Hacker Newsnew | past | comments | ask | show | jobs | submit | 0x073's commentslogin

At least it's no discord or ms teams.

I mean open the most used software automatically can be user friendly. It's like a Chromebook. ;)

Kids those days. "Prefetch" folder in XP anyone ?

If this would be a tv show I probably would view it, but wow what a drama.


"Otherwise any MitM can easily redirect users to a phishing resource."

Yes, but with nowadays https/tls usage it's almost irrelevant for normal websites.

If bad actors can create valid tls certs they can solve the dnssec problem.


> If bad actors can create valid tls certs they can solve the dnssec problem.

I think you have it backwards: by not running DNSSEC it can mean bad actors (at least a certain level) can MITM the DNS queries that are used to validate ACME certs.

It is now mandated that public CAs have to verify DNSSEC before issuing a cert:

* https://news.ycombinator.com/item?id=47392510

So if you want to reduce the risk of someone creating a fake cert for one of your properties, you want to protect your DNS responses.


If you mean MITM between DNS Server and CA (e.g. letsencrypt), thats on a level of BGP hacking (means for me government involved) and means they can just use a CA (e.g. Fina CA 2025 with cloudflare).

I think the risk didn't change much (except for big corp/bank).


At one point (pre-HTTPS ubiquity) the NSA hacked (e.g.) Belgium telecoms via injecting malware into web response from (e.g.) Slashdot:

* https://thehackernews.com/2013/11/snowden-reveals-gchq-plant...

* https://www.aclu.org/documents/quantum-insert-diagrams

* https://en.wikipedia.org/wiki/Man-on-the-side_attack

Still state-level, but probably less noticeable than BGP hijacking.

Unless you're entering IP addresses in all your applications and code, non-SEC DNS is an unsecured link in the chain of communications.


Wow nice. Is there a fastscroll in mobile?


On the loading page you can click the word "Esc" to open the options menu and set the speed there. If you select "full line render" you can then set it from .25x to 10x speed and it doesn't do the character-by-character rendering.


Impossible to touch esc on mobile, maybe fat finger but it just start showing the image.


"A Gnome-like shell for wayland compositors" Dont understand it gnome shell already has wayland support?

Are there any things that diff or is it just for fun?


It's as dumb as the german Pauschalabgabe, where everyone is forced to pay a specific amount of money for technical devices, because there is the possibility of private copies for licenced media.

https://de.wikipedia.org/wiki/Pauschalabgabe


I have some apps that works from 5.3 to 8.5. php has great compatibility, if you don't rely on external libraries or framework and don't use types.


For PHP 8.5 code to work with PHP 5.3 you'd have to forego short array syntax, finally blocks, scalar type hints and nullable types (OK, you mention this), the ?? operator, the ?-> operator, traits, and probably a million other things that we use every day.

For PHP 5.3 code to work on PHP 8+ you'd have had to completely forego error catching because that was completely upended in 7.0 or 7.2 (I forget which), not used short open tags, never used the class name as a constructor (that happened a lot in PHP 5), have no mcrypt functions, not used __autoload(), have had the foresight to use PDO instead of mysql_ (was PDO available in 5.3? I'd never seen it that early I think), you'd have had to be fortunate enough to not used ereg_, I think that older versions used # in ini file comments (I remember that breaking at some point, don't remember when), never used each(), not used safe_mode for mysql (strange because that was the default I think), and probably a million other issues that I hadn't encountered. If you have codebase written for PHP 5.3 that still works on modern PHP, I'd love to see it. I honestly don't believe such a codebase exists beyond the most trivial.


Most of the apps where developed for php 5.2-5.3 , as many things that you wrote where already bad code in this time. Spl autoloader, MySQLi, __construct was already available.

The apps are internal legacy apps so I can't share the codebase.

Because of this there was no big rewrite like types etc.


> Videos take forever to get to the point.

I feel the same with this article.


Everything gets much easier without windows, but many people feel a sense of security with windows.

I also prefer a flight without get a feeling of a flying can.


It also helps passengers on long flights experience the passage of time as something other than number go up



Is that just a TV with a fancy bezel that plays a 24-hour video? $10K seems a lot to drop on something so mundane.


If this meant more space and bigger seats due to reduced costs of the plane, sign me up.


If history is any indication, it would only mean more passengers in the plane.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: