Hacker Newsnew | past | comments | ask | show | jobs | submit | more johnvschmitt's commentslogin

If you brush before sleep (with triclosan, a very common antibacterial agent), you breathe >25% of your breaths through a mouth populated with antibacterial agents.

The prevalence of antibacterial agents in soaps, & toothpastes in the last 15 years coincides with the increases in asthma & digestive disorders.

The article says, essentially, "It's complex, and adaptive, so be careful how you force it away from a neutral state." Yet, adding antibacterial agents to toothpastes is quite a forceful change.


It's not too hard to separate 2 colors. (Just have separate STL files for each color). I do this currently.

I don't think many designs will really require "pixelized" variations in color like their demo shows. Just putting a transparent layer, or 5 colors, will provide for ~80% of predicted use cases. So, a simple "STL per color" format can act as a "bridge" until the necessary richer standard is developed & adopted.


That illustrates it very well.

It's a shame that recombinantrecords.net has removed that from his site, even though it's original work, because lawyers sued him for using the title of a (good) book "Amusing Ourselves to Death". Then, 9GAG & other sites have no problems copying the content. It just goes to show you that you can't stop information flow. All you can do it stop legitimate players from controlling it.


Even so, there are weaker links in the security chain: Carriers (mobile equivalent of ISP's)

Your carrier has access to every URL you visit (http or https) and the entire packets sent to/from them (if http), regardless of the password on your phone.

Those Carriers have been MORE THAN eager to bend over backwards & give up the farm to the feds. Just check Verizon, AT&T's history with NSA/FBI/etc.

So, YES, the article is golden, Schneir is golden, but the fact that weaker links exists should still install vigilance & outrage amongst civil libertarians / freedom lovers.

And, even if there are weaker links in the chain, we should still applaud & support strengthening any/all links, while still vigilant/aware of where the weakest link remains.


They're presumably not MITMing SSL, so they have access to every host you visit, e.g. foo.com, via DNS. On SSL they cannot see the URL - e.g. https://foo.com/secret


They also know the volume of data being moved and the times it occurred, which could be useful information.


Often the byte count is enough to determine the URL. It's also a key component of how BEAST et al are able to extract session keys.


If not DNS, then via Server Name Indication (SNI)

http://en.wikipedia.org/wiki/Server_Name_Indication


You're absolutely correct. However, when you combine host + time + location data, all at once, on your phone, then your carrier indeed has TONS of data to spy on you, regardless of the encryption on the phone itself.

All good points, & my only point was that while we strengthen each link in the chain, we can't assume we're secure while weaker links exist.


Do they have full URLs in https? the hosthame, yes, but the GET /path/to/embarassing/page.html is passed within the encrypted channel. Am I correct?


You are correct. HTTPS is HTTP spoken over a SSL/TLS secure channel. The contents of the request and response are all fully encrypted.

The hostname is a special case, as it's present in the certificate presented by the host, as well as in the client hello if SNI is in use. (Both of these are unencrypted, as they're sent in the process of negotiating the secure channel.)


Congrats! I met with the team in their YC days, and can say they are all quite sharp, and the market is overdue for this kind of automation/service.

They might want to partner with my buddies at http://TheOrangeChef.com, who sell (among other inventions) iPad sleeves to keep them clean in the kitchen. Maybe send a batch of sleeves with every new restaurant that signs up?


Unfortunately, even if this works, it will likely have less and less application over time. California has very little fresh water reaching the ocean, and as population increases, and drought increases, we're sending less fresh water to the ocean.

And, over time, it takes more & more energy to make water fresh/clean in the first place, and to move fresh water around.

So, any power generation scheme that requires using fresh water is not on a good trajectory. It's good science experimentation though, & may spark other more useful ideas.


At this rate, in another 10 years, it'll become George Bluth's "Sweat & Squeeze".

But, let's not say this is any surprise. It's the trajectory of nearly everything that is initially super-cool/elite. It gets to the rich elite who aren't cool, then it gets mass produced & mass-marketed, then it gets uncool.


Too many times, I've seen people call ugly, immoral tactics like this as "growth hacking", which is polluting an otherwise positive culture.

Yes, it may be legal. Yes, it may grow your company. Yes, you may not have to pay any consequences until you're big enough to pay it off as a "tax".

But, no, it's not ethical, and yes, your investors will worry that you'll shamelessly cheat them at the first opportunity.


Just because something directly harms the competition doesn't mean it's unethical or immoral. If it doesn't harm the stakeholders, it's fine with me. This isn't pouring waste into a river. This is going in and poaching the opponent's resources.

I also don't think it's inherently dishonest to do things like offer referral bonuses for getting the competition's drivers to join your service.

Were I an investor, where would I get the impression that they would shamelessly cheat me at the first opportunity? All they've done is improve the likelihood that the business I have invested in wins out.


Abusing the cancelation policy is the specific immoral act I'm calling out here. Offering employment invitations is fine.

But, often a company has very forgiving cancelation policies to be customer-friendly. By abusing those cancelation policies to do a DDOS-style attack is going to lead to adverse impacts on the ecosystem (less forgiving cancelation policies, drivers & riders wasting time chasing bogus reservations, etc)


My neighborhood uses NextDoor.com and it does work. We share info on nearby construction, crime, and trade recommendations for local services, trade local gardening/landscaping tips, pest-management, etc.

Having civil exchanges over those "transactional" issues is the first step in knowing them, establishing trust, & then digging deeper when you cross paths.


With all the data, carpooling/sharing a ride is great.

But please, the phrase "game changer" is horribly overused today & diluted.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: