UserRights

Joined 12 years ago

Karma
229
Submissions
151
Member since
Dec 29
you can contact me at userrights AT riseup DOT net
View on Hacker News

Recent submissions

Comment · 11 years ago
people use it for building dating sites.
Comment · 11 years ago
videos please!
Comment · 11 years ago
Other question: what exactly does the loudspeaker icon? Should there be any action triggered (that does not work in my browser)? What happens when you click the highlighted icon?
Comment · 11 years ago
Is there a way to rsync this or any other possibility to mirror it programmatically (via cron)?

It is very surprising to see how "low" their fundraising goal is set compared to wikipedia and how much value they generate from this budget for the internet.

We should rise more attention for archive.org.

Comment · 11 years ago
I really like their humor - the share buttons on the results page are a wonderful piece of satirical reality.
Comment · 11 years ago
How big will the blockchain become? I have not read much about Ethereum and not a deep understanding of every technical aspect regarding blockchains, however I understand that most applications just are not practical with endlessly growing blockchains. Does Ethereum a solution for that?
Comment · 11 years ago
https://en.wikipedia.org/wiki/List_of_open-source_health_sof...

Please avoid too much diversification by reinventing wheels, instead please contribute to one of these projects.

Mobile first is a basic requirement in developing countries.

Comment · 11 years ago
They should have made fake ads about getting a free iphone with calling this number, that would be much more effective.

It would be interesting to see the resulting numbers - how many people are already afraid to call that number? Are YOU afraid of calling that number?

That is a nice real life demonstration of where that ill-minded techno-dictatorship will lead us.

Unfortunately there is no way back, as the USA ANGST to fight these nazis is too strong, especially in Silicon Valley, where too many chicken-hearted apple shiners (nice word!) are hiding instead of standing up. It is shocking to see how established that culture of ANGST is already established in the USA.

So be prepared for a long war and many death friends - this is always the only long-lasting result when you let paranoid and aggressive Neandertalers lead your society. Look at Germany after WW II to see the future of USA if you do not stand up now against that bigbrotherism.

Yes, it is up to you to change it. Follow the few brave we have seen and change your government to obey the people, not the other way around. Do it now and the world will be very thankful and start to love USA again! Amen :)

Comment · 11 years ago
If a student submitted this as a home work, I would not let him pass because of the ommision of important facts.

As this is posted by a company, it must be seen as a great example to study corporate propaganda.

Just compare to the WP article: https://en.wikipedia.org/wiki/Domain_Name_System_Security_Ex...

The summary paragraph of the cloudfare post demonstrates an important propaganda technique - build an artificial similarity to something that actually does not compare very well with to irritate the reader and to attach the properties of your product / thing you are advertising to something completely different:

"Whereas HTTPS encrypts traffic so nobody on the wire can snoop on your Internet activities, DNSSEC merely signs responses so that forgeries are detectable."

We should notice that cloudflare will not be helpful in building real privacy for the internet. And never forget it.

Comment · 11 years ago
What would be a better way to produce such a scorecard?

Is there already any collection of common criteria established by computer scientists and accepted by experts and / or any kind of standardization of requirements for secure software that was produced by leading security capacities that allows to extract data for a compact visual comparison like the eff scoreboard?

Would you like to provide or show me a link or any material that compares "the security" of products and offers an understandable and "industry-accepted" categorization?

Isn't it a bit strange that a small organization of non computer scientists produce something that was painfully missing for at least 50 years? Isn't it clear that a first approach to such a thing must fail and that this can only be a prototype for a process that should be adopted and worked out by people who understand what they are doing?

Isn't it a bit strange, that there is no such thing as that scoreboard produced by an international group of universities and industry experts, with a transparent documentation of the review process and plenty of room for discussion of different paradigms?

The eff scoreboard demonstrates painfully the obvious omissions of multiple generations of security experts who failed to establish a clear definition of what security exactly means, how to discuss it and how to find an acceptable approach to establish a thing that would allow to be named "review" in the scientific meaning of the word.

It is totally clear that Apple and Microsoft have very different ideas about security than OpenBSD developers, but it would still be of great value to have a space where people could follow that discussions and compare the results of different approaches and solutions to security related problems.

The eff scoreboard carries the embryo idea of a global crypto discussion, review, comparison and knowledge site that could also serve as a great resource for non-crypto people and students to learn a lot about that field. The highly valued information you and other experts are dropping here and there in HN threads and/or on various mailing lists should be visible in a place that collects all that stuff and allows for open discussion of these things in the public, so people can learn to decide what security means for them.

If such a thing exists, please show me.

If not, please build it.

Comment · 11 years ago
The headline is wrong and not very clever for such a project.

The project was able to get a CA to sign their keys, this is what happened. Using the word "trust" is simply wrong and might be interpreted as a too simple kind of propaganda after we learned a lot about the untrustable nature of a hierarchical certification infrastructure.

Another, even bigger trust-breaking elephant in the room is the fact that this project is USA based - as long as US government and agencies are insisting on practices we know from authoritarian and anti-democratic states like e.g. China or Saudi-Arabia there is no way any US based project can use the word "trust" for their product description - it might be recognized as a simple lie by informed people.

Questions to the project leaders:

* you must obey US laws and therefore offer MITM access to every Let's-Encrypt "trusted" network stream - why aren't you educating your users about this serious limitation of your product?

* why don't you rebase your project to a country where a government policy exists that is allowing companies to build trustable security based products?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton