Hacker News Reader

easternon A Guide to the Breads of India

English-speaking Indian living in India here, been eating rotis, naans, parathas, bhatirey, dosa, appams every day for half a century.

ALWAYS thought of all these as Indian breads. So does everyone else. For example, look at the menu of a famous Indian restaurant: https://www.zomato.com/ncr/bukhara-itc-maurya-chanakyapuri-n...

There are countless other menus on that site that do the same.

The article gets it absolutely correct.

easternon Pervasive Sham Deals at Wells Fargo, and No One Noticed?

Out of those 262,500, how many would be in consumer-facing sales jobs where an opportunity to run these scams existed? One should look at 5,000 as a percentage of /that/ number.

easternon FBI’s Comey Concedes Mistake Was Made Over iPhone in San Bernardino Case

Read that as FBI's Comedy

easternon The Tech Bust of 2015

Indeed. Microsoft paid it's first dividend only in 2003, a good 17 years after it IPO'ed. http://www.nasdaq.com/symbol/msft/dividend-history

There's this too: http://www.nasdaq.com/symbol/goog/dividend-history

easternon Show HN: My Personal Hacker News Reader

Or, change the title to 'Show the subset of HN that has docker installed: My Personal Hacker News Reader'?

easternon SQRL - Replacement for usernames and passwords

The casual thief case is trivial. Surely, clef's goal includes protection against a somewhat more sophisticated adversary who is targeting you, specifically.

Someone gets some malware on to the phone and gets the run of it. Records the pin, later steals the phone, or is able to replicate the entire device.

This could be guarded against if the pin changed every time and was delivered through an independent channel, which is what 2FA if all about. A complete, undetected compromise of a single device or a single information channel should not be able to defeat 2FA. That doesn't appear to be the case here.

easternon SQRL - Replacement for usernames and passwords

Possession of the device and typing a PIN into the _same_ device does not qualify as 2FA.

It's not 2FA unless information flows between the user and the authenticator through two independent routes. For example, in Twitter's (and others') 2FA, information must flow between Twitter's servers and the user through the Twitter UI as well as through a GSM text message. That's 2FA.