Recent submissions

Comment · 2 years ago
Maybe it was a UX bug that hampers the experience to the point that where the website is a better experience, and they felt that a bad app would hurt the brand more than no app.
Comment · 2 years ago
Unfortunately the bot is not very good. Just by reading the rules I was able to beat it every time on multiple rulesets.

The matchmaking is also difficult to find a partner since the rules are so customizable, and there's no way to tell what rules potential partners could be searching with. Maybe a list of games that are looking for an opponent would be good.

Comment · 3 years ago
Comment · 6 years ago
I've done some translating on YouTube. What it means is if your translation is in draft mode (you're still working on it) on 9/28 it will disappear. The video creator shouldn't need to do anything here.
Comment · 6 years ago
The prescriptions in "If you’re a security conscious user..." make sense to me. If you use a unique password, sms/totp adds very little benefit.

However the section for "If you’re a security conscious vendor..." doesn't make sense. Credential stuffing is so common, and sms/totp is a great tool against it. You could prevent users from setting their own passwords, but that seems a little "too different" from existing sites that it could harm usability.

Comment · 6 years ago
All the arguments in the post against SMS 2FA are also arguments against TOTP
Comment · 6 years ago
It's a great judge of "Initial Quality", but a poor judge of "Reliability". When someone says their car is reliable, they mean it hasn't needed service for a decade.
Comment · 6 years ago
>The J.D. Power US Initial Quality Study, which gauges problems encountered in the first three months of ownership.

A very questionable definition of "reliability".

Comment · 6 years ago
I've tried Dadi and Sppare.me in the past and had good results on the front-end (I haven't retrieved any samples yet). I'm not sure the service could have been improved. What are you doing differently than existing mail-in sperm analysis/freezing companies?
Comment · 6 years ago
Comment · 6 years ago
I just enrolled in advanced protection, and was then able to unenroll without 2FA re-auth....

I agree that requiring 2FA re-auth on trusted devices to disable 2FA would be a terrible default for users with only one method, but Advanced Protection should do more.

Comment · 6 years ago
This is kind of neat, but when I think of "HEVC-based image codec" I think of Apple's .heic format. Unfortunately I didn't see a high-level comparison to HEIC on Bellard's site, so I'm not sure what the advantages of BPG are. Wouldn't I want to use the more common format?
Comment · 6 years ago
Complaining about a reproducible issue on a public forum works. Even if you don't get direct feedback, there's a good chance it will get quickly forwarded to an teams' internal mailing list.

A lot of google engineers read hacker news comments, reddit threads, etc. all the time, and generally try and route good feedback where it belongs.

Comment · 6 years ago
It's not an actual file, it's unmarked in the free space of the first volume. If you mount only the first volume, it will appear normal, and data loss will occur if more space is used.

https://www.truecrypt71a.com/documentation/plausible-deniabi...

Also, as jchw mentioned above, the headers are indistinguishable from random data already, and truecrypt supports full volume encryption already. This nesting feature is on top of the "volume looks like random data" feature.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton