Hacker News new | past | comments | ask | show | jobs | submit | oss2020's comments login

I use Apple's Hide My Email to sign up on websites where I previously would have used a Temp-Mail-Service such as 10MinuteMail. These are websites I want to use anonymously (Hackernews for example). It's more convenient and they give you the option to reactivate disabled aliases later (useful if you need password reset). I don't think they made it to replace your primary email, although you could use it that way.


Advertisers don't raid your house.


> Advertisers don't raid your house.

No, but they can give that data to the FBI who do raid houses.


As the parent post noted, the USA Today home page makes requests to dozens of third-parties--including Amazon, Facebook, Google, Twitter, and something called "summerhamster". I'm sure one of the dozens will take the FBI's call.

Hilariously, the USA Today homepage also hits OneTrust, who has the slogan "Privacy, Security and Data Governance" right in the <title>. What is there to govern if nearly all the major tech players have your access logs?

USA Today is shouting its readers' reading behavior from the mountain top.


OneTrust is very commonly used for the legally required cookie banners for EU readers.


There is no legal requirement to have cookies so there is no legal requirement for any banners


And you don't need consent for cookies that are obviously required for normal site functioning like login etc.


Bang on. For example

A user visits an e-commerce website and decides to purchase a product. They add it to their shopping basket before continuing browsing for more goods they wish to buy. They then finish their shopping by going through the website’s checkout process.

The website uses cookies to ensure that when the user chooses the goods they wish to buy and clicks the ‘add to basket’ or ‘proceed to checkout’ button, the site ‘remembers’ what they chose on a previous page.

In this context, the cookie is ‘strictly necessary’ to provide the service the user requests and so the exemption would apply and no consent would be required


We all cheer for Max Schrems to teach these companies that misconstruing cookie banners as complying with EU regulations is a risky play.


summerhamster is one of a billion of those shitty "adblock detecting!!!" "dont lose money!!!" malicious JS domains.


Probably it would be easier for the FBI if they just started their own advertising/analytics company.


Too easy.


well, not physically I suppose


With that logic there are no one-liners. Even binary code is just an abstraction interpreted by microcode.

The point is that there is a working http server already installed on your machine. And you just need to run this one simple, memorable command to use it.

Very useful if you just want to quickly copy some files from A to B in your LAN or WAN (wouldn't use it over Internet because not encrypted).


Python 2 was blocking. Python 3 is non-blocking.


Brave and Opera both use their own solutions for syncing.

In fact, can anyone name a browser except Chromium that uses Chrome's sync servers for syncing? Because I can't.

Also your point about backwards compatibility doesn't really make sense as Google has plenty of ways to detect browser version and capabilities of the sync engine (the sync engine sends that info to the sync server voluntarily right now).

Also Google can't just disable it's own API keys every time there is an update because this would shut down a large number of it's own users too. They would need to wait at least 1-3 months to avoid larger disruptions and this would give others more than enough time to fetch the latest keys (and if there is interest, there will always be someone who does that and posts them).


> Also Google can't just disable it's own API keys every time there is an update because this would shut down a large number of it's own users too.

It can because the official Chrome auto-updates very reliably. They only have to support a few versions back. They could even force updates if they wanted.

None of that is true for Chromium. Do they really want to support the 10 year old Chromium from Debian stable?


They already don't support Chromium. https://chromium.googlesource.com/chromium/src/+/refs/heads/...

(I mean, they're Google, they don't support anything that doesn't require payment from the user and barely that, but that's beside the point.)


Real transport level security will be possible with MTA-STS (rfc8461). Use DNSSEC, enforce TLS, and verify server certificates. Also I haven't had much trouble with spam recently (spam filter works fine).


The point of MTA-STS is not having to use DNSSEC, which nobody does anyways.


There is also not-metadata data that WhatsApp stores (group names, status updates, ...). But I think the point is that if you're using WhatsApp (especially group chats), there is a high chance that Facebook, Google AND Apple end up storing your personal data - even if Facebook might not have access to message contents (but Google and Apple still do). Still your data is all over the place. Doesn't matter if you disabled cloud backups because the people you chat with most likely didn't. With Telegram your data is stored on their servers - but but only on their servers.


From README.md ( https://github.com/threema-ch/threema-android ):

> This source code repository will be updated for every public non-beta release. There will be one commit per released version. [...] For the time being, we do not accept contributions via GitHub. [...] To report bugs and request new features, please contact the Threema support team through threema.ch/support.

Commits are useless (one commit per release), issue tracker on GitHub is disabled, contributions not public, no public discussions. I like Threema and appreciate them open sourcing their apps, but this is not what I call open source development. I really hope they will reconsider this. Both Threema and the community could benefit from this, but dumping the source code here and then isn't going to cut it when the competition is meanwhile doing real open source development. But at least we have reproducible builds now, this is still a great step forward.


> Commits are useless (one commit per release)

FTR Telegram is released in a similar fashion: https://github.com/Telegram-FOSS-Team/Telegram-FOSS

They do have releases more often than Threema though which means the commits are smaller.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: