HN user

Operative0198

58 karma
Posts1
Comments81
View on HN

Mv3 broke uBlock Lite for me (used uBlock to control js mostly).

But that wasn't a deal breaker because I got to discover NoScript (still stuck on mv2 but I like the approach vastly better than original uBlock's implementation).

Just waiting to see how this functionality will be handled in mv2 sunset since Noscript has no plans to migrate atm and uBlock lite should be "guttered" for the foreseeable future.

So you agree the recession prediction is not evidence for Shiff's competence?

Economists make wrong predictions all the time. Am saying Schiff is not exactly entirely wrong on some of the ones he's made in the past.

...have you looked at the trend, though? Inflation was climbing higher and higher until last June, and then it dropped by more than half. For the last 3-8 months the inflation rate has been about 4%.

Have you? The last time the inflation rate was even near 4% was in April 2021 [0].

[0] https://ycharts.com/indicators/us_inflation_rate

It what?

Muddied the definition of a recession when the question came up.

Also if you predict a recession every year you'll eventually get one right, but that doesn't make you right about recession predictions in general.

Yep. That's pretty much the game of predictions.

2019's inflation was below target.

Which target? The one the Fed determines? Consumer inflation at the moment (~7%) is rivalling rates witnessed back in the 80s. Add the new money the Fed has printed over time (since 2008) and now expected to continue (covid stimulus, bailouts for banks etc.), anyone can see where the trend for inflation is going. No predictions are even needed for that.

He isn't wrong on any of those predictions.

The dollar has never been at a more precarious position (on a hyper-inflation course and the BRICS are pondering about adopting the Yuan).

Bitcoin (who knows what's coming next, but for sure never seeing 70K again)

Hyperinflation (pretty obvious)

Bear market (most of 2022 was in one, and most probably this year will follow)

Recession (high certainty this will happen. Fed's soft landing is a mirage, history shows a rate cut after aggressive hiking usually leads into one)

Schiff is not outright wrong on his predictions. He just never gave time stipulations for his predictions.

Glad I transitioned my passwords from Bitwarden to an offline password manager that doesn't have a similar "easy PIN password mode" feature.

I used to use Bitwarden with this feature though, just that I recently came to the conclusion that the product probably isn't the most secure offering and it has some issues on Android with native autofill when you aren't using Google Services.

Except you'd have to know the encryption passphrase to unlock the swap partition. Only after this step can you use the stolen key to manipulate the state of trusted images.

TPM has never been a pre-requisite for secureboot nor kernel_lockdown. Infact the proposal you are speaking of sounds very exclusionary since TPM hardware is still relatively new and not ubiqitous.

You don't need any other tools sets when using sbctl to enroll and sign your keys. It's a one-stop shop for creating UKI bundles and signing them. I use systemd-boot with UKIs created by it and it has no issues detecting the UKIs. Maybe your problem is holding on to grub(legacyware IMO) which has poor support for what you are trying to accomplish.

Hibernation support in lockdown has nothing do with the MS politics around secure boot. You can generate and use your own keys to use with secureboot. The issue is that "accessible" unencrypted hibernation files invalidate secureboot when you can break into RAM and modify system images/files.

For secureboot you may want to took a look at this project [0]. Don't think it has ever gotten easier to sign UKIs than that though systemd should have a new project (systemd-ukify) that aims to make it more integrated.

Hiberation is not supported in lockdown mode because I'm assuming the kernel (maintainers) expect most people to have an unencrypted swap partition. If you have secured your swap, you can patch [1] the kernel to allow hibernation.

[0] https://github.com/Foxboron/sbctl

[1] https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1...

Gnome doesn't need any more KDE Connect clients. GSConnect is pretty much perfect and most importantly, is integrated into the Quick Settings. What I have always been puzzled by is the near absence of KDE Connect clients for tiling compositors. I would love to one day use KDE Connect in a way that feels native for something like Sway.

Nope. Google "reads" all your data and saves it to push ads & suggested content to you.

I know this because Google read my emails (AFAIK there's no toggle to disable tracking on this product) and suggested me a video based on the contents of one of my emails. Mind you, I wasn't even logged in on YouTube at the time.

I do not fear telemetry. What I refuse to accept from Firefox is a FOSS product being as bad if not worse as Chrome on the telemetry and data collection front.

I like uBO but you can replace it with a dns filtering service for 95% of its use case (ad blocking).

It could just be me but I do not see browser extensions on mobile as a killer feature. Moreso, when the same extensions are primarily developed for desktop.

I don't disagree with what you say. Generally if you pick security over the conventional you are bound to face limitations for the sake of security. But podman as a product compared to docker to me looks very less mature (things like podman-compose should be included in the box 4 years on). I also get the feeling people who compare podman to docker only run wordpress as a test then call it a success without getting deep into what problems both podman and docker solve.

Some of the cons of rootless/podman

* last time I used systemd units to manage podman containers, it was an inconsistent failure and a catastrophe with containers failing to start.

* podman-compose is not yet officially supported.

* pods are confusing.

* any use of privileged ports (<1024) requires messing with sysctl values as workaround. yikes!

* no pre-defined apparmor/selinux profiles for common processes.

* folder/file permissions under user namespaces is a confusing mess.

* slirp4netns eats cpu and has awful performance.

* can't do GPU and other deeper HW related tasks.

I could go on and on...

Docker has none of these inadequacies.