eksith

hace 12 añosdiscuss

  If a woman blogged unkind and sexist behavior at a tech company, but 
  hid her name to avoid the backlash (like Michael), that would be 
  unethical. I guess she'd be an "asshat", right? Same thing for a 
  journalist using an anonymous source?

Did you just compare a woman blogging about a legitimate grievance that makes her work environment intolerable to someone suggesting "Fair game" practices a la Scientology for criticizing his company?

eksith

hace 12 añosdiscuss

That was a fantastic article! Thanks for linking that. It certainly gave me a lot of food for thought.

eksith

hace 12 añosdiscuss

My honest hope when I first heard of Uber was that it would give a huge wakeup call to the industry. Let's face it, America is a service industry and many of its services suck. The attitude is marginal at best, horrifying at worst. I hoped this level of customer scrutiny on performance would bring it up to the same level as in Japan.

I'm still hoping someone will make it happen. Or rather, perhaps an entire army of services will make it happen as we've seen, a de facto monopoly, yields terrible results.

eksith

hace 12 añosdiscuss

No, taxi regulations are in place so this kind of nonsense gets your license revoked: http://www.theverge.com/2014/8/26/6067663/this-is-ubers-play...

eksith

hace 12 añosdiscuss

And this, folks, is why taxi regulation is a thing. Of course, there is crime and corruption and they have their own variety of scams[1]. But what you won't see is a sweeping sense of impunity because if you go out of bounds to this degree so blatantly (and at regular intervals, it seems), a rather large hammer will come down on you and your union. Taxi drivers in general are well aware of this.

But a bunch of broexecs, who answer to no one, setting the tone for everyone else is unlikely to feel any need to change any time soon.

[1] http://www.nydailynews.com/new-york/tlc-22-000-cab-drivers-p...

eksith

hace 12 añosdiscuss

That's pretty bad. I think those get filtered before it gets to the inbox most of the time, but the phishing continues too. This one from 2010 is pretty similar :

http://www.mcgill.ca/it/news/phishing-attack-mcgill-email-11...

eksith

hace 12 añosdiscuss

This is why PBKDF2 would have made more sense then. They can centrally authenticate, derive a secondary token from the original pass while specifying the max limit for each of those services. Best of all, this means the mail, UNIX login etc... need not have the same login token.

eksith

hace 12 añosdiscuss

  The McGill Password length has also been increased from exactly eight 
  characters to a variable length of eight to 18 characters.

So they're not using bcrypt (usable length 72). Even PBKDF2 would have been acceptable, but my guess is that they were sold a "layer over" on their stack with this. I can already tell this is a hacky patch.

  Every year, about 1,200 to 1,500 McGill accounts are compromised in 
  one way or another.

Phishing + guessing. I know someone who gets about 2-3 emails a week asking to enter their login info into some site in Brazil or the Czech Republic.

If every site properly salted and hashed passwords, reuse isn't even a problem. But as we know :

  - Most people choose crappy passwords.
  - Most sites use crappy hashing schemes (if they hash at all)

When other sites are compromised, there's an easy list of ready passwords to try against other potential targets.

McGill's problem isn't Heartbleed.

eksith

hace 12 añosdiscuss

If the popularity of GoDaddy has taught me anything, it's that people use what they know; not what's good. The list of companies that should have gone out of business is as long as the number of years since commerce began.

The fact that they still stay means (and this is relevant to the EFF project as well), creating alternatives is just as hard as making enough people know and care about them.

The registrar check per domain is probably the biggest plus in having it act as CA. Of course, that adds overhead to the registrar which they may not be willing to accept (margins and all that).

eksith

hace 12 añosdiscuss

The registrar issuing cert solution would certainly speed up HTTPS adoption; you're dealing with one less org to secure your site. The down-side is that if you decide to move registrars, that still complicates things. What if the new registrar refuses to issue a new cert without a hefty fee? Or what about revoking the previous cert? Now the registrar is functioning as a de facto CA so it doesn't completely eliminate the middle-man factor.

I'm hoping the EFF project will smooth over these hiccups, which is why I'm looking forward to it.

eksith

hace 12 añosdiscuss

  Privatoria.net is a service which provides secure communication, anonymous 
  surf and secure file sharing for individuals and business. All security 
  services are united together in Privatoria. It includes Secure VPN and 
  Anonymous Proxy, that enable surf anonymously, change IP, unblock sites, 
  Anonymous E-mail, Secure Chat, Secure Call, Secure Video Chat for secure 
  communications and Secure file sharing via FTP and Secure Data Storage.

No conflict of interest there at all in your badmouthing of Tor, with no corroborating evidence at all to boot.

eksith

hace 12 añosdiscuss

That's extreme. This is just a swing toward turning internet access into utilities like electricity and water which are available without being tied to your residence. You still have public street lights and public water fountains outside your home. Likewise, internet is slowly moving away form this "thing" you always have to pay for to stay connected.

Verizon, TWC, Optimum, Comcast et al require that you have an account with them to use their hotspots. But you don't need an account with ConEd to be able to read your newspaper or book out on the street. This is where internet is headed.

eksith

hace 12 añosdiscuss

> You can view something like 20 stories a month

10 stories a month. Also, even though you may only post one or two as you say from these sites, others do the same adding to that total E.G. wsj.com Which doesn't allow viewing at all unless you browse in from a search engine or subscribe.

eksith

hace 12 añosdiscuss

Some context in the previous thread on Tollef's resignation https://news.ycombinator.com/item?id=8615962

eksith

hace 12 añosdiscuss

There are many reasons not to freely give out your address, or name for that matter. The validity of ideas need not be tied to an identity. If an idea can stand on its own, then so be it. If not, you can just move on.

"...being accountable for an opinion is probably bad for them in this case." Same for you as well, it seems.

eksith

hace 12 añosdiscuss

Amen. Actually that would have been the better outcome anyway since it adds entropy to the gene pool. Cross pollination of ideas could have benefitted both parties. And even if your side doesn't take the cake, enough people would have flocked to the source that we could have fixed some bugs and resolved potential security issues due to the addition of more eyes.

Looking from afar, you'd think this was some tiff over imaginary lines on a map or something. Now that would be silly.

eksith

hace 12 añosdiscuss

"While these death threats and the like are in no doubt horrible..." Then let's stop there.

No bridge is sacred enough to warrant physical threats when burned. No attitude poor enough to elicit the response that this did. It's bloody software.

eksith

hace 12 añosdiscuss

The real story of the design is pretty interesting though http://creativebits.org/interview/interview_rob_janoff_desig...

eksith

hace 12 añosdiscuss

It would still be acceptable for a large number of folks who do primarily browsing/downloading, but for Netflix et al (which is quickly becoming the primary means of entertainment for a lot of people), it's not worth it. I'd say 10Gbp peering or it's not worth it.

eksith

hace 12 añosdiscuss

Extremely difficult. There is plenty of technical expertise in networking, laying fiber, trenching, construction, equipment etc... around. Even with the local terrain. The problem is with the legal landscape.

Take Google for instance. The biggest hurdles they had to deployment are the protective hurdles put in place by ISP friendly politicians. Some states have regulation in place that new deployments must reach last mile to virtually every resident, which is cost and time prohibitive when there's no profit initially. You have to bite the bullet and do the deployment as necessary, bend to the legal winds and bear the full cost (which, even for Google may be a bit high) with no guarantee of profit until years after deployment.

4G is a bit tricky as well since there are areas where you'll have little choice but to rent existing towers or build your own. In some places, the terrain gets in the way, so towers are fairly limited in what they can do. Then there are the issues with maintenance and safety for crews working on these towers, which cell providers don't seem to care much about http://www.propublica.org/article/cell-tower-fatalities

Submissions

The Hardest Part of Running a Startup Isn't What I Thought It Would Be

Welcoming New Humble Masterpieces into MoMA’s Collection

How Ebola Healthcare Workers Get Dressed

Contactless cards fail to recognise foreign currency

Communication between brain networks in people given psilocybin

America’s Polling Places Desperately Need a Redesign

A day buying (and returning) things with Apple Pay

A Full-Body Mouse: Click with Your Leg, Scroll with Your Hips

Detection of a branched alkyl molecule in the interstellar medium

Olfactory Dysfunction Predicts 5-Year Mortality in Older Adults

Spyware executive arrested, allegedly marketed mobile app for “stalkers”

iOS8 will predict your passwords

Fake fingerprint fools iPhone 6 Touch ID

Ashkenazi Jewish population has distinctive, yet similar genomes

Musings on Deep Learning

End User Devices Security and Configuration Guidance

An Efficient and Provable Secure Revocable Identity-Based Encryption Scheme

Joan Pujol Garcia

One man’s journey to restore Star Trek’s bridge

Researchers ID genetic switch that controls muscle repair system

comments