Hacker News new | past | comments | ask | show | jobs | submit | lbourdages's comments login

They may be self-signed but if he rolls out his own self-signed certificate the browser will also put a big warning to not go forward.

LetsEncrypt cert? The domain could be something like amazon.freeewifi.com, it can have a username/password field and a text above it that says "enter your Google/Facebook/Amazon login", and the majority of users won't realize that this is a 3rd-party site. Experts like us might notice "That's not how 3rd party auth is supposed to work!", but the majority really won't know.

A few years ago I read a statistics that most (90%+) computer users just do things based on rote memorization of sequences of actions, not understanding what happens in the background. I wonder how it is nowadays.

Maybe AI that can "smell" if you're on a scammy site (e.g. prompts to enter your Google/FB/Amazon password) would be useful, but then again the implementation might end up being like MS's "let us record your screen, for AI!" horseshit..


I was imagining them trying to spoof an amazon.com domain using an evil dns server or something of that nature. That would be much harder to detect, but the cert is an issue.

I guess it's overcomplicating things, though. Most people will just not notice that whatever domain they use is not legit.


Amazon is also super sloppy with domains even when its legit. Working there I had to put my password into probably four or five tlds, and the onboarding process involved giving my SSN to an non amazon.com tld linked from an email that was from a different non amazon tld with a misconfigured cert that got it sent to spam by gmail and dotted with red rectangles and stop signs

Yeah, just like "I'm a prince who needs your help to move money" scams are riddled with poor grammar, it's easier to keep it dumb, to attract the unsuspecting.

But on the flip-side, if there's an expert on the flight, they'd notice it's a spoof site and chances are higher they'll report it to the crew. I can imagine the trick is to show a page that says "For free WiFi, follow our Instagram account, click here for our account", and the click will fail because there's no connection (if we're on the plane), but the click can trigger some Javascript to say "If you couldn't follow our Instagram, login using your Google/Amazon account: Username: ____ Password: ____". Or a more sophisticated trick would be to show a DIV that looks like Instagram and the "follow" button, which will then show the fake login...

The privacy-wary IT expert will look at the "Follow our Instagram" and think "Fuck off, I'm not doing that!" and might miss the spoofed login prompt...


Why would they be self-signed

Well you can't have a real amazon.com cert ¯\_(ツ)_/¯.

If you use a random domain sure it works, but it's also fishy. I guess most people won't notice...


Make the domain login-to-[airline]-wifi.com, get a real cert, and return a form with <h1>Login with Facebook</h1> and you won't ring alarm bells for the average user

What's the imagined obstacle in obtaining a real cert?

Yes. In Canada, the phones are not locked, but if you terminate your contract before the term (max 2 years) you have to pay the remaining cost.

What happens if you don’t pay?

I ask this out of genuine curiosity - I’m not sure what happens in the US either, I don’t believe they brick carrier-locked phones that a customer stops paying for but I’m not sure. But I’ve enough experiences with enough people to know this is probably actually a fairly common scenario and I wonder what the consequences are. (A surprising amount of the time, there are no real consequences.)


A phone contract is on one's credit report. If they don't pay, the phone company will try to recover the debt like any other debt (via nagging, and then selling the debt to a collection agency). It's not fundamentally different from not paying the bill at the end of the month.

These single use tickets are used essentially only by tourists and those who use public transport only on occasion.

The vast majority of users will use rechargeable Opus cards [1] that can contain a variety of different fare types (single tickets, monthly tickets, etc).

From an operator's point of view it definitely makes sense to only have to maintain one type of reader, even if that means losing a few cents profit on the low single digit percent of rides that use the disposable tickets.

[1] https://www.stm.info/en/info/fares/opus-cards-and-other-fare...


That’s not true in Montreal if you buy a single ride you get a paper ticket with a magnetic stripe that you feed into a completely different reader.

I've never seen these mag tickets, the ticket machines all give out Occasionnelle cards even for 1 ticket. Maybe if you walk up to the clerk?

So it doesn't solve the issue inherent will all inertial navigation approaches (error accumulates very quickly because of the double integration), it just has less error?

Seems like an incremental improvement at best.


Every time a train arrives in a station, its exact position becomes known.


Reading the article, I was under the impression that this was to be used for stuff like submarines, or vehicles in the arctic... stuff where finding one's position might be tricky.

This is absolutely overkill for a train where you can just rely on a calibrated odometer to know your position.


Not to mention wireless networks like the ones for the airtag or the wifi endpoints mapping google has could be adapted to share positions of "right here, right now" anonymously.

Which means that if only one device knows where it is, you can calibrate, and if several know, you can even correct for mistakes.

If the system is precise enough, you only need to calibrate once in a while. Being at home/office, on the local wifi, once, could be enough.

Besides, nobody wants the GPS to go, but it's a nice alternative that can't be jammed by enemy forces and can be used for hiking, diving, etc.


Yes, but these are approximate.

I mean the exact position, down to a millimeter, when e.g. a photo sensor on a train passes past a LED mounted below the station platform. The LED's light is modulated so there can be no mistake, and its location is precisely known.


A meter precision is fine for what most people use GPS for. If the device is as precise as they say, you won't add much imprecision to the original calibration, so you will be in the right tunnel at the right time.


The doc didn't give me a satisfactory answer. This, however, did: https://en.m.wikipedia.org/wiki/Gollum_(software)


I think you replied to the wrong post :)


Changing my input and output audio devices in the sound dropdown is almost impossible at work. There are dozens of Apple TVs that appear one after the other while you're scrolling or clicking.

I can't disable Apple TV support on my Mac :(


Even if I stay perfectly still for an entire day I'm still going to become greasy and smelly. Washing is not optional for me.

Good for those who can skip it, but as a member of society, I prefer to stay clean.


I've had a few girlfriends who barely sweat. Same with a roommate from Iran. All of them had no problem wearing pants and heather gray shirt out into the hottest most humid day.

Meanwhile I'm sweating like a hog in my tank top just existing. God forbid I move.

The only explanation that makes sense is that articles like TFA are written by those in the former group, so showering daily really is performative.


Also I've read that people with the gene ABCC11 don't typically smell when they sweat. The more east you go, the more people have that gene.


Isn't this also associated with white ear wax?


I only ever met one person who claimed they don't need to shower because they don't sweat. Boy, were they stinking, yet totally oblivious to it. No, we weren't friends - also because of the smell, but mostly because that came packaged with all weird extreme naturist beliefs.


Your body can adapt over time, it's just that most people don't try because they live indoors and control their environment and would prefer to be comfortable.

When I moved to a place with much warmer summers, the first year was awful. I could barely go outside without looking like I just came out of a sauna. Several years later, living without air conditioning and mostly walking everywhere, I was one of those people wearing pants and long sleeves in the peak of summer without sweating. 100F was just another warm day.

Since then I've moved to somewhere much cooler. I sweat profusely when it gets to a mere 75F. I just never trained my body to adapt.

To pivot back to the original topic about showering, people who shower every day strip off the body's natural oils that keep the skin moisturized. In response, the body produces more oils to maintain the integrity of the skin. And then some people want to shower more for that "clean" feeling and the problem gets worse.

In a sense, your body adapts to your daily showering, so when you abruptly stop, you're gonna smell.

In a similar sense, people with long hair are regularly advised to only wash their hair occasionally, because washing removes all the oils that their body generates, leading to dry hair that breaks easily. But people with short hair claim they have to wash their hair regularly because it "gets oily" when they stop.


I'm sure there's a small amount of variability, but people always tell me "you will get used to it" when they see me sweating balls as if I just moved from Lapland and I think it's trivially false and clearly genetic.

I've lived in hot places my whole life from Texas to Mexico to the beach, the latter two I never even had A/C for 10+ years. Clearly some people are like me and some people aren't and it has nothing to do with acclimation.

Meanwhile my girlfriend who barely sweats certainly didn't train for it, come on. Though she immediately overheats in the sauna which is the only time I feel some satisfaction on the matter.


My tinnitus is worse when I am congested (because I guess there is more pressure in the internal ear or something). Yawning can help relieving the pressure.


Parents can ask their own parents for guidance. In the proposed scenario, the grandparents would have no one to ask because the previous generation is most likely dead already.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: