HNHacker News
TopNewBestAskShowJobs

_nedR

1,054 karma · joined April 1, 2012

submissionscomments
_nedR··on Apple Has Removed Dash from the App Store
Humble Bundle hosts mobile bundles frequently (Android only). Although they are not as successful or popular as HB's PC games bundles, they certainly bring decent level of exposure and revenue to game developers outside the play store bubble. They're only possible because of side-loading.
_nedR··on Philae Found
Also available in handy gif form : http://i.imgur.com/TUkKuhf.gif
_nedR··on When you change the world and no one notices
Again i am not intimately familiar with 3d printing technology, but the timing of at least some of those announcements might be due to expiration of relevant patents, rather than the invention of new technology.

https://techcrunch.com/2016/05/15/how-expiring-patents-are-u...

_nedR··on When you change the world and no one notices
The point is people understood what Google was from the get-go, because they had used similar products to serve their needs before. On the other hand, the invention of the internet was not immediately popular because it was so different that people couldn't relate it to their prior experiences.
_nedR··on When you change the world and no one notices
I may be wrong but i thought that the main thing holding up the 3d printing revolution, was the long wait for the relevant patents to expire.
_nedR··on Mobirise Bootstap Site Maker v3.05.1 is out
A shout-out to mobirise. I haven't used it much, but been playing around with a bit the last 2 days, and it looks very good.

For those who don't know, its an offline website builder with a drag-and-drop UI. Pretty good to knock out product or company landing pages in a jiffy. Best part is its free for commercial use too, apparently.

_nedR··on Why China won’t own next-generation manufacturing
I am no economist (I am pretty sure this a well studied and documented field), but as some one who has lived in both developed and developing countries, I imagine it is because people from third-world country accept much a lower standard of living than a person in the first-world country. This is pretty much reflected in every aspect of life to the littlest detail. Everything from quality and size of accomodation, to the vehicle you drive, the quality of food, roads, toilets, water, etc. A shop or an office or home, might be more shabby in a poor country than in a rich country. Even if functionally they may be the same, a higher level of expectation is there in a rich country.

All this costs money, and it all adds up. Once the average Chinese citizen demands to have the same standard of living as his/her counterpart in the west, the price advantage will disappear.

_nedR··on NSO Group's iPhone Zero-Days used against a UAE Human Rights Defender
This guy seems to be quite the high-value target to warrant 3 zero-days, on ios no less.

edit: What platform would be recommended, if you happen to be a high value target though. Using iOS at least seems to raise the cost of infiltration significantly judging by this http://www.forbes.com/sites/andygreenberg/2012/03/23/shoppin....

_nedR··on NIST declares the age of SMS-based 2-factor authentication over
edited: But if your machine is compromised, attacker gains access to both factors.

edit: I don't know. Maybe your implementation meets the definition of 2FA. Regardless, it certainly reduces the security

_nedR··on NIST declares the age of SMS-based 2-factor authentication over
My point is someone should have written a TOTP client for your particular platform. Also different services use different TOTP systems. I am not well-versed in the matter. For example Steam uses its own app, many apps use google authenticator, microsoft uses its own, others still use authy. AFAIK they aren't interchangeable. I can't be bothered installing all these apps, each of them has their own nefarious agenda to hoover data off my phone.

SMS just works. (except when it doesn't)

_nedR··on NIST declares the age of SMS-based 2-factor authentication over
For international travellers, I imagine its a problem. Within a country - it is less a problem. In india at least, we have number portability between providers, so there is little reason to change your number.
_nedR··on NIST declares the age of SMS-based 2-factor authentication over
Another advantage of sms over dedicated 2FA apps is that even a 10 dollar phone or decade old phone running palm OS can be supported through it. (provided there is network coverage).

A problem with sms though is that you need cell phone coverage. I have been in situations where my transaction has timed out while waiting for the sms text to arrive.

_nedR··on Humans once opposed coffee and refrigeration: why we often hate new stuff
> The same theme is playing out today as some lawmakers and consumers question the safety of driverless cars, the economic impact of automation or the security of mobile banking

Am i the only who has serious reservations about mobile banking? It completely undoes 2FA (I hear banks in the US don't use 2FA, but it is mandatory for all online transactions in India).

I mean if you lose your phone you lose your bank a/c. Your android phone is highly insecure. Microsoft got flak for dropping XP support after a decade. Your typical android phone stops recieving updates after 2-3 years. And since in the mobile security paradigm, the user is just another security threat to be mitigated, there is nothing you can do about it (short of doing a risky root of your phone, which btw would stop many banking apps from working ). Already there are viruses in the wild which are rooting millions (yes, millions) of unpatched phones. http://www.cmcm.com/blog/en/security/2015-09-18/799.html

Right now these malware are only looking for low-level fruit like steam, credit cards, and pushing ads. Its only a matter of time before they go after your bank a/c.

_nedR··on With Launch of AU Passport, Africa Is Now Borderless
Al-Jazeera English also has good coverage of Africa and other places in Asia, that popular international outlets give less attention to.
_nedR··on Git for Windows accidentally creates NTFS alternate data streams
What? You are saying windows explorer doesn't handle this feature properly? Thats insane.
_nedR··on What Mailchimp does to make sure emails get delivered
Considering that mailchimp is one of the big names in the business i don't think this is submarine PR (Although the article is good PR for mailchimp). Do you assume every article about a Google or Microsoft product is submarine PR?

[I am not in anyway affiliated to Mailchimp, and don't even use their services. We use Amazon SES]

_nedR··on Coup attempt underway in Turkey
The headscarf to muslims is not really a religious symbol like say a priests clothes or a nuns habit. It is a piece of clothing that is required (considered mandatory by most schools) to be worn by a woman to preserve her modesty. In that viewpoint, it is like pretty much every other piece of clothing . Are pants or tops religious symbols?
_nedR··on Coup attempt underway in Turkey
This. Turkey apologized to Russia, and normalized relationships with Russia and Israel. Also their Foreign minister talked about mending ties with Syria - Assad's Syria.

All this happened in the space of a few weeks. It was such an about-face from their past postutring. I guess this puts things in context.

_nedR··on Reddit now tracks all outbound link clicks by default, existing users opted in
Incorrect. I just tried it right now. duckduckgo has the same redirect behaviour as Google.To test this, middle-click a search result, ie open the link in a new tab.

edit: i can't find a way to disable this behaviour in the settings either.

edit 2 : Strange. It doesn't seem to be doing it now. I could sworn i have seen it use redirect links on multiple occassions.

_nedR··on Mozilla shouldn't copy Chrome's permission prompt for extensions
>A lot of extensions need that permission, even though they only need it to do something much more specific. Adblock uses it to read (but not transmit) your webpages, and remove sections. Password managers use it to scan (but not transmit) webpage content, and fill certain form fields.

Yes. But the user should be made aware of the consequence of their action. Do they realize that installing a password manager means granting access to all their data to a third party. Is this author reliable? What do other users think of the author? Has anyone reviewed the code for this? These are all questions potential users should ask.

>they can request semantic permissions instead of just "give me all your data and trust I don't do anything bad with it", which is bad and has already lead to issues in the past where a Chrome extension developer sells their extension which is then used to transmit malware.

A lot of things cannot be controlled either by review process or sandboxing. What if your extension has a web-component ( say your password manager backs up passwords to the cloud)? Mozilla cannot review your server code. A sandbox won't protect resources you have already given access to, but it will limit the damage done.

>The article is proposing finer grained permissions than Chrome.

I have reread the article and haven't found anything that backs this assertion. Indeed the author seems to say : Mozilla vouches for me, so you trust me with all your stuff too. From article :

'Wouldn’t it be a better idea to keep doing that so that the installation prompt can simply say: “Hey, we made sure that this extension is doing what it says, want to install it?”'

Edit : I agree that some form of review is needed for extensions. Simple sandboxing alone is not enough. But article doesn't seem to support sandboxing.

_nedR··on Mozilla shouldn't copy Chrome's permission prompt for extensions
I don't agree with the article at all.

Chrome is being completely honest with the user. If a youtube extension asks permission to "read data from all websites" you must ask yourself and the developer why it needs access to all websites and not just youtube. A good extension must enumerate all the permissions it demands and give good reasons why it needs each of them. If an extension seeks new permissions, then consent must be sought from the user before update . This is obviously the correct approach(How it affects the extension developer's revenue\user-adoption is unimportant). Chrome's model is comparable to the security model of Android and iOS. Sure its not perfect, But its much better than the firefox model which is comparable to Windows 98.

Also i don't understand the whole shifting of responsibility jibe. Does Mozilla review every extension and every update in their store? Do they accept responsibility if malicious code is downloaded from their store?

To conclude , i would like firefox's stringent app review process and chrome's fine-grained permissions and sandbox model.

Edit: I want to point out that this article is really looking after the interests of the developer, and not after the interests of the user.

Edit 2 : Also to add: Sandboxing is simply good security practice. Even if the author is not malicious, but in case an extension is exploited due to a bug, the damage done by a well-sandboxed extension is limited by the permissions granted. In firefox such an exploit could hoover all your data, credit card info & passwords from all your websites and data from you harddrive as well.

_nedR··on AWS Asia Pacific (Mumbai) Region
Lol. I am in South India, and when gaming, i frequently get better ping to Singapore than other parts of India; Also performance varies widely depending on my ip and the time of the day. The routing in local isps is atrocious. I thought the situation would be different for commercial connections but your experience seems to suggest otherwise.
_nedR··on AWS Asia Pacific (Mumbai) Region
Their third-party mysql db offerings are atrocious, price-wise.
_nedR··on AWS Asia Pacific (Mumbai) Region
What could explain the increase in traffic? Higher visitor retention due to improved page load performance?
_nedR··on Alicia Keys is done playing nice. Your phone is getting locked up now
Agree with you with on the whole overblown threat thing. But this does raise the spectre of liability for the concert organisers, artists and the pouch company.

Sure, the odds of an individual getting attacked at these events is minuscule. But over time the probability of someone bring a gun into some concert is pretty high. When that happens and it transpires that people weren't able to use their phones to seek help, the class-action lawsuits could come. The obvious solution (to the organisers at least) would be to bring aircraft-level security into concerts (security patdowns, etc.).

_nedR··on Alicia Keys is done playing nice. Your phone is getting locked up now
Washington post not NYT
_nedR··on Alicia Keys is done playing nice. Your phone is getting locked up now
This article is about technology. More specifically, society's reaction to modern technology. It also raises questions of how society is going to react to wearable computing once that becomes more prevalent.
_nedR··on Mentoring in Gaza's first hackathon
Why did you use Mexico and Canada for your analogy, when the more apt analogy was the Native Americans?

Have the native Americans still completely accepted in their heart, their peace with (or surrender to) the settlers?

_nedR··on Basic income plan clearly rejected by Swiss voters
I was thinking that one would have paid off all mortgages by the time the children inherit the house.
_nedR··on Basic income plan clearly rejected by Swiss voters
If you were to have kids, think about the financial security owning a home provides them.
← PreviousPage 5 of 15Next →