Hacker Newsnew | past | comments | ask | show | jobs | submit | cyberclimb's commentslogin

Is it possible to track a given URL without that URL becoming public knowledge as a posted question for anyone to see?


I just came across this project recently https://github.com/AeneasVerif/eurydice/ from Microsoft Azure Research (referenced here https://www.microsoft.com/en-us/research/blog/rewriting-symc...)


Fascinating. I wonder why they didn’t make it a LLVM backend, but, then, I guess it’s important for the C code to be readable as well.


They didn't just pull the word queen out of anywhere, her ambitions are kind of funny

> Her grander stated objective was to become queen of Liberland, an unrecognised microstate on the Croatian-Serbian border, by 2022.


Nothing says liberty like having a monarch.


> The only thing left is to make a ROM without preinstalled garbage apps from the vendor.

Would e-os fit your use case? https://e.foundation/e-os/


Maybe.


I have this board and want to mention that the Armbian image supported for the Orange Pi 5 max seems to work fine as well without modifications. Although I haven't tested much yet besides ssh'ing in over ethernet and doing some basic installations.

https://forum.armbian.com/topic/51307-orange-pi-5-ultra/


In the Netherlands from what I've seen (at least around Amsterdam) it's almost always forbidden for houses to be rented out to a group of flatmates (e.g. students), some people go so far as to fake relationships to imply they're a couple instead.

I'm not sure if this an actual law but housing listings often imply its forbidden in the neighborhood, they're looking for couples and families with kids.


> In the Netherlands from what I've seen (at least around Amsterdam) it's almost always forbidden for houses to be rented out to a group of flatmates (e.g. students), some people go so far as to fake relationships to imply they're a couple instead.

The landlord believes that their property and their relationships with the neighbours of the property will be less likely to destroyed by letting the property to older/respected/settled down members of society. Common practice in most of UK as well.


The whole rental law is utterly fucked in the Netherlands, and the Dutch keep solving the issue of too many rules in typical Dutch fashion - by adding even more rules. The end result is that you have a huge number of people paying significantly below the market rate, which is great for them, but if you want a new contract, the answer is "nope, go be poor somewhere else".


Hi I'm curious about the encryption system. I found this document https://docs.orbivon.com/getting-started/security#security but wanted to ask where the encryption keys are physically stored and where the decryption happens (server-side vs client side)?

I assume the encryption keys are stored encrypted in your database, but what's the (high level) mechanism for decrypting them? Like is the users' password used at login to temporarily load the encryption key in memory?

Thanks for any insights

Also I like the idea of the encryption but I think the use of LLMs greatly reduces the privacy gained but that's a tradeoff


Hey,

Short answer: Server-side encryption.

Long answer: The main application-level encryption key is stored externally in Doppler. Each project’s encryption key is encrypted using this main key. The main key is loaded as an environment variable when the backend server runs. After a set period (X days), the main key is automatically rotated, and all project keys are re-encrypted with the new main key and updated in Doppler.

Project keys are assigned to specific user accounts, so only the assigned users can decrypt them. The application does not use end-to-end encryption because future planned features require server-side encryption and decryption rather than client-side.

Yes, using LLMs can reduce privacy. To address this, we only send the necessary metadata and selected content to the models. In Ask mode, content is only sent if the user explicitly selects it. Edit mode works the same way: only the specifically selected text or code is passed to the model.

Hope this helps :)


Hi botirk, really interesting project!

If I build the project what is the output format and how could configure things to boot it?

I know how to this with IMG and ISO files of course but not sure what to do with the build output if it's an executable?

Also any insights into whether this would also boot on an ARM machine? Thanks!


Check the build.zig file. It defines the arguments for QEMU to run the OS.

You should be able to run zig build run.


As a foreigner that visited Brazil for some weeks, I found the ubiquity of the PIX payment system to be a handicap for tourists visiting the country.

PIX is only for locals as you need to register with a CPF (Brazil ID number which is hard and tedious to get as a tourist). I ran into many scenarios where the only option was to pay with PIX and the staff aren't used to tourists and look at you funny when you explain you can't use PIX.

Also beyond PIX, if you try to book buses, planes, or take out a gym membership, while you're within the country, 99% of the time it's shockingly impossible to pay without a CPF, even by credit and debit card. I've even seen this for paying the laundry machine.

I'm sure the PIX system is great for Brazilians, and it was helpful having a local friend to make payments on my behalf, but Brazil really lives in a bubble where it seems a side-effect of their system is making things actively very hard for visitors to operate within the country.


> many scenarios where the only option was to pay with PIX

I guess you want to say "only option _beyond cash_ was Pix". Most places should accept Passport ID to replace CPF. But if you found hard to pay using credit cards, that has nothing to do with Pix...


Sounds similar to China / WeChat situation, from what I've read previously


It's now quite trivial to connect a foreign credit/debit card to Wepay, and it worked flawlessly on a recent trip. (This was very much not the case only a few years ago.)


It might have worked for you but it's still not trivial. There's many hoops to jump through still like random ID verifications, many banks not being supported to be linked, account locks that can only be unblocked by having a WeChat contact vouch for you etc.


This was the case when I jumped through those hoops in 2019, but it's much more straightforward now. Passport, phone number (doesn't have to Chinese) plus credit/debit card unlocks up to RMB 50,000/mo, with no fees for transactions under RMB 200.

https://www.china-briefing.com/news/wechat-enables-foreigner...


That article is from 2023, things changed a lot in the past years. I just clicked on "Top up balance" (while being located in China) and it says "Please add a debit card issued by a Chinese Mainland bank to use the top-up function".


If you have a foreign credit card, there's no need to maintain a balance at all, transactions are passed through directly.

And yes, of course there are limits on what you can do as a visitor, but for normal touristy stuff it's quite sufficient.



You mean online right? Credit/debit card payment gateways are a little cumbersome for foreigners not only because they are a small amount of customers, but also because it opens a window for card fraud, which in Brazil, the online stores have to paid for it (as it is a non-physical credit card use).

Apparently Wise had a PIX functionality here in Brazil, but it seems that they removed it for some reason.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: