Hacker Newsnew | past | comments | ask | show | jobs | submit | Cheetah26's commentslogin

Learned that App Store does this too during a recent MFA rollout.

What really surprised me was that when instructed to install Google Authenticator, a significant portion of people (I'd estimate close to 50%) would search the exact name and then proceed to reach to install the sponsored top result with a completely different name until I stopped them.


Absolutely this. It is so disappointing that the big tech companies provide ANOTHER opportunity for less-skilled users to make a mistake.

And a mistake that might hurt them with security and certainly cost and functionality.

And in a core, security-sensitive function like "what third party apps should I have on my personal device?" This is not searching for fun memes on Reddit!


A lot of the MFA apps that Apple allows to appear above the official apps do work, but they have a $10/month subscription fee. The MS Authenticator clones have very similar icons and names

I rather suspect that this kind of thing constitutes the majority of shovelware on all the app stores, rather than outright malware. The latter gets you quickly ejected, but if your app is technically within the rules, it's just a steady trickle of $$$ from people who install it by mistake or because they just don't know better.

And you can't even point someone to a specific app without the App Store trying hard to redirect their attention to an alternative.

I actually think that llms could be good for human-focused websites.

When the average user is only going to AI for their information, it frees the rest of the web from worrying about SSO, advertisements, etc. The only people writing websites will be those who truly want to create a website (such as the author, based on the clear effort put into this site), and not those with alternate incentives (namely making money from page views).


Why should people be in either crowd? The internet needs dedicated professionals too. Someone has to test vacuum cleaners, do investigative journalism, report about quickly changing events. This requires more time than the merely passionate can provide.

And why would the truly passionate keep writing if their words never make it to others without being rephrased and they never get attribution for their ideas?


> This requires more time than the merely passionate can provide.

Perhaps but weaponized autism will get it done.


Gianmarco Soresi discussed this on an episode of his podcast.

He says how there used to be a number of nationally known comedians who could make jokes that appealed to everyone's shared cultural experience, but now that's effectively impossible because a) culture isn't tied to geography / location, and b) niches are much more prevalent. I loved the example that huge venues can now often be sold out for artists you've never heard of.

On one hand it's not neccessarily a bad thing since individuals are getting more of what truly appeals to them, but I also think that the result could be increasing the barrier to connect with others because it decreases the chances that you'll have interests in common.


Location: Rochester, NY

Remote: Ok

Willing to relocate: Yes (within northeastern US)

Technologies: Javascript, Typescript, Svelte, Tailwind, Golang, Java, Docker, Kubernetes, Nix, PostgreSQL, GCP

Résumé/CV: https://shanemongan.com/files/Shane_Mongan_Resume.pdf

Email: scmongo@gmail

I'm currently in my last semester of college, getting a BS in Computing and Information Technologies from RIT. I started this degree planning to go into sysadmin, but have been gravitating towards devops / SRE skills. I'm a very enthusiastic learner, exploring with my Docker-focused homelab for the past 6 years, including running some custom services which I've come to rely on daily.


As someone who has woken up to looking a bear in the face while camping, I can say with 100% confidence that on a physiological level these are not the same thing.


Much better legislation would be requiring that the firmware/software source be released at EOL, so that users can maintain the hardware they purchased for as long as they like.


Probably we need both. Hardkill all devices, and let determined users resurrect their own devices with the open source firmware if needed. The point is that millions of vulnerable devices won't stay online by default.


How big percentage of customers even logged to their home router. It will be way below 10% (I would wager in lower single digit percents).

So

* manufactures open source it

* "someone" is going to maintain it, for free

* all these people are going to find non-malware infested fork

* upload custom ROM to their devices.

I just don't see it.

Automatic updates/killswitch are the only way forward.


Want to sell a device ? Deposit the software in escrow, released one year after the firm stops supporting the device !


Why wait a year?


For anyone who likes this sort of thing I'd recommend checking out the Shavian alphabet[1][2].

Similar goals with some very cool choices for matching letters to their sound. It also kinda handles accent variations with a few extra letters.

[1] https://www.shavian.info/ [2] https://en.m.wikipedia.org/wiki/Shavian_alphabet


If we're dropping Latin alphabet, Tengwar is another option. It's vocalized abjad (a better term perhaps will be abugida or alphasyllabary) and vowels are written with diacritics.


Do you have any sense as to whether Tengwar is any more or less compact/concise than Shavian?


Location: Rochester, NY

Remote: Yes

Willing to relocate: No

Technologies: Docker, Linux, Bash, Python, PowerShell, Go, Java, JavaScript, TypeScript, Svelte/SvelteKit, SQL

Résumé/CV: https://shanemongan.com/files/Shane_Mongan_Resume.pdf

Email: [email protected]

LinkedIn: https://www.linkedin.com/in/shane-mongan/

I'm a 4th year Computing and Information Technology student at RIT, looking for a summer job / internship before I head in to my final semester. Ideally looking to explore DevOps as I've had a ton of fun running containers at home for the past 5 years, and I'm currently taking RIT's first ever DevOps course. I am also open to build on my prior experiences in systems administration, or try web development which I've been highly successful with at school.


I got a 2019 Mazda3 sedan a few months ago and I'm very happy so far. It has a few more features than I wanted, but I was reassured by a family member who is a mechanic for a Mazda dealer that everything is very reliable.

I really like that all the auto stuff can be turned off if you want, and all the capability of the screen but still having physical buttons. Plus I got 36mpg on my first road trip with cruise control set at 85.


I think the ideal solution here would be if companies were required to ship an open source driver, and then optionally offer a proprietary driver for an extra fee which includes whatever 'special sauce' (as another comment put it) that they don't want to release.

The example I'm thinking of is Nvidia's newer GPUs and DLSS. The hardware would come with open drivers, but if you want the upscaling that's an additional fee. While maintaining additional drivers is more work for companies, I think they'd actually benefit from this because it could be a recurring revenue stream for older hardware.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: