HN user

edp

201 karma
Posts5
Comments57
View on HN

The fact that users have to delete the old Github key from their systems and accept a new one is what could lead to a MITM attack.

If your system doesn't know the public key of an SSH server, when you connect the first time, the SSH client will display a warning and ask you if you accept the server key. An attacker could be between you and Github and if you accept without checking it's the correct key, you would be toast.

On Instagram, when you create an account, you now need to submit a selfie picture while holding a code given to you while registering. For suspicious account, it can even be a video selfie. I know bots are an issue but they should ask for this only when posting/commenting, not for browsing. No way I'll send a picture or video to facebook linked to my email/phone number.

I think asymmetric encryption is not usable for large amount of data, the only thing it is good for is to encrypt a passphrase or a binary signature (like a hash). If you can catch the process of encryption while it is running, it is likely that the passphrase is in memory (or used as a command line argument).

As the sibling comment is saying, I never set up 2FA on my account. When I do, I'm using totp and store backup codes. Apple decided to force 2FA and use security questions as the second factor on my behalf.

On top of this, many companies provide customer support to reset 2FA with an other way to verify who you are.

But I never set up 2FA on my Apple account, security questions were meant to be used as an account recovery procedure if you lost access to your account email. THEY set it up as 2FA and as a result I can't log in. I have accounts on numerous website and this is the first time I'm completeoy lockout. I would gladly send my ID card to Apple but apparently this is not an option.

I got an email from Docker stating that Docker Desktop is no longer free for business use when exceeding 250 employees and $10M annual revenue. I guess they need more revenue streams.

I get what you're saying, it's not strictly income tax, but the end result is the same : it's a mandatory tax, based on what you earn. As for getting these expenses back, I hope I will have work and be healthy for as long as possible, and I'm happy to pay these taxes for poorer people to get access to healthcare or unemployment benefits. But I sure feel ~50% of my income is going into taxes without being a millionaire.

Here in France, as a contractor, if I bill a client 100 000€ annually and decide to get as much as possible in personal income, 30 000€ will go as social taxes (health, retirement ...) and for the remaining 70 000€ you will have to pay around 25% as income tax (if you don't have any children).

You will have an income of ~52 000€ for 100 000€ billed during the year. You're not earning millions and yet around 50% of revenue was paid for tax purposes.

Missing from markdown/web based slides is a way to auto resize text content to fit on a page, like powerpoint does. I didn't find a way to manage this correctly with reveal, remark or marp and from what I'm seeing, slidevjs won't do it either.