Hacker Newsnew | past | comments | ask | show | jobs | submit | fartfeatures's commentslogin

This is where Apple, Microsoft and Android need to step up. Indeed they already have in many ways with things being better than they used to be.

There needs to be a strict (as in MDM level) parental control system.

Furthermore there needs to be a "School Mode" which allows the devices to be used educationally but not as a distraction. This would work far better than a ban.


I dunno man. IMHO, kids should not have access to devices of any kind until the brain develops. Im not sure what that number is, but lets say its 15. At that point, we as parents need to be role models and let kids make mistakes. There is this whole idea that if you focus too much on security, you open the door for increased risk. I feel this applies to this situation[0].

When I was a kid, when I reached a certain age, 13 I think, there was nothing my parents good could do to stop me from learning from my own mistakes. I think using blanket laws and tech to curb internet behavior is just going to backfire.

[0]: https://news.clemson.edu/the-safer-you-feel-the-less-safely-...


Microsoft has done a good job with Microsoft accounts and Microsoft Family Safety. It's about as user-friendly as you'll get outside of Apple, though the speed could be improved. And this only covers PCs, Android 's system is less good.

Even with this, the problem requires more than pushing a button. Time, thought, and adjustment are needed. Like home maintenance, its necessary but not everyone can do it without help.

Getting AI assistance is good advice.


They could provide all the tools in the world. Unless there’s legislation change to what children are allowed to consume legally, everyone will largely ignore it.


Coincidentally most of the funding towards IPFS development dried up because the VC money moved onto the very technology enabling these problems...

Is there a good post-mortem of IPFS out there?

What do you mean? It is alive and "well". Just extremely slow now that interest waned.

It's been several years, but in my experiments it felt plenty fast if I prefetched links at page load time so that they're already local by the time the user actually tries to follow them (sometimes I'd do this out to two hops).

I think it "failed" because people expected it to be a replacement transport layer for the existing web, minus all of the problems the existing web had, and what they got was a radically different kind of web that would have to be built more or less from scratch.

I always figured it was a matter of the existing web getting bad enough, and then we'd see adoption improve. Maybe that time is near.


oh I mean slow in terms of adoption and public interest. my bad. i expressed awfully.

But you are right on the reason it "failed". People expected web++, with a "killer app", whatever that means. Imagination is dead.


I'm still working on what I think could be a killer app for it, but progress happens on holidays and vacations and weekends only if I'm lucky, so as you say... it's slow :)

I see the primary issue with IPFS is a significant majority of all web users are on mobile. They can't act as content hosts or routers. In P2P parlance they can only ever act as leeches. Even people with full fledged computers the market is dominated by laptops. These have similar availability issues as phones even if they don't have the same storage or connectivity limitations.

Compared to the total number of users on the Internet relatively few have stable always-on machines ready to host P2P content. ISPs do not make it easy or at times possible to poke holes in firewalls to allow for easy hosting on residential connections. This necessitates hole punching which adds non-trivial delays on connections and overall poorer network performance.

It's less about imagination being dead but instead limitations of the modern Internet retards momentum of P2P anything.


> I see the primary issue with IPFS is a significant majority of all web users are on mobile. They can't act as content hosts or routers.

Is there any reason this has to be true? Probably some majority or significant minority of mobile devices spend some eight hours a day attached to a charger in a place where they have the WiFi password, while the user is asleep. And you don't need 100% of devices to be hosts or routers, 10% at any given time would be more than sufficient.


> And you don't need 100% of devices to be hosts or routers, 10% at any given time would be more than sufficient.

Except it don't. Route and content takes hours to converge.


Is convergence necessary?

If a peer says "hey there's a new version of this" and that peer also has pinned that version, then I can get it from them right now, well before the network converges. Yeah maybe it'll take a few hours for the other side of the planet to get the word, but for most data a couple hours or a couple days is fine. Tolerating latencies was kind of the point of calling it "interplanetary".

What's the use case where I'm on the other side of the planet and I somehow end up with a CID which I can't resolve? How did I get that CID so much faster than content to which it refers?


Why?

Why not? If internet access goes away there's no reason the data on my phone can't be made available to other phones on the same LAN.

The tricky part is the trust networking that incentivizes me to allow those others to do so.


What's IPFS 's killer app?

This was such a self inflicted own goal. Siri has needed work for years and every year they neglected it. When they first bought Siri it was state of the art and then it just languished. Pulling an Intel and sweating your assets until it is too late is never a good idea.


No amount of prior work would have achieved what anyone can now cobble together from an open weights LLM.


Siri was outdated even before the rise or LLMs.


Siri has had many, many, many engineers on it for a while.


I don't doubt it, but what were they all doing? The Metaverse had 10k employees on it for multiple years and seemed to almost be a standstill for long periods of time. What do these massive teams do all day?


Have meetings to figure out how to interact with the other 9990 employees. Then try and make the skeleton app left behind by the team of transient engineers who left after 18 months before moving on to their next gig work, before throwing it out and starting again from scratch.


Exactly. What Meta accomplished could have been done by a team of less than 40 mediocre engineers. It’s really just not even worth analyzing the failure. I am in complete awe when I think about how bad the execution of this whole thing was. It doesn’t even feel real.


Actually I would like see a post-mortem that showed where all the money actually went; they somehow spent ~85x of what RSI has raised for Star Citizen, and what they had to show for it was worse than some student projects I've seen.

Were they just piling up cash in the parking lot to set it on fire?


At least part of the funding went to research on hard science related to VR, such as tracking, lenses, CV, 3D mapping etc. And it paid off, IMO Meta has the best hardware and software foundation for delivering VR, and projects like Hyperscape (off-the-shelf, high-fidelity 3D mapping) are stunning.

Whether it was worth it is another question, but I would not be surprised is recycled to power a futuristic AI interface or something similar at some point.


Even within the XR industry, we had no clue where all that money went. During the metaverse debacle, the entire industry stagnated. Once metaverse failed, XR adjacent shops started to fail. There was no hardware or technique innovation shared with the rest of the industry, and at the time the technology was pretty well settled.

Since then we lost all the medium players and it's basically just Facebook, Valve, and Apple.


The sad part about this fact is that the tech is mated to a completely rotten ecosystem. If it were sold off I'd be excited to try it.

Big company syndrome has existed for a long time. It’s almost impossible to innovate or move fast with 8 levels of management and bloated codebases. That’s why startups exist.


I wish I could be assigned a project and make no progress in over a decade and still have a job.


Been there, done that, would not recommend. Working on such projects is incredibly frustrating and demoralizing.

Why would you want to be forgotten?


We will all be forgotten given enough timeframe.


"It was in the reign of George III that the aforesaid personages lived and quarrelled; good or bad, handsome or ugly, rich or poor, they are all equal now."


You might get a kick out of Matrix if you haven't tried it yet. https://github.com/spantaleev/matrix-docker-ansible-deploy is probably still the best way to get it and the bridges you need setup. It is far from perfect but decent.


Whitelisting law enforcement so when the owner of the air tag declares it stolen nobody other than a whitelisted law enforcement org could view its location and when they did that creates an audit log?


^ exactly.

And since the user has the original key, it'd have to be voluntary surrender. After you turn your key in, you lose access.

The best part is the whole thing could be reviewable and added to a public immutable ledger, encrypted, to make the whole process, transition, and access transparent for courts later. Wouldn't it be great if more investigations happened that way?

And if you don't trust law enforcement, thats your prerogative, no need to use the feature.


What happens when law enforcement members are the stalkers?


This implies a level of trust in law enforcement. As a US citizen, hard pass.


They have access to guns, stingrays and flock cameras. They tap every email, message and phone call you make. You wouldn't even know if you are subject to warrantless surveillance as it might be illegal to tell you under the patriot act.

I'm pretty sure being able to access an Airtag that was put into stolen mode by the owner is the least of your concern. I'm not even sure what failure mode you are worried about because you didn't elaborate.

Please don't think I'm trying to be all high and mighty because I live in the UK and am surveilled even worse than you are (although at least our police are very rarely armed).


I concur, but you don't have to use that feature if you don't trust LE.


Wouldn't even be hard for Apple to implement, they already do this for airlines.


Sure and lots of times I can walk places. That doesn't mean bikes, cars, trains and planes aren't incredibly useful. They let me achieve things I can't in other ways for example transporting cargo without a team of people to help me. Just like AI coding.


Yet replacing walking with cars is often cited as one of the reasons for many of society's ills.


Yet no one seriously declares motor vehicles as useless.


Many who live in sufficiently-walkable areas don't have one and are actively opposed to getting one


There is a middle road.

America went full car to a point where just going to the shops from the suburbs is a car drive. Crossing the ROAD needs a car in way too many places.

There are cities where you can find a shop for essentials within walking distance, bigger shops need a short to medium drive, but can be still walked to if you really want to.


Would you still use your car if you ended up in the wrong destination half the time?


Yes, because I can drive to the other end of the state in an afternoon. Then if I get lost, I can just course correct.


Generating lots of pollution, cost, jams, noise and accidents globally. Not all cities need to be made for cars, right tool for the job etc.


Have fun getting stuck in a loop when it insists your destination exists in a place it doesn't.


Would you use your car if you ended up in the right destination 100% - epsilon of the time? Yes, you would.

Or do you suppose this is the best AI will ever get?


Parent wasn't referring to a possible future, but present time. If we get AI I can trust 100% that's another discussion. For now I don't see it and I don't think LLMs are the solution to that problem, but we'll see.


Maybe your analogy holds if driving and walking took the same amount of time.

Plus "planning, implementing, validating, and reviewing" would be a bit like walking anyway in your analogy.


Sadly if you look at how the law is drafted its setup to catch companies that have a significant UK base not just those that advertise here. It is highly likely for compliance reasons (as we saw with imgur and others) that they will simply block the UK themselves.


There are already solutions that do the double VPN thing for you. For example https://obscura.net


> For example https://obscura.net

Obscura ....

"Terms and the relationship between you and Obscura shall be governed by the laws of the State of New York"

Yeah, erm.

Now more than ever, trusting a US jurisdiction VPN provider ? No thanks !


> Now more than ever, trusting a US jurisdiction VPN provider ? No thanks !

The whole point of Obscura is you aren't trusting any single company. A Swedish company and an American company would need to collude to cause a problem. Unless you know something I don't?


> The whole point of Obscura is you aren't trusting any single company.

First, Mullvad's infrastructure has been independently audited.

Mullvad integrity has also tested as proven by a legal case where they were subject to a search warrant when someone was trying to claim copyright infringement.

As far as I can tell, Obscura has not had anywhere near the same scrutiny.

Second, obscura is the first hop is it not ?

Therefore it may well "only" relay the traffic to the exit node but it is still a relay and hence open to SIGINT analysis by the US.

I would have thought therefore using Mullvad's built-in multi-hop mode on their audited platform would be the wiser decision ?

Or Tor if you insist on multi-party ?


Hence why Mullvad is being used as the exit point.

You have full e2ee between yourself and Mullvad but crucially Mullvad don't know who your IP. Five eyes are already doing SIGINT on behalf of both the US and the UK government before my connection even reaches Obscura so I lose nothing but potentially gain privacy.

How is it you think a single company (Mullvad) having access to my IP and what I am browsing is less secure than splitting it up amongst multiple providers one of which being Mullvad with that audited platform you talk about?

If I wanted Tor on top I'd layer it on top too but that would still be a single point of failure.


I see you are carefully skipping around the point ....

Where is Obscura's independent audit ? When has Obscura been tested to the same extent that Mullvad was during its court batttle ?

Answer it wasn't.

Therefore Mulvad Multi-Hop mode. Or Mullvad + Tor, if you insist. Is the safer choice.

And the US juristiction of Obscura is not something you can brush under the carpet like it somehow doesn't matter.

With Obscura you are just throwing your first-hop traffic against an unknown. And an unknown that is under US jurisdiction, and hence PATRIOT Act etc.


It's open source which means I can trust having the app installed if I build from source (or I can just use Wireguard directly). I then know I'm directly connected to a Mullvad Wireguard node by checking the public key here: https://mullvad.net/en/servers

Other than Wireguard protocol being broken there is no way for Obscura to snoop presuming I check the public key. I'm not saying I trust Obscura, I'm saying with their model I don't need to trust them which is vastly superior. Nor do I need to trust Mullvad.

You keep hand waving around that Obscura are somehow untrustworthy but you have steadfastly refused to address the fact that their model does not require trust. If you trust Mullvad (which you are claiming to) please show an attack that would work to breach this model. You can't.

You would benefit from reading their FAQs and this blog post: https://obscura.net/blog/bootstrapping-trust/

https://github.com/Sovereign-Engineering/obscuravpn-client


Check out Flutter as another option, can target web, android, ios and desktop.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: