Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kids find a security flaw in Linux Mint by mashing keys

github.com

Post reply on HN
Print view View original

281–290 of 340 posts

Re: Kids find a security flaw in Linux Mint by mashing keys

#281

Post by asddubs »

gambiting wrote: post #128
metafunctor wrote: post #126

Earlier quoted context omitted.

I don't understand the part about JWZ's testicles, so here are the links without bit.ly tracking for those whose ad blockers don't allow them: - https://www.jwz.org/blog/2021/01/i-told-you-so-2021-edition/ - https://www.jwz.org/xscreensaver/toolkits.html [Edit]: I understand now. My browser doesn't send referrer URLs, and I think that's the real fix instead of using something like bit.ly!

You still get the testicles if you click this link, at least using Chrome you do. It's because the referrer field is set to HN so they know where the traffic is coming from.

just tried it in chrome, i got only one testicle

Re: Kids find a security flaw in Linux Mint by mashing keys

#282

Post by uoaei »

Linux Mint, and whatever it's built on, has been disappointing to me. The most worrying thing I've experienced is that, when waking up from sleep, the unlocked screen will sometimes flash before showing the lockscreen. That is a huge no-no and really betrays the fallibility of whatever security measures are employed.

Re: Kids find a security flaw in Linux Mint by mashing keys

#283

Post by cycloptic »

Blikkentrekker wrote: post #279
cycloptic wrote: post #275

Earlier quoted context omitted.

I don't mean criticism, we (HN users) all have heard all the criticism a hundred times before. I mean actual actionable feedback that someone is able to work with, e.g. if there are problems with the design then we can bring some concrete data that shows new, reliable information. That means taking honest efforts to establish two-way communication where there is none.

> I mean actual actionable feedback that someone is able to work with Is this not what “constructive criticism”, as I called it, is? GNOME is not going to listen to an H.N. comment an change it's ways, and it was never my intent to reach them or otherwise inspire change in them. My intent was simply to be humorous.

Please don't discount yourself like that, by resigning to the usual HN snark. I think you're smart and capable of much more. If there is new, important and relevant information brought to them, they will listen to that. (This applies to most big projects I've seen, not any one in particular. The smaller niche ones that commit to having their small narrow audience are the ones I've seen that tend to be resistant to new ideas)

Re: Kids find a security flaw in Linux Mint by mashing keys

#284

Post by Blikkentrekker »

cycloptic wrote: post #283
Blikkentrekker wrote: post #279

Earlier quoted context omitted.

> I mean actual actionable feedback that someone is able to work with Is this not what “constructive criticism”, as I called it, is? GNOME is not going to listen to an H.N. comment an change it's ways, and it was never my intent to reach them or otherwise inspire change in them. My intent was simply to be humorous.

Please don't discount yourself like that, by resigning to the usual HN snark. I think you're smart and capable of much more. If there is new, important and relevant information brought to them, they will listen to that. (This applies to most big projects I've seen, not any one in particular. The smaller niche ones that commit to having their small narrow audience are the ones I've seen that tend to be resistant to ne…

I doubt they scan H.N. comments for input or come across them.

If I had wanted to reach them, I would certainly do wiser to simply send them a feature requæst bug report.

Re: Kids find a security flaw in Linux Mint by mashing keys

#285

Post by kelnos »

rexpop wrote: post #259
mightybyte wrote: post #143

Years ago I taught a high school typing class in a K-12 school. The school didn't have the funds to get a commercial typing program so I wrote my own typing program. It evolved over time with features to help me track the students' progress etc. One day we had a school open house where all the parents could come to school. We had a bunch of different activities set up in different classrooms and I ended up getting as…

> The school didn't have the funds to get a commercial typing program so I wrote my own typing program. Off-topic, but: It seems absurd, to me, that such a conclusion could ever be reached. Obviously, from my perspective, the economies of scale, the infrastructure, overhead, and institutional resources available to programmers at a dedicated software development firm would produce an application at better quality per…

Agreed.

Where I work there is a tool that's used in hundreds of our internal services. It was written in-house during one of our hack weeks years ago, and later we open-sourced it. Despite the fact that the org relies so heavily on it, it's completely unfunded; two employees improve and maintain it in our free time. (We do have a few outside contributors, too, which is awesome!)

That's not exactly the same situation, but I think this kind of short-sightedness is pervasive in our culture, in every walk of life.

Re: Kids find a security flaw in Linux Mint by mashing keys

#286

Post by inetknght »

Blikkentrekker wrote: post #284
cycloptic wrote: post #283

Earlier quoted context omitted.

Please don't discount yourself like that, by resigning to the usual HN snark. I think you're smart and capable of much more. If there is new, important and relevant information brought to them, they will listen to that. (This applies to most big projects I've seen, not any one in particular. The smaller niche ones that commit to having their small narrow audience are the ones I've seen that tend to be resistant to ne…

I doubt they scan H.N. comments for input or come across them. If I had wanted to reach them, I would certainly do wiser to simply send them a feature requæst bug report.

Many developers and executives do participate in social media including Hacker News. I have seen plenty of tech-related fixes and features that come directly from Hacker News comments.

In all I think the best feedback I can give you would have been to include a `/s` to indicate sarcasm and jest.

Re: Kids find a security flaw in Linux Mint by mashing keys

#287

Post by phendrenad2 »

smnrchrds wrote: post #204
dr_cypher wrote: post #196

Earlier quoted context omitted.

jwz has a lot to say about complex graphical toolkits/desktop environments and their complex locking mechanisms. It's an interesting series of posts. If you are not running xscreensaver on Linux, then it is safe to assume that your screen does not lock. Once is happenstance. Twice is coincidence. Three times is enemy action. Four times is Official GNOME Policy. https://www.jwz.org/xscreensaver/toolkits.html

Never directly link to jwz from HN. https://web.archive.org/web/20210117212403/https://www.jwz.o...

I wish HN would just block his site already, that damn image is burned into my retinas after seeing it 10+ times here.

Re: Kids find a security flaw in Linux Mint by mashing keys

#288

Post by fullstop »

sontek wrote: post #161
fullstop wrote: post #154

Earlier quoted context omitted.

Brave does not send the referrer as well.

Yes it does. I use brave and I get testicles if I click the link.

I've tested it multiple times, as have others. Perhaps you are running an ancient version?

https://brave.com/privacy-updates-5/

edit: see also: https://www.cookiestatus.com/brave/#referrer

Re: Kids find a security flaw in Linux Mint by mashing keys

#290

Post by HDMI_Cable »

smnrchrds wrote: post #268
Naracion wrote: post #262

Earlier quoted context omitted.

I did not get redirected--would that be because I'm using Brave? Or because I'm on mobile?

The former. Brave has explained their referer policy here: https://brave.com/privacy-updates-5/ > When navigating to a new site, never send a referer header. JWZ wouldn't know you are visiting from HN if you use Brave.

What's the reason behind JWZ doing that anyways?
Post reply on HN