Hacker Newsnew | past | comments | ask | show | jobs | submit | joecool1029's commentslogin

> vaultwarden is great, but password managers are security critical software that need consistent maintenance and constant updates.

You’re acting like this isn’t the case already with vaultwarden? (and it’s easier to host as well, making for easier updates) https://github.com/dani-garcia/vaultwarden/releases


Is it possible that you are assuming they are referring only to Vaultwarden itself? Half of the equation is a server component compatible with every app produced by a company, the other is every app that is produced by a company. If the company decides to stop being compatible (by changing their own communication), what are you left with besides the built-in web interface and a handful of “maybe-compatible, maybe-secure” apps?

Security updates aren’t just about the vault. What does having a fancy locking system mean if the moment you open the door everyone can just walk in?

Most people just want a product to do what it says from all their devices, and don’t care about any of this stuff. As such, they are more inclined to simply move to yet another least-friction mature ecosystem.

Vaultwarden as an alternative is a bit like suggesting a third-cousin who homebrews beer in a trash can knows a viable alternative as a nationwide replacement for Budweiser, because they both happen to use the same shape of bottles. I’m sure some family and friends might go along, but everyone else is just going to pick a new common brand that is similar to what they had, not start brewing their own beer. Some will…for a while.

The best thing about self-hosting your password vault is that you can be naive about how many times it has been compromised without detection.

(I’m not against self-hosting things — I’m against acting like it is a realistic alternative for average people who almost never have the skills to implement it securely.)


lighttpd still around too, on 1.4.82, not too much changed there.


They've been working on version 2.0 for many years now as well, I wonder when they think a release might happen.


To expand a little on this, Zelle and debit card transactions are covered under Regulation E: https://www.consumerfinance.gov/rules-policy/regulations/100... . So there’s a codified procedure for disputes, it’s just a little less consumer friendly.


Patio11 has a fantastic writeup on exactly this: https://www.bitsaboutmoney.com/archive/regulation-e/


> There's Supreme Court precedent establishing that this isn't the case.

This? https://en.wikipedia.org/wiki/United_States_v._Martinez-Fuer... or is there newer now?

> ACLU itself had backed off it, last I checked

They did, the current page greatly narrows the scope of their border-zone guidance to the SCOTUS case I linked before: https://www.aclu.org/know-your-rights/border-zone


Which they don’t respect. I’ve had it for my blog for years and they still added it to wayback machine, see my last comment for their official announcement of the ignore robots.txt policy, it is not new.


robots.txt means they shouldn't auto-scan your site. Any user though can go to the wayback machine and type in a URL and the wayback machine will read that URL. That was the intent of robots.txt (don't scan) not (don't read period). It's spelled out in the spec for robots.txt


The <meta name="robots"> tag and robots.txt serve different roles: robots.txt controls crawling, while the robots meta tag influences indexing and other behavior. https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...

I wonder how archive.org_bot behaves when <meta name="robots" content="noindex, noarchive, nocache" /> is present.


The person above those is complaining about entries in their logs from bots. A robot can't read a tag without first reading the document. So sure, if they're a good bot they might not store the results but the server's logs will still show the bot's GET request.


> I’ve had it for my blog for years

Just out of curiosity, why don't you want your public blog archived? not questioning, just trying to understand the logic/motivations?

Also, I think you're being unfairly downvoted.


No, archive.org does NOT respect robots.txt. You need to reach out to them directly and ask your site not be included: https://blog.archive.org/2017/04/17/robots-txt-meant-for-sea...


Aren't you choosing to ignore something very specific specified in that article? Why do you make it seem that article implies it's their overall policy?

> A few months ago we stopped referring to robots.txt files on U.S. government and military web sites for both crawling and displaying web pages (though we respond to removal requests sent to info@archive.org).


> Aren't you choosing to ignore something very specific specified in that article?

Of course not, did you ignore the lines right after? “As we have moved towards broader access it has not caused problems, which we take as a good sign. We are now looking to do this more broadly.”

The announcement is from 9 years ago. I already mentioned they ignored the robots.txt for my own blog.


I'd rather they disregard robots.txt than the opposite situation, where someone does not use robots.txt on a domain to allow IA to archive it, then for whatever reason the domain lapsed and got swooped up by a parker who then subsequently adds a robots.txt blocking IA from the whole site, which would have then caused IA to remove all historical archives of that domain from public view.


Hiding old archives when robots.txt changed was a problem Internet Archive created and could have fixed any time.

#4 largest private land owner in the US: https://landreport.com/land-report-100#top-100

Wonder what's going to be done with it now that he's dead.


I was a Boy Scout growing up and the Philmont Ranch is a destination for hiking and backpacking situated on his property. Twi weeks of backpacking through that wilderness was a formative experience for me, and I hope future generations aren't deprived of the opportunity to enjoy it.


I wonder what ever happened with the stream poisoning effort on a creek that ran through his ranch. That was bit of a thing growing-up back in Montana in the 90s, where the billionaire outsider wanted to poison the stream to kill off one species of fish to encourage another species.

https://www.rangemagazine.com/archives/stories/winter00/murk...


isn't that land part of a scheme to farm bison and save them from extinction? it would make sense for his will to specify that it keeps being used for this.


Jane Fonda was his last spouse. I hope he left it to her. She's a very cool lady with a great head on her shoulders. A recent interview (The Interview, NYT) is worth listening to. She talked very positive about Ted in this interview, which made me think they had a good relationship still.


She had a terrible influence against nuclear energy which retarded the industry by five decades!

We would not be in the pickle we are if she didn’t mindlessly scare and misinform people undermining a whole industry based on her misunderstanding.


I agree she had a negative impact on nuclear, but I don't think it was just her.


[flagged]


I should have said the "Jane Fonda of today"... everyone does dumb things and I didn't agree with everything she did when young. Recent interviews have shown a lot of maturity.


I'll go down that road with you. I agree with Jane on a great many issues, I'm sure. I certainly don't dislike her for her overall political leanings. And yet, I can't look at her without thinking about what she did in Vietnam.

The idea that she passed POW secrets to their captors has been debunked to my satisfaction. But the other stuff she did, calling our POWs liars and touring to support the army we were fighting, is beyond the pale.

Like, you can say we shouldn't be attacking Iran and I won't argue against you. But if you actually went to Iran in support of their soldiers and armies over ours, except maybe as a journalist who documents bad stuff you discover us doing, then I'm going to invite you to stay there.


How do you feel about Americans who go serve in the IDF, and avoid serving in the US military, and then come back to the US?


Indifferent. We're not at war against the IDF. Go and join the French Foreign Legion for all I care, so long as they're not fighting American forces.


That's a bit of a weird position to take. You seem to put "American forces" in a special bucket where, even if the actions the US military are taking is wrong, the support and reputation of "American forces" should still be protected at all costs, and the people they're doing wrong things to don't get to have any support.

Let's imagine an alternate universe where Russia didn't invade Ukraine. There were rumors that they were considering it, though, and Europe was not feeling particularly secure, afraid that Russia would not stop with Ukraine. This Ukraine is, like in our universe, nominally an ally of the West, though not the closest of terms. Poland, a US ally and NATO member, afraid that Russia would invade Ukraine and use it as a forward base to attack Poland, decides to preemptively invade Ukraine in order to establish its own forward base, a buffer zone.

I think many people in the US, myself (half Polish from my mom's side) included, would think this was a horrible thing for Poland to do. A bunch of us decide we're going to support Ukraine, protest on their behalf, and donate to their cause. Would you object to that? If not, then that's hypocritical. If so, that's... not a great look for you either.


> You seem to put "American forces" in a special bucket where,

I'm a vet. My default setting is to support American troops unless they're shown to be acting wrongly.

> even if the actions the US military are taking is wrong,

That's a bizarre little strawman. No. I can support the soldiers, sailors, and airmen while believing their leadership is wrong. By civilian analogy, I support the employees of HHS even if I think their boss is an idiot.

> the support and reputation of "American forces" should still be protected at all costs, and the people they're doing wrong things to don't get to have any support.

Your words, not mine. I don't feel that way. American leadership orders all kinds of jackassery. The people doing their jobs, presuming they're not committing war crimes (sorry if that was going to be your next gotcha), have my support. I've not heard any accusations that the POWs Fonda "visited", as though Hanoi Hilton was a zoo and they were wildlife on display, were legitimately war criminals. If they were, I would not support them. I for damn sure would not have supported the North Vietnamese government against our own solders, though. If our guys were in the wrong, it would be perfectly possible to prosecute both sets of people.

> Let's imagine an alternate universe

Let me stop you right there. We don't have to invent increasingly contrived scenarios to debate the core case: is it OK to provide aid and comfort to the enemy? It's not. It doesn't mean you have to automatically say your own military is flawless, either. But in the common case, I'm vastly more likely to support the general actions of the US military over those of the People's Army of Vietnam. I don't think that's an especially hot take.


Replying to myself: indifferent in the context of Americans committing what I consider to be traitorous acts against Americans. If you go join the IDF and shoot your way through Gaza, I'm going to think you're a POS. But I think you'll be a different kind of POS than Fonda was in Vietnam, which is the discussion at hand here.


She was early, consistent, vocal, brave, and in the light of history morally right in her opposition to the Vietnam War.


Whoa there. The US being wrong to make war in Vietnam absolutely does not vindicate those who supported the Viet Cong!


Maybe, but her posing in North Vietnamese anti-aircraft guns was pretty despicable, not brave. Nepo baby PR stunt or not.


The war was despicable. The napalming of children was despicable. The mass rape and murder of children and women at My Lai was despicable.

What she did was not that.


position is one thing. implementation of that position is another.


Hard to believe it's over 10 years since they first started pulling crap like this by downloading a binary to listen for 'OK Google' (including on chromium builds): https://lwn.net/Articles/648392/


Not sure that's citric acid doing that, it's probably bromelain, which can be used as a meat tenderizer: https://en.wikipedia.org/wiki/Bromelain


> How do you deal with voltage balance when replacing one bad cell out of a whole battery?

Their BMS handles this. Read their reviews a minor complaint is that it takes 24-36hr to fully rebalance all the cells.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: