Hacker Newsnew | past | comments | ask | show | jobs | submit | pretty_bubbles's commentslogin

Not quite sure how Teslas work after they are unlocked, but presumably someone else could drive off with them? So maybe he just unlocked his car, got in the wrong unlocked car, and the other guy later got in his?


Pocket (getpocket.com) has a pretty wide selection of long form writing. The recommended articles are curated by humans. Their app is especially nice if you get on a plane and need something to read offline.


Unlikely this patent will ever get used for something, but I think it could actually be used for good: if there's some music that makes me happy and some music that makes me sad without realizing it, it would be nice for "Spotify" to detect this and let me know/change the style of the music.


That sounds like a nightmare to me - the antithesis of something good.


Facebook some years ago already played with people's emotional well-being in tests. A lot of the direct links to the articles have somehow been scrubbed from the internet, but here's the HN results: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...



could be used for very bad things


The proof is likely to turn up some interesting factors. The reason why something is P and something else is NP is the big question.


OMG, the wave animation on the page is killing my CPU :) I'm pretty sure there has to be a better way.


Ouch.. you're right. Thanks for flagging it. The new page went up over night, and we missed this.

The team is gonna get on that. No good excuse for heavy graphics, that's not how we roll.


Wow, same. Are they generating the SVG in realtime? As simple as it looks, there's no excuse for it eating a whole core.


Hey, I just stole your car. Cars don't have rights. So I haven't committed any crime.


If you live in the US, as long as you sue the car and win first, (which not everyone can do), that's a perfectly fine argument. If you don't like it, change it.


But the government takes the property without first winning any sort of lawsuit.


> If you don't like it, change it.

That's what this bill is about.


Sure. I never said it shouldn't pass.


We don't exactly know where the catastrophic threshold for climate change is. So it's entirely possible that this little move might make the difference between 2C warming, 4C warming.


If you use the nextdns DoH provider in Firefox you can actually configure your own adblocking domains even when you're moving around across networks. Just FYI


> If you use the nextdns DoH provider in Firefox you can actually configure your own adblocking domains even when you're moving around across networks.

Uh. Doesn't this prove that Firefox's DOH implementation is sending strong per-user identifying information to the server?


That’s what nextDNS offers (basically pihole in the cloud). And that only works by hitting a specific subdomain or endpoint on nextdns.io.

If you’re hitting cloudflare, it’s just hitting the regular endpoint so no user identifying information.


Ah. Thanks! Makes sense.


If you configure a personal NextDNS URL as the DoH provider then unsurprisingly NextDNS will know that URL was used, and personalise things accordingly.

If you use Firefox's defaults but pick NextDNS from the list, you don't get personalisation as NextDNS has no idea who you are.

A nice thing about DoH here: For DNS over TLS NextDNS has to hide the configuration ID in the hostname, which as a result is revealed in SNI, but for DoH they can put it in the path and so it is encrypted like everything else.


> ...for DoH they can put it in the path and so it is encrypted like everything else.

Wait: You mean to say URLs are encrypted? I thought not. There must be a reason why GET requests aren't used for secret-sharing, for instance, as opposed to POST. What am I missing?


An HTTPS URL has several parts, let's look at them in turn from left to right of a URL https://userinfo@someserver.example:1234/foo/search?term=goo...

The scheme will always be HTTPS and that isn't sent anywhere but it's implied.

The userinfo (often empty) is encrypted and delivered to the server. This could be login credentials but in the modern web it's largely unused.

The hostname someserver.example is delivered to the server unencrypted using SNI (Server Name Indication) before encryption switches on. This is used to enable virtual hosting - the server may behave differently depending on which name you want. The Encrypted SNI work (eSNI) at the TLS Working Group intends to standardise a way to encrypt this information - note that if your IP address only serves one single web site the hostname doesn't give much extra away so eSNI is mostly interested to bulk hosts, the cloud and so on.

The port 1234 is not delivered anywhere but it's implied since the connection will use this TCP port.

The path /foo/search is encrypted, this is the part NextDNS uses to distinguish one customer from another if you use their custom URLs rather than the built-in default in Firefox.

The query parameters ?term=goose are encrypted

The fragment identifier #egg is not sent to the server this is used only locally in the browser engine itself.

The reason you shouldn't design web sites to use GET for secrets is that URL ends up in the user's URL bar and gets bookmarked or shared with friends.


Thanks for the detailed reply. Appreciate it.


I don't think anyone is building suction robot proof buildings yet. It can barely climb the buildings we have now.


Was it just the windows kernel? Or did it include all of the utilities in Windows?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: