Hacker Newsnew | past | comments | ask | show | jobs | submit | more fourmajor's commentslogin

I've been using Feedly every since Google Reader shut down and I generally love it.


I switched to Reeder after Feedly started showing me ads. So far, so good.


reserves are for more than a rainy day fund. They're also for saving up for predicted maintenance needs. For instance, say the HOA is responsible for the roofs of all the residences (like if the residences are condos). It's a somewhat predictable and high expense that you can map out to 10 years down the line or something. Then you save up for it in your reserves.


> reserves are for more than a rainy day fund.

Exactly. Many HOAs are now required to get periodic reserve studies that calculate predicted maintenance costs going out sometimes 30 years. Association Reserves did our study (<300 homes) and calculated we needed $1.4M to be 100% funded. Our HOA policies require only 60%, which we think reduces the risk of special assessments to a very low level, but that's still a lot of money. Association Reserves believes that property values in HOAs with high percentage reserves can be 5-10% higher than low percentage (<40%) reserves.


https://help.openai.com/en/articles/6825453-chatgpt-release-... That says that GPT-4 is only for paid subscribers right now.


I've had a new MacBook Air M2 for a few weeks now. I've been charging exclusively with a USB-C charger. Is there any advantage to charging via magsafe?



I'm not going to read an article that has a pop-up about "woke Twitter mobs."


Do .... do you not think that Twitter mobs exist?


I love the Modern for Hacker News extension: https://www.modernhn.com/


Yes, I have set this up to give my wife access after 14 days: https://www.lastpass.com/features/emergency-access The long delay is simply for security purposes so there's not instant access for someone who hacks _her_ accounts.

> Give someone you trust access to your vault. When your trusted contact requests Emergency Access, you can decline their request within the specified waiting period. Otherwise, your vault is added to their LastPass account.


Are there any technical details of how this works on the backend?

I thought LastPass only kept encrypted user data that only the master password can decrypt. Would this process mean they keep an accessible copy?

I suppose the process could be to encrypt my master password with a public key generated by the spouse account (with the private key stored in their encrypted bundle), that LastPass servers can store and provide on delayed request?


I would imagine it involves something like encrypting your master password (or more likely some other encryption key that won't change) with their master password as if it were anything else they had stored in their account. The difference is that it's blocked by the time delay.


I think something like that might be how it's done. I don't think they could use the master password directly (at least I hope not, wouldn't that mean transmission of a master password from the client?), though I suppose they might have a mechanism of generating a consistent key pair just from the master password.

However it works, I think LastPass should have a technical section that describes the mechanism in more detail


LastPass describes how it works at [1].

They also have a technical whitepaper describing a lot of their cryptography including shared folders and recover codes. I found the current version[2] which disables ctrl-f for some reason, and an older version[3] which allows ctrl-f.

[1] https://support.lastpass.com/help/how-is-emergency-access-se...

[2] https://support.lastpass.com/download/lastpass-technical-whi...

[3] https://assets.cdngetgo.com/da/ce/d211c1074dea84e06cad6f2c8b...


I believe, when you set this up, they re-encrypt your data with the other user's keys so it's never accessible by Lastpass.


I think the problem with that would be the copy would go stale fairly quickly right? I suppose the process could make it so the data set is encrypted with all associated keys everytime it's uploaded from the client


Shared key.

You have a key, which encrypts a shared key.

Your spouse has a key, which encrypts the same shared key.

Vault is encrypted with the shared key.

Access is controlled separately. But upon successful share, their existing key can decrypt the shared key which decrypts the vault.


The real last pass!


Bitwarden has this feature too.


Where?


https://bitwarden.com/help/emergency-access/

requires premium or self-hosting. But it doesn't expire if you stop paying.


It asked for my email address, which I provided. Then it said there was no account for that email address, and asked if I would like to create an account. I said yes. Then it said I was logged in. Huh? I didn't have to verify anything.


If emails are being treated as usernames, in a real world usage, they should be verified. But beyond that, no verification is necessary.


For the sake of the demo, email validation has been disabled to make the account creation as simple as possible and to allow fake email addresses to be used.


From their Chrome web store page (https://chrome.google.com/webstore/detail/i-dont-care-about-...)

> In most cases, it just blocks or hides cookie related pop-ups. When it's needed for the website to work properly, it will automatically accept the cookie policy for you (sometimes it will accept all and sometimes only necessary cookie categories, depending on what's easier to do). It doesn't delete cookies.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: