Hacker Newsnew | past | comments | ask | show | jobs | submit | cryptolect's commentslogin


In case nobody has pointed it out yet.

By default, with Ubuntu's dnscrypt-proxy package - the resolver is "cisco".

That's right, you're encrypting your DNS traffic just so Cisco can read it...

There are alternate resolvers but most people wouldn't change it out of the box.


Cisco doesn't log the traffic. Don't believe me, just ask davidu who founded OpenDNS and resides at Cisco.


I was really hopeful for a ChromeOS competitor. Guess I'll have to wait. Maybe Ubuntu's mobile OS?


...why not just regular Ubuntu?

Or well, any lightweight Linux distro, really.

There's also this, in case that comes closer to what you see as ChromeOS competitor: https://cublinux.com/


I don't want to use the terminal on a phone


ChromeOS isn't on phones, is it? Ubuntu also doesn't really require terminal usage either way...


What's unclear is how the BeagleBone Black Wireless compares to the SeeedStudio BeagleBone Green Wireless: https://beagleboard.org/blog/2016-07-07-seeedstudio-beaglebo...

It looks like the Green wireless has more USB ports, but aside from that, I'm not sure why you'd choose the BBB Wireless vs BBG Wireless?


Probably the HDMI port.


Interesting to see that "end-to-end crypto" is becoming a frontpage feature for messaging apps.


Maybe an NFC implementation would be more acceptable.


I don't know, I kind of like the notion of offering someone an USB killer and if they put in into their machine, you never trust them again (cryptographically or otherwise). Jokes aside though, yes, I think NFC would be less likely to be dangerous to your computer, but maybe easier to eavesdrop on?


Amusing to note that a site hosting a detailed article on the "cypherpunk revolution" doesn't support https.


Ever since I realized there will be a persistent log of my browsing history maintained by one or more government agencies, I have mentally-marked http as risky. I cannot wait for something like this to happen, and encourage the wider less-informed community that TLS is critical for both trust (properly implemented, TLS will provide protection against tampering and data leakage) and to provide a minimum level of privacy (I can see you visited site x, but not what sections of it). Bring it on.


Considering the functionality that wasn't reviewed, I don't think it should be advertised as "A".

It might be "A" for the expected permissions, but if there's extra permissions which haven't been investigated, these should be marked down until explained. This would encourage app owners to work with whoever maintains the database to get accurate ratings. If Whatsapp is an A today, there's no incentive for the developers to justify / assist with anything unexplained permissions remaining.

In it's current state, if it's awarding A scores while significant permissions are unexplained, it doesn't help the end user.


This is a wonderful example of NSA meddling. With one hand, Microsoft gives everyone out-of-box encryption, which it can use to demonstrate how well it's protecting consumers. With the other hand, by virtue of a 'feature' to assist consumers, it's providing access to the NSA via SkyDrive copies of encryption keys. Everyone's happy!

Best of all, enterprise customers don't have a reason to complain, because the SkyDrive backup 'feature' shouldn't apply to their deployment scenarios. The only people with a complain are those that use the default option.

We should keep vigilant for these security 'features' that are undermined by implementation. The NSA has years of practice at this, and we're playing catchup.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: