Hacker News new | past | comments | ask | show | jobs | submit | bkishan's comments login

I spotted the reference, but did not think this deep lol. You have a point here.


I just came back from the theater. Every word of this article rings true. The movie is a piece of art, the best of star wars with the grandeur of Game of Thrones. Its very rare to get movies like this these days.


What were your feelings about part one, if you saw that back when it came out?


Watched the part one on day 1 as well. It was definitely more intriguing than enjoyable. The visuals and soundtrack really carried it despite the pacing. Imo, part one was just a great setup for this masterpiece.


Glad to hear it. I'm leaving to go see it 45 minutes from now.


Makes me regret I didn't take PTO to watch it, half my team are. :D


me and three other coworkers took a PTO too :)


Not from the US, so help me understand here, why would a traffic cop looking to verify a license want to image the entire contents of your phone?


We live in a police state. We have the highest incarceration rate of any country. Many of the people in prison are political prisoners. Our national security apparatus is powerful and unaccountable. Congress just reauthorized 702 which allows warrantless surveillance. Police and security apparatus is constantly looking for more ways to watch and incriminate anybody who resists their power.


Some fraction of people are authoritarian by nature. Most cops have no interest. But the fraction that do, will use any tool they can to find a crime.

Given the amount of deference courts give to cops, that they are allowed to lie without consequence, you don’t need/want to give them any more tools.


People are needlessly paranoid because there will be a few incidents that get a lot of media attention and mindshare, despite being a vast minority of the time.


They don't, but I'm sure there are some who are salivating at the thought of using traffic stops to simplify collecting evidence.


By your logic, is Instagram a failure too? Its just those same permissions.


Instagram doesn't require an app.

But I get your point, I doubt people really care.


> Instagram doesn't require an app.

Instagram was app-only for years, though. It added the web version a long time later


I doubt they will keep it app only. If they want to attract news outlets from twitter they will need to support embedding somehow



threads already have embedding, on web click on share button and there is a "get embed code" button.


Ah OK, I hadn't (still haven't) downloaded the app so presumed it wasn't at all accessible without the app.


Of course passwords are fine. What's not fine is getting billions of people to change their behavior and switch to and use a password manager (that's not chrome).

You could even argue passwords are better than passkeys for those with strong password hygiene. However when it to the masses, the convenience-security tradeoff of something like passkeys is always going to be better. And for the nerds and geeks, passwords are not going to disappear anytime soon.


Why not chrome?


Not the parent but the problem is that Chrome (sub. Firefox and Safari, these are problems with pretty much all browsers) isn't a password manager, its a password autofiller.

The result is that what should be crucial things like "how do we ensure permanency of the passwords file" are treated as very second rank - profile corruption usually is met with "remove the entire profile", which also ditches the password database. Literally every other password manager has some sort of tool available that makes it very clear where your data is stored and emergency backup options.

Chrome also doesn't like it if the login form doesn't look like most other login forms (and because this is the internet, you're gonna at some point run into weird login forms). It also can behave really funny if the site combines the user registration form with the user login form (which a lot of webshops do) by putting the autofill information in the registration form instead of the login form.

Add to that a very subpar experience in manually filling the right fields and "why not Chrome" should have a very clear answer.


It's a full-featured password manager, accessible via passwords.google.com . Also has great android app integration. I use it on Android, Linux, and Windows. The only thing it's missing is the marketing; I often wonder why they don't market it and crush 1password et al.


This isn't a great answer, but I've never liked Chrome password manager because I feel like a password manager is something I want to pay a company for, not a service I want to be given for free. Somehow, it being a free feature that's bundled with my browser makes me not trust it. (Again, not claiming this is a great reason not to use it)


Weird.

I use pass as my password manager on all my Linux boxes (with a yubikey to store GPG keys and Password Store + OpenKeychain on android).

I basically refuse to use any password manager with an implementation I can't see or audit.

I can't imagine trusting any company to handle my passwords correctly.

The only proprietary component is the yubikey which is basically incapable of misbehaving in a way which would cause me to lose control over my passwords unless I lose control over the yubikey itself.


How do you know that the product you use was built from the provided sources?


> How do you know that the product you use was built from the provided sources?

Maybe you haven't heard of pass[1], but it's an open source project, and it's easy to build from source[2].

---

1. https://www.passwordstore.org/

2. https://git.zx2c4.com/password-store/


It's 800 lines of bash. I can read it.


Did you actually look at it and audit it? >99% of people aren't going to do that. They're just assuming somebody has.


Yes, pass is 800 lines of relatively straightforward bash and I am qualified to review bash. Now, granted, it uses GnuPG and git but in those cases I think the risk of problems is minimal.

I haven’t in all honesty read the Password Store android application (nor OpenKeychain) source code but I trust my phone sandbox capabilities enough for it not to do anything nefarious like send my passwords somewhere. Its also not so large that it would be hard to read it.

The point is, the operating principles behind how Pass works are simple enough that its relatively easy to verify the core of any implentation and relatively difficult to smuggle in nefarious behavior.


> Did you actually look at it and audit it? >99% of people aren't going to do that. They're just assuming somebody has.

That's a fair point. I certainly haven't.

But the great virtue of pass is that it runs locally, which means that it's much more difficult to attack than a SaS password manager.


I have, pass is just a bash script with <1000 loc.


Not sure if it is what the GPP is referring to, but I prefer to keep a larger gap between my browser and password manager to reduce the potential spread of difficulties if the browser falls foul of a security vulnerability. The risk of this happening is of course small, it would require significant bugs in a couple of different places, but the potential damage is high. Firefox's password manager, or those built into any other web UAs, I'd be wary of for the same reason rather than it being specifically an anti-chrome thing.

An air gap would be preferable still, as that would protect from similar issues at the OS level, but that is another step or few into less practical (well, significantly more inconvenient) territory. I at least have my master password on a USB device (and backed up by other physical means in case that dies) which is only plugged in when needed, that is effectively an air gap when I don't leave the password manager unlocked between uses.


The logo is eerily similar to the Tamil letter 'ku'. Can anyone confirm if thats the case or what the logo is supposed to mean?


Looks like a play on @ sign


Reminds me of the Koo app but this just seems like a '@' to me


> no good vision

Ah yes, years of continuing technical and product innovations, with "no good vision"


Attacking fruit sellers is not "a vision".


Good thing they’re not attacking anyone then. They’re very clearly from the linked application in the article trying to register a trademark for a very long standing trademark that they now own within the realm of trade that said trademark has been traditionally used. That is, they’re trying to register the Apple Records (of the Beatles fame) logo as a trademark in the realm of music and related multi-media.


Which isn’t what’s happening. A fruit seller has a hypothetical concern over a trademark application, which is how you turn a non story into a story on a slow news day.


  Apple is manoeuvring itself into a position where it could
  Without any other reasonable explanation for why it should
  Except for the one of which Fruit Union is afraid it would


No other explanation except that they’re registering a very specific logo which they are now the owners of but has been used in trade since the 60s within the domain of trade relating to the historical use of that trademark (that is music and related media). You know, exactly the sort of thing you might expect the owner of a trademark to do in all the relevant legal jurisdictions where it might be using that mark in trade


That's precisely the point I was trying to make in response to my parent; Fruit Union's fears are fully justified as there'd be no reason for Apple to pursue this trademark if they weren't intending to exploit the perks of its ownership in the future.


Yes, the perks of its ownership like enforcing their trade mark in the trade they are engaged in. Specifically the sale of music and the licensing of that mark back to Apple Records. Again they aren't trademarking the concept of apples, or all pictures of apples, nor is the application for anything more than the categories under which that trademark was. Further more, the application is not really any different from any number of other trademarks for which the Swiss government has already registered for Apple, such as:

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

or perhaps most relevantly this one which is the other Apple Records mark that they own and was granted full protection for:

https://www3.wipo.int/madrid/monitor/en/showData.jsp?ID=ROM....

Realistically this article is pure rage bait mixed with some clever marketing by the Swiss fruit union. They're not seriously worried, they're getting free press by stirring up controversy over an absolute nothing. And you can tell because of this weasel word line:

>“We have a hard time understanding this, because it’s not like they’re trying to protect their bitten apple,” Fruit Union Suisse director Jimmy Mariéthoz says, referring to the company’s iconic logo.

They would understand if Apple were (and indeed already has as linked above) trademarking their Apple Computer logo, but they somehow don't understand why Apple is also trademarking the logo of Apple Records which they also own? Either everyone involved in this article from the fruit union reps all the way up to the editors are completely ignorant of Apple Records, their logo and the previous IP battles regarding that logo or they're playing dumb for the sake of making a story.


I can't understand your punctuation-free prose. Could it be that you're an IP lawyer?


> Without any other reasonable explanation for why they should

You want a reasonable explanation such as they might want to use a 3D logo when launching a 3D product their currently spending millions advertising.


It really is relative. If Apple was spending even a majority of it's profits in new products then I would take back my statement. Spending a paltry billion a year (Estimated for Vision Pro) when you make more than 200 billion in profits, and the majority of profits going into share buybacks is "no good vision".


Since Apollo qualifies as a small/medium business, that's 15%


They need $20 million to break even on the api costs alone. Both Google and Apple charge 30% on revenue exceeding $1 million per year


> reasonable for access to all of reddit

Not all of reddit. You're still blocked out of NSFW content (which will not be accessible over any tier of API).


$12k for 50M requests, wow. It seems Reddit has taken the twitter way out. If they just wanted to ban third party apps, they should have the balls to do it rather than pull all this stuff.


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: