Niten

I've had good luck with Gandi in the past for SSL certificates, and their U2F support makes me inclined to choose them as my new registrar.

On the other hand, I've heard less than great things about Gandi's reliability and support lately. If you've had to contact their support team, what's your experience been like?

> Rust doesn't need silver bullets; it needs lots of lead bullets.

It needs steel bullets. Lead only oxidizes at high temperatures.

This sort of false equivalency is unhelpful. It requires a great lack of judgment to believe the U.S. is comparable to the regime overseeing Xianjing on domestic internet surveillance.

"Houston, we have serious problems here. We're tumbling end over end. We're disengaged from the Agena."

"Try increasing left-pad."

(But seriously, this is really cool and I'm looking forward to trying the Kerbal Space Program plugin.)

It sounds like you've never lived in the southeast US? These conditions can occur on a daily basis in the summer, especially in Florida. "Pull over and stop" isn't realistic advice here.

Humans can and do drive safely in these conditions, however, and it's a valid concern to point out that Waymo's West Coast-centric models might not yet be trained to handle these cases.

(To be clear, I don't doubt that machines will eventually surpass humans in whatever weather conditions, if they haven't already.)

It's also illegal in California, too, so I expect NYTimes will ultimately have to change their behavior: http://www.niemanlab.org/2018/07/thanks-to-california-a-news...

> such pseudo-fascist bureaucratic red tape doesn't come into being unless powerful entities who stand to benefit from the bureaucracy take advantage of the populist zeitgeist to bend political will to their favor.

I assure you it can arise entirely out of negligence, ignorance, and the mindless application of poorly thought-out rules. The impulse to look for the hidden "powerful entities" behind the curtain is an understandable but unfortunate form of conspiracy thinking, and it's unlikely to guide you to the truth of situations like the author's.

I just don't see any evidence of a "lie" in the New York Times article. And if I add my Facebook account to iOS, of course I realize that I'm trusting Apple in that scenario.

This whole controversy feels manufactured.

There wasn't much substance to the New York Times's report, and as an outsider, Facebook's official reply--corroborated by Tim Cook's statement about Apple's actual use of the reported APIs--seems perfectly reasonable to me.

But dogpiling on Facebook is popular right now, whether it's deserved (Cambridge Analytica) or not (this), so the actual facts of the matter will be secondary when politicians evaluate whether to hop on the bandwagon.

I also grew up in a small Florida East Coast town, which Brightline will eventually pass through on its way to Orlando.

My parents, who still live in Florida, regularly give me an earful about the train. To an extent, I can see where they're coming from: there has been some controversy over who will pay for crossing upgrades to handle these faster trains, and increased train traffic will mean increased crossing delays in these smaller towns. There have also been some well-publicized pedestrian deaths (https://bit.ly/2GA0QN2) along Brightline's existing route.

But I'm in favor of these trains, and I think most of the opposition amounts to classic NIMBYism. Transportation in Florida is a nightmare, and passenger rail is the obvious solution. And I find it inconceivable that any accidental deaths due to the additional train traffic won't be offset by even fewer deaths on the highways.

Florida has a proud history of rail transportation (there's a reason Florida has an entire county named after Henry Flagler), and Brightline could be a return to some of those past glories: https://en.wikipedia.org/wiki/Overseas_Railroad

Which they mention they'd still have to implement workarounds for if they adopt Rust, so I'm not sure I understand that selling point.

TIL that you can run an SSH agent using an OpenPGP smartcard on a non-rooted Chromebook now.

EDIT: Tried following the linked instructions but nassh just hung while trying to connect, with no prompt from Smart Card Connector :( Oh well, at least it's possible in principle.

https://chromium.googlesource.com/apps/libapps/+/master/nass...

I've been running OpenBSD on an APU2 as a router for over a year (and on the ALIX it replaced many more years).

OpenBSD makes it so dead simple to setup the basics that (unlike with my NAS) I've never been tempted to try a GUI distribution such as pfSense, yet it also gives you the flexibility to do more esoteric things like forwarding DNS using DNSCrypt, or allowing UPnP, but only to the PlayStation on a VLAN that can't talk to your main network. And the PC Engines gear works perfectly with OpenBSD.

Or like using Wi-Fi, given that iOS 10 will not be patched for the KRACK vulnerability.

You intend to use your phone for a year without installing any security updates?

Some people like living dangerously, I guess. For the rest, it's a good thing iOS strongly encourages people to keep up to date.

Thanks, I'll give that a try!

Do you attempt to group your notes by subject and project within the higher-level chronology?

I also keep a paper notebook for software engineering, but I find it less convenient than my old chemistry lab notebooks were. The problem is that in my software engineering job, I must alternate between tasks and meetings many times a day. So either I keep things strictly chronological and have a difficult time maintaining a usable table of contents, or I have a new page for each of the day's projects, at the cost of constantly jumping from page to page and inefficient use of the notebook's space. I've yet to find a happy solution.

So it's a PKI, except obfuscated by a bunch of health industry acronyms and "accredited" logos?

> Isn't it should be a red flag if one messenger is prohibited in a country with an authoritarian regime, and the other is not?

No.

That's not evidence that its encryption algorithm is well designed or secure.

It all comes down to the author's personal preferences and concerns, but a blanket assertion that WhatsApp is not a good option from a security option is silly. WhatsApp is end-to-end encrypted with the Signal protocol by default, so the security of its message contents is top-notch.

But if the author is especially concerned about collection of metadata they should consider Signal itself, which also has a very well thought-out UX.

Certainly not if one of your main concerns is the privacy of your message content. WhatsApp uses the Signal protocol; Telegram uses its own homebrew encryption protocol that has not been well vetted.

Well, the locked-down nature of iOS and Chrome OS are what make them markedly more secure than a general purpose computer in the face of real-world threats. Just this week, my Mom's Chromebook kept her safe from what appears to have been a targeted attack (someone sent her an email with a link to a malicious .ru domain and my name in the From header). That locked-down design is also why I'm writing this response on a Chromebook.

It's for good reason that Tech Solidarity and other security-conscious organizations recommend using iOS and Chromebooks where possible: https://techsolidarity.org/resources/basic_security.htm

Of course, we must fight tooth and nail against any regulations that would restrict access to general-purpose computing, or put limits on connecting a general-purpose computer to the Internet. But it's important to remember that there are absolutely legitimate reasons to use and recommend locked-down machines, and that the most technically adept of us will use a combination of both categories of computing device in our lives.

It also defeats the very purpose of a Chromebook, which is practically bulletproof, worry-free security.

If you really need a full-fledged Unix system (as I do), IMO it's best to run that on dedicated hardware and SSH in from a secure Chromebook. But I'm not sure what a student like the parent's daughter would gain from putting their Chromebook into developer mode, aside from a newfound susceptibility to malware.

If you don't mind elaborating, what do you consider the most important security properties still missing from Android on the Pixel phone?

My personal wishlist would include an equivalent of iOS's ability to encrypt new files to a public key while the phone is locked, as pointed out by Matt Green in "The limitations of Android N Encryption", but I'm interested in your perspective.

I can confirm that, my home network is currently routing a /60 from Comcast.

Nice, thanks for the link! I didn't realize there was a web-based C++ IDE targeting the micro:bit.

> Sure, the paper is clearly anti-Trump. My perspective is that this is only really a problem if they fabricate evidence. As long as they're presenting the world as they see it, it's hard to complain.

I mostly agree with that, but it does rub me the wrong way that the New York Times tends to smuggle its views into its reporting, all the while maintaining the false pretense that it is being entirely Objective outside of its opinion pages.

In contrast, The Economist is absolutely anti-Trump, but it makes no pretense to the contrary. It owns the fact that the paper as a whole has a free-market, classically liberal point of view, and as a result it's much easier for me to read The Economist's criticisms of Trump with a straight face. (Not that I have any trouble generating my own criticisms of Trump, mind you.)

I happily disabled my ad blocker for the LA Times when they requested it, but I eventually closed the page when they decided to load enough ad content to make my Chrome tab unresponsive on my Xeon workstation. I won't be back.

I'm not even really adverse to ads, or to paying for content. (I subscribe to three newspapers, two of them in print.) I just want a browsing experience that isn't terrible.

4) A deliberate UX trade-off that, while clearly suboptimal for the kind of people who read HN, still leaves WhatsApp's massive base of everyday users in a much better position than they were prior to integrating the Signal protocol: immune to the more mundane threats of passive mass surveillance and the exfiltration of message history from Facebook's servers.