Hacker Newsnew | past | comments | ask | show | jobs | submit | mzajc's commentslogin

Why not? It works roughly the same as any other binary distribution format. Given that the project is written in go, it's also unlikely to have many dynamically linked dependencies.

It's not just Firefox, a lot of things are broken. For example, clicking on either ball in "The Falls" moves it up and lets you drag it, but they snap into the same place. The text also reminds me of how ChatGPT writes. Was this made with a LLM?

I have yet to see a "NAT is not security" rebuttal that does not make either one or both of these points:

- NAT is not a security feature because it wasn't designed as one (this post), and/or

- NAT is not a security feature because it does not, without a firewall, protect against an attacker on the WAN subnet, or another difficult-to-exploit scenario.

And yet making LAN devices unroutable from the Internet does on its own makes exploitation much more difficult. It's admittedly not a perfect measure, but it's one that IPv6 deployments with routable addresses for LAN devices lack. I would wager this does make a difference in the proliferation of botnets, especially given the lackluster standards of consumer network equipment security.


You should read my other comments on this post. I've attempted, multiple times (but apparently without much success) to make the point that NAT is not a security feature because it does not, without a firewall, protect against an attacker.

You don't need a qualifier like "on the WAN subnet". It just doesn't do anything to protect you from inbound connections at all.


I think you're not technically wrong, but you're defining NAT differently than the majority of people you're arguing with (those who assume NAT also implies a firewall blocking inbound connections), and the remaining minority (the "on the WAN subnet" crowd) are dismissing outright the idea as a reasonable attack vector that an attacker close enough to be able to send packets destined for non-internet routable addresses to your router.

Is the latter something that was/is actively exploited?


There's an implicit trust of ISPs in the comments that I find concerning

Are the emails end to end encrypted (PGP or S/MIME where you/your server don't have the keys) or just in transit (TLS)? That would make the difference between "we can't look at your emails" and "we choose not to look at your emails".

No they are not E2E, like most email services. We don't look.

Good to call out use of semi-technical weasel words.

Their privacy policy is far from GDPR compliant. In a legal sense, they do not respect data privacy rights of their customers at all.

https://mailpilot.chat/#/privacy


I have not reviewed privacy. Copied it from another of my products. I will take a look.

It's a paid product, you are not the product. We have 0 interest in the content of your mails, or your data, we are interested making it easy for you to enjoy your life, so you're not stuck at your desk.


Your intentions are only as good as the systems (including governance frameworks) that back them up. You may not have any interest in my data, but your future self (or your acquirer) might.

Even if you have the best intentions, customers need to build trust through contracts and policies. They won't care about what you post here on social media.

To me it seems that you have not paid sufficient attention to important parts of the business, and it is a red flag.


No major tech product is GDPR compliant. Not making a judgement on whether that's right or wrong, just stating facts.

> just stating facts

You are confidently incorrect.


GDPR says that consent for non-essential tracking purposes should be freely given, you can't use dark patterns nor make the "consent" option more prominent than the "decline" option. Similarly, inaction (ignoring the banner) does not count as consent.

Most products fail on that alone, and that's the very basics. But happy to be proven wrong.


Google will sign a DPA. Is google workspace not GDPR compliant?

The "we know better than you" attitude unfortunately seems increasingly popular at KDE as well[1][2][3].

[1] https://pointieststick.com/2024/02/09/this-week-in-kde-inchi... search "Active screen follows mouse"

[2] https://bugs.kde.org/show_bug.cgi?id=481069

[3] https://blogs.kde.org/2025/11/26/going-all-in-on-a-wayland-f...


> In a way, I think it’ll make it even easier to stand out—because the more people take shortcuts, the less quality will remain for readers to flock to, even if the overall quantity of options is much larger.

I really want this to be the case, but what I've observed so far is that slop networks with thousands of domains and millions generated articles simply drown out everything else. It's becoming increasingly difficult to tell apart pages written by humans from those written by conmen, especially if I'm not an expert on the subject matter.

As an incredibly egregious example, here's one of the top results (#1/#2 on duckduckgo) for "wireguard mesh": https://www.ltwireworks.com/blog/how-to-configure-wireguard-.... Yes, it's a grill mesh manufacturer.


lmao ok I love this just for comedy


> app store hosting, review

Do they actually host anything at all? All I could find was their F-Droid repository with six (6) applications: https://store.aphy.app/fdroid/repo/. The rest must come from elsewhere (F-Droid's main archive?), but they don't indicate if they actually use the rent you pay to fund the third parties they depend on.

For comparison, the F-Droid archive consists of 4061 applications reviewed, built, and hosted by the F-Droid team for free.


I'm not sure if you find it genuinely surprising that the Hacker News populace is not moved by a device that you not only have to pay rent for, but that also seemingly does not support custom ROMs/firmware.

Besides that, the software that they expect you to pay rent for is a fork of LineageOS/AOSP, but it doesn't seem to mention anywhere on the site whether they donate any of the rent to their upstreams.


Those are fair criticisms, but that's not what I saw mentioned when the thread was young and the comments were at the level of "wait I have to pay for them maintaining the OS??". It seems people have that as a gut reaction even though they have presumably also (on average) been exposed to sentiments pro paying for things that cost money


> What happens if I cancel my subscription?

> You can cancel at any time. Without an active subscription, certain core services and privacy features will be limited. To keep your MC03 fully functional, secure, and up to date, an active subscription is required.

Out of curiosity (I'm definitely NOT going to buy a Phone-as-a-Service), what exactly happens when you cancel your subscription? Does the smartphone brick itself? Does it let you flash a sane operating system that doesn't treat you as a cash cow?


> what exactly happens when you cancel your subscription?

I have the previous model, the MC02. I reviewed it here:

https://www.theregister.com/2024/08/05/mc02_swiss_private_ph...

The sub is for the email account. Cancel the sub, that email stops working. You can still use any other email account and client you wish.

This may no longer be the case -- but that's what I'd expect.


Most people seem to be subscribing to a cell phone already. Not us techies, but most normies seem to have expensive phones on three year ”plans” while locked to an expensive network.


Financing a phone is dumb for most people imo, but at least it has an explicit end where you own the phone outright.

This phone requires a subscription in perpetuity, on top of the full purchase price.


The last couple times I got a new phone the price of the phone + plan without financing for 2 years was greater then plan with 2 years of financing. So yeah, I got the financing.

This was in Canada however.


Yeah I'd never do that. I just buy it outright.

I don't have a cell phone subscription either. I use prepaid which actually is cheaper.


Sometimes prepaid is a bit more expensive because you're paying for 28 days and not a month. You basically have 13 cycles per year instead of 12 (28*13 = 364 days)


I suspect the OP means prepaying for the year. AT&T is like $25/mo for 5GB data + unlimited everything else if you pay upfront for the whole year ($300). Prepaid MVNO plans are even cheaper.


No that's not what I mean. And I'm not in the US. A €20 prepaid data bundle here on orange is much larger than a €20 contract. And the prepay has built in overcharge protection.


Financing is not a subscription.


This has been made illegal years ago in Europe.


Legal in the EU but the consumer has to be notified about it.

https://www.europarl.europa.eu/doceo/document/PETI-CM-580731...


Network locks are not illegal AFAIK, but consumers can request an unlock.


This is very light on information and very full of praise.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: