karma20
Joined 7 years ago
Karma
63
Submissions
31
Member since
Aug 4
Views expressed in comments belong to the author, and not necessarily to the author’s employer, organization, etc.
View on Hacker NewsRecent submissions
Comment · 7 years ago
Firefox for iOS and macOS. I have strict tracking protection [1] enabled on the former, and NoScript + uBlock Origin set up on the latter. I also use Little Snitch on the Mac.
[1] https://support.mozilla.org/en-US/kb/tracking-protection-ios
Comment · 7 years ago
I like the concept but share some of the blockchain concerns here. In particular, I'm interested in how the Gaia "driver model" [1] is actually architected, and how this compares to local storage:
> Gaia enables applications to access [it] via a uniform API.
Comment · 7 years ago
HN's policy on paywalls is outlined in the FAQ [1]. Private Browsing mode is generally a good workaround:
> It's ok to post stories from sites with paywalls that have workarounds.
> In comments, it's ok to ask how to read an article and to help other users do so. But please don't post complaints about paywalls. Those are off topic.
The rationale explained by dang in a 2015 post [2] makes sense:
> Publications like NYT, WSJ, the Economist, and the New Yorker have paywalls that leave ways for readers to work around them. Such stories are OK to post to Hacker News. Yes, this sucks, but the loss of many substantive articles would suck worse.
Comment · 7 years ago
HackerOne is a platform on which Valve runs a public program [1] that awards monetary bounties. I'm confused as to why Valve is allowed to forbid disclosure of "out-of-scope" reports and will only "generally" disclose reports in any case:
> Please note that we will not consent to disclose reports if they have been marked out-of-scope or inapplicable, or where Valve has not taken a specific corrective action / mitigation.
> Valve embraces transparency in our security. We will generally disclose the details of vulnerabilities found, upon request.
Comment · 7 years ago
Also of interest is the follow-on discussion [1] taking place on the electron/asar repo.
Comment · 7 years ago
Qihoo has also employed dark patterns to push deceptive security practices around its own browser [1]:
> When you attempt to install other browsers, the 360 Safe Guards will allow the browser to be installed but will then popup saying not to let it become the default browser.
> When users of 360 Safe Guards run a check of their system, if they don't have the 360 browser installed it will give them a failing grade. If the user chooses another security software to protect their failing grade browser, the Safe Guards say no.
Also interesting is a statement by Opera on the 2016 acquisition [2]:
> The transaction would give Opera access to the extensive internet user base of Kunlun and Qihoo in China as well as the financing and other support of the Consortium that would allow for the full potential of the Company to be realized. At the same time, Kunlun and Qihoo would be able to cross-sell their products and services to the Opera user base, and benefit from Opera’s leading mobile advertising platform.
[1] https://web.archive.org/web/20150723081728/http://www.digita...
[2] https://arstechnica.com/information-technology/2016/02/chine... (can't find a direct link)