Tuesday, 30 November 2021

Monday, 29 November 2021

New top story on Hacker News: Ask HN: Have you noticed difficulty tapping links on HN on iOS lately?

New top story on Hacker News: Ask HN: Have you noticed difficulty tapping links on HN on iOS lately?

Ask HN: Have you noticed difficulty tapping links on HN on iOS lately?
16 by bluehex | 10 comments on Hacker News.
In the past couple of months I have noticed much more difficulty having my taps on links in Chrome iOS register. I'll tap the same link multiple times with no response whatsoever. When this happens scrolling the page a bit and retrying does seem to help. I would estimate that about a third of my initial taps fail to register. This is on the main article links as well as the harder to hit tiny links for comment, upvote, etc. I have no idea if this is an issue with recent updates to iOS, Chrome or this site. It has been quite frustrating. Has anyone else been experiencing this?

New top story on Hacker News: Ask HN: Know any non Librem5 PinePhone for Mobile Linux? Legacy devices too!

New top story on Hacker News: Ask HN: Know any non Librem5 PinePhone for Mobile Linux? Legacy devices too!

Ask HN: Know any non Librem5 PinePhone for Mobile Linux? Legacy devices too!
8 by GhettoComputers | 1 comments on Hacker News.
I have not seen any love for the Cosmo's mobile linux hardware. It has much better specs than the Pine and Librem offerings, has a headphone jack unlike the Fairphone 4, and seems criminally unmentioned. https://ift.tt/2EbJvuZ https://ift.tt/30OutUY Older Android devices supported by PostMarketOS are also never mentioned, such as these Xiaomi devices, with better specs and will be better devices for general usage, I see GNU/Linux on Android as the natural response to my generally seen Linux usage (longevity of hardware and software support for devices you already own, rather than buying new hardware to run linux). https://ift.tt/3lfv27s https://ift.tt/3nZpUWM https://ift.tt/3ldhKsk I've used Ubuntu Touch with supported devices through Hallium ase well. If any of your old devices support these or you want to talk about other Linux mobile hardware, please do, I think there is too much bias and assumptions that only those 2 are "Linux phones". https://ift.tt/2yLfi3v

New top story on Hacker News: Ask HN: What's the best way to secure your workstation?

New top story on Hacker News: Ask HN: What's the best way to secure your workstation?

Ask HN: What's the best way to secure your workstation?
14 by bccdee | 7 comments on Hacker News.
Here's a very plausible threat: Some developer with a left-pad package, some dependency-of-a-dependency, injects malware into their library. A developer (who is broadly trustworthy) updates their package's dependencies without auditing them properly, and the malware ends up in a VSCode plugin that you use. You open VSCode, your system is infected. We know this sort of malware is making its way onto package repositories [1]. We know people are falling for these attacks. How do we protect ourselves against this family of threats? [1]: https://ift.tt/3eIvIio We could trust nothing beyond our base system and our browser, and refuse to use any code we don't fully audit, but this would be an impossibly austere way to live. I expect most of us, when pressed, would admit that we're trusting much more code than we would like to. The alternative is sandboxing, using a lightweight option like firejail (which I use) or a totalizing system like QubesOS. But these systems are awkward to use, and have their own drawbacks. What's the bar for reasonable security, in your opinion? How do you secure your workstation without living like a monk?

Sunday, 28 November 2021

New top story on Hacker News: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

New top story on Hacker News: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
21 by k4runa | 3 comments on Hacker News.
Today has been wild. I am quite shocked at how quickly the whole thing happened and how difficult it is to report the hacked account to instagram and try recover the account. The docs seem to take you in a loop without ever being able to resolve the problem... My friends instagram account has only ~2,000 followers, so not even a huge amount, and her email and password was reset about 6pm to a gmail account, and by midnight the account had already posted deep-faked AI videos of her promoting cryptocurrency scams. The deepfake videos are very realistic too, if I hadn't know her better or know about the hacking it would be very easy to believe it was real... It's possible they deep-faked her videos ahead of time but it seems like something you'd only spend resources on only if you knew the attack was successful. And there doesn't seem to be that much news or content online about this happening or it seems very targeted... but for such an account with such a small following it seems like it must be quite widespread problem. Have you had this happen to someone you know personally and what do you think about how prepared we are to deal with scams this sophisticated or what effect they might have?

Cyber Monday deal: Galaxy Z Flip 3 is down to $500 at Best Buy with activation, no trade-in required

Cyber Monday deal: Galaxy Z Flip 3 is down to $500 at Best Buy with activation, no trade-in required

The Samsung Galaxy Z Flip 3, originally $999.99, can be had with a discount between $250 and $500 at Best Buy, depending on the carrier you choose to activate with. The deal is part of the Best Buy Cyber Monday deals campaign and likely won't last long.


from PhoneArena - News https://ift.tt/3CYBgP6
via IFTTT
New top story on Hacker News: Ask HN: Why is Docusign a $50B company?

New top story on Hacker News: Ask HN: Why is Docusign a $50B company?

Ask HN: Why is Docusign a $50B company?
29 by akouri | 30 comments on Hacker News.
I have been searching for a solution to e-sign some lease agreements. It is something that I need to do maybe once a year and the only thing I need is a legally binding way to put signatures and timestamps on a PDF. I do not need any fancy features. I was doing research, and it seems like most document signature companies all charge monthly subscription fees! This does not work for me as I am not using the platform on a monthly basis. Are there free, open source alternatives to Docusign? If so, why do more companies not use them?

Saturday, 27 November 2021

Friday, 26 November 2021