greatjack613

>>When It’s ‘Just’ an API Server: Rails has less to offer an API server that speaks JSON over the wire. A lot of its HTTP security doesn’t matter for that case (e.g. SQL injection safeguards, XSS prevention.)

I disagree on the SQL injection part, Api calls can contain user input which in turn can be used to perform SQL injection, I am not sure what the difference between a website and an api server is in regard to this concern.

Why not?

Thank you for the well written and thought out response. I do agree with you that there are users who would post that in good faith, and I think your 4 categories of people make sense.

My concern was based on intuition which in turn was based on the fact that I have seen a lot more pro ccp comments in recent months on HN, as well as seeing that people who openly question the ccp in ways such as their human rights records, diversity, IP theft, etc be downvoted when raising these points. Although this may be anecdotal and is definitely not proof of interference, I thought it would be wise to finally raise the issue with you.

Thank you for taking a look at this, and for all the work you do on keeping HN a healthy environment.

This piece smells like ccp propaganda. Read the above after considering those muslims who are chained in a ccp re-education center in china.

@Dang can you investigate this. I feel like the ccp is directly targeting hacker news to spread misinformation. Very scary.

Patently false, the USA does not have conquer ambitions, all of its actions can be traced back to self defense from the beginning of WW2 to today.

China on the other hand, screams everyday how it wants to own taiwan. Aggressively threatens any country who dares to touch the south china seas, which it does not own.

Really cool idea. What sort of accuracy did you achieve?

Valid point, but I prefer a democratic govt spying on me then a totalitarian govt with world conquer ambitions, and a history of suppressing minorities

Not surprised at all, Tik Tok has clear ties to china and with all things china comes the governments control. chances are china was using Tik Tok as a global surveillance tool.

Incredible, so excited to see wireguard start making it into mainstream distros.

Personally I see this as the most exciting thing to happen to linux in the past 2 - 3 years.

correct, unless he bought on margin, which should have triggered a margin call when he was unable to cover his position, but still unclear.

Not sure why you were downvoted, this is a great point.

Another addendum is that it does not trigger the authorize keys dialog on my android device, which is further proof that it is reading keys that are already authorized from the computer

I have heard stories from friends who when they were interviewed by huawei were asked what IP they can contribute from their old company to them. If this is not indicitive of Huaweis intentions, I do not know what is. They are a threat to everything we hold dear.

I disagree, Huawei has a track record of IP theft, fraud, and sanctions violations. The time has come to reign them in.

I know many great chinese engineers and all of them in the tech industry are enraged with how huawei treats IP. They made it very clear to me that they think the U.S is being to lenient with them, and as a proxy of the chinese government, it is time to take them down.

Newbie here,

Can someone explain why webrtc needs a server and how Janus fulfills this role?

As far as I understand webrtc is meant to be peer to peer with minimal server signaling, so what role does a WebRTC server play?

Really happy to hear this. I have loved next dns since its start, not only for their product, but also due to the fact is is a clean sustainable business. No need for ads, a generous free tier, and a cheap full featured paid tiered. This is the way I would like to see most SaaS's go

This - golden

Privacy it may be a plus since in theory notarization provides some protection.

Speed, definitely not, this is going to make things slowwwww

Honestly if this was a company other then zoom that was being stifled, I would agree. But come on a chinese owned mafia company which routes all of your video through chinese servers so that xi the mad man can create a profile of all americans!! That kind of innovation I want stifled.

That sounds interesting.

Can you elaborate on which attacks userland system are susceptible to that a kernel is not?

> It’s kernel-based which reduces attack surface and can be ran in virtually any device.

Excuse my ignorance, but can someone explain why a kernel based networking stack has less of an attack surface then a user-space based stack?

I mean logically user-space should be more secure no?

This has so many ramifications:

1. Oems will start getting on board with AMD and we will finally gets 1st tier designs like the xps series with AMD chips.

2. Laptops were the last stronghold where intels performance was still higher, now that AMD has conquered this tower the 'intel' castle is ready to be invaded.

3. The increased competition should mean that top chip laptop prices will start dropping. Cheaper notebooks.

Overall this is incredible. Great job AMD!

Finally some proof that Huawei does have back doors in their network equipment.

In part 3 https://0x90.psaux.io/2020/03/22/Taking-Back-What-Is-Already... the author rights that a Huawei engineer has an authorized ssh key that would allow them to access your router.

Just Wow!

Sounds great in concept, but I fear that commercializing such a thing will bring mountains of lawyers against you.

Honestly the points are valid but the solutions stated suck.

Use a new version of zoom?????? Seriously, I mean well duh.

Use a different device to check email??

Very disappointed with the conclusion, I was expecting some way to go into settings and disable all of the tracking garbage.

Such a true point.

It amazes me why every site seems to need the latest and greatest framework just to tell me a paragraph of text.

We have to stop teaching junior devs react and start teaching them more static site generators.

I personally use hugo and love it.

As someone who started programming in VB.NET, this is so true.

It was a great language for beginners that also had enough oomph to build commercial applications, everyone who I spoke to who actually used it loved it.

Why a 1 trillion dollar company like microsoft can't hire 5 dedicated devs is beyond me.

As much as the essential phone lacked, the clean android, edge to edge display, and ceramic feel were really awesome.

This is really sad news for me to hear.

I currently use the ph-1 as my android developer device and am really disappointed that we are not getting a successor.

Any recommendations for a new android device that has a clean non bloated android build, as well as long term android updates?

100%, I was one of the many vocal devs on the android bug report who complained about the change of scoped storage.

They caved in for the current release, but they are going to force it in android 11.

On the bright side I think this will cause android engineers to become more of a specialty as the platform migrates more and more from just another java implementation to a whole new world of apis!

of course, but the burden of proof is on the dealer