HNHacker News
TopNewBestAskShowJobs

johnfonesca

140 karma · joined September 4, 2022

Founder of Bulksign, the digital signatures platform for everyone

https://bulksign.com

submissionscomments
johnfonesca··on How we enforce .NET coding standards to improve productivity
>But all projects need to have the same formatting and style.That too can be easily done with one nuget using msbuild.

That's like using a car for "traveling" 3 meters. Why not just use dotnet format + .editorconfig , they were created just for this purpose.

johnfonesca··on Microsoft is moving antivirus providers out of the Windows kernel
> HDCP is already cracked

It's being 15 years already

johnfonesca··on CrowdStrike debacle provides road map of American vulnerabilities to adversaries
>Agreed, they should not be using Windows in the first place

Crowdstrike borked RHEL 1 month ago https://access.redhat.com/solutions/7068083 Literally the same situation, unbootable machines.

The reality is that shitty software broke everything. Why do we have to drag the OS into this?

johnfonesca··on [dead]
Twitter employees were asked to print some of their best code and bring it for review by Musk.
johnfonesca··on The young people sifting through the internet's worst horrors
>Like Cthulhu

Cthulhu is definitely less evil than Meta.

johnfonesca··on How to install Windows 11 on a device that does not meet Windows 11 requirements
How effective is TPM 2.0 compared to the original ? Are there any reports that demonstrate its effectiveness ?

If a specific version of TPM becomes required to use future versions of Windows, we will have swappable TPM chips ? Eg update your TPM chip just like you update your GPU :)

johnfonesca··on Add dark mode to your website with a single line of code
And the JS file "weights" 4 Kb.
johnfonesca··on Last Chance to fix eIDAS: Secret EU law threatens Internet security
The ETSI checker you have linked doesn't have anything to do with CA API interoperability and "switch document signer provider". That's just a basic tool which validates if a signature is PADES/ETSI compliant or not.

The real value in eIDAS would be "unlocked" if they would release a proper API specification with which a digital signatures application would integrate with any EIDAS CA to emit/sign certificates. And then enforce that any eIDAS compliant CA would implement this API.

In practice that means any company/digital signatures product could do a integration with this API once and then be able to use ANY certification authority they want/need/offer best prices for certificates.

Without this API, eIDAS is just a marketing moniker because the power belongs to the selected Certification Authorities. They set the prices, they choose WHOM can integrate with them to isse certificates and there is NO interoperability between them. This doesnt allow for a open market and makes the top players control everything while shouting "standards" and "eIDAS".....

johnfonesca··on Last Chance to fix eIDAS: Secret EU law threatens Internet security
>it makes it easy to switch document signer provider etc since they all are forced to implement the same interface.

eIDAS was introduced in 2016. Now 7 years later there still isn't a API specification for interoperability (there are drawings though https://blog.eid.as/new-apis-for-the-eidas-ecosystem/ )

In the meantime, any digital signature done in EU must be done with a certificate issued only by the "select" CA to be considered "valid".

johnfonesca··on Last Chance to fix eIDAS: Secret EU law threatens Internet security
eIDAS is a cartel created to protect the business interests of EU biggest certification authorities.
johnfonesca··on Last Chance to fix eIDAS: Secret EU law threatens Internet security
>Which is another way of saying "expensive certificates".

True, basically eIDAS is a cartel. With the help of EU legislation, some Certification Authorities banded together and are now saying that certificates emited by anyone but them are not good. And obviously they fully controll the pricing for the "good" certificates.

johnfonesca··on Show HN: OpenSign – Open source alternative to DocuSign
At bulksign.com we have this feature, it's called "Local Certificate" signature.
johnfonesca··on Show HN: OpenSign – Open source alternative to DocuSign
>This ensures that the signer cannot revoke the documents already signed. If the receiving party tries to modify the document, the signature becomes invalid

This,fortunately, is a feature of the PDF digital signatures standard.

johnfonesca··on Multifault earthquake threat for Seattle region revealed by mass tree mortality
Dimmu Borgir presents their new album "Undying Chainsaw"...
johnfonesca··on eSignature Beta for Google Docs and Google Drive
We are developing a digital signatures solution, https://bulksign.com which also has a on-premise version (in addition to SAAS). In Europe, at least, we see an increase in interest for customers having the solution installed on their own servers for security reasons. So more people become aware that sending your confidential documents to a 3rd party is not that great security wise.
johnfonesca··on Docuseal: Open-source DocuSign alternative
Our product Bulksign https://bulksign.com does this, the name of the product is directly inspired by that feature (sending same documents for signature to hundreds of recipients).
johnfonesca··on I Still Use Windows 95 (2008)
As a KDE user i agree with this point of view. KDE is the most customizabile DE ever created. You can tweak the crap out of it to make it look and behave EXACTLY the way you want it. And, from my experience, the performance of the current 5.x version (running on Wayland) is very good.
johnfonesca··on Microsoft will upgrade Windows 10 21H2 users whether they like it or not
As a user, hanging on to a arbitrary and unsupported middle of the road version of Windows 10 is dumb anyway.

Either update to latest or move to Windows 11 or Linux.

johnfonesca··on A detailed comparison of REST and gRPC
>What is openAPI of gRPC?

The proto file. Grab that , use protoc to generate bindings for your language and off you go....

johnfonesca··on Valve Restricts Accounts of 2500 Users Who Marked a Negative Game Review Useful
>How is it different than having to use GOG's website to install a purchase you made or download an updated version?

You buy game on GOG, dowload the installers, move it to a external HDD and you can install that game forever. This is the only thing that is actually DRM free.

Needless to say, you can't to that with ANY other store (be it Steam, Epic etc). All of them requires you to install their crap to access your bought games and they don't give you full offline installers.

johnfonesca··on Is it time to open source SublimeText?
"I feel that open sourcing SublimeText is the only way for SubmlineText to be relevant and compete against VSCode."

The SublimeText people make a living by developing and selling a honest product (and they're probably happy doing that).

There's nothing wrong with not competing with VSCode.

johnfonesca··on Is it time to open source SublimeText?
Some variant of BSD probably...
johnfonesca··on Privatizing our digital identities
Speaking as a application developer (digital signatures solution) which has to integrate with government related entities, i'd love an official government-run authentication. Just give me an OAuth endpoint for the government solution which allows me to authenticate users and it will make the life simpler for everyone.
johnfonesca··on Hacking Your Keyboard with Karabiner
I'm doing the same things with Autohotkey but in a much less convoluted way.
johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
Good catch, it is fixed now and everything is in English. Thank you for this.
johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
Thank you for providing feedback, we will improve UW support for the landing page.
johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
Yes, we actually have a mass download application (it's Windows only so far) which downloads all signed PDF files.

https://bulksign.com/docs/EnvelopeDownloader.htm

johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
Thank you for providing constructive feedback.
johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
My company is developing a digital signatures platform called Bulksign https://bulksign.com

We want to encourage broader use of advanced digital signatures and we are giving the on-premise version of this platform for FREE to any NON-PROFIT organization from anywhere in the world which wants it.

With droughts and up to 10l of water being used to make 1 sheet of A4 paper, i think natural resources are better spent elsewhere and digital documents and digital signatures should become the norm.

johnfonesca··on DocuSign to cut workforce by 9% as part of restructuring plan
I'm very curios how many developers DocuSign has.

At Bulksign https://bulksign.com, we're building a digital signatures platform which has comparable features with a tiny team.

Page 1 of 2Next →