Recent submissions

Comment · 1 day ago
Is cash centralised money? Because just as courts can order cash transaction reversals they can also order cryptocurrency transaction reversals.
Comment · 1 day ago
Is this then to counter tax avoidance by companies that conveniently transfer the profits out of the country? "Oh no we made a loss in France so no tax to pay in France because we had to pay our Irish subsidiary €1bn for digital services".

I don't know if this is one of those cases but governments are generally trying to figure out how to avoid such transfers away of tax revenue.

Comment · 1 day ago
I imagine it's possible to design a blockchain where transactions are 1) artificially delayed; and 2) can be blocked by anyone who has the key.

For example, take Bitcoin, except that each transaction must be posted twice to be considered to have modified the ledger between 7 and 14 days apart as measured by the number of intermediate blocks as a function of the difficulty requirement. If a "blocking" transaction makes it to the blockchain in between, then the transaction is deemed to have been cancelled. A "blocking" transaction must merely demonstrate ownership of one of the transaction inputs.

If you hold large funds, you could keep a remote monitoring system somewhere that is empowered to block your own transactions.

The blockchain design could be enhanced so that a blocking transaction proves ownership of the original inputs but cannot sign a transaction itself.

Failure mode: someone trying to legitimately block a transaction could find themselves unable to get their blocking transaction mined. But in practice they'd just up the transaction fee, and game theory should take care of it.

This was just a thought experiment. A point that comes to mind is that given this is possible, what you describe isn't an inherent property of cryptocurrency, so if there's a benefit to having this property then it could be done.

Comment · 1 day ago
A neat functionality in bash and other common Unix based shells is that you can have variables. So you can do:

(navigate to one directory)

src=$PWD

(navigate to another directory)

dst=$PWD

(navigate wherever you like)

You can now do: ffmpeg -i "$src/scene1.mp4" "$dst/output-scene.mp4"

If you avoid spaces and other special characters in directory and file names, then you can skip the quotes.

This is conveniently not limited to a system wide partitioning scheme.

Comment · 5 days ago
> If we showed the EV cert DN in the the address bar next to the domain instead of hiding it in a place that takes two mouse clicks to reach we could expect at least a portion of victims to notice.

The article covers this. Apparently research demonstrated that the number of users who would notice is not significant.

Comment · 5 days ago
> EV certs would still satisfy nonrepudiation, in a way. You'd have to be pretty bold to run a phishing site under a company registered in your targets' country under your legal name.

I don't think that would be the failure mode. It'd be a phishing site that uses a compromised EV cert issued for an obscure small bank in a far away country purporting to be a major brand bank in your own country, taking advantage of the asymmetry in cybersecurity budget between those two entities. Users would have to actually check the EV cert DN every time (unlikely so successful for a phisher then) or rely on things orthogonal to EV certs like pinning.

Comment · 6 days ago
Is that still how it works? What about browsers like Chrome that default to DoH?
Comment · 7 days ago
Fedora uses LUKS where your backup key can just be a regular passphrase. A key derivation function is used internally to help with mitigating brute force attacks.
Comment · 11 days ago
You might be interested in `git notes`. It does what it sounds like you are missing.
Comment · 14 days ago
> To your point, it was briefly possible to buy them for under $100 until word spread that they make decent steam machines, so I'm guessing that Sony doesn't need to sell any games to turn a profit.

I don't follow your logic. If the BC-250 was made from PS5 quality control failures, then why would their pricing have any bearing on the PS5's profitability, except as an effort to increase margins? Does cost not remain independent of pricing?

As far as I cam infer from what you said, it could be that the PS5 was sold at a loss and still is even with the BC-250 helping, or that it was sold at a profit and is still is with the BC-250 helping. What am I missing?

Comment · 16 days ago
> Many sites support passkeys but only the native passkey stored on the current device, but not a hardware security key.

That's a function of your browser, not the site.

Your point about multiple passkeys is valid though. That affects me too. I use multiple hardware keys but cannot enroll many sites because of this.

Comment · 17 days ago
I always assumed that if I add other Google accounts to my Android phone then they'd be linked together, so I avoided doing it. It's a pain because Google apps require it. For example I can't join a Google Meet from my phone for this reason because I've always kept the Google account I use for email separate from the Google account I use for Android (and then K-9 Mail via IMAP to access it to avoid connecting them there).

Ironically this means that my experience with Google apps on my Android phone has always been poor but other vendors' stuff work fine. For example I use Fastmail for some key email addresses and this works well for me whereas I cannot use the Gmail app.

I guess I made the right choice.

Comment · 17 days ago
> Just bear in mind that if they don't like how often you return or the circumstances, they will issue you a sudden lifetime ban

I think that if I had to return frequently, I'd find a different vendor well before Amazon would decide they don't want me as a customer.

On the rare occasion I want a return, I've assumed that the reason they handle it without any issue is because they can see my lifetime purchase value vs. my return rate.

Maybe they don't care about my stats I guess but whichever way I'm currently happy in that regard.

I do worry that the competition is being wiped out, but I don't believe in boycotts for idealistic antitrust reasons.

Comment · 18 days ago
> if the judge says that the transaction must be reversed, you get it reversed, even if that means delivering cash in briefcases or something like that

So if I pay cash for something, I can get it back if a judge orders the counterparty to do so.

Why is cryptocurrency not the same? Can I not go to a court and get an order, exactly the same?

Of course I may not know the counterparty's identity or they may be in a hostile jurisdiction, but how is that different to cash that has escaped my jurisdiction?

Comment · 18 days ago
This may be a joke, but it's notable that the EU has the Cyber Resilience Act, which makes producing devices with this kind of lack of security illegal. Broadly speaking it takes effect from December 2027.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton