Recent submissions

Comment · 7 years ago
Comment · 7 years ago
I've long deleted my Facebook account. Tried LinkedIn recently, thinking it won't suck much time and will be a bit more privacy respecting than Facebook and the like--but boy was I wrong. I found LinkedIn more aggressively attention and details grabbing. I felt that it nags us to comment on others post and update our profiles recently. The e-mail notification frequency was so high that I thought to delete the account right away but then found out that we can turn it off selectively. I don't know the plight of Facebook now but it shows us even more reasons to glue to our profile/upgrade to the premium plan like "You've been searched X times this week". The more data and attention they get, more can they make from premium accounts. It's no better from Facebook and such from these two perspectives(attention and privacy).
Comment · 7 years ago
Comment · 7 years ago
You're right, privacy is not their selling point. But they do have many phrases like "We don’t store your searches permanently" and "We don’t sell your data to advertisers" in their website, which are technically true but I misunderstood that they don't store my IP either because of those. I came across the text I quoted in the parent comment months later when I came across a thread in r/privacy and I passed it on. StartPage and DuckDuckGo still makes money from ads and doesn't share user IP. It would have been great if Ecosia functioned similarly, and in that case many people like me who are concerned about sharing IP with Bing(or other services) can join Ecosia for search.
Comment · 7 years ago
Comment · 7 years ago
Comment · 7 years ago
It is not. I've been using DuckDuckGo before switching to them, for me privacy is a big deal. When I first saw ecosia, I thought it was similar to DDG in terms of privacy(Probably because they had pro-privacy phrases).

I know it's not a problem for most, especially if they are using search engines like Bing or Google. And I believe it's better to use ecosia than using say, Bing or Google.

Comment · 7 years ago
I used ecosia for a period of few months, and stopped when I read this their privacy policy(https://info.ecosia.org/privacy#privacy-policy-section-7):

> For example, when you do a search on Ecosia we forward the following information to our partner, Bing: IP address, user agent string, search term, and some settings like your country and language setting.

So when a search is done, our IP address is send to Bing.

I really love the idea of planting trees from profit, and have nothing against ecosia. Just commented to inform readers. <edit> Before getting downvoted into oblivion, I would like to make it clear that I'm not saying ecosia is unethical or that everyone should stop using it because of this. For some it matters, for some it doesn't and ecosia seems a great choice for those whom this doesn't matter. I'm just posting it so that those who do care(about their IP being send to Bing) can be aware(since I wasn't for a few months). </edit>

Comment · 7 years ago
Comment · 7 years ago
The 17-Year old bug linked in the article seems to be be fixed: https://bugzilla.mozilla.org/show_bug.cgi?id=141061 The problem proposed in the article is that a local html file can access other local files. But the linked(and fixed) bug can be used to remotely exploit the user.
Comment · 7 years ago
There are many easy to use libraries specific to different languages(like https://www.phpcaptcha.org/ for php) and frameworks. These are not as secure as recaptcha, but in most cases does the trick. There are also services similar to recaptcha like solve media and hcaptcha. I believe hcaptcha is a drop-in replacement(https://hcaptcha.com/docs).
Comment · 7 years ago
No, it is similar to recaptcha -- users select pictures to given description. In case of recaptcha, the work is free labor to google whereas in this case, it is paid to the site owner.
Comment · 7 years ago
Yes, it is out of 1. From https://developers.google.com/recaptcha/docs/v3, > reCAPTCHA v3 returns a score (1.0 is very likely a good interaction, 0.0 is very likely a bot).
Comment · 7 years ago
And it'll only get worse. From the article:

> "If you have a Google account it’s more likely you are human"

So, in the future if we don't keep signed into our google account(and let google know every article we read and every website we browse), we'll be cut off from the half of the internet or even more. The amount of control a handful of companies have over the internet is suffocating to know!

Comment · 7 years ago
https://hcaptcha.com/ seems to be a viable alternative. If you are a developer, please consider using something other than reCaptcha. Not only is it annoying, but a privacy nightmare as well.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton