lhgaghl

"bye bye passwords, hello blocking IP addresses from viewing our blog"?

What exactly do you mean by poor quality? Have you ever run the OS? Do you have a reference to some results that reveal some aspect of it that is poor?

I'm having trouble reading this article. It seems to make a giant bar that takes up a large percentage of my screen as I scroll through it:

http://image.bayimg.com/6f1dce58aa37b2825e74cec05895180a1473...

Anyone know how to turn it off?

> Buffer bugs in C don't come from the language, they come from the tendency of C programmers to value performance highly.

You have to use other people's code / language constructs which are underspecified and/or you don't have time to fully understand. Throw in versioning to the equation and now the problem is exponentially worse. This is why C code will always be full of memory vulns. Heartbleed is a very oversimplified example of the problems in C.

This is why corporations with 12 million users need to establish personal relationships with every client. If that was the case, they'd have just known she was the real owner.

I can't see the page, says "403 forbidden"

> After seven years, exactly one person gets off the gov’t no-fly list

Sounds like they know what they're doing.

George and I trade Pokemon cards a lot. Daddy says I can't play with Pokemon cards anymore. That means I can't hang out with George.

Also, there are other countries besides the IRS one (with an order of magnitude more people).

This article is pure trash and you should kill yourself if you agree with it.

They may not have gone insane, but Sun Ra has been on Saturn.

or black metal

%25 pay cut for not showing up to pointless meetings? sheeeeit.

> .io

not sure if legit

> microwaves

wat.

Rephrased: it is a feature, but it implies a tradeoff: people who are considered more important than you control your money. One which I don't consider worth it. I've never had a problem with stolen assets of any kind other than in the physical world, and I consider my physical assets that were stolen fair, I would not want a God government who can see every single thing that happens in any place and any time so they can recover my physical assets.

And I can become a prostitute.

If I get robbed/assaulted, I can contact my pimp and he can go with his gangsters and kill the offender.

> There's no such thing with Bitcoin.

This is a feature.

It's not even clear what you're complaining about here. Exchanges get hacked because they suck. Banks don't affect the customer as often because they are old and already have been hacked many times before, and have all kinds of insurance and hand wavy ways to avoid liability when they actually get hacked.

It's as if you are discontent that you are now liable for walking across the road safely after being driven around by a private taxi all your life (if the taxi crashed, the company would not lose any reputation, it would be the driver's fault, despite the low wages paid to the driver, pushed to the limit time pressures on the drivers, the recent line of flawed cars they ordered and decided to keep to expenses, and you would die, and it would just be like any other day).

> Most of real world fraud is exactly this kind of stuff.

So what? Banks have the same problem. If I call up my bank and ask them to do something, they'll ask for a bunch of random information I didn't know I'm supposed to keep secret.

> Bitcoin solves a problem which is not actually a problem in real world.

What? It solves the problem where some incompetent fucks are in charge of your money and screw you over, which is exactly what happened to this company (except they trusted them with hosting instead of money)

This is Rogers you're talking about. The sell you a shitty expensive connection capped at 60GB, and then they hijack your DNS failures to resolve to their shitty ads page, and throttle your traffic depending on the protocol. If you drive down the street in my city you see wireless access points named "Rogers Sucks Ass".

> Normal banks simply reverse transactions if they are fraudulent.

That's not a feature.

What's easier to prevent?

a) leaking some long numbers

b) some tech support dude who just wants the boring work day to end so he can go play video games who doesn't know anything about you accidentally letting an imposter act on your behalf because the corporation uses subjective (and undocumented / secret) methods to verify their client's identity

> Are you sure you understand bitcoin well? If not, why not get out now?

This is precisely the reason I can't wait to get out of banks and health care. Bitcoin is a cakewalk.

These kinds of people are terrible coders. They are made aware of one possible thing that could go wrong in a piece of code they're writing, and once they avoid that trap, they magically think since they avoided that one pitfall, they are on top of their game, and then proceed complacently to write the rest of the code. Months later we find it is full of pitfalls which could have been avoided if they paid attention.

> No, I don't "don't like Haskell" for any reason, I just see many people talking about how cool and productive it is, so I want them to stop talking and show it in practice. Because, as I said, there aren't many (should I say "any"?) successful apps written in it, so it's a little hard for unenlightened people like me to grasp how good it is.

I can't even be bothered to look at what who is using what language for, so I'm not going to debate this... I use Haskell every day, as well as a bunch of other languages, some of which nobody heard of, and they all work fine.

> so why won't you prove on practice that Haskell is better?

Because I don't care?

> Because, once again, for PL "to be better" is to make its user more productive and more able to write quality software.

Which you can easily do in Standard ML with no surprises, because it's a straightforward simplistic language and it's been like that since the 70's. But you dismiss it because it's not popular or something (despite being used by hundreds of thousands of people).

> Python — way too slow

Do you have any results to show this? I already pointed out, even if the language is too slow, you can just run C or assembly or whatever in a separate address space for each CPU intensive process. Your claim implies that the latency of passing the output of the worker in C/assembly back to Python (and passing new input from Python to the worker) would be too high.

> Java — well, maybe, but it's not the perfection itself.

So... you agree?

> Writing GUI app? GUI bindings for Haskell are pretty awful and unnatural.

I've never had a problem with GUI coding in Haskell... Here's a few lines of some WX code I wrote:

    p <- panel f []
    startButton <- button p [text := "start"]
    stopButton <- button p [text := "stop"]

    set p [layout := row 5 [widget startButton, widget stopButton]

Seems pretty much like every other GUI stuff I used...

> Real time?

what.

> Sorry, optimizing Haskell is so unintuitive that I can't consider it.

I agree that space leaks are hard to fix / prevent, but meh, other mainstream languages have other problems that sum up to the same amount of pain.

> Plus it has big runtime and is lazy.

Big runtime? I'm not sure what you mean by this... In contrast, my web browser usually occupies a few hundred megabytes for trivial tasks.

> Something hightly concurrent? Not better than Erlang.

I'm not sure about that. Erlang has some very weird stuff going on (http://stackoverflow.com/search?q=user%3A2213023+[erlang]), and in Haskell you can program actor style pretty easily with channels/pattern matching, and then there's CSP, STM, Data Parallel Haskell, etc.

I heard there's this language called PHP and it's used by facebook and wikipedia. You might be interested in it.

> God, I hate that "link expired" stuff.

Heh, I use tor, and it just took me over 10 tries to login to reply to you (changing exit nodes to find one that isn't blocked, etc).

If you don't like Haskell for some reason, replace it with something else. Heck, a browser in pure JS would be preferable to a browser in C (note: it doesn't count if you have 50 libraries implementing audio/visual/crypto/compression written in C and linked into the same address space as the JS).

But it takes huge capital to implement a browser, and you'll still have the other issues like CSRF, clickjacking, phishing (each of which have been solved ages ago by waterken btw: http://waterken.sourceforge.net/web-key/), X.509 (which has been solved by tor hidden addresses and other systems like it), and other mystical issues that arise because of how incoherently-designed the web is.

Anyways, why do you think C would be any better for implementing a browser than any of these languages?

I was listening to this song while reading the page, goes good with the flashing background: http://www.youtube.com/watch?v=RBb8e7G4dBk

Off the top of my head, any of these would have been a much more sane choice: Standard ML, Ada, Java, concatenative languages, E, Lisp, Haskell, Erlang, Python.

> few people (including me) would accept a "security upgrade" which made my browser significantly slower and memory hungry.

I can't tell if this is a joke. You know practically website is constantly running the shittiest JS you can imagine (and sometimes Actionscript), right?

Even if the language somehow can't handle implementing a certain task efficiently, you could still make a separate OS process for say, decoding the video stream, and passing it back to the safe code.

If you think there is a technical reason that browsers/OS today are written in C/C++ you are wrong. The reasons are purely circumstantial. Also note that most C/C++ coders aren't aware that other languages even exist or are practical, so good luck getting them to switch.

> Just a traditional password reset email will do

Well yes, I would much prefer that to sending in a picture of my drivers license, only logging in from one IP address, etc. This only really happens with financial sites.

For normal sites, before there were captchas, they required email to sign up, in order to deter spam. Then when they got captchas they still required both, probably because they were thinking "oh yes 2 is better than 1", even though email verification does not deter spam one bit these days. On the other hand, in more recent times you now have all these sites requiring email for recovery. You can see where the dogma came about.

I myself would absolutely never want email recovery, simply because it links the accounts together unless I make a separate email for each, wastes my time (I never lose my passwords, and they are unique for every account), and now the email provider has access to my account.

If this isn't bad enough, facebook, google, and pretty much every mainstream email provider now require a cell phone to sign up, and sends a verification code to your cell (this may be because I use tor).

It only seems to be going downhill. There's no reason not to be infuriated.

On the upside, South Korea recently abolished its law that users should use their id online:

http://online.wsj.com/news/articles/SB1000087239639044408290...

... but it's replaced with SMS:

https://en.wikipedia.org/wiki/Resident_registration_number#O...

Yes, because users would hate so much to be told explicitly that all they need to remember is a password. They much rather have 20 different pieces of information, some combinations of which if they share, people can take over their accounts on various services. </sarcasm>

The problem is not so much that the systems suck, the problem is there's no way for people like me to take on the responsibility and "risk" of just having a simple way to authenticate myself.

For example, in my bank I would opt into having all "suspicious transaction" types of protections turned off, but if I went to my local branch and asked for that, they'd just get confused and think I'm trying to commit fraud.

> it's still better to keep them on board and making money

Maybe better for you, assuming there would be a net loss from turning off the bullshit policy. Definitely not better for customers, as it enables theft, which has the same consequence as forgetting a password.

BTW, this comment was meant to be in response to the other thread "How I Lost My $50,000 Twitter Username (medium.com)"

https://news.ycombinator.com/item?id=7141532

But they're both pretty much the same problem. Service has complex/secret authentication policy, so users have no chance to be secure.