Recent submissions

Comment · 7 years ago
Smoking-related cancer is mostly due to nitrosamines. Nicotine can have adverse effects on heart, pancreas, and blood vessels, but replacing sooty nicotine inhaling with non-sooty is less cancer-risky.
Comment · 7 years ago
Please, don't try to interpret my mood, it can quickly make it childish.

Feel free to argue over other advantages you believe it has.

Comment · 7 years ago
I'm not sure we are on the same page here. Having control over a channel you use to pass your code, I can receive your secret file, I just need to be quicker than a legitimate recipient. How this '--verify' flag will help you then?
Comment · 7 years ago
Well, it's nice when phone is considered secure channel. It's not so for many serious applications, however. PGP invented to deal with situations when you communication channels are untrusted. See, no one says your software is bad, but when it is marketed as a better alternative to PGP it's not true, and worse, it's absolutely irresponsible thing to do.
Comment · 7 years ago
Flag won't make it better. If user needs to run own server, it kills the only advantage in comparison with PGP - relative simplicity.
Comment · 7 years ago
Running my own server for occasional file transfer is when it becomes even smarter alternative to PGP, isn't it?
Comment · 7 years ago
Also magic-wormhole relies on a hardcoded intermediary servers for which author gives no guarantees.
Comment · 7 years ago
So author offers to replace PGP for sending files with a piece of software which requires to send/say a password to your recipient? Oh yeah, that's smart, and very modern!
Comment · 7 years ago
I almost loved this idea on the first sight, but on the second I'm not sure I see how it can work. Will you mandate Apple to make iOS installable on Huawei's devices? If not, why? If yes, how? Who will bear responsibility if SailfishOS won't run on Samsung's hardware? Do you really think API standard can be enshrined in the law, and how you plan to make it safe from corporate abuse?

Btw, if Microsoft is pushing security updates you did pay additional cost for license. If it's Debian then quite possibly you still paid something to MS (if your computer was bought with OEM version), or in better case other corporations, and individuals pay for it (mostly to reduce Microsoft's power).

Comment · 7 years ago
You are referring to undefined terms to define undefined terms: "common good" is not something obvious in this particular situation. Food is poor example here because toxicity is more, or less the common denominator here, while safety of a smartphone has a very different value for someone whose life is immersed in digital services, and whose income allows to see a +/-50 dollars as a small variation, and one who uses only whatsapp, and weather service, and needs to save every penny. In fact majority of Android phones in the world right now are somewhat vulnerable, and it doesn't seem that people who use all these cheap stuff are eager for change. You already can be safer if you it's your priority by using more expensive brands (Apple, Samsung) which offer longer-term updates.

P.S. My food is not regulated by FDA, not everybody registered in HN are from States.

Comment · 7 years ago
I'm not sure any of us has a right to speak for every consumer. I live in a country were majority would likely prefer cheaper devices w/o any security guarantees. Forcing producers to provide 5(?)-years updates will make prices rise, and it could be against interests of a large segment of consumers. The only regulation which I believe would be beneficial for all is obligatory transparency. There should be clear warnings like "The producer expects you to replace this device in 2 years, and will not support it after that", or "This producer doesn't promise anything in regard of this device - use at your own risk"
Comment · 7 years ago
Softpedia ironically proves their story doesn't make any sense.

Microsoft’s Security Response Center revealed that most of the cyber-attacks aimed at Windows computers aren’t based on patched exploits, but on zero days.

Apparently it's hard to base your attack on an exploit which no longer works because relevant vulnerability is addressed by an installed patch. Journo behind the story believes it means patches are useless. This is, to put mildly, a very unorthodox logic.

Comment · 7 years ago
The study explores the possible way to sustain a bigger brain well before invention of tools, and controlled fire. It's also absolutely not about hunting.

It's always hit or miss when one tries to comment after reading just a headline ;-)

Comment · 7 years ago
Well, I have already agreed FP jobs aren't plenty :-) Business executives mostly prefer to stick to beaten paths, and it's understandable. I just don't see a tragedy here. OCaml was born in 1996, if I'm not mistaken, so it's a decade older than Clojure. Despite never reaching the industry mainstream, it never stopped being developed, it is used in real projects, so I guess we can agree it's very much alive. Clojure in my very subjective opinion is doing a bit better than that due to ability to augment software written in Java. So while I don't believe it will conquer the world anytime soon, I also believe it's not going to disappear anytime soon.
Comment · 7 years ago
True, except they don't include languages just for being smaller (we don't see Befunge, or Unlambda there), but those associated with smartness, and passion for learning. In context of the discussion (dead/alive state), I wouldn't count this as a bad thing. There's no arguing that finding FP job is hundreds (or thousands, depending on city/country) times harder than OOP job. It doesn't mean all functional langs are dead.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton