Hacker Timesnew | past | comments | ask | show | jobs | submit | ktm5j's commentslogin

I'd wager on this.

VS Code will helpfully warn you when you open a folder that has a git repository.. it asks if you trust the developers since opening the folder could result in bad things happening. So this might not be such a big deal for VS Code users.

I think that assumption is very dangerous: if your editor only prompts when you first open the project, it won’t help when that project is compromised later or if you checkout a merge request from someone untrustworthy/compromised and are mentally thinking “my project is safe” even though you’re a single gh/glab command away from that directory having anything an outside party wants.

You know they're just gonna click yes, right?

That prompt is just there so they can say "your fault!"


Well, in that case it totally is their fault...

> If you put it into geosynchronous orbit, the transmission is easier but now you've introduced a huge delay in your packets.

How does that introduce a delay?


The distance is greater = higher latency.

It’s why satellite internet was usually pretty terrible. A simple TCP handshake becomes a multi-second endeavor.


It's radio waves. Takes about 125 mSec for a request to reach the satellite (it's 36,000 km up there) and then the same amount of time to come back down.

If you can reach a terrestrial data center in 10 mSec over fiber, the flying data center is 12x slower. And now, like the other replay said, do a TCP handshake and see how long it takes.


because earth's geosync orbit is at 36k kilometers (function of gravitational force and rotation speed)

I used to host email servers for a university, I'm probably going to have nightmares tonight just because I read this post hah

Oh I love them quite a lot! I use them to run all of our backup jobs, easy to set up and have never had an issue.

I get what you're saying but I can understand the frustration here. Vivado licenses start at $1200/year or $5000 for a perpetual license.. Just to use software to work with hardware that you already paid for. And it's not like they are dropping support for Linux altogether, it would cost them nothing to continue supporting Linux in the free tier.

It just seems like a weird decision on AMD's part.


Can I ask why?


For me, it's a privacy concern. Closed source means only one company is fixing vulnerabilities, whereas open source invites security researchers to find and fix issues quicker. Fewer security gaps == less privacy risk.


I've heard that argument before, but has that actually been demonstrated? Ability to look at the code (especially in the age of AI) means that security researchers aren't the only ones who can look for bugs. For example, look at the bugs like copyfail that AI has recently uncovered in the Linux kernel.


If an AI can find a vulnerability for a hacker, it will also find that vulnerability for a security researcher, so that point is moot.

There exists a danger that very good hackers will be able to find vulnerabilities by looking through the source code, but very good hackers find vulnerabilities without source code anyway.

Consider the following: Would you rather walk down a busy street hundreds of other people walking by, including police officers, good samaritans, and maybe people who want to do you harm, or would you rather walk down a dark ally with only four people in it?


You are grasping for straws. No one said open source is perfect. But it's just an obvious fact that open source is going to be easier to audit than closed source.


No, I'm asking questions...... not pretending I have answers.


But isn't that their point? In the age of AI, maybe being "easier to audit" is as much a risk than an assurance? I'm not sure I agree, but it is interesting to mull over. Further, either way, your tone and response is not very charitable, to say the least. From the outside, you are the only one blustering and grasping here. Not everything needs to be so antagonistic maybe?


Reverse uno. The same AI can be used to fix the holes in the open source code. And a LOT more AI review by benevolent parties is gonna hit that open source code than the closed source.


Okay guys, I'm being downvoted for asking questions? Let's be real, OSS has not been proven to be more secure. If you think otherwise then please back it up, I'm okay with being proven wrong.


like dude. do u have to?


Great answer ..


I hear you, but I feel like it's a better safe than sorry situation. Exporting your passwords takes two seconds. I think you can export to an encrypted file, but I just did a plain-text json file and gpg'd it. Can't hurt to play it safe.


if you have to do the 'encrypt single plaintext file' dance at least use age[0] in 2026

[0] https://age-encryption.org/


I’ve been using sops: https://github.com/getsops/sops


Okaaay I'll take a look at the newfangled thingy :P


Why is gpg considered so ‘old’ in this instance?


Do folks have a suggestion for a Facebook alternative? I'm about fed up with the state of things, but still want to feel connected to social circles (even if they're online only) and politics (ideally without the hate spam bots).


If you have the option of moving people off of facebook, how about a slack or discord group?

If they won't move off of facebook, I'm not sure there's anything you can do to retain the same level of interaction. Maybe you could allow yourself a reduced level of interaction while still feeling connected. For example, an SMS every couple of days should be plenty enough contact to keep up with any significant events. If you really want to take the reins, you could organise events yourself, ensuring you won't miss them.


The software is never the issue with this, it's where people are that's the problem. Though I did witness my age-peer friend groups finally switching to Signal in the late 2010s (away from Facebook Messenger), I don't actually know what convinced them. The security-conscious minority element had been pushing it since it started but were generally mocked. I think it finally showed up in a New York Times article, which is what helped them.


I'm curious why WhatsApp isn't much more popular in the USA. Is it the lack of anonymity?


No, I don't see any indication it has anything to do with the "anonymity". Very few people, even technical people care about anonymity to the extent that they try to achieve it in everyday life.

It is frequently confused with privacy, however. (https://www.privacyguides.org/en/basics/why-privacy-matters/)

iMessage is the dominant messenger because most people have iPhones combined with the fact that SMS has long been free and unlimited, so people don't see the problem of using it with the occasional Android user.

Really, it's all about the defaults. Even though everyone uses iPhones, they still use the calling feature from their cellular provider, because Apple doesn't push FaceTime as the default calling mechanism.

Signal is gaining popularity because there are people that care about using it over iMessage.

Signal is 100x better than WhatsApp, but it feels so unstable using any centralized messenger that has complete control over the software and the users. No centralized service can truly be relied on, non-profit or for-profit. But clearly that's what has to happen in order for the service to become mainstream, so it's an acceptable compromise for me. It's not like I can't say Signal does great things for privsec and metadata reduction.


The trick is to get your friends and family to jump ship with you.


I jumped ship, and the friends and family who are important to me are still on the ship, by and large.

Yet I've never felt as though I'm missing out. We communicate via alternative forms (texts, calls, hanging out in person) and I have never felt disconnected.

The whole trope about people being worried about missing out is misplaced - that feeling is exactly what these products are designed to imbue in their users. Ultimately, if you value others, you'll make the effort to connect somehow, and if they value you, they'll return that energy. If that two-way street doesn't exist, if they're not willing to give back a similar effort, then why do we need to know what they're doing or thinking every day?


I largely agree, but this discounts the personal value of keeping contact with weaker connections that we don't talk with often but still have some concern for.


Genuine human connection. Seriously. I've never had a social media account on any platform and I have plenty of friends and an active social life. I also make the effort to do so. Why do you need facebook? Is it so important to share a photo with strangers? You could text it to a friend if you want to share it. Stop feeding the beast.


I mean, you're commenting in text format on a web forum to strangers using pseudonyms right now. Why is that valid but the use of social media isn't?


Not really. No infinite scroll. No personalized algorithm. No insane levels of tracking. To compare this to facebook or tiktok is incredibly dishonest.


You didn't mention any of those. You mentioned "real human connection," yet the connections here are no more or less "real" than on facebook and tiktok.

"I've never had a social media account on any platform and I have plenty of friends and an active social life." Yeah, most people who use social media also have plenty of friends and an active social life.

You seem to not comprehend that there is actual utility to social media for many people, or that most people using social media aren't touch-starved incels or lonely basement dwellers or whatever.

But to answer OP's question since no one else will - maybe try Fediverse alternatives like Mastodon or Friendica.


I will do as I please, thanks.


You asked for a suggestion, they gave you one. And this is your response?


Are you serious? He didn't answer my question, he jumped all over me judging my choices and insinuated that I don't get enough real life human interaction.. so yes that's my response.


Yes, OP did - the alternative to social media is not more social media, which is a view shared by many. OP didn't judge you, they stated their opinion and asked you to soul search.

If you truly feel that judged and offended, and I say this with kindness, perhaps you would do well to ask yourself why.


Haha, they didn't say they were offended, they just rejected the (clearly judgmental and off-topic) advice. They specifically asked for a Facebook alternative, including for online-only social groups they find important, so the advice to "just do real human connection without social media" is pretty useless. And shit like "Is it so important to share a photo with strangers?" is clearly judgmental and dismissive.

Loved your little passive aggressive encouragement to look inward though. So kind.


I hope you have a pleasant day. :)


I hope you find some peace ♡


Wow okay, whatever you say man..


/shrug

Hope you have a good day!


And I hope you get a clue Mr "I've got everything so figured out that I can psychoanalyze people from a two sentence internet comment". Gimme a break.


This is an insane response.


I asked for social media options and dude went on a self entitled rant saying I shouldn't want social media. I feel like my response was rather level headed considering what I wanted to tell him to go do, but maybe that's just me.


What do you use it for? There's never a single alternative to a social media platform the way there is for say online shopping - the experience isn't fungible. But you may be able to find another platform to fulfil the same purposes.


Social is where the people are. If you’re using Facebook to keep in touch with friends and family, the only viable alternative is wherever your friends and family are. Chances are it’s going to be impossible to switch everyone (or even most people) over, so you’re stuck if you care about those connections.

Or you can do what I did and simply say “fuck it”. Get rid of your account anyway and deal with the consequences. I don’t even have WhatsApp (because, you know, Facebook) but don’t feel like that’s been a detriment to my social life. The people I care about understand and I see most of them on the regular. SMS and phone calls still work. I do know some people who live abroad that fortunately I can communicate via iMessage, but if that weren’t an option then email would have to do. I've been doing this for over a decade and while there was some friction at first, it’s been long since it has been an issue. It probably helps that these days most people understand that avoiding Meta is a good thing.

If you don’t care about people you personally know in your social media, then pick whatever you want depending on features. I recommend Mastodon. It has quirks (what doesn’t) but it’s fine. Chronological (not algorithmic) time-line, open-source, you can even subscribe to people with RSS feeds. If there’s someone you’d like to follow from e.g. Bluesky, there’s often a Mastodon bot for their posts. Or you can subscribe via RSS there as well.


Thanks for the reply.. yeah I might just be at the "fuck it" point. I've done that before and it always makes me feel healthier (calmer, sleep better, etc).


The offline world is where the people are.

Social is where the accounts are, many of which have a nonhuman substrate with the goal of coercing alignment out of you.


I don’t understand the point of the pedantry. Obviously I was talking about people you know personally that you know are not bots, and obviously I prefer and advocate for connecting with those you interact with offline. I don’t see how you can read my comment in good faith and take anything else from it.


It's quite simple: on socials, you don't get just what you want. You get what the algo wants you to want. "Social is where the people are" is naive and polyanna.


Mastodon has been great for me to follow niches I'm interested in.


For the politics part: join and volunteer for a local political party, even a small one, that aligns with your views.


Group text? Individual texts/calls? Setting up a monthly codenames game or book club, etc.?


Bluesky


Bluesky both isn't an alternative to Facebook and is generally terrible too.


That doesn't answer his question.. looks like there isn't a comprehensive list of what's actually included. Maybe for legal reasons but that's just a guess.


Maybe it falls under the "Various hobby/alternative OSes up to some very recent ones" category. I'm not going to download a one hundred gigabyte file to find out though...


I knoow right?! Wonder how much bandwidth they user per month and how much it costs them.


Or a search option. That would be nice.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: