HNHacker News
TopNewBestAskShowJobs

krn

5,759 karma · joined December 6, 2010

submissionscomments
krn··on Estonia: Become an E-Resident
> I understand you are used to it, but it's really bad optics from the outside. How can there be people in their 30s without a citizenship?

Technically, Estonia is not the successor state of the USSR, Russia is. If a person was born in the USSR, and only speaks the official language of the successor state of the USSR, then that person should probably be a Russian citizen, not Estonian.

krn··on Estonia: Become an E-Resident
> A quick question - how can a person born in a Baltic state and living there their whole life end up without citizenship?

It should only be possible, if that person was born in Soviet Union (that is, before 1990), and doesn't speak the official language of the country he / she is living in.

krn··on Estonia: Become an E-Resident
> AFAIK all Baltic states have a minority with limited rights, so they are far from true democracy.

It would be interesting to see any reputable sources claiming that Lithuania, Latvia and Estonia are "far from true democracies".

krn··on Estonia: Become an E-Resident
20% flat rate.
krn··on Estonia: Become an E-Resident
Estonia can be considered a Nordic country. Many people from Finland have moved to Tallinn for lower taxes and lower prices, because it's just two hours by ferry away from Helsinki.
krn··on Estonia: Become an E-Resident
https://www.numbeo.com/cost-of-living/in/Tallinn?displayCurr...
krn··on Estonia: Become an E-Resident
My entire point was, that the Estonian E-Residency is only worth it, if you are willing to relocate to Estonia. If you want to spend more than 183 days per year in some other country, then the Estonian E-Residency is not the right choice.
krn··on Estonia: Become an E-Resident
It might be a good choice for a digital nomad with a short-term horizon, but if you want to stay somewhere else for more than 183 days per year, you will be considered a tax resident in that country, making your Dubai Golden Visa worthless.
krn··on Estonia: Become an E-Resident
My conclusion about the Estonian E-Residency program is that it is essentially useless, unless you want to become an Estonian tax resident by physically relocating to Estonia.

And there is a good reason why you would like to do that[1]:

> For the ninth year in a row, Estonia has the best tax code in the OECD.

For instance, if you live in Estonia, you can use an Estonian limited liability company to manage all your investments without paying any taxes at all, as long as you don't withdraw any money from it.

[1] https://taxfoundation.org/publications/international-tax-com...

krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
My key point was "unless there is a good reason not to". And in many cases there is a good reason not to use E2E encryption, like the example you have given. But in the case of Ntfy, E2E encryption would be a perfect fit, and eliminate any need for self-hosting.
krn··on Meta lays off 11,000 people
When you realize that WhatsApp had 450 million monthly active users and only 55 employees at the time of its acquisition by Facebook in 2014, you start to think that those tens of thousands of employees might be more needed for Meta's ad business.
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
Private messaging is one of the primary use cases for E2E encryption in the entire tech industry.
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
> Are you counting HTTPS as “E2E encrypted”?

No.

> Because if not, consider that we do private communication over mere HTTPS all day long. Me loading the HN web page and having my own personal rendering of it with my user cookie header and all my upvote/downvote/karma/profile state is private communication, for example.

Because there is a good reason for it: it wouldn't work well with E2E encryption.

krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
> But personally - I don't really find your point sensible. You have no use-case, you have no threat model [...]

My point is very clear and simple: all private communication on the internet should be E2E encrypted by default, unless there is a good reason not to.

> [...] say "if they are doing it, it must be easy" - Ignoring that they are literally using the difficulty of doing it as the distinguishing factor for their product.

I am not claiming that it's easy, but there has been plenty of open-source projects launched with E2E encryption by default in the past few years.

https://standardnotes.com/ is a good example.

https://stingle.org/ is another.

https://ente.io/ is one more.

krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
Signal does it just fine.
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
Well, thinking logically: if everyone really got what they wanted, that question wouldn't be in the FAQ, would it?
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
> You must trust that the contributors are trustworthy

In theory, that's only the case if you are unable to review the code yourself.

In practice, it's like saying that TLS encryption is pointless, because one needs to trust every single person who implements it.

krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
That's exactly how Signal and Keybase work, and nobody has any problems with that.
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
> Are you working out the details on recovery and storage, handling lost devices, configuring a communication channel for sharing certs/keys, managing several crypto dependencies and libraries - all so that you can go "Hey - what's up!" in a notification to your phone?

In 2022, there is no need to invent anything new about E2E encryption. There are many successful open-source examples, including Keybase and Firefox Sync.

There is no question that it adds development overhead, but I personally wouldn't even run a public service for others without E2E encryption.

> Or should you just stop whining - accept that this is free - and take the authors advice and host it yourself?

I am not attacking the author, nor do I currently care about this particular service he is providing.

This is Hacker News, a discussion platform, and I am raising a question about software development in general.

krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
E2E encryption happens on the client side, not on the server side. Therefore, no need to trust anybody, as long as the software is open-source.
krn··on Ntfy.sh – Send push notifications to your phone via PUT/POST
Why couldn't the entire system be E2E encrypted by default, though? In 2022, that's my standard expectation from any service. Even such things as Pocket / Instapaper / Raindrop should come with E2E encryption by default. It's better for the service provider, too: no issues with GDPR, or in case of a database hack.
krn··on Ubuntu 22.10 Kinetic Kudu
> Swapped to Arch and haven't looked back yet, Arch took me a lot more work to get set up but once it was it's been pretty invisible, which is how I like my OS to be.

I think that Fedora Workstation[1] is a #1 alternative to Ubuntu in terms of smoothness and ease of use. And if .deb is a requirement – then simply Debian.

[1] https://getfedora.org/en/workstation/

krn··on Rammstein Get Restraining Order Blocking Viagogo from Reselling Concert Tickets
> What makes you think there would be any remaining tickets?

Again, there could be a rule, that after the first 30-50% tickets are sold, all the remaining tickets are sold at the base price (let's say, $50).

It's just a trick to force resellers out of business: because there is a limited number of people who can afford to buy tickets at heavily inflated prices.

krn··on Rammstein Get Restraining Order Blocking Viagogo from Reselling Concert Tickets
> Your answer is to become the reseller and charge more putting the reseller out of business?

No, that's what the promoter should do.

> Now you have increased profits short term and increased risks. And only rich fans can attend. This works for some stars and against other star'a brand.

No, it's doesn't have to be this way. Price could start at $1000, but the minimum could be as low as $50.

Yes, the rich fans would get their tickets first, but after the first 50% tickets are sold, all the remaining tickets could cost $50.

This way, at least theoretically, all the rich fans would get their tickets directly, and the resellers would go out of business.

krn··on Rammstein Get Restraining Order Blocking Viagogo from Reselling Concert Tickets
> [...] imagining how to maximize the profits for a single event

No, I am not interested in maximizing profits. I am only interested in eliminating resellers.

> Circumstances such as the fact events are generally a part of tours, that the artists likely want a diverse audience, that event sales have side effects on future sales and marketing, etc etc.

That's exactly my point: if currently tickets are grabbed by automated systems and resold for much higher prices, none of these goals are reached by the artists.

krn··on Rammstein Get Restraining Order Blocking Viagogo from Reselling Concert Tickets
I was wondering, if ticket resale is a viable business model only because tickets are not priced properly in the first place.

What if tickets were sold using a reverse auction system[1] instead? For instance, tickets could start at $1000 and then go down by $1 every hour until the minimum price set by the promoter is reached – or all the tickets are sold out.

This way, even if resellers bought a huge number of tickets, it's possible that they wouldn't be able to resell them for a large enough profit to cover the risk.

[1] https://en.wikipedia.org/wiki/Dutch_auction

krn··on Expelling Russia from the UN Security Council – A How-To Guide
> I find it kind of astonishing people are citing Ukrainian numbers as anything short of blatant propaganda, just like Russian ones.

US reports are worthless, because it has no soldiers on the ground.

The extremely high Russian casualty rate has been reported by multiple independent sources from inside Russia.

For instance:

> "Everyone went to the SVO," Astashov told RFE/RL, using the acronym for "special military operation," the euphemism the Kremlin has insisted on using when discussing the war in Ukraine.

> According to Astashov, the size of the brigade when it deployed was about 1,500 troops. The total number of dead, by Astashov's estimate: "At least several hundred."

https://www.rferl.org/a/russia-army-casualty-rate-64th-briga...

Also, many huge Russian loses in Ukraine were confirmed by NATO countries with visuals:

> The British defense ministry on Friday said satellite imagery has confirmed that Ukrainian forces decimated a Russian battalion as it tried to cross a series of pontoon bridges over a river in northeast Ukraine earlier this week, a dramatic setback for Russian forces already struggling to make significant progress along the eastern front.

> Russian battalion groups generally have between 700 and 1,000 men.

https://www.nytimes.com/2022/05/13/world/europe/ukraine-russ...

krn··on Expelling Russia from the UN Security Council – A How-To Guide
If Russia wasn't a permanent member of the UN Security Council, the UN Security Council could have made decisions that prevented the invasion of Ukraine without any agreement from Russia.
krn··on Expelling Russia from the UN Security Council – A How-To Guide
The numbers are exactly the same – only the number of wounded Russian soldiers (175,740) is missing in your source.

(Maybe because Ukraine's Ministry of Defence is only counting complete "liquidations".)

krn··on Expelling Russia from the UN Security Council – A How-To Guide
Well, Taiwan also had a permanent seat at the UN Security Council, had been sending its representatives for more than 20 years, and other members had no objections. But one day that seat was taken away from them and given to China.
← PreviousPage 2 of 29Next →