Recent submissions

Comment · 7 years ago
That's the best solution - improved privacy and sometimes even reduced gas prices when using cash.
Comment · 7 years ago
What's the penalty? It ought to be equivalent to a DUI, given the impairment is similar if not worse from phone distraction at the wheel.
Comment · 7 years ago
That's too bad, looks like I'll have to stick with GSuite Gmail to have browser-based, non-Javascript access to my email.
Comment · 7 years ago
Sincere question - why is JavaScript required to sign up for Fastmail? Is it for browser fingerprinting? If so, what data is collected, how is it used and how long is it retained? No specific mention of it in the privacy policy. If I sign up in a virtual machine, can I later use Fastmail without running scripts?
Comment · 7 years ago
Curious how you are managing disk encryption for all those devices, if you are at all.
Comment · 7 years ago
Same here, but I have found wireless performance to be subpar. Ended up double-NAT'ing a second APU with Debian to use 802.11. Still plenty happy with OpenBSD though.
Comment · 7 years ago
> For usability while balancing security, cache PIN for at most a day.

https://github.com/DataDog/yubikey/blob/master/gpg.sh#147

This statement has no effect when using Yubikey - the PIN is cached by the key itself and it will remain unlocked indefinitely until it's physically unplugged. See https://dev.gnupg.org/T3362

Comment · 7 years ago
Comment · 7 years ago
I tried again and now get the Incapsula crap - maybe related to IP address (which changes often on Tor)?

Edit: the page loads for the first time after assigning a new IP in Tor, but subsequent loads throw the captcha. Odd system.

Comment · 7 years ago
Characterizing this software feature as an "attack" or "backdoor" is pretty hyperbolic. In order to abuse multiplexing, the adversary needs local code execution ability, by which point you've already lost.
Comment · 7 years ago
Works fine here, even over Tor - Firefox 70.0.1 with javascript.enabled=false in about:config.
Comment · 7 years ago
I'm happy with LineageOS running on a Pixel, no Play Services and only open source applications installed over adb.
Comment · 7 years ago
Comment · 7 years ago
I doubt it's possible. I think Google uses the device browser (SFSafariViewController) to do OAuth, so users aren't asked to sign in in every application. No doubt they think this is a feature. Why not simply use Google Maps in an private browser window if you're looking to improve privacy? Or even better, check out OpenStreetMap.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton