Hacker Newsnew | past | comments | ask | show | jobs | submit | Snoozus's commentslogin

this one has a better font, might be a simple copy&paste job

I've checked for copy and paste, there's so many character flaws, their OCR must have sucked really bad, I may try with deepseekOCR or something. I mean the database would probably more searchable if someone ran every file through a better OCR.

this would not have helped here

This only makes sense if it somehow helps to evade some kind of regulation. I'm not quite sure which though.

Absolutly, they intentionally make stuff sound secure and private while keeping full access.

Is there an independent audit of the Whatsapp client and of the servers?

I find this wording also "a bit strange".

It is not a mathematical impossibility in any way.

For example they might be able to read the backups, the keys might be somehow (accidentaly or not) leaked...

And then the part about Telegram not having end2end encryption? What's this all about?


Telegram defaults to not e2ee; you have to initiate a "secret" chat to get e2ee.

the diet was just maintained for two days

thank you for this, I have a follow up question: Now an attacker can not install an old, vulnerable version. But couldn't they just install a new, vulnerable version? Is there something that enforces encryption key deletion in one case and not the other?

AFAIK the signature mechanism hasn't been defeated, so the attacker can only load software signed by the factory keys.

Which includes old, vulnerable versions and all patched, newer versions. By burning in the minimum version, the old code now refuses to boot before it can be exploited.

This is standard practice for low-level bootloader attacks against things like consoles and some other phone brands.


On the main page it states clearly that messages are e2e encrypted. So all they can collect is metadata.


Maybe it's time we make a simple web page 100KB again? Is there some kind of CDN minification, adblocking and compression service? Maybe even server side rendering of websites?

Then a smartphone would work fine with 1GB of RAM and everyone could be happy.


Simple web pages can be made small with modern tooling, e.g. AstroJS.

The problem is that most web pages these days fundamentally are not simple.

Rather than trying to make web pages small, the real effort would be in designing web pages to be simple.

The large majority of software devs, PMs and the like don't really know how to do anything else than a Node + React webapp.


I've come to the opinion that for the vast majority of apps I've built, it could all be built using HTML + CSS (all built server side). I can sprinkle in little bits of interactivity using something like HTMX. And I'll have a website that is very easy to optimise, has phenomenal backwards compatibility, and gets rid of a whole class of issues associated with SPAs.

I often regret in my career not pushing back more on "requirements" that ended up requiring a more complicated app, whereas the customer would have been happier with a simpler solution.


I guess you're right, but it's more of a curve, though. Once you get to any decent level of complexity, it actually helps to have a framework instead of just going all HTML+CSS. Also it helps having something standard as react (that every web developer should fundamentally understand) than doing your custom stuff if other people will be working on it in the future.

There's a lot to say about the side effects of frameworks but there's a reason why everything converges towards that.


I think it's the other way around, a framework will get you up and running quickly, but then it becomes technical dept, and if your app is complicated you will end up fighting the framework. If you write something from scratch it will take a while to reach to the abstraction level where you can work fast. But then you have a fully custom abstraction layer that is not a "one size fits all" but custom tailored for your needs.


Good luck with hiring, onboarding, and maintenance of your bespoke solution. Also with your resume when seeking your next gig. For any serious project, ignore community and ecosystem health at your peril. To be clear, we're talking about framework selection, not leftpad vs DIY.


I agree, most websites allow complex flows. But I suspect, that most loads don't ever touch those. There is probably an automated way to deliver just a flat page, and maybe even allow for the top 5 interactions without loading all the frameworks and libraries.


And if someone could make a chat program not use 1 GB of RAM that would be great.


The majority of space is usually ads and I doubt websites want to reduce that.


Apple could make it happen. For some reason when an iPhone won't load something, people blame the thing instead of the phone. If they made Safari show an error page when a page used more than 256MB of RAM, suddenly the problem would disappear overnight.


No. Safari is already so buggy that it often crashes with the “a problem repeatedly occurred” message. That same message is shown when a webpage requests too much RAM. The problem did not disappear. People rightfully blame iPhone.


> 1GB of RAM and everyone could be happy

I remember a time when I was surfing the web with 256MB and a 5KB/s modem.


True, but I don't want to go back to that. Bloated web pages suck. But hi-res, true color images and videos don't suck.


Most web sites don't need that. Cat pics excluded, of course.

And I prefer text over video. Cat videos excluded, of course.


I was a bit shocked the other day when Chrome gave me a complaint about memory shortage and said I had something like 200GB in website data on my 256GB laptop(!) All put there by various web pages without my knowledge.




Maybe it's time to not let a single company buy all the RAM.


Most people have phones that can handle webpages with 1-5MB JS bundles. Why artificially limit what you can do on the web? Why limit ourselves to 1GB RAM when more resources means tech becomes more useful?

Returning to simple webpages is popular idea on HN but it’s like wanting a car with no backup camera and crank windows. If your goal is to have your car be as simple as possible, then sure, but that’s not the case for most people.

Most people want their cars to be safe and convenient, and their webpages useful and rich, more so than they want to return to some idealized simplicity.

A simple webpage or blog with minimal styling that runs as an ARM binary on a TV remote is cool and fun but it’s not economically useful. It’s the equivalent of a manual scooter. We can build better apps (in the same way that car manufacturers can build less crappy infotainment systems) but optimizing for scarcity isn’t the answer in a world where abundance tends to grow.

(Edit: your downvotes mean nothing to me, I’ve seen what gets upvoted!)


Your mistake is assuming there is some correlation with usefulness and size.

The JS Gmail UI from 15 years ago was just as functional as the one today.

Websites that are supposed to be simple lists end up bloated and laggy because of really poor JS that makes one request per item iteratively to populate a list.


I do like the old JS Gmail UI. But the current JS Gmail UI doesn’t feel any slower. It is cluttered with more features, but some of them I find useful. (Displaying my calendar and being able to accept invites right in Gmail being a big one.)


As someone who used the HTML gmail interface right up until google pulled the plug: the JS version is much slower to load. Every morning, I get to have about 10 seconds thinking about how it used to be faster.


It absolutely is slower. To an extreme degree even. It takes 10 to 20 seconds to load and is incredibly sluggish to use on some low-end machines I use regularly.


I disagree that we should be optimizing for low end machines and holding back on product improvements for the 80% mass market. Technology improves, it’s one of its best traits. We don’t need to be stuck in the past.


Low-end machines aren't necessarily stuck in the past. e.g. $150 minipcs that use 5W to give you a perfectly snappy desktop Linux experience.


I think those machines are super fun and a snappy Linux experience is very satisfying. I use a lightweight WM myself on Linux and prefer it over the heavy ones. But this segment is 0.1% of technology users and we shouldn’t constrain applications to the limited hardware that this population chooses to use.


I’d argue that in many of these instances, less is far more.

I want my car to just be really good at being a car, reliably get me from A to B. A Bluetooth connection to the stereo system is nice, but I don’t need a freaking 20” phablet right next to my face when I’m driving.

When I go to a website, I’m usually looking for information, to read something. I don’t often want fancy scroll and animations, I just want clear readable text free of distractions.

More and more these two examples seem to be going away, we’re losing the plot of what the point of these things are.


In a lot of ways, I agree with you. I think the key thing is that the complexity should be appropriate to what needs to get done.

Animations and etc. that distract from the actual content are superfluous. Agreed! I hate it when sites scrolljack.

But lots of HN posters want to impose the same austerity on every website, regardless of whether it’s appropriate. You can’t build Linear in 100KB of JS. Nor would you want to run it on 1 GB RAM. And that’s the case for a lot of economically useful applications.

Keeping things as simple as possible shouldn’t be the goal. It should be keeping it simple enough for the use case at hand.


You can do a lot with little, it just requires investing more in development which understandably most companies are uninterested in. Besides, plenty of websites are bloated as all hell. Why does a newspaper website, for example, have to be very much more than plain html?


Newspaper websites are a good example of bloat, true. I think if you’re in the business of primarily serving text content and not doing much interactive stuff, you don’t need a heavy site. A lot of them tend to cram their websites with trackers and ads and I guess that’s a business thing.

Tbh, it’s unpopular around HN, but I felt like AMP was a great experience for users. AMP pages were super fast and had no annoying banners - and none of my pet peeve: layout shift.


Actually a plain car would be great

I crank the window up and down 3x faster than the little button

And I could adjust my damn seat before electricity is available... sigh


I’m glad you want that! But, most people wouldn’t. Also, electric seat adjustments give you way more options than the manual adjustments could. And typically with more precision than the under seat bar with discrete positions.


> But, most people wouldn't.

How do you know?


To me it’s so obvious that it doesn’t require testing. The market shows it; there are nearly no production vehicles at volume with crank windows.


Because the cost of another SKU exceeds the benefit, but you're saying the benefit is negative to everyone.


Don’t get me started on automatic rear hatches. They close so slow it drives me crazy.

I can be in the house before it gets there, but I don’t trust. Just let me close it.


with you on manual seats? But crank windows? Nah man, power windows and locks are a requirement for me, as is a modern sound system, ac, and cruise control.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: