Recent submissions

Comment · 10 hours ago
Yeah, the tech powerhouse seems to refer to the US. There is no doubt that US dominates a lot of tech at the moments, China dominates a lot of manufacturing.

The US is a failing democracy ruled by ruthless liars and capitalists. China's surveillance and lack of freedom is beyond discussion. So EU not being a tech powerhouse still does not look too bad.

Comment · 10 hours ago
The link seems to be the minutes of a parliamentary debate about a multitude of topics. It does not explain what this tax is about and I guess there is another approval step in the senate (French is neither my mother tongue nor am I fowolling French politics)

That the current internet with social media and AI boom destroys democracies and the planet is a fact. Whether such tax is a good step to slow that down, I have not thought about.

Comment · 12 hours ago
Not very familiar with PDP history, but PDP-12 missing also caught my attention.

Regarding later heritage, to my understanding, several developers of the VMS kernel moved on to work on the Windows NT kernel. Whether it's really only coincidence that every letter of the acronym got shifted by one?

Comment · 15 hours ago
At least the statement is not competently written.

They write that TLS certificates have potentially be exposed. That doesn't make sense. TLS certifcates are public. Probably they mean private server keys have been potentially be exposed. And after that the certificates are not only useless but dangerous (if the private is really in the hands of the attacker).

They write they have been revoked, OK. But they continue to be served until new ones are in place. Hmm? Well, no browser checks revocation anyway I guess.

Comment · 2 days ago
What will LLMs be trained on when SO does no longer exist (or is an archive of increasingly obsolete answers)?
Comment · 13 days ago
> At any later time you can check

Can you? I am not familiar with any electronic voting system because they are not allowed where I vote. Does any system give the voter access to their vote later to check that it was registered correctly?

Not even sure whether that would be a desired functionality. Free elections are secret for a reason. If you can check whether you voted correctly others can, too. Even if that functionality were protected by the private key again, it might be misused. There are governments/comompanies where they'd say: Show me how you voted or you are in prison/fired.

Comment · 18 days ago
The "complication" is simply that systemd-resolved on older, but still supported Ubuntu versions 24.04 LTS and 22.04 LTS does not know about the new KSK. It can be installed on those distros, but systemd-resolved by default only uses keys from its own package, not what is installed system-wide.

Easy once you know what to look for :)

https://askubuntu.com/questions/1570248/systemd-dnssec-failu...

https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/21705...

The linked online tool https://dnstest.dev/ksk-2024/ shows all green nevertheless. At least with local DNSSEC verification disabled. But with DNSSEC verification the tool cannot even be opened. No idea how this is supposed to work.

Edit: After adding the new KSK manually the online tool displays:

> RFC 8509 support was not detected All three sentinel names resolved despite the DNSSEC controls passing. Your resolver path does not appear to implement the sentinel, so this test cannot determine whether it trusts KSK-2024.

Comment · 19 days ago
Thanks a lot! That must be it. Wasn't aware that something "big" was happening.
Comment · 21 days ago
Sure, to some degree you must trust your browser. In the extreme case you could open a new, non-persistent browser session for every page you visit. Could be slightly inconvenient...
Comment · 21 days ago
Yes, it has access to the internal storage mechanisms of the browser.

I used to use Cookie Auto Delete for years. But when I last checked it seemed unmaintained. I log out of all somewhat important services anyway every time I am done.

For important stuff like banking I use Firefox containers.

Yeah, all of them could have their weaknesses and vulnerabilities. I just hope no attacker hits exactly the stack I use...

Comment · 21 days ago
I don't use Telegram Desktop or Windows. But that's exactly the reason why I run Firefox in a firejail sandbox on Linux. The browser has only access to my Downloads folder. I know that it's considered untrusted and don't keep any files there for a long time.
Comment · 1 month ago
A bank that cannot be used in the browser has no decent service.
Comment · 1 month ago
No. What happened to their remote library scheme? They did not make if for profit, but still...
Comment · 1 month ago
Interesting, in all the years I have never noticed that IP has 2 meanings (well probably more...) Yeah, I am an engineer and usually try to avoid the legal BS. Although I hate that AI has made stealing legal if you are big enough.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton