221–230 of 566 posts
Earlier quoted context omitted.
I can never get the Open In Reddit app button to work. I’m on iOS and have the latest version of the official reddit app. Which btw is painfully filled with ads.
Use the Apollo app. Much better than the official Reddit app. It's more like what Alien Blue was before Reddit killed that.
Google seems to be slowly self-immolating. I've stopped using Google Chrome and Google Search. The only time I use Google Search now is when DuckDuckGo doesn't quite deliver and then I do so using an incognito window. Next step will be to ditch Gmail, and then Google Cloud & Firebase. This might sound silly coming from a lone developer in South Africa, but my experience is that we live in the future, and developers w…
>> when DuckDuckGo doesn't quite deliver Which is 90% of the time when you are looking for IT questions. Unfortunately. I am hoping they are going to get better, it would be so good to finally stop google search.
When it first came out you couldn't get the URL either and they added it after people complained.
The removal seems to make it clear that it's really about control and keeping things within the confines of their own system.
Earlier quoted context omitted.
It really isn't as good. I want DDG to be awesome. I'm not in the Google ecosystem, and don't care for their business practices. I would be happy to dump them. But Google search is noticeably much, much better. They've got us over a barrel.
I kept seeing comments on HN about how DDG was as good as Google, so i've switched on one of my machines. It isn't. For stuff that doesn't matter too much, or is an easy search, i use DDG, then fall back to Google if i don't find what i need. For anything serious, i just open up a Google tab :(
Every time I search anything in someone else's computer (with google) I find it much harder to find what I'm looking for, sometimes I can't find and just go to DDG.
The only times I use !g is when I find some pretty obscure programming errors and no (useful) results on DDG, and only once in a while google is able to find anything better, usually the results are the same.
Earlier quoted context omitted.
I couldn't agree more that AMP is terrible. I do everything I can to avoid it. Using DuckDuckGo certainly helps, but I will still occasionally stumble on an AMP site. I've created a hosts block list to help me avoid AMP as much as possible. It currently has 3,569 unique domains (works great with a PiHole!). I'm really concerned about Chrome's 'signed exchanges' where they can fake the URL completely. I hope Firefox w…
> I'm really concerned about Chrome's 'signed exchanges' where they can fake the URL completely. They're not faking the URL; a signed exchange contains data that can only have come from the original site. It's a secure way of handling caching/CDNs/etc, and it'll be a net improvement for security that allows sites to put less trust in third-party servers and scripts.
Its a similar vein to how many of the objections to AMP were being white-washed with "its open source, if you have a problem with it why aren't you submitting a pull request??"
AMP is the worst. It breaks the web and should just die.
Earlier quoted context omitted.
How does a client-side cert help with authenticating the server? Why wouldn’t a phishing site also ask for the client-side cert if the real site does?
~~It wouldn't work because the phishing site would lack the private key needed to validate your client-side certificate and the TLS connection would not be established. This is assuming that the legitimate website itself signed your certificate signing request (CSR) to create the client-side certificate.~~ Edit: What I posted above is not correct. What I should have said was that the server would validate the client…
That is not how TLS works. A server can trust a client based on the certificate the client presents. A client can't distrust a server based on the certificate the client presents.
"The phishing site would lack the private key needed to validate your client-side certificate" is nonsense. Neither the real site nor the phishing site have the private key used to generate the CSR; only the client that sent the CSR has that, and validating a cert does not involve the private key in any way. If you're thinking of a new protocol where the server itself generates an arbitrary asymmetric keypair and shares it with the client, then a) that's not TLS, b) that could just as well be done with a symmetric key (since this is just pre-shared key auth) where the server presents a nonce to the client to sign and verifies the client signed it, and c) a fake server can just not do that.
Earlier quoted context omitted.
I couldn't agree more that AMP is terrible. I do everything I can to avoid it. Using DuckDuckGo certainly helps, but I will still occasionally stumble on an AMP site. I've created a hosts block list to help me avoid AMP as much as possible. It currently has 3,569 unique domains (works great with a PiHole!). I'm really concerned about Chrome's 'signed exchanges' where they can fake the URL completely. I hope Firefox w…
> I'm really concerned about Chrome's 'signed exchanges' where they can fake the URL completely. They're not faking the URL; a signed exchange contains data that can only have come from the original site. It's a secure way of handling caching/CDNs/etc, and it'll be a net improvement for security that allows sites to put less trust in third-party servers and scripts.
Third parties like Google, right?
Earlier quoted context omitted.
>> when DuckDuckGo doesn't quite deliver Which is 90% of the time when you are looking for IT questions. Unfortunately. I am hoping they are going to get better, it would be so good to finally stop google search.
I use DDG exclusively, and many of my searches are technical. I haven't found any cases where DDG fails to find something that Google finds. I'm not suggesting that it never happens, but it's certainly not anywhere close to 90%, or even 9%.