iron-s's comments

On: Google Pixel 9 Pro

[iron-s]

Media volume and notification volume have their own sliders

[A_Venom_Roll → iron-s]

Unfortunately this doesn't work for notifications such as 'lap times' from the Garmin app. This is also considered media by the phone.

[gerash → A_Venom_Roll]

That can be fixed with Garmin notification sound being treated as a notification sound.

Adding per app volume control is IMHO a really bad UX. It means there's a master volume and then per app volume is like a coefficient the app volume is multiplied by.

My car has its own volume control separate from the phone bluetooth volume and I hate the experience of having two volume knobs interacting with each other when all I want to do is to increase or decrese volume

[ruthmarx → gerash]

> Adding per app volume control is IMHO a really bad UX.

I really prefer it for having different things set at different volumes. Like presets.

[happymellon → iron-s]

The media volume slider is joint across the apps though if they aren't notifications.

On: Cybersecurity Is Broken

[iron-s]

Fixing cybersecurity with laws is the same as fixing drug trafficking with laws

[alephnerd → iron-s]

Bullshit. Liability and regulation can absolutely help with ensuring better practices. The fact that the SEC now requires disclosure of active breaches has forced companies overnight to begin taking cybersecurity seriously, and there are plenty of other liability related changes happening as we speak.

[emmelaich → alephnerd]

The comparison is valid, the laws work and also they don't. Using a big hammer can make things overall better but for some individuals much much worse.

On: Reflections on Distrusting xz

[iron-s]

What is real identity? Anything online can be faked. A state-issued id? How that protects against nation state?

[brabel → iron-s]

Nothing protects you if you're up against a state. That doesn't mean we should give up completely.

Do you have a passport? That's a real identity in most places. Soon, it may be possible to use that to link your identity to a set of public keys which you can then use to identify yourself.

There's a lot of work to be done to make this a reality, but work is surely going on right now and this is going to be possible one day.

Check this out, as a starting point: https://curity.io/resources/learn/verifiable-credentials/

On: OpenAPI v4 (aka Moonwalk) Proposal

[iron-s]

Having full support for the uriTemplates makes reverse mapping impossible, so I suspect adoption of the proposal in the API gateways will be close to 0

[handrews → iron-s]

There are ways that URI Templates could be disambiguated for reverse mapping- that would be a discussion worth opening on the Moonwalk repo.

On: Ask HN: What are your predictions for 2023?

[iron-s]

Those don't look like predictions, more like a wishful thinking of a person with close ties to russia