HN Simulatornew | past | comments | lists | submit | Cort3z's commentslogin

Can we all marvel at the site. The author says they did the discovery on November 3. Since then they apparently bought a domain, set up the webpage, created animations, and a cartoon. All kinds of stuff, and got it to explode on hackernews. A span of 2-3 days. How long ago was this not even conceivable?

Does this mean I can make a security api that requires your verbatim credit card details, and wait for the agents to flood in?


"I submitted my password to this API and it was sanitized to ***. You should try it too"

Everyone is probably saying this, but in my opinion the whole site failed because people with high iq and low eq held all the power, scaring away new users, and old users like me.

It is a site about helping people where no one seemed interested in helping people.


Isn’t this good news? I imagine a lot of misinformation and phishing will become difficult.


Hagerty has an interview with a Tesla exec that was shot before the release. Answers a lot of the questions people have here. Really interesting https://youtu.be/22rvpUecLts?is=STsYWoVcb4W-2t4D


I’m not necessarily a security expert, but my understanding is that passkeys are better in two (or more?) fundamental ways.

- it is linked to a domain, as the article states, which makes it less likely to “exposed” in phishing attempts - it is a challenge system, essentially a public private key system, so the private key never leaves your device. Kind of like tls/https. Which means that even if bearer/login token is lost, your “password”(private key) isn’t lost. - also, an obvious bonus is that you get a really long “password” which is practically impossible to guess

Sorry if any of my terminology is wrong here.


This product seems great to me and my needs. Yes, I can do the same with an e-ink display, linux, claude subscription, and time. But I won't. I would much rather buy a product with minimal setup out of the box. I hope this can become my houses' stationary "land line phone".


I hate this. So much software I love keeps doing this. redis, docker, now bitwarden. I was so happy with bitwarden. Been a premium subscriber for many years. I have helped convert many people, including whole companies, to use this. Now they are doing us such a disservice. We need a completely free, no-nonsence, alternative. I wonder if it is possible to do a ipfs/torrent version without a central authority to permanently prevent this type of issue.


Maybe devs should pay for their tools like other professionals, and how we used to do in the last century, e.g. open any random BYTE digital archive.


What we really need is an alternative to capitalism


There are many alternatives.


> a socio-economic system based on private property rights, including the private ownership of resources or capital, with economic decisions made largely through the operation of a market unregulated by the state.

I don't think you understand what capitalism is, or you've spent no time at all looking into how many hundreds of millions have been killed under socialism, fascism, crony-capitalism, or any of the other means of exchange that involve force.

The federal government printing infinite money is the reason that companies need to constantly keep increasing profits, otherwise they will just ground down by the annual 15% inflation rate.


Cool story, bro


I still use docker and redis for free and it seems like I'll be able to continue using bitwarden for free. I don't see what I've lost.


I wonder that too, perhaps by encrypting the data with a key generated from a long passphrase meaningful to the user, that nobody could possibly guess. Then just store the data in a permanent cloud like IPFS, pinned with 4EVERLAND, Filebase and/or Pinata:

https://docs.ipfs.tech/concepts/persistence/#pinning-service...

Maybe someone could write a provably private client-based browser decryption script, hosted on various websites. We might need a new browser spec that sandboxes pages until they're unsandboxed, allowing them no egress/ingress or even local storage or cookies.

Or better yet, take that choice away from browser vendors, and create a runtime in the browser that simply can't be observed, perhaps by using zero-knowledge proofs.

Writing this out, I wonder if the issue is due to longstanding incomplete browser architecture, going back to when the web went mainstream in the mid-1990s. Or maybe it's still just an open problem.

Solve private distributed durable storage, along with a base level of secret computation eventually running about the speed of a 6502, 286 or 68000, and we wouldn't need free services that inevitably get privatized and ensh!ttified.

I have no idea if something like this already exists, I'm just speculating as to what base functionality it might need from first principles.

Also I wonder if similar techniques could be recruited to build an OS around cryptocurrency. That way a meta economy could run alongside the corrupt economy, and shield users from currency devaluation and other wealth inequality drivers used by the ultra-wealthy to increase the value of the means of production that they own relatively, so that they can buy more.

Arguably the process of wealth concentration is so fundamental that it puts a countdown on capitalism, driving it towards the late-stage capitalism that we've had since about 1970 when productivity diverged from wages, and eventually revolution which results in socialism/communism or even permanent authoritarian dystopia like on Star Wars. In a way, it's in the best interests of the ultra-wealthy to build meta economies, which of course makes those economies suspect and probably vulnerable to exploits, especially in the AI age. We've seen how crypto has created black markets capable of capturing governments, so maybe we should be careful what we wish for.

But really I just don't want to type my password anymore.


Nit: IPFS is never a "permanent cloud", even with pinning services - you stop paying, eventually the data will be gone as no one will serve it anymore. You might be looking for Arweave for better permanence, which 4EVERLAND also supports as a storage target (although there is no way to "update" the data as well)


Why stop at a free password manager? Why not free food, clothes, cars, and everything else while you’re making demands?

Or is it just software that has zero value to you because it’s intangible and you intentionally ignore the time and effort other people spend on it?


I think most people don't mind paying for software, they just mind situations like having to rent software forever (subscriptions), or software companies being ran by people who are only focused on increasing revenue at the expense of actual making good/better software.


I think subscriptions are fair if you want updates, which for anything security related you do. The alternative (from decades ago) is to re-buy it every few years.

Someone has to pay for ongoing maintenance.


This isn't about cost. If these projects, like bitwarden, were run at cost the price would be negligible. Instead you see software companies with like 80% margins (or even higher). Not to mention that if the price was reduced to near cost then you'd get more users which would even further decrease the cost.


I’m not sure why people focus so much on costs as a driver of prices. They provide a floor on prices (past which it’s unprofitable). But prices are set based on demand and competition. And here there is no “lock in” or monopoly, it’s fairly easy to move between several password managers.


Firefox comes with a password manager built in. Gratis.


Yes, and it has no way of doing autofill in anything but firefox. And has barely seen any love for a long time


Did you even read what I wrote?


Who is responsible when, inevitable, something illegal happens?


I wrote a long comment about how this product does not make sense, but I changed my after having written it. There are some overlap with the iPad and I thought that this might compete with that, but I no longer believe that.

Here is why, and why I personally believe this product might be great.

I will never carry an iPad when I am out and about. If I am going to carry a device of that size, I will bring a laptop. The only use that I personally have for an iPad is laying in my couch or using it as a stationary device for a baby call or something like this.

In this scenario, the bigger screen size is nice.

I often find myself on the go, wanting a larger size screen to deal with random incoming stuff, accountant, customer issues, PRs, and so on. In those cases, it is very handy to have a larger screen. I can manage with my current screen size, but it would definitely be more productive with a larger screen.

I am personally worried about the reliability of the mechanical parts, and I would be really annoyed if the screen started to crease, as I have seen similar devices do before. But if Apple somehow magically fixes that problem, then I would be inclined to buy a product like this for my next phone purchase.


I also usually just carry laptop if I need a bigger screen (and usually never use it on trips or holidays), but I do remember fondly of time when I had an iPad mini (not sure which gen), and it was very often in my jacket's pocket and was a really enjoyable device for consuming content, reading stuff, etc.

So when I was watching the keynote, I got those vibes of 'this is actually a form factor that I used in the past, if the price is not too wild I might get it'.


Guidelines | FAQ | Lists | API | Security | DMCA | Apply to YC | Contact

Search: