Hacker Newsnew | past | comments | ask | show | jobs | submit | jrm4's commentslogin

Sure, but this is why free software/open source is so important (and why we dodged a bullet due to "AI" being invented in a mostly open source world.)

I just think we'll all have to get comfy fighting fire with fire.


It's funny, I'm so comfortable calling this guy an idiot purely based on the fact that I've taken up Bob Ross style painting in like the last 2 years.

Teaches you to pay attention to "objective" colors. And at night, guess what, the colors get more red and less blue. I don't have to pull out as much blue paint for the night scenes.

It would be utterly naive to not thing that there's -- perhaps purely "psychological" (not sure if that's the exact concept but hey) effect by making the "white" on your screen, look like like the "white" you will definitely see in real life, which is going to be orange-r.


To you.

Laptops exist.


This is a common answer but it does not apply to at least most of Europe. Because of regulations most banks require to install their app either on iOS or Android to act as a 2FA device. One of my banks gave me a hardware device 20 years ago. When its battery dies I'll have to use their app and my fingerprint.

If you really don't have an alternative in Europe, buy the cheapest Googled Android device (less than $100 or euros), and use that as a glorified 2FA device. It's not ideal because you have to pay for it, but on the other hand Android devices with unlockable bootloaders (mostly Google Pixels now) tend to be cheaper than iThings. A Pixel 9a or 10a running Graphene for everyday use plus a cheap Android phone that stays are home are still considerably cheaper than Apple and Samsung devices, and give the users far more privacy and freedom.

When I was still rooting it was possible to bypass this on a rooted device with enough effort. It wasn't unsecure either. Padentic corporate security doesn't really make us more secure. Just more lazy.

Most European banking apps work fine though on a relocked GrapheneOS phone.

https://privsec.dev/posts/android/banking-applications-compa...

I'm using my GrapheneOS phone to log on to their web app without issues (though I typically only do banking on my phone, much more secure).


How do you install the bank app if google does not allow you to install APKs manually / with a 3rd party store? You have to go with Google Play. Which requires a Google account. So I can't do it. That's the whole point of this thread: it would not be possible to use Android without a Google account.

Yes, that's the endgame, an Android device in a drawer at home. But what do I have to carry on my pocket to use the minimum amount of apps? Firefox, WhatsApp with video and audio calls, Telegram no video no audio, a mail client, a YouTube client (possibly not from YouTube), a maps and navigation app (for cars), phone calls, SMS.

YouTube on Firefox is a much better experience than the official YouTube app, so you can drop one from the list.

I'm using NewPipe and PipePipe. Both are better than the browser app.

Have you talked or met anyone born after the 90s? Everyone banks on their phone, it's the norm not the exception.

Edit: Someone also made a good point, one of my CC's I can barely even manage without the app since the website barely works.


I haven't really dived into Tailscale et al because I'm still using Tinc; and the bulk of this discussion continues to make me not want to.

What's the big deal here? Any good reason to switch (besides Tinc's obscurity?)


tinc is cool. Keep using it.

I didn't know that Obsidian worked that cleanly; I occasionally flirt with it but have been using https://zim-wiki.org for about a decade longer, so my muscle memory is there. I keep looking for reasons to switch but so far nothing yet has done that?

So, (especially after watching Bluesky / ATProto) I'm increasingly convinced that this is not a problem that needs solving.

Email is still a protocol, and the thing that ATProto is doing causes as many problems as it purports to solve.

Mostly because "decentralized identity" is still "identity." And the safest way to do identity is to have it be destructable and remakable on the fly.


> And the safest way to do identity is to have it be destructable and remakable on the fly.

It might be the safest, but it defeats lot of the purpose of identity. There is a reason it is a hassle to change your email address... so many services are tied to that identity. You can change it, but you have to change every service that is relying on it as your identity, and you still have to own your old email so you can prove to the service that you are the same person.

I am not sure how you could ever avoid this problem? The purpose of an identity is to be able to tell that one request is made by the same person who made a previous request... persistence is a requirement.


Yes. And as much as I hate "well, users should just be smarter and deal with inconvenience," I think it may fit here.

Identity is always hard, and I strongly doubt there is any great way that makes it "easier" and still safe.

Aka, yes please kill passkeys, or at least be super upfront and informative.

"When you use passkeys, you are giving your keys to Apple or Google, and they cannot guarantee safety."


It may be that different types of identity are preferable for different use cases, rather than converging on a single system.

> "When you use passkeys, you are giving your keys to Apple or Google, and they cannot guarantee safety."

Not true with hardware passkeys, which also add a true second factor. Central passkeys are a problem, though.


Have we learned nothing from GIMP? No, no we have not.

Git?

So everyone saying "oh but they told us this" is completely missing the point; it's like those weird logic problems where everyone on the island has a dot on their head or whatever.

There's a massive difference between "widely known" and "widely known that it's widely known."


uh oh

yeah, that's dangerous for me, this is the ONE that got me started


I trust this is getting attention and votes for the same reason I'm paying attention here -- to highlight the absolute mediocrity and blah-ness of this whole thing.

Like this was some deep insightful journey and not your entirely typical cheerleader corpo-speak.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: