vader1

5 ms·

1.
by vader1 11mo ago
> This is because app stores do a lot of heavy lifting to provide security for the app ecosystem. Specifically, they provide integrity, ensuring that apps being delivered are not tampered with, consistency, ensuring all users get the sam
2.
by vader1 1y ago
This sounds great! Does anyone know what this means for Google Pay and Apple Pay? In this country there's not a single bank anymore that offers contactless payments without going through Google or Apple...
3.
by vader1 1y ago
Very fair. Doing anything with online advertising, either as an advertiser or as a publisher, without it involving any of Google's platforms is nearly impossible.
4.
by vader1 1y ago
GrapheneOS found a way to provide eSIM support, but it depends on installing a patched version of Google's proprietary LPA app. I don't know how future-proof that is..
5.
by vader1 1y ago
The lack of a physical SIM tray is just one more way to lock users in Google's walled garden. eSIM support is not implemented in Android itself (AOSP), but part of the proprietary GMS package. This means Google-free Android forks like
6.
by vader1 5y ago
My Garmin (Vivosmart 4) band tracks "stress" and "body battery" metrics, which are based on your Heart Rate Variability. For the first couple of days after my first mRNA shot there were no anomalies at all, but then out
7.
by vader1 7y ago
They do: https://support.garmin.com/en-US/?faq=HfJ4xPchdD3cmZ2qtDpOR8... But it currently only imports coarse data, e.g. your average heartrate on a given day. Not the granular minute-by-minute information. Sleep stati
8.
by vader1 7y ago
I bought a Garmin the day Fitbit sold out and haven't touched the Fitbit since. I'm very happy with the switch, the Garmin (Vivosmart 4) app and device are actually better than Fitbit's on almost every account, so that's
9.
by vader1 7y ago
This is terrible news. As if Google didn't know enough about you already - they will now be supplied with a 24/7 live feed of your most sensitive health statistics. I'll be switching to a competitor and closing down my accoun
10.
by vader1 8y ago
Congrats! Perhaps start here: https://www.reddit.com/r/personalfinance/wiki/windfall
11.
by vader1 8y ago
I tried to register for an account with N26 early this year. After uploading all my personal information and passport scans, I received a generic rejection notice almost immediately. Extensively talked to the customer service, but they coul
12.
by vader1 8y ago
In many countries it's not (legally) possible to buy a SIM card without providing your ID. Sure, you go ahead and buy an illegal burner number, then download Signal/Whatsapp from the Play Store and reverse engineer that binary to
13.
by vader1 8y ago
I didn't say that Conversations from the Play Store is significantly more trustworthy in this regard than WhatsApp from the Play Store. I said that an app - such as Conversations - that you can build from source or download from F-Droi
14.
by vader1 8y ago
The difference of course being that WhatsApp is closed source, and they can push any kind of change without anyone noticing. If the client is open source, you can verify exactly what it does. Compile the app yourself or download it from F-D
15.
by vader1 8y ago
Pidgin is barely maintained for the last couple of years and doesn't support most modern XMPP extensions. I'd definitely recommend Gajim on both Windows and Linux, which supports everything you need out of the box.
16.
by vader1 8y ago
Fair enough, but this is kind of inherent for anything based on open standards. Was your email encrypted? It depends on whether the sending and receiving mailserver support TLS. Is your website visit perfect-forward-secret? Depends on wheth
17.
by vader1 8y ago
F-Droid supports reproducible builds and all APK's they serve are built from source.
18.
by vader1 8y ago
Yes, Conversations (Android) and ConverseJS (web) are on par with - or better than - the commercial apps like Whatsapp. On ios, Chatsecure is pretty close.
19.
by vader1 8y ago
From yesterday: https://news.ycombinator.com/item?id=18054574 :)
20.
by vader1 8y ago
Isn't windows mobile the only platform where PWA's can be submitted to the app store?
21.
by vader1 8y ago
Ah, that's perfect. A hardware token as the /only/ factor sounds like a bridge too far anyhow.
22.
by vader1 8y ago
The difference between WebAuthn and U2F isn't really clear to me, but I hope the older generations will continue to work with common browser's FIDO2 implementations for a long time to come. YubiKeys are great, but too expensive to
23.
by vader1 8y ago
Looking great, thank you! I was previously using Candy, but it hasn't been maintained in a while. With a modern web client like this, XMPP can truly replace the likes of Slack.
24.
by vader1 8y ago
I've been using Vultr for years and they've never charged me more than my monthly usage. A n=1 report from two years ago doesn't seem like a great reason to leave them out; I'm sure you can find complaints about every ot
25.
by vader1 8y ago
Insert between 5 and 6: CEO "fires" CTO (while simultaneously asking him to sign an employment agreement in the first place) strncat seems to have conceded that despite the 50/50 ownership, "guy" has the ultimate po
26.
by vader1 9y ago
That's very good news! The knowledge that a large part of my internet usage is MITM'ed by a single entity is continuously making me uncomfortable.
27.
by vader1 9y ago
By offering two different models and letting you choose between them for each hostname under Cloudflare. 1) Injecting themselves on the application layer (the current model) 2) Injecting themselves on the network layer, passing through only
28.
by vader1 9y ago
Using OMEMO on XMPP is a federated implementation of the Signal protocol. I believe Matrix' e2e encryption is also based on it.
29.
by vader1 9y ago
Use a VPN client on your router, it'll protect you against WebRTC leaks and it'll automatically work for your phone and other devices. Asus routers have VPN support out of the box, for other routers you can use OpenWrt/DD-WRT
30.
by vader1 10y ago
FYI, apart from the kernel, OVH's "Ubuntu" image also adds their SSH key to the root user ( http://help.ovh.co.uk/InstallOvhKey ) and pre-installs some monitoring daemon.

More ›