a feature to export the DB, it apparently cannot see your DB, because iOS sandboxes that so that it is only visible to Signal builds signed with the Signal developers' keys.
This is not something exclusive to iOS; Android does the same thing.
Comment · 2 months ago
> they started forcing things to need to be in Applications
Since when?
Agree with your other points overall.
Comment · 5 months ago
If you're gonna use Claude for writing in some capacity, this is definitely the way to do it. Thanks for not letting it write for you.
Comment · 7 months ago
> Many of those points reveal lack of knowledge about Windows administration capabilities.
Do those capabilities require a more expensive edition of Windows?
Comment · 8 months ago
In what ways does LineageOS trail behind AOSP in terms of security? I looked at the comparison chart you linked elsewhere and the privacy/security sections only seem to list advantages over OEM Android (not AOSP), with the exception of secure boot [1], but AOSP (not OEM Android) doesn't have that out-of-the-box either. Unless you are comparing Lineage with OEM Android?
Comment · 8 months ago
They do provide installation commands for every platform that aren't vulnerable to homograph attacks due to GitHub not allowing Unicode characters in user/repo names :)
Comment · 8 months ago
But as the title of the post says, browsers already solved this problem.
https://www.xudongz.com/blog/2017/idn-phishing/
It does make running commands from an untrusted website a little safer, which is nice. I imagine it's not uncommon to copy installation scripts from random StackOverflow comments or blog posts, for example. But that's still not safe even with this tool. Homograph attacks aside, how can you tell if a URL you're pasting into your terminal is the official source for something? It's trivial to create fake GitHub accounts or organizations.
Comment · 8 months ago
A simpler solution: examine the URL displayed in the browser window before copying terminal commands from the page. E.g. "starts with github.com" -> "trusted GitHub UI indicates the repo is the official one for this project" -> "URL points to the official project README" -> "terminal commands are most likely not malicious, and if they are, there's a bigger problem here".
Of course, more secure installation methods should be preferred, but those are not always available. I am simply comparing the provided solution to homograph attacks with another solution to the same problem.
Comment · 9 months ago
The linked article seems to imply that this remains a good design choice even today:
> The use of this rule can be seen for example in MacOS, which always places the menu bar on the top left edge of the screen instead of the current program's windowframe.
I guess now that the browser is the one app you probably spend the most amount of time in, it might make a little less sense? Android's lack of a menu bar system makes it make very little sense there.
Comment · 1 year ago
Wow, this is great. Would you mind if I reached out over email?