Hacker News new | past | comments | ask | show | jobs | submit | bahjoite's comments login

"And this kind of pedantry feels like a tactic."

Astonishing that this was the response to a comment which offered-up le mot juste.


The whole point of the article is that not everybody is able to use javascript, for a variety of reasons, and it makes perfect sense for apps to provide as close to equivalent functionality as is practicable.


For PHPers and lovers of Free Software, Eclipse and PHP Developer Tools (PDT) are very fine tools. Long live Eclipse!


Eclipse PDT (ex)user here. PDT worked like a charm until eclipse Mars. PDT on Neo and Oxygen are pretty bad: PHPCS / PHPMD is a nightmare to configure and xdebug sometimes works, sometimes not.

I had to change to PHP Storm, which is, IMHO, the best PHP IDE so far, and worth the price.


Someone should add a "Has my hashed password been broken?" and an opt-in notification when one's password is eventually revealed.

Last person standing gets a prize.


Everyone who uses a password manager would win


Using a password manager doesn't make you immune to having your credentials leaked if a sites database is breached...


Uh... he never said it did? Just that yours would be the last hash to be cracked.


then why would that password tresor user win, after his credentials were leaked by a database breach -- before other select people that weren't compromised but abstained from said software.

Its generally incomprehensible to me why some people don't want to use password tresors -- its so much easier after all - but his argument was flawed.


Because parent said there would be a competition for whose password is cracked last.

My 16 char fully randomized passwords will not be cracked, so I win, along with everyone else using a password manager?


What's a password tresor? Did you mean password manager? Wiktionary tells me it means "treasure" in Catalan and Old French.


Tresor means safe in german so maybe he is a german that substituted the z in trezor


It also means "storehouse", so he probably means password manager.


I think he meant this: https://trezor.io/

And more specifically: https://trezor.io/passwords/


I meant password manager/safe.

Sorry for that mix up.


It actually does, provided the passwords aren't stored in plaintext.

Even something ridiculously weak like a SHA-1 hash isn't going to be cracked if the password is 16 characters long and completely random.


provided:

- the passwords aren't stored in plaintext or any other compromised hashing mechanism

- you autogenerated your password

- your password manager does not get compromised

saying "it actually does" is a bit of absolutist stretch...


Furthermore, none of this is a side-effect of using a password manager. It just makes doing so more convenient.


Within a margin of error, zero people can remember 20 16-character random alphanumeric passwords. Therefore it is only possible using some sort of password manager, whether it be something like 1password or an old-fashioned notebook.


You need to specify your margin of error. ± the full population of humans on Earth is "a margin of error".

I may be an outlier, but I certainly remember 10+ 20-25 character random full-printable-ASCII passwords, some of which don't let a password manager handle them, others which I don't want to have in a manager. And then there's my password manager master password, which is close to 70 characters long.

And I have shitty memory—I wouldn't be able to remember what happened more than a few days ago if my life depended on it.


> Within a margin of error, [the value of a measure is] zero.

Nitpick: Zero does not have a magnitude, so "a margin of error" is not remotely well-defined here.


Nitpick nitpick: margin of error can be either absolute or relative.


Nitpick nitpick nitpick: "margin of error" without any value effectively means "the following value has no meaning at all", as the margin of error is unspecified.


Also, 1Password has already integrated this into version 7 (in beta). It will let you know if any of your passwords are on HiBP


I'm still on 4, the non cloud version, so I probably don't get the fancy feature. :(


What happens to your passwords if you stop paying for the cloud version?


The apps become read-only, with export functions.

Source: https://support.1password.com/membership-billing-policy/


I still think algorithmic passwords are safer. I could get access to all of your passwords via a simple keylogger to scrape your manager's master password. There's no way you can get at mine because the master password is the algorithm in my brain. You could try to get 2-3 of my existing passwords and reverse engineer my algorithm, but in the words of Liam Neeson: "Good luck"


Well there's this https://spycloud.com/


Remove ghostery and install privacy badger instead https://www.eff.org/privacybadger


I rolled with the Badger for a while, but I've moved away from it and toward a more network wide approach. Can't install plugins on my devices, and I don't want thirteen different browsers on my tablet. And my Xbox is stuck with Internet Explo-- I mean Microsoft Edge -- so I need a more comprehensive solution. And this article only points out more reasons why that is becoming necessary.

But my stack is ugly and kludgy and not fit for regular human consumption. We need a comprehensive community effort to make it sexy and easy.


Maybe the pihole is for you, then? Certainly the price is right to try it.

https://pi-hole.net/


Pi-hole is absolutely the way to go. Not only for the ad-blocking, but for checking to see where your devices 'phone home' to (and optionally blocking that, too).

I've got it running in a Linux container on a Turris Omnia and it blocks over 90% of requests, with nothing to install on the devices.



Same. And with nearly thirteen thousand lines in the source of the page you'd think the text would be there too.

edit: oh, there it is, 25 lines beginning at line 8201.


> oh, there it is, 25 lines beginning at line 8201.

This comment made me laugh with the tragedy that is the modern web.


People should send calling cards ("Hi, it's so-and-so, wish to call on you at your convenience") and wait for a response. Same for telephones (send an email/text message first).


Something approaching Utopia arises on island owned by its residents.



I wonder if Open Observatory of Network Interference (OONI) could help.

https://ooni.torproject.org/


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: