Hacker News new | past | comments | ask | show | jobs | submit | mid-kid's comments login

why bother infering such intent when the obvious answer - that they simply forgot about it with no ill intentions - is right there?

Requiring people to advocate for their changes is not ill-intent. It handles all cases such as forgetting/missing a patch, and disagreement whether something is needed. The point is there's no system in place to track which patches "should ideally be included but weren't for some reason", it's up for the people who need them to push for them.

All you need to sidestep those laws is a little prompt that asks you if you're 18, you don't need to require a login. Unless you're talking about recent US laws.


This is the dream of any system's programmer. Also their demise...


yeah, you can't update an app with a different signature than the one you've currently installed, that's a feature of the OS.


And we've seen time and time again how that liability "harms" them when they whoopsie daisy leak a bunch of data they shouldn't have gathered in the first place...


Google isn't gonna build a ROM for waydroid so someone's going to have to make a build of Android, whom you'll have to trust. Google doesn't build ROMs for anything but their own phones.

LineageOS is popular in this field because in essence it's a derivative of AOSP (the Android project as shipped by Google) with modest modifications to support a crapload of devices, instead of the handful that AOSP supports. This makes it easier to build and easier to support new platforms.

The bulk of the security in AOSP (and thus, LineageOS) comes from all the mitigations that are already built into the system by Google, and the bulk of the core system that goes unmodified. The biggest issue is usually the kernel, which may go unpatched when the manufacturer abandons it (just like the rest of the manufacturer's ROM), and porting all the kernel modifications to newer versions is often incredibly tricky.


> Google doesn't build ROMs for anything but their own phones.

Are you suggesting that ROMs provided through Android Studio's emulator are somehow not built by Google?


The reason I store 2FA codes in my password manager is as a protest to companies forcing me to have a 2FA. I don't want to be randomly locked out of my google account due to not having a usable 2FA, and I also don't want to depend on having a single device be always available to provide the codes.

In practice, I feel the main reason 2FA is popular is because people cannot be trusted to create unique and secure passwords for every service. The phishing-resistance is nice, but I'd prefer it being the only credential, and just having it be autofilled (making it longer to combat bruteforce), like what we currently have with password managers...

Here's to hoping passkeys turn out any better.


Yes, my point of view is that using a password manager with unique and strong passwords everywhere is bringing most of the benefits you get with TOTP, and then you can have TOTP for compliance with security policy only.


Passkeys are a shitshow at the moment, I store passkeys in my password manager along with 2fa codes as it is the only way to make them reasonably usable. And obviously the only other way to manage passkeys is to rely either on a single device, trust big corps and vendor lock in, or to have multiple passkeys on multiple devices/services for the same sites/accounts.


> In practice, I feel the main reason 2FA is popular is because people cannot be trusted to create unique and secure passwords for every service.

Right. This is the killer features of passkeys.


FWIW, you can store 2FA/TOTP tokens on more than one device. For example, I store many on two separate Yubikeys.

Then again, I do this for accounts that I really care about, I just keep TOTP in my password manager for accounts that are not worth the effort.


I know it sounds silly but vim controls surprisingly well on a touch keyboard. Not needing modifier keys nearly as often as other editors is a major blessing here.


What do you use as an escape key?


From what I've heard surrounding this, GTK3 to GTK4 isn't as big of a jump as GTK2 to GTK3 was. The GTK3 port was finished first because there was already work in place for that, but we can expect a GTK4 port to be faster. That said, I haven't seen many apps that aren't specifically GNOME apps start using GTK4 in the first place, and as such I'm currently not using any GTK4 applications. I expect it to take a while before more things move to GTK4.


a full copy of the slackware source code: fits in 10gb, contains a semi-curated set of applications and utilities for nearly any purpose, including their documentation, without trying to include everything. I throw this on any system I want to forget about, and I rarely need to add any additional software.


I do the same thing, but woth debian. These are good choices.


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: