Hacker News new | past | comments | ask | show | jobs | submit | shapov's comments login

They have a self-titled TV show on HBO/Showtime. I am assuming that's considered non-digital media.


Fonts disappearing is not a big issue that will ultimately render your page useless. If the font is gone, the look of the page is slightly affected, but the content of the page remains. It's honestly not a big deal at all.


In that case just use sans-serif or a web-safe font and avoid the third-party dependency.


Here as we enter the 2020s, there are no longer any web safe fonts. Those 1990s Core Fonts for the Web (Verdana, Georgia, Trebuchet, etc.) are no longer universal across all widely used platforms.


Yeah okay, but the initial suggestion (just specify "sans serif") still holds. Or really, if we're talking about a webpage to last, why do we even care about what font is being used? If you care enough about a font that the glyphs used are important for layout, then obviously you're going to need to include the font. If the specific look of the page is essential to the content conveyed, it seems likely to me you won't be using a standard font anyway.

For typical "the words matter more than how the words look" content...can someone explain to me why we care about including the font?


There is another thread in this discussion where we discuss this, pointing out that default fonts in browsers tend to be quite ugly.

See here: https://news.ycombinator.com/item?id=21841011

There’s also layout issues caused when replacing a font with another font, unless the metrics are precisely duplicated. There’s a reason RedHat paid a lot of money to have Liberation Sans with the exact same metrics as Arial, Liberation Serif have the same metrics as Times New Roman, and Liberation Mono have the same metrics as Courier New.


It's possible now, that this information has gone mainstream, programmers worry about how their non-tech friends view them for working there.


I didn't see it mentioned in the article, but did any of the 3 companies confirm that the repos have been actually cloned as the attackers suggest?


That would mean they are blocking all S3 buckets indiscriminately.


Only old S3 buckets that are accessed the old way.


Couldn't they just middle-man the traffic and block specific URLs?


ssl prevents that.


It explicitly does not. It means there are additional barriers to doing it - people would need to accept a bad cert (we already know the overwhelming majority will), or they would need to slip in their own CA that allows them to generate their own valid certs for MITM, but that is eminently doable for the Chinese government inside of China. They can then block all traffic for people that do not use the cert that allows them to decrypt said traffic. It functionally is the exact same thing, and would still allow "legitimate" traffic without problem.


That's not what explicitly means. Ssl explicitly does prevent mitm attacks from intercepting URLs of requests.

The fact you can get around it by ignoring the cert is a bit irrelevant. It's like saying locks don't work because people can break your window.


As noted, you don't have to ignore the cert, and we're talking about state level actors.

And it's not the window. It's like saying locks don't work if the state has a master key, which they do.


They already have their own CA in browsers, so they can easily MITM. That’s why mobile apps will use certificate pinning to verify their server


I thought countries who did this already issued their own certs to be able to analyze traffic. Like China. Maybe I misunderstood.


Steam allows you to sell your game and provide players with steam keys from your own website without taking any cut. So that 30% cut that steam takes gets diluted quite a bit.

Epic does not allow for that level of distribution. It also doesn’t seem like they will.

Your argument about walled gardens also falls apart as soon as you realize that Epic is pushing for exclusivity.


Your argument about exclusivity is broken when you realize they are literally allowing people to buy games via Humble Bundle.

https://www.ign.com/articles/2019/03/20/epic-is-bringing-its...

So while it's not 100% the same, it's progression far faster than Steam did when Valve pissed the gaming community off by forcing HL2 players to install Steam.


(Can't read the article from my current location) But will the games be downloadable directly from Humble Bundle, or am I just buying a key to redeem on the Epic Game Store (which is the way most HB game purchases work)? If it's the latter, then it is still exclusive.


This comment is very misinformed on so many fronts. I am glad people with more HN points are downvoting this, because I am not really able to.


Amazon’s strength is their logistics network. Any co-op you’ve just described will have an incredibly difficult time competing on shipping prices and speed of delivery.


Yeah Amazon clearly dwarfs the logistics capability of nearly anyone, but as far as the 2-day delivery advantage Amazon has, there are some companies making competition in the space: ShopRunner is one I'm aware of and I'm sure there's others.


Although I am sure your intentions are pure, he raises a valid point. I think you'd benefit from making it apparent that "we won't steal or squat you name" somewhere on the landing page.

I think it's a fantastic idea, keep up the good work.


Thanks. That's valid point. We are against front running or black hat SEO. That's not the place we want to be.


Honestly, if I saw that message I wouldn't trust it.

Immediately I assumed they would be doing this, but used it anyway. If the message was there, I would not have.


I think the 2 video cameras and several SIM cards is what seems odd about this combo.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: