Hacker Newsnew | past | comments | ask | show | jobs | submit | Operative0198's commentslogin

Yep. But there was nothing stopping a black hat from contacting the admin and selling their own botted data to genesis shop. Criminal organizations have supply chains.


Mv3 broke uBlock Lite for me (used uBlock to control js mostly).

But that wasn't a deal breaker because I got to discover NoScript (still stuck on mv2 but I like the approach vastly better than original uBlock's implementation).

Just waiting to see how this functionality will be handled in mv2 sunset since Noscript has no plans to migrate atm and uBlock lite should be "guttered" for the foreseeable future.


Nothing like that on Android happens without explicit consent. And the controls around this consent are very very robust imo.


He isn't wrong on any of those predictions.

The dollar has never been at a more precarious position (on a hyper-inflation course and the BRICS are pondering about adopting the Yuan).

Bitcoin (who knows what's coming next, but for sure never seeing 70K again)

Hyperinflation (pretty obvious)

Bear market (most of 2022 was in one, and most probably this year will follow)

Recession (high certainty this will happen. Fed's soft landing is a mirage, history shows a rate cut after aggressive hiking usually leads into one)

Schiff is not outright wrong on his predictions. He just never gave time stipulations for his predictions.


Do you realize hyperinflation is generally defined to be 50% per month?

February US inflation is 6% year over year. This is orders of magnitude below "hyper".


And the definition of a recession was rescinded last year by the White House.

Is inflation for you better now than it was in 2019?


> And the definition of a recession was rescinded last year by the White House.

It what? Also if you predict a recession every year you'll eventually get one right, but that doesn't make you right about recession predictions in general.

> Is inflation for you better now than it was in 2019?

Did he predict "higher than 2019"? If "higher than 2019" wasn't his prediction then I don't see why it matters that "higher than 2019" happened.

And that's not much of a prediction. 2019's inflation was below target.


> It what?

Muddied the definition of a recession when the question came up.

> Also if you predict a recession every year you'll eventually get one right, but that doesn't make you right about recession predictions in general.

Yep. That's pretty much the game of predictions.

> 2019's inflation was below target.

Which target? The one the Fed determines? Consumer inflation at the moment (~7%) is rivalling rates witnessed back in the 80s. Add the new money the Fed has printed over time (since 2008) and now expected to continue (covid stimulus, bailouts for banks etc.), anyone can see where the trend for inflation is going. No predictions are even needed for that.


> Yep. That's pretty much the game of predictions.

So you agree the recession prediction is not evidence for Shiff's competence?

> Which target?

2%

> Consumer inflation at the moment (~7%) is rivalling rates witnessed back in the 80s. Add the new money the Fed has printed over time (since 2008) and now expected to continue (covid stimulus, bailouts for banks etc.), anyone can see where the trend for inflation is going. No predictions are even needed for that.

...have you looked at the trend, though? Inflation was climbing higher and higher until last June, and then it dropped by more than half. For the last 3-8 months the inflation rate has been about 4%.


> So you agree the recession prediction is not evidence for Shiff's competence?

Economists make wrong predictions all the time. Am saying Schiff is not exactly entirely wrong on some of the ones he's made in the past.

> ...have you looked at the trend, though? Inflation was climbing higher and higher until last June, and then it dropped by more than half. For the last 3-8 months the inflation rate has been about 4%.

Have you? The last time the inflation rate was even near 4% was in April 2021 [0].

[0] https://ycharts.com/indicators/us_inflation_rate


Wrong chart. That's a rolling average of 12 months.

The peak was in June, so it's still dragging the yearly number up. The last 8 months were much lower than the previous several.

https://tradingeconomics.com/united-states/inflation-rate-mo...

https://i.imgur.com/MBwyLjJ.png

Though that chart also shows inflation dropping...


I don't what you are on about. The chart figures I linked is sourced from the monthly CPI rate shared by BLS every month.

You are obviously trolling at this point.


The main inflation number that everyone talks about compares each month to one year previous.

When inflation changes rapidly, it gives you outdated information.

When you look at the underlying data for each month compared to the previous month, you can see that the spike was higher than 9% and we are currently lower than 6%.


It’s not trolling just because you aren’t understanding what’s being said. Recent MoM figures show inflation is way down, the annualized will follow down shortly.


You sound stuck in the past (read trauma). Confront your issue and look for a new enjoyable hobby to substitute the time you have for these thoughts.


As another vote against JS, this website is able to accurately tell at least half of the extensions I have installed on chrome.

https://browserleaks.com/chrome


Glad I transitioned my passwords from Bitwarden to an offline password manager that doesn't have a similar "easy PIN password mode" feature.

I used to use Bitwarden with this feature though, just that I recently came to the conclusion that the product probably isn't the most secure offering and it has some issues on Android with native autofill when you aren't using Google Services.


What issues are you talking about on android? Using e/os/ here with native autofill and yes this seems to have some issues :/ (mainly keyboard not auto-closing I think)


Maybe I was a bit too harsh on Bitwarden for a moment there, it's chiefly an issue with chromium. https://github.com/bromite/bromite/issues/547


A growing number of scientists recently watched 'Tenet'.


For secureboot you may want to took a look at this project [0]. Don't think it has ever gotten easier to sign UKIs than that though systemd should have a new project (systemd-ukify) that aims to make it more integrated.

Hiberation is not supported in lockdown mode because I'm assuming the kernel (maintainers) expect most people to have an unencrypted swap partition. If you have secured your swap, you can patch [1] the kernel to allow hibernation.

[0] https://github.com/Foxboron/sbctl

[1] https://gist.github.com/kelvie/917d456cb572325aae8e3bd94a9c1...


Thanks, yeah I think I came across sbctl when I was playing around with it. Haven't tried it yet... it got a little confusing when I was reading various guides to try to achieve what I've been trying to achieve, and they started referring to various different tool sets!

I'll have a go with it to enroll some keys and see if they persist. mokutil, and then rebooting into shim to persist them, has failed me. It all seems to go OK and then they're just not there on the next boot.

On hibernation, that makes sense. I hadn't read into the reasoning, just got as far as "MS allows it in secure boot mode, linux devs consider it insecure by design" or some such thing.


You don't need any other tools sets when using sbctl to enroll and sign your keys. It's a one-stop shop for creating UKI bundles and signing them. I use systemd-boot with UKIs created by it and it has no issues detecting the UKIs. Maybe your problem is holding on to grub(legacyware IMO) which has poor support for what you are trying to accomplish.

Hibernation support in lockdown has nothing do with the MS politics around secure boot. You can generate and use your own keys to use with secureboot. The issue is that "accessible" unencrypted hibernation files invalidate secureboot when you can break into RAM and modify system images/files.


> Maybe your problem is holding on to grub(legacyware IMO)

My problem is that I can't enroll keys, going through the enroll procedure (which doesn't involve grub) results in ... nothing.

I'm not specifically wedded to grub, and a UKI signed with a key is a fine idea if I can get a key installed. As such, I'll try sbctl but I have no particular reason to think it will work where shim/mokmanager fail if there's a motherboard issue of some sort.

There may well be challenges using grub down the line, but right now I'm not even getting far enough for that to be an issue.


It is not because of an unencrypted swap partition. It is because, even if it is encrypted, you know the key and can thus replace the image with an arbitrary modified one, or, in theory, with a hacked version of a Windows boot loader, which would break DRM.

There were some movements to remove this restriction, on the condition that the encryption key is properly sealed in the TPM and is not extractable.


Except you'd have to know the encryption passphrase to unlock the swap partition. Only after this step can you use the stolen key to manipulate the state of trusted images.

TPM has never been a pre-requisite for secureboot nor kernel_lockdown. Infact the proposal you are speaking of sounds very exclusionary since TPM hardware is still relatively new and not ubiqitous.


Correct. But you do know the passphrase, and, from the viewpoint of Secure Boot and the locked-down kernel, you (the legitimate owner) are also the attacker who tries to run some unapproved kernel-mode code and will stop at nothing in order to do that.


Gnome doesn't need any more KDE Connect clients. GSConnect is pretty much perfect and most importantly, is integrated into the Quick Settings. What I have always been puzzled by is the near absence of KDE Connect clients for tiling compositors. I would love to one day use KDE Connect in a way that feels native for something like Sway.


This is not a Gnome client. It is a gtk based client which doesn't require Gnome. It is also from the author of GSConnect.


GTK may be a universal GUI tool kit but the description "Gnome Tool Kit" is more appropriate.


It's not about Gnome.

Other desktops exist that use GTK. Such as Mate, which is still a very decent desktop and show just how far Gnome has fallen in the past decade. Some of us are very happy to have an application which will work for us that doesn't require pulling in Gnome's junk or KDE's junk.


This works on other desktops besides Gnome


Pretty sure it works on Gnome as well. One would say that's the main target.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: