HNHacker News
TopNewBestAskShowJobs

scient

378 karma · joined July 25, 2012

submissionscomments
scient··on T-Mobile Database Breach Exposes 2M Customers' Data
There is no such thing as identity theft protection. Its all snake oil.
scient··on Phone Numbers Were Never Meant as ID. Now We’re All at Risk
There are a couple of vendors out there who at least try to detect SIM swapping and traffic hijacking. It's better than nothing and eliminates the simplest attacks, but still has it flaws, including happy path case support (like only working on the network and needing a smart phone).
scient··on Phone Numbers Were Never Meant as ID. Now We’re All at Risk
All methods eventually have a flaw. The goal is to reduce the attack surface and increase the complexity of the attack, no to elemininate all vectors.
scient··on Discord does not allow 3rd party clients
Then use their client. Its a free service, what are you complaining about.
scient··on The US startup is disappearing
Blockchain as "major upcoming"? Like after all these startups have not managed to produce any substantial success stories and there are no real validations of a technological fit besides crypto-currency? Where IBM is desperate as hell in selling their blockchain crap to corporations and isnt really seeing success? Yeah, don't think the blockchain revolution you are waiting for is happening any time soon, if ever. ML and AI are sadly also more of a buzzword right now outside of a couple or large players, but at least its applicable in different areas.
scient··on Reddit DMs will not reach their destination if they contain certain text
More buzzwords.
scient··on Pwned Passwords in Practice: Real World Examples of Blocking the Worst Passwords
Sounds like a case of not handling the UX of the feature properly. What you can do is either allow them to unlock the account via email, or have a time-based unlock, or both. We do 72 hours or unlock it via email.
scient··on YouTube Music, a new music streaming service, is coming soon
Dont think thats really a thing outside of US (another thing the US is like awkwardly behind in).
scient··on Using the Web for a Day with JavaScript Turned Off
Most trackers have a way to handle non-JS clients by rendering a tracking pixel - a solution that has been out there for a long time now.
scient··on A blockchain is a specific set of choices suitable for a narrow set of use-cases
This is the problem - these blockchain ideologists only tend to see problems and solutions from the perspective of the actual cryptocurrency blockchains. Real world is sadly a little different...
scient··on A blockchain is a specific set of choices suitable for a narrow set of use-cases
Please do list a couple of useful solutions where blockchain is the right/better tool for the jobs and thats outside of crypto coins or secondary layer of payment abstraction (and even there any payment option could work better in a lot of the cases).
scient··on Why are diapers so expensive?
Coming from a former Soviet state, we did not have disposable diapers when me and my siblings were growing up. Washable diapers were the only option, and it was horrible. Both for the kids as well as the parents having to wash them all the time.

Im actually amazed that there are people today who think this is a good idea and want to go back to it. Seriously what?

scient··on Quit Social Media, Your Career May Depend on It (2016)
In my experience for whatever reason a lot of software engineers consider normal functional communication with their peers and managers as ass kissing. Is it because of being introverted?
scient··on The Market for Stolen Account Credentials
In the end its not the crypto that makes it more secure. Estonia still has a national identifier number, just like US has the SSN. The difference is that while I can know your name, DOB and the identifier (which actually contains your DOB in it), I cant easily pretend to be you. And this is because the process itself is different - when I got to open a bank account, I present my ID card, the bank can plug it in and pull up my profile from the central authority (ran by the government), and I need to pass the checks of being there in person, with a matching ID, which also checks out from the central system (including picture).

Combine this with for example strong proof via blockchain about who used to check your info and from where, and you are at a pretty good spot. Note that Estonia does not do that last part just yet.

As for the US, the chances of having a national ID card along with similar infrastructure are slim to none. So don't hold your breath about major changes any time soon. The best best would be to get closer to something like the above solution via private companies or maybe the credit bureaus themselves (once they are force to change their business model from aggregating and selling data without your consent).

scient··on Estonia is planning to launch Estcoin
E-Residency is still a solution looking for a problem, the program runners just dont want to admit it yet. Instead they sink more money into a pointless cause.

Estonia literally needs to make amendments to their constitution for this to work, yet they refuse to believe it yet. They also need to create actual incentives for people to create their company in Estonia (labour related taxes as pretty high there), as well as work out all the remote banking related issues (banks not wanting to open accounts unless you show up in-person).

scient··on Nano ID: A tiny, secure URL-friendly unique string ID generator for JavaScript
A bad a excuse for a bad library. See this time and time again in NodeJS though.
scient··on Equifax’s Maddening Unaccountability
And even after pushing out chip reader terminals and cards with chips, banks in the US refuse to institute mandatory PIN code entry on all payments with the chip - as its everywhere in Europe. So nothing really changed.
scient··on No matter what, Equifax may tell you you’ve been impacted by the hack
You open the account in person, by showing them your ID card. The bank has access to the central national database of IDs, so they can compare if the ID card shown by the person matches the information coming from the central db, matching the person showing it on the picture. Hence you have strong in-person proofing, that is now the basis for the 2FA.

Thats how it should be done, except in the US there is no way to check against a national database of IDs, not even on the state level with DMVs. You literally trust the plastic card the person shows you and thats where the problems start. Online its even worse.

scient··on The Equifax Breach Exposes America's Identity Crisis
There are legitimate use cases where collecting and storing (in some manner at least) is necessary. You cannot just stop companies from collecting information, and furthermore stop them from storing any of it. Thats just naive.
scient··on Al Gore: 'The rich have subverted all reason'
Funny. Software engineers complaining that someone talking about politics is as rich as the politicians. But you talking about politics on behalf of people who are way worse off than you is somehow different. Its not like engineers are the poorest workers...
scient··on Postage – A fast replacement for pgAdmin
A link to Github issues and a GH page with zero screenshots. Thats not how to promote your OS project :(
scient··on Amazon Hub
Since when does Amazon have their own delivery people? Sure you are not talking about a USPS/UPS worker here.
scient··on Amazon Hub
And yet where I live I get packages left at my door for days, noone is touching them, there are no bullet proof vending machines and people generally are well behaved and courteous.

This just to remind you that the US is huge, consists of 50 states and in most cases the states are very different from each others.

I'm not even an american and I'm offended about the generalization.

scient··on Amazon raised Prime Day prices, misleading consumers, says vendor
I think you forgot the /s
scient··on Tesla drops 7% after Goldman Sachs says the stock is worth $180
You say that as if they would be punished for that. And its not like they do this all the time...
scient··on Tesla drops 7% after Goldman Sachs says the stock is worth $180
The scenarios you described sound like straight from "The Innovators Dilemma". Except the companies thinking this way were disrupted out of business.
scient··on Others are speaking up about discrimination at Tesla
Dont think these companies want to hire people who freak out over meaningless things like this...
scient··on The $100B per year back pain industry is mostly a hoax
And I think people who make these kinds of ridiculous blanket statements are a joke.
scient··on The blockchain paradox: Why DLTs may do little to transform the economy
People who claim BTC is the next mainstream currency are delusional. Its an investment commodity right now, and its way too volatile, way too little regulated and capped too low to be a serious currency contender. Seriously, the real world does not work that way, and thats not necessarily a bad thing. This goes especially for the whole decentralized and uncontrolled/unregulated part - I see it as bad thing, a lot of the regulations are in place to avoid anarchy and protect the consumers (admittedly there are also regulations that totally screw the consumer in some cases).
scient··on The blockchain paradox: Why DLTs may do little to transform the economy
So why use blockchain? Whats the benefit? The only thing I can think of is proof of authentication attempts, a kind of a irrefutable log of some sort. But whats the benefit its providing, that we are lacking today?
← PreviousPage 3 of 6Next →