Live data from Hacker News

Aquaris E4.5 Ubuntu Edition

bq.com

161–170 of 280 posts

Re: Aquaris E4.5 Ubuntu Edition

#161
post #80

Success all comes down to the app store. Just ask Microsoft.

Hopefully Ubuntu will have full support for the Web App APIs.

These phones will never compete with the Android or iOS App ecosystem, but they will have:

* Productivity apps that cross from desktop to mobile

* A relatively small number of native mobile-only Apps

* Web Apps

And that may well be enough.

Re: Aquaris E4.5 Ubuntu Edition

#163

Earlier quoted context omitted.

The only reason why some sites still use http is because of the need to purchase an ssl certificate from one of the cartelized CA providers.

How about ad fill rates? I'm not directly involved in add ops myself, but I've heard that now, even in 2015, major web properties still see a roughly 60% drop in ad revenue on HTTPS. Thats a big deal for an advertising supported website. (Though obviously not so much a big deal for a website like this selling an Ubuntu cell phone).

Yeah, it's the primary reason why I can't get any of our properties on https. Any ad supported platform / website simply can't afford to use https.

Re: Aquaris E4.5 Ubuntu Edition

#164
post #21

What is the status of connecting the ubuntu phone to a screen to get a personal computer running ubuntu desktop ?

Even if it's possible with this device (which I don't know) that's still an ARM processor you have. It's a Cortex A7 a bit faster from what you get in a Raspberry Pi 2 but not much. Anyway, those phones or tablets that turn into supposed regular computers are cool, but at the end of the day when I have access to a screen and keyboard there is usually a computer not far. Since my data is in the cloud anyway, I'd rathe…

Even if you don't have a fast Internet pipe, you can just boot the PC from your Android phone instead, using DriveDroid. I'm not sure if you can also access the files on the sdcard, though.

Re: Aquaris E4.5 Ubuntu Edition

#166
post #60

Earlier quoted context omitted.

The nerdy tinfoilhat who can't even be bothered to setup his browser to use https when possible..

spacefight is right. Offering HTTP along with HTTPS is an antipattern. As an example, I give you Reddit, where HTTP and HTTPS services are identical. That means you can log in on the HTTPS site, and I can have your session cookie or even your password. The only sane solution is to set up HTTP to redirect to HTTPS, and add an HSTS cookie.

Not necessarily.

Allowing access on both http and https is indeed a bad practice, but not in regards to the scenario you described.

The scenario you described has been covered since long by the 'secure' attribute, available when creating cookies. Assuming the authentication was performed from within the https channel, the cookie won't be disclosed when requests are triggered on the http channel. This covers the 'Reddit' case from an application layer perspective.

The vulnerability is rather in browsers (such as Firefox). They allow the rewriting of an existing cookie value through the http channel, although it was originally set through the https channel. This is a huge problem and I still don't understand why this isn't reported by any researcher as a critical security flaw...

Re: Aquaris E4.5 Ubuntu Edition

#167
post #69

http://www.bq.com/gb/game-ubuntu "Telegram is the most secure way to..." or http://www.bq.com/flexy_templates/game/assets/en/screen-3.pn... If you market your phone towards nerds, don't bullshit us with crypto marketing.

Would you mind to explain what you are talking about ? I thought telegram are more secure than whats app and etc . I would gladly hear what do you think about these app in general.

Telegram is a proprietary network service, which means that there is no reason to believe that it is secure.

Re: Aquaris E4.5 Ubuntu Edition

#168
Why release on such underpowered hardware?

Technical people/developers won't use this because the hardware quality is insulting (and the price is too low).

Non-technical people won't buy this because there are no apps (and the price is too high for a no-apps phone).

Who is the target market?

This: 4.5" 540x960 IPS screen, 32-bit ARMv7 CPU, 1GB RAM, 8GB flash, 8MP camera, no LTE, no 802.11ac, no NFC, no barometer - Pros: dual SIM, microSD slot (but only up to 32GB microSD cards?!?)

Galaxy S6: 5.1" 1440x2560 AMOLED screen, 64-bit ARMv8 CPU, 3GB RAM, 32-128GB flash, 16MP camera, LTE-A, 802.11ac, NFC, barometer - Cons: single SIM, no microSD slot

Re: Aquaris E4.5 Ubuntu Edition

#170

Earlier quoted context omitted.

Things like that always bug me. What if I live in Spain and only speak English. What if I live in a Catalan region and want Catalan? What if I live in GB and want to read it in Spanish as it's my first language? With the world being as global as it is and people readily moving around, geographic location does not equal language preference. Ideally the site would have geographic specific sections but allow all languag…

It would be quite a bit of work, to attend a very limited use case. Every Catalan (or Galician, Valencian, Basque) speaks Spanish, as do the vast majority of the expats I know (and I'm one myself). You can still access the specific site of the language you are interested in. Or, in the worst case, use Google translate.

Obviously it depends on the use case and audience, but language and location should not be conflated by default. Location allows customization of currency, measurement units, legal policies, shipping information, tariffs, dates/times, etc independently of the copy language. There are plenty of countries with more than one major language (there are almost 40 million Spanish-speaking citizens of the US and India has 23 official languages), so websites that guess language based on country alienate a lot of users.

Your browser already tells every website what language(s) you speak in the Accept-Language header, so it's not like that information isn't available.

Post reply on HN