yoble

I thought France had it. It turns out France, Italy, Netherlands, UK, and Belgium have a conditional deferred version: you can become a citizen at 18 if you're born and have been living there (plus a few caveats).

Love the easter egg when going to https://pure.md/https://pure.md

In my previous company we hired a startup that did security training, that recommanded everyone use a password manager. And one of their test was that they sent a fake phishing email to people (randomized over a couple of months so not everyone would get it the same day).

I don't remember the exact number but something like 30% of people who didn't use a password manager got caught. Basically no-one using a manager was.

Granted there might be some selection bias (people who had managers were probably already slightly more security conscious), but people were feeling slightly embarrassed to have been caught and it worked great to have everyone do the switch. And everyone remembered after that that if it doesn't autofill, something's amiss.

I don't think that's correct as a blanket statement - you can use a passphrase, or remember a 14+ character password since you only have one to remember.

Even if it's only random-ish, password managers do key stretching (for example by hashing the password 600k times - bitwarden has a high default value and lets you increase it if you like) so that it has to take some computational effort to check if a single password is correct. That's why it take a few seconds to unlock your vault each time.

With these in place I think you're pretty safe for a long time. (Well, maybe until quantum computing breaks those cyphers?)

I have the same issue, I tried to get into VSCode a few times but each time switched back to JetBrains.

If your main issue is the keybinding though there is a vscode plugin[1] that recreates Intellij IDEA bindings, which I found helped smooth the transition during my tryouts for me.

[1] https://marketplace.visualstudio.com/items?itemName=k--kato....

My mom is an avid traveler who takes a ton of photos and puts them on albums she then shares with the family, and a while ago she was asking if I had a solution so she could have a website where all her albums are listed. She wanted to not have to share a new link each time, and have people easily look up older ones.

I didn't have any easy solution and this looks promising, congrats!

A few dealbreaker things I can share:

- she has lots of albums already on gphoto. She'd need to easily import them.

- she makes heavy use of the map and text blocks you can add in gphoto albums, which makes each album a kind of travel diary. I don't get the sense these are supported in your product yet, these would be required for her.

- she doesn't have a ton of videos but sometimes she does have a few.

- I'd have some concerns about the longevity of your product - if she invests time into it she wants to be able to look back at the albums in 10-20 years time. Having a convenient way to export the albums would be reassuring to me.

- I think she has a few 1000s photos in those albums, so your highest tier would be too low for her, if there was a way to buy storage that might suit her usage better (though she has a hobbyist budget).

It might be technically difficult and you rejected that path already, but I'm thinking an ideal way for her would be to keep editing her albums in gphotos and sync them to your site, which would take care of the longevity concerns and allow her to keep using the interface she knows (if you linked directly to the pics/vids on google server that would eliminate the cost of storing pictures for you, but I assume that's impossible or prohibited by google's tos).

Anyway, just sharing my use case in case that's useful but congrats on launching and on the good looking product!

For sure, though I'll probably have more info after the study.

It's done by the same people as the second paper I linked, on people attending a 10-day silent meditation retreat. My understanding so far is that the participants will be "zapped" a couple of time over the 10 days, to explore exactly what you describe ie alterations of consciousness similar to what's found in long term meditators on retreat, except induced on people who are already on retreat instead of people who'll have to go back to work afterwards.

I'll have more to report in a couple weeks time!

(If you'd like to share, I'm also curious as to what interests you in that field of study)

Nice timing, tomorrow I'll be participating in a study doing transcranial ultrasonic neuro-modulation, meaning using ultrasound not just to map brain activity but to influence it (the point of the study is inhibiting the Default Mode Network).

If anyone's interested I found those two paper really interesting:

- Aubry et al 2023[1], on potential risks and limitions of using focused ultrasound in the brain (tldr we don't know but have conservative estimates. Really interesting for me to see that HN article adding to that)

- Lord et al 2024[2], a first study on using Transcranial Focused Ultrasound to modulate the DMN and subjective experience

[1] https://arxiv.org/pdf/2311.05359

[2] https://www.researchgate.net/publication/381488518_Transcran...

In Buddhism this is linked to the central concept of Dependent Origination: things arise in dependence on other things, everything is conditioned by something else.

This includes movements of attention: attention is drawn to a sound perception because a frog makes a sound, then conditioned on interest being high interest dwindles, conditioned on that plus nerves shooting in the back a sensation catches the attention, it goes to a thought of planning that appears conditioned on you having a deadline tomorrow...

Even the arising of intention to move the hand arises at that moment conditioned on other things (that include you playing around with your perception a moment ago, pre-existing view around how decision work and wanting to prove it, having a hand...)

Looking for conditionality in everything we might identify with - thoughts, perceptions, intention... - is a central practice in numerous schools of Early Buddhism, and can lead to a deep, deep sense of letting go, inhabiting a flow of things "just unfolding", and classical insights around what our sense of self actually is.

Then I'll go ahead and list it there. Thank you for sharing the project!

Yeah definitely! StatiCrypt was originally created to password protect pages uploaded on static hosting (like Github pages) or where you didn't have control on the server.

It has some valid other use cases but it has drawbacks too and htpasswd can definitely be the better solution in many situations. StatiCrypt just aims at being another tool with different trade-offs.

Oh cool that looks awesome thanks for sharing! Are you the maintainer?

I saw that StatiCrypt is listed is the alternative section of your README, I'll do the same on StatiCrypt (and add a bunch of the one listed there that I didn't know about!)

The "Alternatives" section of StatiCrypt has always felt a bit empty to me, I'm glad to discover all those great looking projects and beef it up a bit. :)

Especially with 600k PDBKF2 iterations, 16 alphanum chars should be very safe.

There's a (warning: very detailed) issue covering the topic of PBKDF2 iterations and password length over here, if you feel like diving into that rabbit hole: https://github.com/robinmoisson/staticrypt/issues/159

Looks cool! And I like the effort you put in making your readme clear and covering many possible configs too, it feels very easy to read to me.

Would you be okay with me listing your project in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

That looks cool!

Do you mind if I list in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

Glad you enjoyed it before switching!

If you're open to sharing what didn't work for you in remembering people through re-deploy I'd love to hear it, I spent quite a few brain-cycles to think about making that as seamless as possible for the user (semver major version bump shouldn't break this, for example).

I'm assuming the problem is the salt being changed if it's not pinned by the .staticrypt.json file (auto-created but needs to be commited) or the `-s <salt>` CLI option.

Love that approach! Would you be ok with me featuring it in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

(author here) Yeah, or if it's on http someone could MITM and change the script, or if they are malicious extension on the browser the content can be stolen after decryption.

That felt implicitly obvious to me, but I think you're right and it wouldn't hurt to put those assumptions in the FAQ. Thanks for the feedback!

(If you, or someone else, see other attack vectors, feel free to comment with those)

Just random chance!

I recently launched another project with an interface to search and filter blog posts from a prolific blogger I really like, using AI tech. He featured the website on his blog last week which draw a pretty big spike in traffic - well, big for me, like a few thousands people - so I've been refreshing my analytics tools from time to time to follow what's happening, and I just noticed a spike on my other website as well.

Author here. I was wondering why I was seeing plenty of people from github on my meditation website so I checked HN, hi!

Happy to answer any question you might have, and feel free to offer feedback too.

(Last time this got posted to HN[1] was really productive in improving the project, thanks!)

[1] https://news.ycombinator.com/item?id=34849024

Seconding this, as a layman I've found his books both technical and fascinating. He's a great teacher, getting into the details but explaining in a really engaging manner.

I see this simple version of Karma talked about quite often in the general public and it's pretty far from my understanding of Karma in Buddhism.

Karma is a consequence of Dependent Origination - basically that things arise dependent on other things, and there is nothing that's outside of the law of cause and effet (hence no eternal, unchanging, eternally happy Self, which is the type of Self, or soul/atta(pali)/atman(sanskrit) the Buddha was talking about).

Karma means your intentional thoughts and actions all have consequences.

If you give to those in need, that ripples through the world and yeah, you're more likely to get good things because you're building a good life. There's no need for a "cosmic justice" that will weigh what you did and give you the exact same amount when you're in a similar situation. You have more probability of receiving help (cause you've got friends now), but you might still be unlucky and don't receive any help.

That's on the material level but it goes further than that - by acting and thinking wholesomely, less based on your own craving and delusion, you're cultivating a mind that's less likely to act based on craving and delusion. It's simple cause and effect again, and it depends much less on external conditions since it's internal.

(Now the word Karma is used differently in different tradition, so the general idea of "cosmic retribution" might be what it refers too in some of those. When I understood more this version of Karma it made a whole lot more sense, so I'm sharing that here.)

I found this article by Culadasa really enlightening on the topic: https://s3.amazonaws.com/dharmatreasure/20130322--what-the-b...

Author here - the specific use case is when you _don't_ have or want server-side logic or a DB. For example on static hosting (hence the name StatiCrypt) like Github pages, Netlify, etc.

That means nothing to maintain, no server cost, no serverless functions to rely on, etc.

But when that's not a constraint there are many different options that might make more sense.

Yep, looks great! If I had known about it at the time I might not have written StatiCrypt. I added it to the "Alternatives to StatiCrypt"[1] section of the Readme years ago when I discovered it :)

[1] https://github.com/robinmoisson/staticrypt#alternatives-to-s...

Thanks for the feedback! We had an issue opened around that topic where it seems to me that the weak points of CBC do not apply in the context of StatiCrypt. If you have more thoughts on this I'd love to hear them.

Relevant comment here: https://github.com/robinmoisson/staticrypt/issues/19#issueco...

Hi HN! Author of the tool here. Just woke up to a few emails pointing me to this thread. Thanks for the interest and added eyeballs!

I'll answer some of the comments here and address the newly opened issues during the day. To answer a few questions that seem common skimming this thread:

* CBC vs GCM: we had a conversation regarding this topic where it seemed CBC weaknesses do not apply in StatiCrypt context. I'd love to hear your thoughts if you have any - issue is here[1].

* WebCrypto: I've been wanting to use WebCrypto instead of crypto-js for years now. It's been in my "Important but not urgent" bucket (since crypto-js should be secure too), the interface is different so I want to make sure I do it correctly and life happened, so I never got farther than drafts. Thank you for the PRs, I hope to get to it soon!

* "static" means no server-side logic (not no JS): I first made StatiCrypt to solve my own issue of wanting to password protect an html page I could host on a static file host (Netlify, Github pages...). The whole point is to not have a server or DB, so we can't use Basic auth etc.

* Iteration count for PBKDF2: will increase today

As I write in the FAQ[2] I do my best to implement things correctly but I'm not a cryptographer - any feedback to make the tool better or more secure is very welcome!

[1] https://github.com/robinmoisson/staticrypt/issues/19#issueco...

[2] https://github.com/robinmoisson/staticrypt#is-it-secure

I've been loving that extension, thanks for the good work!

Thanks, I try to make it look nice! I started building it this Christmas and this HN thread brought the first users apart from my girlfriend and brother. All on free trial, we're 17 now!

Thanks for reporting. I'm on Firefox android and can't reproduce. No sentry error so I assume the front is not sending the request.

The email is an 'email' field and apparently firefox mobile will block sending if the email is invalid (missing @, ...) without showing any warning, is the email standard?

(Other obvious steps: is it still happening after a refresh, the stack is vueJS (+ laravel/inertia) so I assume you have JS enabled already? ublock shouldn't be an issue.)

Keep Close Friends: https://keepclosefriends.com

One day I noticed I was slowly losing touch with old friends - I moved, we all have busy lives and don't hang out just by chance any more. Those people used to be loved ones and now I wasn't sure. It felt like grief.

So I built a simple website where I can list relationships and ideal meeting frequency (say, 2-3 times a year), then get a few relationship stats and a reminder when it's time to reach out again.

I see it as a reminder that my life is short, and I like that. No other users yet but it feels right to try to help share that perspective around, for those who might want it.