Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
topdancing
searching Neon…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
6 ms
·
1.
▲
by
topdancing
4y ago
This is just a marketing gimmick, it's been broken as a technology since its inception: https://www.ndss-symposium.org/ndss-paper/improving-signals-...
2.
▲
by
topdancing
4y ago
> Signal does not know numbers or how these contatcs interact. > It is described here [2]. Number is only needed for creating the unique hash. Server knows only the recipient, not the sender. Signal does know everyone's numbers a
3.
▲
by
topdancing
4y ago
> Yes, and security has a large performance impact. Not necessarily. The linked blog talks about SPARK which is about running your code through theorem provers to mathematically formally verify that your code does the correct thing _in a
4.
▲
by
topdancing
4y ago
> SPARK itself can handle and prove some ownership properties but to the best of my knowledge isn't at the level of rust in memory safety on dynamically allocated memory. It actually is: https://www.adacore.com/uploa
5.
▲
by
topdancing
4y ago
Or you could use https://en.m.wikipedia.org/wiki/SPARK_(programming_language) which is already a formal defined language and literally the thing discussed in the link right at the top.
6.
▲
by
topdancing
4y ago
https://blogs.nvidia.com/blog/2019/02/05/adacore-secure-auto... And there's a whole new Paris metro line that runs on Ada: https://www.adahome.com/Ammo/Success/subway.html
7.
▲
by
topdancing
4y ago
Funny how before Alire was a thing, people complained that there was no easy way to take other people's Ada code and add it to one's own software projects. Now Alire exists and people complain that it's easy to add people
8.
▲
by
topdancing
4y ago
They do not have such an entitlement: https://grapheneos.org/faq#hardware-identifiers (edit: and also: https://grapheneos.org/usage#wifi-privacy ) And the only app that has access to GPS on my device is: h
9.
▲
by
topdancing
4y ago
> What are people using VPNs for mostly, if they're living in a country without internet censorship? I find it's a convenient way to prevent services beyond my ISP from knowing where am I based on IP address. All of those apps
10.
▲
by
topdancing
4y ago
> Most of what they complain about have tooling, documentation and solutions. They're just not using them. OP's problem is that they do not want to learn. In general - if you see a person complaining about SELinux - it's b
11.
▲
by
topdancing
4y ago
> Conversations, draugr.de, can't really say much on steps to reproduce - it worked reliably and then it didn't just yesterday So it worked fine for some time, glitched one day, you presumably have done zero debugging as you ha
12.
▲
by
topdancing
4y ago
This isn't how it works. If you actually pull down one of their multihop configurations - you'll see: - the WireGuard public key for server 2 - the IP address for server 1 - a unique port for server2 on server 1 So all they'r
13.
▲
by
topdancing
4y ago
These days, you want to use someone that's based on ostree - so either: - https://silverblue.fedoraproject.org/ - https://endlessos.com/ (based on Debian)
14.
▲
by
topdancing
5y ago
Just deploy https://github.com/slackhq/nebula somewhere and voila - you have your own completely self-hosted version of Tailscale.
15.
▲
by
topdancing
5y ago
> Russians came from Belarus and with their tanks disrupt the radioactive soil and create dust Dust from soil doesn't explain why the readings from sensors around the reactors themselves has been sharply increasing over the last cou
16.
▲
by
topdancing
5y ago
> then try to find your contacts again (which may be cached by your client or not) You can save XMPP account IDs in any mobile address book. > Finally, you have to convince "someone" that this is just you with another accoun
17.
▲
by
topdancing
5y ago
> Sorry to deceive you Deceive implies bad intent, which you are not doing in this case. What you are actually doing is educating whereas Signal is the one technically doing the deceiving.
18.
▲
by
topdancing
5y ago
> Once again, "I, as a tech-savvy person, can operate my highly-customized XMPP setup everywhere", while ignoring that most people do not run their own servers. I said "my server", but the exact same code could be poi
19.
▲
by
topdancing
5y ago
XMPP is about choice. I use OMEMO everywhere. However, I do know of people out there who simply do not see the point of OMEMO as, when they are the server admin, OMEMO adds no value over TLS. OMEMO also doesn't make sense in large publ
20.
▲
by
topdancing
5y ago
> Again, a lot of guessing and assumptions what could be in a perfect XMPP world, but nobody finds nowadays. The German police and British health service would say that their XMPP implementations are pretty secure implementations: - htt
21.
▲
by
topdancing
5y ago
> Who defines "open standard" in the first place? Most people on here would say: https://en.wikipedia.org/wiki/Internet_Engineering_Task_Forc...
22.
▲
by
topdancing
5y ago
> XMPP is an open standard -> Doesn't this apply to Signal, too? Signal is the opposite of an open-standard, there's a single server implementation and basically three clients (Android, iOS, desktop) and they discourage peop
23.
▲
by
topdancing
5y ago
Your Signal client is at this moment logged into a Signal account on the Signal server. Sealed sender does nothing to protect against this - Signal knows that tialaramex is at that IP address. The server fully aware where Steve is logged in
24.
▲
by
topdancing
5y ago
https://wiki.openstreetmap.org/wiki/Key:opening_hours You go around, survey the opening hours posted on local restaurants (I usually take a photo, and don't copy and paste from other sources as this normally goes
25.
▲
by
topdancing
5y ago
> Signal uses phone numbers as identifiers because it controls spam. Signal uses phone number as identifiers because it's the easiest way to find other users. There's no other reason Signal uses phone numbers as a primary ID.
26.
▲
by
topdancing
5y ago
Knock out this set of buildings in London, and you can kiss the entirety of the UK offline/most of Europe won't recover: https://en.wikipedia.org/wiki/Telehouse_Europe
27.
▲
by
topdancing
5y ago
I run my own XMPP server, and I can literally call anyone anywhere in the world on the XMPP network. End-to-end encrypted. No phone numbers required. For free. https://blog.wirelessmoves.com/2020/05/xmpp-voice-and-
28.
▲
by
topdancing
5y ago
Linux is indeed an OS: https://en.m.wikipedia.org/wiki/Linux Ubuntu is not an OS, it's a Linux distribution.
29.
▲
by
topdancing
5y ago
> - They talk about evaluating extensions but extensions was one of the things I raised as being a turn off. They can be daunting at the start (as it is with learning any new technology ecosystem), but once configured; it's not some
30.
▲
by
topdancing
5y ago
Even embedded systems run on an OS, wondering of the GP knows that Ubuntu is running Linux (ie, an OS) under the hood. And that Kubernetes deployments out there primarily run on Linux.
More ›