Hacker Newsnew | past | comments | ask | show | jobs | submit | meattle's commentslogin

And cameras…


I’m involved with a URL shortener service. Service had to ban this domain as sub-domains from this domain seem to be loved by spammers/scammers to host their scams…


Do you ban all the other free sub-domain services too? There's no reliable or honest statistic proving that eu.org is widely used for bad purposes.

And what about URL-shortener services, such as the one you work with? Should they be banned all together? They seem to be popular with spam and scammers...


We were getting spammed by hundreds of eu.org subdomains. We had no choice but to place a ban on the entire domain as banning a few just led to more popping up.

We ban as we see spam. Most free shorteners end up getting banned as there is no need to double shorten a url other than for double obfuscation which is usually shady.


Free services attract spammers. No surprise. The "free" model is broken.

Imagine how easy Twitter would get rid of spam accounts if they only charged a few sats per tweet.


>Imagine how easy Twitter would get rid of spam accounts if they only charged a few sats per tweet.

All I can do is imagine, since I interviewed to be an anti abuse UX researcher at Twitter and they decided to not hire anyone for the role, so I assume they do not see a need for such work since I was extremely professional and did a LOT of research prior.

I recall especially well because it was the same ±1 as the 2016 Turkish Coup[1][2][3], though I've lost some master passwords since then.

[1] Ich habe dir gesagt, was ich tun würde, dann habe ich es getan, hör auf, mich dafür zu bestrafen, wenn du das immer noch liest. [2] !geen [3] https://en.wikipedia.org/wiki/2016_Turkish_coup_d%27%C3%A9ta...


> Imagine how easy Twitter would get rid of spam accounts if they only charged a few sats per tweet.

It'd be spam free alright, because there would be nobody left to spam to.


sats?


Very likely referring to “satoshis” which is a small amount of bitcoin.


> Very likely referring to “satoshis” which is a small amount of bitcoin.

Hackerfreund, nie vergessen: Drei können ein Geheimnis bewahren, wenn zwei davon John McAfee und Dan Kaminsky sind.

(Ich schalte jetzt wieder auf Englisch um, ich muss mich auf maschinelle Übersetzungen für synchrone Gespräche verlassen)

Do people still think Satoshi was a singular guy? I had a convo at a picnic about how it was probably a team and some very smart people acted like they hadn't thought of that, people who definitely had heard of Shamir's Secret Sharing and read Wired or whatever, so should have been able to connect the dots that maybe "Satoshi" was a set of people ,and one of them died or lost access to a key.

Here is the wayback archive of Wikipedia from that summer:

https://web.archive.org/web/20130208051024/https://en.wikipe...

And a current link to the article:

https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing


Satoshis. A fractional Bitcoin. Of course the answer is that nobody would use Twitter if that were the case because nobody cares about crypto currencies except for either speculation or fraud.


I care, a lot. I work remotely and Bitcoin is the only way I can get paid from overseas.

In my country most people (even Govt officials) speculate on the US dollars against our currency, there's lots of fraud with cash, or social engineering old people to steal their money from their home banking. We should get rid of all of those as well, right?


Argentina (?)


1. "nobody cares" - you realize that your statement is wrong if there is at least one person that cares. And there is at least one: Jack Dorsey, definitely not a speculator or a fraud.

2. Bitcoin != "cryprocurrencies" - which is why I didn't include Elon Musk under 1.


A sat = the 100 millionth part of a Bitcoin. Also, a sat can be further divided into millisats (1000 millisats = 1 sat) on the Lightnig Network. So, essentially, very very tiny amounts that can be sent very fast at at very small costs.


On a similar note, most URL shorteners are also on all kinds of blocklists because of their tendency to get abused by spammers. That's just the way things go when you provide easy and accessible services.


Yup! It’s hard to keep spammers at bay, but not impossible. Takes a lot of effort. A big reason to stay away from shorteners that don’t have legit companies/orgs behind them putting in the effort.


What about *.neocities.org/?[0]

[0] https://neocities.org/


They should make a formal web standard that you should be able to prepend "preview." like tinyurl supported if people are going to keep using those things for tasks ranging from dumb marketing bullshit to full on attacking my computer.


WordPress is 41% of the web. If this goes through and FLoC is disabled by default by WordPress, will FLoC be dead on arrival?


Between large web publishing platforms and all alternate browsers blocking FLoC, I think we could kill it, yes. WordPress is used by a lot of marketing focused folks though, so we'll see if WP is able to land this.


It's staggering how much leverage WordPress has. They were going to stop using React because of the patents clause, and only a week later Facebook caved and relicensed it as MIT.


This is very interesting. My web development role right now is at a marketing company that works pretty exclusively with Wordpress.

I've always been so interested in learning about the next best thing that I hadn't given Wordpress much thought.

Now, using it all the time, it's popularity is very understandable as an interface for people who are not technically savvy to maintain their own website.

I feel like the Wordpress community isn't the loudest, but it is certainly a force. I think, as a brand, this move definitely has me more excited about working with their software.


Exactly. A big part of the WordPress community are publishers, bloggers, affiliate marketers, etc who rely on ads to generate revenue. I'm not sure they'd be too thrilled with this proposal.


Sure, but this doesn’t mean no advertising, it means no default supporting FLoC. I know advertisers aren’t going to like it, but I doubt it means they’ll give up advertising altogether.

I wonder if AdWords will require use of floc headers


> I wonder if AdWords will require use of floc headers

I don't know, but I guess they won't. Instead, you'll just get worse targeting on your site if your users don't send the headers. Which I think may also not be very popular with WordPress users, but I guess the proof will be in the pudding.


The ones in marketing will rather immediately request that it is turned on instead.


Google has such a monopoly that it will take a lot to overcome their plans.

Glad to see WP taking a stand - I never knew that FLOC would be so bad. The WP proposal made it clear that it’s a discriminatory technology.


Well, FLoC is implemented on Chrome, you don't disable it, you opt out with a Header.

So if Googles find that too many people uses the header, they can just decide to ignore it from now on. Who is going to prevent them to do that ?


Possibly GDPR? As an explicit no-consent to tracking? Not rhethorical questions, I know too little about the details.


When you use Chrome for the first time, it makes you accept its ToS which tells you they are going to track you.


If the ToS are contrary to the law, then they are null and void. Laws tend to trump private agreements. Then, if it goes to trial in Europe, they’d have a hard time proving that the ToS are fair and that the user agrees freely and understanding what is being agreed, which is also another condition for any form of contract to be valid.


You're saying there is some law which prevents me from inputting my own data into a program, and it categorizes me into one of a thousand types of people?


My comment was specifically that ToS are not a licence to behave illegally. There is no law preventing you from doing that in general (though there are specific limitations), but there are laws on how PII needs to be processed and stored.


yes, laws can prevent you from doing things that, when explained technically and without context, sound trivial and not important.


Does the gdpr or any other law prevent end users processing their own data in their user agents? Or require that headers sent to respected?


The GDPR requires tracking to be opt in. The fact that you have to use special headers to opt out is already problematic. Ignoring the headers to track anyway is of course worse.


IANAL, but my understanding is that this is not in line with GDPR. You are not allowed to force the customer into tracking, which effectively happens in the scenario you describe since the user can't use the browser without accepting the ToS. Also, you have to be quite explicit: simply burying tracking in 52 pages of unrelated legalese is not compliant with GDPR.

Someone please chime in if I'm wrong here. I'm no lawyer but do take these things seriously (I'm trying my best to provide a tracking-free website.)


They will lose that case under GDPR, you can't hide the details in ToS and hope the user doesn't see it. You must get informed and freely given consent. Google is violating both, because I can't click "No" and the information is so hidden you can't expect a normal consumer to find it.

It will take a few years but they're going to get hit very very hard by EU privacy regulators.


Of course, but the goal is not to win, the goal is to make it so it take years before they get fined. In the meantime, they will have made enough money and it will be factored into the cost of business, then they will come up with a new tracking scheme. Rinse and repeat.


This assumes the majority of these Wordpress websites will update to the latest version in a timely manner


A key point of this is that if they consider it a security flaw, they will backport it into point releases for WordPress blogs that haven't done major upgrades in years.


If added as a security patch, lot of websites will auto update.


I’m not sure whether that would be wise to do for WP. It will show that WP can and is willing to basically push any update to sites running WP just to further a cause of the company.

Mweh if it doesn’t break anything. But terrible if it breaks something.


It's the WordPress Foundation and the code is driven by a community, not really a company with a chain of command...


"WordPress is 41% of the web"

This blows my mind every time. Even though I know it.


I don’t know it. Where did you learn it?



Okay, thanks!

It looks like it’s based on the top ten million websites by traffic, but weighted equally. Maybe there are lots of low-traffic WordPress sites?


> Maybe there are lots of low-traffic WordPress sites?

And many, many more high traffic websites. There's even some Facebook landing pages running WordPress and other many high profile sites[1].

1: https://wpvip.com/


Most likely google will just turn off that silly opt out functionality. It's not like anyone's going to stop using their spyware browser.


Surely that depends on what their experience using it is, just like every other "winning" browser before that is no longer winning? If FLoC generates so much hostility within the web dev community that a few major sites/platforms start actively blocking it, and if Google responds by ignoring the opt-outs in Chrome, and if the community responds with a SOPA-like "no access using Chrome for the next 48 hours then, here are some other fine browsers you can use instead that don't invade your privacy in this way", Google will simply be outgunned. However, you probably need platforms on the scale of WP and/or some sites with huge audiences like Facebook/Wikipedia/Netflix/Reddit to be on board for the effect to be fast and powerful enough to make a difference.


>and if the community responds with a SOPA-like "no access using Chrome for the next 48 hours then, here are some other fine browsers you can use instead that don't invade your privacy in this way"

that seems unlikely.


Is it, though?

It appears that Google is trying to rewrite the rules of how browsers and the Web work, with the appearance of being on the side of privacy, but actually introducing an alternative method of surveillance that is going to be less favourable to almost everyone except Google. How many of the huge-audience sites are potentially going to lose out from that, not least because they rely on advertising themselves for the lion's share of their revenues?

This whole discussion started with a proposal from a platform that is supporting nearly half of the sites people are visiting. That puts WP in a unique and potentially very powerful position here as well, and evidently they're interested in trying to force the issue.

And finally, the SOPA experience has shown that it is not entirely implausible for large numbers of sites to collaborate in this way if they feel the threat is serious enough. So if FLoC is as bad as the critics are suggesting, it doesn't seem entirely out of the question. There seem to be quite a few powerful organisations that would have a variety of motivations for wanting to give Google a bloody nose over this one.


I wonder whether, if WP takes the stance that FLoC is a security risk, whether they'd also consider a version of Chrome that doesn't allow opting out of it a security risk as well. And, if not, why not?


I'd like to see them try that and see how that flies.


Chrome is entranched, but not like IE was. You have to install the browser in the first place, which means the moment it starts to be too crappy people move elsewhere.

Why do you think Google hasn't prevented adblockers from running on it? If they did so, it would sink the browser so quickly.


One of the ways Chrome got as popular as it did was to bundle installation of it with various other programs, the way spyware and adware did. You install a random program, you don't open "advanced install" and uncheck "Chrome", and you end up with Chrome installed.


> the moment it starts to be too crappy people move elsewhere

You seriously underestimate the power of inertia.


>WordPress is 41% of the web

By domains or by visits?


As far as I'm aware, it's flawed in the same way as the PHP popularity stat: domains that report it in an HTTP header. I don't know about you, but I don't put a header advertising that I built a site with Python and Flask or whatever.


I guess those go in the "None" bucket, so I think they are counted.

https://w3techs.com/technologies/overview/content_management


FLoC is designed to be opt-in, so uh...... no?

Currently, for A/B testing, FLoC is automatically opting-in 0.5% of sites that serve ads, but that's only for a small testing population, the idea is that FLoC history contribution will be opt-in exclusively. (There's a proposal that you have to contribute to FLoC history calculations to get access to a user's FLoC identifier)


My fear is that it will end up exactly like the do not track headers and that at some point Google won't listen to the disable Floc header.


Why is that a problem? If I visit ognarb.com, what right do you have to tell me "You aren't allowed to use that fact for developing a profile about yourself"?

You send me a bunch of data, including headers, and I'm more or less free to do with that what I want within the privacy of my own browser. I don't have to listen to any of your headers if I don't want to.


I think that stat is more like 41% of servers, not 41% of traffic.


For those that want to show official Share Counts on their Share Buttons while maintaining User Privacy, take a look at Shareaholic's Share Count Proxy -

https://www.shareaholic.com/blog/social-share-count-api/

Share Count queries to the Social Networks are proxied through this service securely and visitor privacy is protected... like an anonymous VPN.


I'm not sure a company that says "Imagine being able to capture, analyze, and re-target any person on any ad platform that clicks on any of your links on any marketing channel" is one that should be trusted with anyones privacy.


Shareaholic offers many different types of marketing tools. The product that you're referring to is the URL shortener, which is independent of the Share Count Proxy product -- https://www.shareaholic.com/link-manager/retargeting

This URL Shortener service is also GDPR compatible as retargeting pixels are not set for EU subjects regardless of what customers want to set. In the roadmap is to add an opt-in message on the redirect.


I get that you offer different types of tools, but my point is that trusting one company that markets tracking to anonymize the tracking of another company that markets tracking seems backwards regardless of if you say that this specific product actually does tracking or not.


Coming in cold, that's a very fair concern/comment. I generally believe that products can be privacy-first but still serve the needs of marketers while providing consumer choice. Consumer choice is the key in my opinion. Shareaholic tools do what the customer sets them to do, with opinionated safeguards to prevent customers from missteps with regards to GDPR and consumer choice. For example, Shareaholic is one of the very few that also respects DNT signals (even though DNT is now defunct).

Btw, Share Count Proxy is also whitelisted by Firefox which provides the added advantage of share counts actually showing on Firefox if you use the proxy while direct calls to Facebook.com, Pinterest, etc are blocked.


If you're interested in learning more about the painting, I created an entire mini website about the Mona Lisa a few years ago:

http://hepguru.com/monalisa/

It was featured by USA Today, etc. You may like it.


One of the best versions of Mona Lisa is the one engraved by Sanchez-Toda (Spanish bank note and postal stamp designer): http://rsiqueira.postbit.com/mona-lisa


I would recommend a Statistics class, if it is not already a requirement. In this increasingly data driven world, it's handy.


If I could go back and do it all again, I'd definitely do more stats courses.

Also if you're interested in data science in general, some basic linguistics (syntax/semantics) would be useful. (Saying this as someone with a PhD in natural language processing, who had to self-learn all the linguistic background the hard way)


Our CSE program had two statistic courses required. I feel statistics will be a great skill-set regardless of area of study.


If it's a requirement, take some advanced stats. Take 3 or 4 of them. It's an invaluable skill.


Pinboard.in seems clean and simple.


For anyone else like me who was wondering I had a couple of questions which I've found the answer to:

1. Is there a chrome addin? https://chrome.google.com/extensions/detail/lclbbneapfiaihig... 2. Is there an android browser plugin? http://thenextweb.com/apps/2010/08/25/pinboard-for-android-a...

both of those are vital to me, looks like Pinboard has them so perhaps I'll pay the signup fee..


Really sad to see Delicious go. One of my most used services :(

See http://www.shareaholic.com/services for a list of over 50 bookmarking services.


If you're looking for a Delicious alternative, then also worth checking out is:

http://www.shareaholic.com/services

(a list of over 50 bookmarking services)


Compete.com does H1B's. But Compete's not a startup anymore.

You should be looking at startups with at least a few US employees. Currently, I think you'll find it rare for a startup with < 3-4 US employees to be able to sponsor an h1b. Homeland security has been getting pretty strict about this.

I believe it generally costs about ~$6k to sponsor one. More if you premium process.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: