HNHacker News
TopNewBestAskShowJobs

oss2020

22 karma · joined December 21, 2020

submissionscomments
oss2020··on Masked email from Fastmail and 1Password
I use Apple's Hide My Email to sign up on websites where I previously would have used a Temp-Mail-Service such as 10MinuteMail. These are websites I want to use anonymously (Hackernews for example). It's more convenient and they give you the option to reactivate disabled aliases later (useful if you need password reset). I don't think they made it to replace your primary email, although you could use it that way.
oss2020··on USA Today resists FBI subpoena seeking IP addresses of readers of a story
Advertisers don't raid your house.
oss2020··on Big list of HTTP static server one-liners
With that logic there are no one-liners. Even binary code is just an abstraction interpreted by microcode.

The point is that there is a working http server already installed on your machine. And you just need to run this one simple, memorable command to use it.

Very useful if you just want to quickly copy some files from A to B in your LAN or WAN (wouldn't use it over Internet because not encrypted).

oss2020··on Big list of HTTP static server one-liners
Python 2 was blocking. Python 3 is non-blocking.
oss2020··on Google has turned off access to sync features for Chromium
Brave and Opera both use their own solutions for syncing.

In fact, can anyone name a browser except Chromium that uses Chrome's sync servers for syncing? Because I can't.

Also your point about backwards compatibility doesn't really make sense as Google has plenty of ways to detect browser version and capabilities of the sync engine (the sync engine sends that info to the sync server voluntarily right now).

Also Google can't just disable it's own API keys every time there is an update because this would shut down a large number of it's own users too. They would need to wait at least 1-3 months to avoid larger disruptions and this would give others more than enough time to fetch the latest keys (and if there is interest, there will always be someone who does that and posts them).

oss2020··on Mnm – an open source project to replace email and SMTP
Real transport level security will be possible with MTA-STS (rfc8461). Use DNSSEC, enforce TLS, and verify server certificates. Also I haven't had much trouble with spam recently (spam filter works fine).
oss2020··on Automated Symbolic Verification of Telegram's MTProto 2.0
There is also not-metadata data that WhatsApp stores (group names, status updates, ...). But I think the point is that if you're using WhatsApp (especially group chats), there is a high chance that Facebook, Google AND Apple end up storing your personal data - even if Facebook might not have access to message contents (but Google and Apple still do). Still your data is all over the place. Doesn't matter if you disabled cloud backups because the people you chat with most likely didn't. With Telegram your data is stored on their servers - but but only on their servers.
oss2020··on Threema apps are Open Source
From README.md ( https://github.com/threema-ch/threema-android ):

> This source code repository will be updated for every public non-beta release. There will be one commit per released version. [...] For the time being, we do not accept contributions via GitHub. [...] To report bugs and request new features, please contact the Threema support team through threema.ch/support.

Commits are useless (one commit per release), issue tracker on GitHub is disabled, contributions not public, no public discussions. I like Threema and appreciate them open sourcing their apps, but this is not what I call open source development. I really hope they will reconsider this. Both Threema and the community could benefit from this, but dumping the source code here and then isn't going to cut it when the competition is meanwhile doing real open source development. But at least we have reproducible builds now, this is still a great step forward.