Hacker News new | past | comments | ask | show | jobs | submit | zyrthofar's comments login

If your password manager gets compromised, sure, but if someone gets access to a website's database with password hashes, the 2fa is a pretty big part that they're missing.


This does assume they aren't able to also compromise the encryption key used to protect the secret:

https://news.ycombinator.com/item?id=10845985

https://news.ycombinator.com/item?id=11136948


Twilio indeed! I also have Digital Ocean and SendGrid on my own list, which are written by developers for developers.


I was about to switch in a couple of weeks, until I read your comment.

How would encrypted emails work in a client like Thunderbird? Would it normally be handled correctly if POP/IMAP was available?


This is the grand problem with email. At least two standards exist: PGP & SMIME

But... those aren’t particularly friendly and thus aren’t widely used. The main usability issue is a fundamental one, namely that management of crypto keys is hard.

Hearing that Protonmail requires their own client suggests to me that they’ve given up on the standards due to usability issues, and have instead adopted a managed key model like Apple’s iMessage.

iMessage is end-to-end encrypted, but Apple manages keys on your behalf. It’s not a bad compromise between privacy and usability depending on your threat model.

But, at this point I’m deeply suspicious of anything that isn’t standards based or that locks me into a particular vendor’s software. I’m therefore skeptical that we’ll satisfactorily solve email privacy for a majority of people in my lifetime.

EDIT: Thunderbird would work with Fastmail for encryption using PGP or SMIME (at least I think Thunderbird supports SMIME). Protonmail wouldn’t work, I’d guess.


> Thunderbird would work with Fastmail for encryption using PGP or SMIME (at least I think Thunderbird supports SMIME).

Thunderbird supports SMIME natively, just like most of email clients. But of course there are some usability issues, like you need to enable encryption each time per email, or require it for all emails, there is no middle ground like "encrypt if I have keys, do not encrypt otherwise".


I use Ruby on Rails professionally and personally, and it addresses most of your features very easily (with Devise being a popular auth system that can be added).

Ruby follows duck-typing, so variables are not typed. If that was a strong point for you, Ruby might not be what you need.

I'm not quite sure about the admin UI (I usually use the rails console when I have things to change), though, but there's probably a gem that does exactly that (?).

Ruby on Rails is very powerful and intuitive, and I'll miss it if/when I change jobs and have to use some other language.

Edit:

> [...] so variables are not typed.

I might have used the wrong words... Ruby is dynamic, strongly typed. Variables are not limited to a certain type after they are created, and can change anytime.


There's [active admin](https://github.com/activeadmin/activeadmin) if you really want that kind of website, with a separate administration panel.

In my experience it's always better to just write it on your own and better integrate it into the app, but Active Admin allows for some fast prototyping.


But wouldn't that mean that you and your SO would inherit these debts when she dies, and there's nothing you can do about this? That's truly awful :(.


In the United States and most countries I'm aware of debts cannot be inherited.


I think most places, debts can be inherited voluntarily, but you can't cherry pick.

If your dead aunt had a Mercedes 190SL, but also owes $200,000, you can either take both or nothing.

But yeah – they won't end up in debt themselves, unless they choose to.


Yeah, my dad died in debt (Norway), and we were able to pick any personal effects of minor monetary value without issue, and then make the choice whether to take the rest of his assets and the debts, or neither.

It only really becomes an issue if you have a strong personal attachment to assets that have high monetary value, like e.g. perhaps your childhood home - otherwise it boils down to a financial consideration.


You aren't inheriting the debts - you are inheriting the estate after all debts have been settled. So the estate could be worth 0, but you'll never inherit a negative estate.


That's exactly how this works. Either you take all of it, debts included or nothing. Or in some countries you let lawyers sort it out first, where they make sure all debts are paid off, they take their fee, and then you inherit whatever is left.


I don't think you can inherit cash loan debt. You can inherit property that is still under mortgage (no problem there), but then it's a choice: keep the house and pay the mortgage debt or sell the house/give it to the bank.


You can't inherit debt. At least you can't be forced to accept it. (You can select to reject any inheritance, be it positive or negative)


Maybe in a country where such a dashed thing is possible, but I believe the OP is in the US.


There are so many apps that I can't uninstall on my Galaxy S3... That alone makes me want to have something else.

Also, I use google's keyboard, but once in a while, samsung puts back theirs (after an update or whatever), and it infuriates me.

Samsung _does_ get in my way, but it's possible it's because I have an old phone and the newer ones are better at this.


I've heard some good and bad reviews about system76 and zareason. I'm currently considering the Librem 13 on https://puri.sm/ for when they come out in october.


Why doesn't puri.sm even include an Ethernet port in their premium product Librem 15 and in Librem 11 (though they do in Librem 13); cf. https://puri.sm/store/. There are very good reasons to use ethernet and strongly avoid use of WiFi if you are serious about privacy. For example consider slides 69-76 of http://de.slideshare.net/grugq/opsec-for-hackers, where the FBI could see when there was data sent/received by simply looking at when there was activity in the suspect's private WLAN (something that is not possible in this form for ethernet) and decorrelate it to his TOR activity.


I love "The Five Love Languages". It helped me understand why my past relationships had failed, that neither them nor me were at fault. We just didn't speak the other's language.


I was in a relationship with a Spanish native speaker and had the same problem.


Strange that I finished reading your comment and was thinking you had exactly 5 past relationships that didn't work out.

Edit: Down votes for an observation about myself? Whatev...


It's likely because the comment was unsubstantive.

Please don't complain about downvotes in HN comments: https://news.ycombinator.com/newsguidelines.html


Yep. HN is a discussion forum, not a diary.


I have a Galaxy S3, and it was rebooting randomly more and more often. At the time, I lived in an apartment. I bought a house earlier this year, and to my knowledge (and memory) this hasn't happened again since.

What you said reminded me of this, because I had forgotten this infuriating rebooting. I wonder if this was related to the building or something else? This is weird.


Wow, that's exactly my experience. Used to reboot 4-5 times a day and now it happens roughly once a week. Did you happen to use Bluetooth more in the apartment by chance?


Honest question: why wouldn't they just get up earlier, instead of implementing a system that affects everyone?


DST is what makes them have to get up earlier. Dairy farmers (or any other kind of farmer) are/were generally against DST, despite the common myth it was created for them[1].

[1] https://www.washingtonpost.com/opinions/five-myths-about-day...


Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: