HN user

Couto

351 karma

[ my public key: https://keybase.io/couto; my proof: https://keybase.io/couto/sigs/brY4-bIymKwbS8VhIlyOQuHGNge0NlpdLzBRXMf0Ozo ]

Posts44
Comments32
View on HN
nesbitt.io 6mo ago

Workspaces and Monorepos in Package Managers

Couto
27pts3
github.com 9mo ago

Fnox – encrypted/remote secret manager

Couto
5pts0
www.piiano.com 2y ago

PII Encryption: The Key to Protecting Your Customers' Privacy

Couto
2pts0
www.cloudflarestatus.com 4y ago

Cloudflare Status Issues with 1.1.1.1 public resolver in Lisbon and Toronto

Couto
2pts0
phmpt.org 4y ago

Analysis of post-authorization adverse event reports of Pfizer vaccine [pdf]

Couto
1pts0
itnext.io 4y ago

Sigstore: A Solution to Software Supply Chain Security

Couto
1pts0
gist.github.com 5y ago

Acronyms Seriously Suck

Couto
2pts0
www.dashlane.com 6y ago

Security White Paper – Dashlane [pdf]

Couto
2pts0
medium.com 6y ago

Storybook 5.3 – Build production design systems faster

Couto
5pts0
support.yubico.com 6y ago

Yubico macOS Logon Tool Configuration Guide

Couto
1pts0
doist.com 6y ago

Mental Health and Remote Work

Couto
3pts0
www.engadget.com 7y ago

France launches government chat app after fixing last-minute flaw

Couto
2pts0
github.com 7y ago

Git-signatures – Multiple PGP signatures for your commits

Couto
75pts14
derivepass.com 7y ago

Compute secure passwords without storing them anywhere

Couto
6pts0
github.com 7y ago

Yarn Plug'n'Play: Getting rid of node_modules

Couto
362pts99
evilmartians.com 8y ago

Stick with Security: YubiKey, SSH, GnuPG, MacOS

Couto
2pts0
protonmail.com 8y ago

Improved Authentication for Email Encryption and Security (2016)

Couto
3pts0
www.manning.com 9y ago

Type-Driven Development

Couto
2pts0
medium.com 9y ago

All JavaScript frameworks are terrible

Couto
4pts1
www.pivpn.io 9y ago

Simplest OpenVPN setup and configuration, designed for Raspberry Pi

Couto
4pts0
www.christianalfoni.com 9y ago

The case for function tree

Couto
1pts0
www.dietpi.com 10y ago

DietPi: Lightweight justice for your single-board computer

Couto
3pts2
blog.ricardofilipe.com 10y ago

Remote Working – The Good, the Bad, the Ugly

Couto
8pts0
www.passwordstore.org 11y ago

The standard unix password manager

Couto
2pts1
smssecure.org 11y ago

SMSSecure encrypts your text messages over the air and on your phone

Couto
2pts0
world.std.com 11y ago

The Diceware Passphrase

Couto
2pts0
nodepatternsbooks.com 11y ago

Node Patterns Books

Couto
3pts0
pgpasc.org 11y ago

An initiative to decentralize public PGP keys

Couto
0pts0
pgpasc.org 11y ago

An initiative to decentralize public PGP keys

Couto
0pts0
pgpasc.org 11y ago

An initiative to decentralize public PGP keys

Couto
1pts0

Jails seems (to me) the most attractive feature in this package manager.

It's not feasible to believe we can just disable post-install scripts since so many older packages rely on these. Having them contained to avoid dubious scripts seems like the next best solution.

React was closer to elm during the times of stateless functions and redux. Since then it's getting further apart from elm.

Redux was kinda of a poor man's elm but it got the right principles. However the JS community hates boilerplate code so, new, more complicated abstractions appeared. Also, it was too easy, with redux, to shoot yourself in the foot.

Since then, with hooks, things are just getting harder and more complicated in my opinion.

Definitely interesting, albeit a bit too green to be a beta version imho (I can't select a contact when adding a relationship, added two pets by accident because there was no feedback... e.g).

However, it looks really promising and more feature rich than the current version of Monica.

I do have a question thought. Will this version support WebDav/Cal? Syncing contacts to my mobile phone is the main reason why I use monica on a daily base.

Used jslint extensively back in the days.

The reason why it fell mostly in disuse nowadays is because jshint appeared, which allowed a lot more customization of the available rules being applied.

Later eslint popped up with it's plugin engine allowing anyone to have their own custom set of rules.

As far as I know, no one cared about jshint's license because there was no code being shipped, and eventually code would be minified anyway leaving no traces of jshint.

Now... We can talk about the morality of ignoring a license, but ultimately jshint's license was simply ignored by almost everyone

Coverage only indicates which parts of the codebase were touched by the test suite. A big test suite size doesn't mean high coverage.

Coverage can be increased without increasing the test suite by reducing the code base size (within pratical limits obviously)

Personally, I only find coverage as a good indicator of which code still needs to be tested, like forgetting some edge cases or conditional branches.

This reminds me of the server that Zoom used to have. Accepting connections only from 127.0.0.1, alone, isn't enough, since any request from the browser would match that IP, even if the request was being made through a XSS attack.

I'm sure someone with more knowledge in security would better chime in.

You are right, but just to give a better picture of Portugal: We still have a lot of illegal drugs coming from Morocco, it's not a solved problem yet.

When this law was approved (2001) Portugal (Casal Ventoso) was the major Europe's entrypoint for heroin and everybody knew someone who was addicted, and it was impossible to walk in any city's park and not see an used syringe on the ground.

I think what's happening in the US with the opioid crisis is a bit different that requires a different solution. Regulation vs Decriminalization.

Just my opinion:

In my experience, when people say drugs they think of cannabis, but cannabis was never the major problem in Portugal.

Our problem was heroin. I think no country will legalize heroin, at least not in the short/medium term.

This is clearly working, one of the major entrypoints of heavy drugs in Europe (Casal Ventoso in Lisbon) is almost clean of problems, there are still heavy drug users of course, but most of the associated violence disappeared.

Even portuguese people's mindset shifted from "junkies" to "people that need help".

So even if you consider a "halfway there" because you're thinking about legalization, this is still working and it's a good middle term to help society shift their mentality.

Disclaimer: I'm talking from my experience as a Portuguese person, not hard numbers. I remember walking in my hometown parks (which is a very small city) and see syringes and drug users everywhere when I was a kid. This doesn't happen anymore.

That's not the same than being decriminalized.

In Portugal, if you do that the police will ask you for your ID if it's a light drug like cannabis, or take you to the police center if it's an heavier drug. If you keep being caught by the police a judge can order you to take psychiatric help.

Being decriminalized means that you won't be arrested when you ask for help, and you have access to clean syringes to avoid diseases and infections.

Help being provided, it's not the same than being legal.

Out of curiosity, how did you manage to have Mozilla as a location provider?

I hope i'm wrong here, but as far as I can tell. You need either google services or unifiedNLP from microG to achieve that.

I say this, because I run LineageOS without Gapps and I could never make it work with Mozilla's location provider.

The lack of geolocation is the only thing bothering me to be honest.

You can use SMSSecure as your default messaging app. That way you don't have to switch apps. You can even import your SMS from the default messaging app so that you don't loose your history. Bonus: you can then encrypt those SMS locally, but that's optional.

You can toggle the option to send encrypted sms or not, per contact, so if your contact doesn't support SMSSecure, you just send a regular SMS.

The ability to know who's using SMSSecure is interesting and not currently supported (that I know of)

Both parties need to have SMSSecure installed, and a secure session started — a roundtrip of sms to exchange keys, or something (im not an expert so not sure if those are keys, or something else).

Otherwise they will only see a garbage of letters/numbers.

Yes.

Streisand is just a bundle of ansible playbooks so it can easily be deployed on any server that meets the requirements: Debian 7 or similar.

It also has a nice menu to deploy to Amazon, Linode, Digital Ocean and Rackspace without extra effort.

Quick question... assuming that this would work on all yahoo services.

Now imagine that I lose my phone, I guess that I will have to ask to receive a reset token, or something similar, on my yahoo mail, right?

But then how do I login on the mail service without my phone?

(it's a honest question)

short answer: yes.

long answer: Most Portuguese users under 30 years old can read and write, at least, basic english, and would prefer to use the english version of your app instead of brazilian portuguese. This is the scenario that I experience with people around me, at least.

People who are not so comfortable with english will _endure_ the brazilian portuguese if you provide no alternative.

I don't doubt that your service works with the best intentions, but why should I open a security hole in my application, when I can easily avoid it by writing my own proxy and keep it private?

What happens to my application, if your service goes through a DDoS? What happens to my application, if you suddenly decide to close your service?

I'm pretty sure you can use these arguments about other services, but this service exactly, is not worth the risk.

console.log is a debug statement used in Javascript code. However is not supported in older browsers like IE8...

If you forget to remove then, IE8 will crash and burn...

It may also affect performance, although that is usually negligible...

HN Spoof 14 years ago

ahaha! my mistake =) still... as the country is going, even a little-known cheese manufacter will be able to buy the country

HN Spoof 14 years ago

As a portuguese... Zuckerberg buying Portugal would be the best thing ever! =D