Shank

Joined 14 years ago

Karma
13,647
Submissions
1,765
Member since
Jan 21
[ my public key: https://keybase.io/xn; my proof: https://keybase.io/xn/sigs/_19m8p1WLiV4VtmOeX3cnoDL1Itgf1PMn9WNs9hx6bA ]

[email protected]

security person :)

View on Hacker News

Recent submissions

Comment · 2 hours ago
I mean this is the basic premise behind QubesOS, but if you add isolation like Qubes wants, it does become very difficult to cross between apps.
Comment · 5 hours ago
> Interestingly here, the sqlite DB would be trivially fixable, and messages restorable, with the `sqlite3` CLI.

It seems to me like the app itself should be able to perform this operation and restore data? Why is this not just fixed in the app?

Comment · 8 hours ago
> Firefly is a multi-client that combines together X, BlueSky as well as Farcaster and Lens (both partially-Ethereum-based decentralized social media platforms). You can see tweets from all four platforms, and you can make a tweet that gets auto-posted to all four platforms.

It is really interesting to see a third-party client for Twitter still operational. How is this still possible? This seems like an unauthorized third-party hack that would likely get shut down with too much attention?

Comment · 17 hours ago
The theft occurred on-chain with smart contract execution, not with their platform. The money was stolen directly from the hot wallet.
Comment · 23 hours ago
Comment · 23 hours ago
> In one exchange, an employee in the company’s security Slack channel urged Proton to at least take a few days to pentest newly written code before pushing it live. “That’s bullshit and loser thinking. Of course it’s possible to be fast and secure,” Yen wrote in the channel at the end of August.

There was a moment a while back when 1Password made some decision (I think abandoning delphi?) that made me take a step back and ask if they were a security company or not. In moments like this, I wonder if Proton's pitch is security or not. Even if this is a true take, I think someone saying that they need to be cautious and pentest something before launch is a valid concern, for a security company. Not all companies are security companies, but Proton specifically advertises itself as being security and privacy conscious. It is a bad look for a security company to do something that indicates a lack of security prowess.

I think the writing on the wall for manually writing every line of code is obvious, but that does not obviate the need to secure things. However, pushing for speed at the expense of security, AI or not, is a bad look for a security company.

Comment · 1 day ago
I feel like there are a lot of reviews like this, where people talk about why the phone wasn’t for them, but not the opposite. Why are Duo owners keeping theirs? It’s kind of maddening to only see one dimension of the device.
Comment · 2 days ago
I guess you found me! I like it. No change is better than changing any arbitrary time.
Comment · 5 days ago
> For the foldable market to triple in size, Apple would need to sell 40m this year

For the record, it seems like the production will not get close to 40m phones this year. According to most outlets, it is backordered to January and Apple had to ramp production higher than anticipated. I highly doubt that it will literally 3x the market this year. But the pattern has been, excepting the Vision Pro, that when Apple enters a market, it suddenly proves the viability to other market entrants, and to the general public who view it as a mature market.

> but the original caveats are pretty much all still there

I don't think this is true at all. A significant portion of people complain about the crease, light reflections, and poor software. It seems like initial reviews don't find problems due to the "nano-texture" display (probably achievable in third-parties with a matte screen protector). As for software, once apps have been optimized for Duo, I expect that designs will carry over to similar form-factor folding devices on Android.

Comment · 5 days ago
I feel like the average tech enthusiast just assumes that most people have computers, but they do not. Most people have a phone as a primary computing device. Tablets have gone up in popularity, but for a significant portion of people, their only device is a phone. Those people are buying phones on carrier financing or other deals, so they don't even see the full cost of their device at all. So for people doing this type of upgrade cycle, a folding phone is quite compelling: an expanded screen size for watching video, consuming content, or heck, even maybe productivity, while being effectively a marginal upgrade in cost on a monthly payment.

Also, just for the record, some carriers in Japan are offering financing that gives you the option of paying over 48 months and Apple offers 36 months. Is that quite absurd to most people? Absolutely, but for the average person who wants a bigger screen sometimes, the cost is not even going up much on a monthly basis.

For the record, especially in Japan, folio cases where you open your phone like a book are already the default. Effectively most people on the train have their phone open in some "Duo-ish" form-factor already. So the jump from a folio case to a folding phone is already substantially lower.

Obviously the gimmick nature of folding is not the compelling reason why people want folding phones. The question is more about tradeoffs, and I think that especially in asia, the demand for folding phones is quite obvious: upgrade your primary PC to have a huge display when you want it that way, otherwise it stays compact enough to be with you all the time.

Comment · 5 days ago
> I think the main thing is that for this kind of money you have a lot of options. You could even buy a GPD device that is an actual full blown pouch sized laptop and buy a regular iPhone for the same price.

I have done this! I currently carry a GPD Win Max 2 around, but let me be clear about some elements of this: the keyboard on a sub-device is just as important as any other, and the keyboard on GPD devices is not great. A sub-device has to be maintained and charged and given love and care just the same as any other device. The amount of times I have found my cute linux laptop dead when I wanted it, outdated, or randomly signed out of services is quite high (and this is with an onboard LTE modem). Carrying around a folding (or even non-folding, like a Magic Keyboard) is lighter than a sub-device, will last significantly longer in terms of charge/battery, and does not require any of the secondary device maintenance that is needed with one normally.

To me a folding phone is an absolute no-brainer in terms of why it is useful. You can get a very, very good keyboard for cheap, or try many, and completely eliminate the need to carry a second device.

Another huge use case I have is transit/travel video playback. I do not normally want to bring an iPad or even a secondary laptop during travel, so this effectively deletes one more device that I have to charge, update, bring adapters for, etc. It is effectively all of the benefit of having a tablet at all times, a sub-laptop at all times, and requires absolutely no additional charging or maintenance.

Comment · 8 days ago
> That should be enough. If users don't read that's on them.

The phone scammers who are saying the FBI/NSA/IRS will arrest you unless you install sketchy remote access software or other malware are rather convincing to a certain demographic of people and no amount of text on the screen will stop that. It all comes down to whether or not you view the tradeoff being that vulnerable people are worth protecting with this measure worldwide or not.

Comment · 9 days ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton