Hacker News new | past | comments | ask | show | jobs | submit | book_mentioned's comments login


Other than promoting Python and "diversity", what exactly does PyBee/BeeWare do? It sounds like an SDK, but it appears to just point to a bunch of random GitHub projects. It's not very clear to me.


After some digging I've still no idea if it solves my core problem of needing a Mac to build Mac binaries.


Bitcoin: Update network descriptions to be more accurate | https://news.ycombinator.com/item?id=16039587 (Dec 2017)

Bitcoin.org removes “fast” and “low fees” from Bitcoin description page | https://news.ycombinator.com/item?id=16204387 (Jan 2018)


My takeaway/TL;DR: OpSec is harder vs. AI (ever-vigilant pattern matching) than humans.

But it did drift into discussing a more offensive AI than passive monitoring done today.


How many sentences is TL these days? But yes, this is an offensive AI, and no, we aren’t passive-only today - look at the IoT botnets.


My latest campaign has been to find a way to add the tiniest bit of accountability for downvotes. I believe at a minimum the total number of downvotes given should be shown publicly on user profiles.

As things function now, downvotes are for all intents and purposes anonymous.


Why do any votes need 'accountability'? Their purpose is to identify comments worth reading. Almost everything people write about voting itself is not worth reading and the less of it, the better.


Worth reading is very subjective. I think you are looking at popular opinions. The current system works that way as opposed to some randomized insertion in between. One often problem with popular opinion is that readers might jump on that trail and build a deep thread, which probably reduce the incentive to read any further by either skipping the middle to the end, ir simply ignore the rest.

Would be an interesting research to conduct if randomness can help based on say user karma. For cryto and security we know there are certain users seen as “goto”, so their opinions weigh much more and might end up being the top all the time. I’d like to see some “penalty” by promoting the less-popular users (not comment).

The point is treat tge display not entirely based on number of upvotes the entire time.


My intention is to ensure contributing to publicly censoring/censuring costs something (intentionally tiny, but greater than zero/nothing) each time, beyond the one-time minimum karma requirement. "Downvote to disagree" seems unlikely to scale indefinitely, particularly as mobile means less willingness to contribute beyond clicking up/down (specifically now that there are apps catching on that remove all "fat-fingered web UI" friction!).

It's perfectly fine to disagree with this belief; HN itself does!

[Edited]


I know it's perfectly fine, I'm trying to follow this (very common) line of thought and adherents never seem to explain it in a way I can understand.

For one thing you're not really 'censoring' anything but even if we say, for the sake of argument, that you are why should it have some cost different than the cost of 'promoting' something when you upvote? The mods' argument that meta is bad for actual conversation is also quite compelling. What's the counter to that other than stuff that mostly seems to boil down to some version of 'getting downvotes kind of feels bad' (of which calling downvotes 'censoring' seems like a particularly overwrought variant).


Thanks for taking the time to bring up these counterpoints!

>why should it have some cost different than the cost of 'promoting' something when you upvote

If this is a blocker, show both! My recommendation to add the tiniest bit of friction only to the anonymous negative was an attempt to reflect existing site guidelines. My apologies if terminology is a distraction; I did add "censuring" as a better word.

>mods' argument that meta is bad for actual conversation

Up/down votes are currently only public on the receiver's side, and this meta gamification powers HN. Would revealing the other side of the equation deter abuse of anonymous control (with an acceptable level of side effects)? All I can answer for sure is that intervention for downvote abuse (if any) is behind-the-scenes for now.

[I assume] the pool of eligible downvoters continues to grow; maybe when the time comes the next step will be another moderator rather than crowdsourcing -- the precedent of hiding individual comment scores seems relevant.


On StackOverflow reputation is subtracted when downvoting answers but not questions [1], which is a neat approach. On your own profile, you can see the proportion of upvotes to downvotes (as well as other activity), but others cannot (maybe moderators?). So, there is at least some personal impact to having a user be accountable for a downvote. There is also generally a culture of "if you downvote, you should explain why", which sometimes seems to be here on HN as well. I remember Disqus removed the downvote count some time back, and Facebook doesn't have a "Dislike" button, so there are different approaches to it. I wonder what some other approaches some communities have taken, and what would be effective? Or even, what is the desired impact?

[1]: https://meta.stackoverflow.com/questions/251610/why-does-dow...

[2]: https://disqus.com/home/discussion/supportqa/why_was_the_dow...


I'm developing Talkyard which has its own voting system: there's the Like vote, and the Disagree vote.

But the Disagree vote isn't a downvote — it doesn't affect karma or sort order. It justs shows how many people disagree about something. That can be good to know, so one can avoid harmful advice. Or just because one is curious about others' opinions.

There is a downvote too, actually, but only available for staff and core members. It works a bit like the downvote here at HN (e.g. removes "karma" and moves the comment downwards, dims it a bit).

Here's how the disagree vote looks: https://www.talkyard.io/please-note-2


Downvotes could remove from users karma. It acts as a constraint. Basically, the more popular your posts the more moderation you can do, but you still lose moderation capabilities over time if you use it excessively.

No need to make it visible why a user's karma is dropping, it just is. Could be they're getting downvoted, or they're using their voting action and reducing it themselves.

The only other option that works well is a meta-moderation feature like /. has, but that's impractical for this site, the way it does things.


It acts as a constraint.

I doubt that really happens, other than for that very brief moment and tiny minority of users who are right around the threshold. The karma losses are capped, it's hard to lose meaningful amounts of karma without actively trying to.


Sorry, I reread my post. What I meant was that if I downvote someone, the mechanism could deduct from my karma (or a fraction of my karma) as well as theirs.

So we're both at 1000 karma, I downvote you. You go to 999, I go to 999.5. Repeat. If I'm only downvoting, I'm forfeiting my karma to that moderation action. Optionally the same for flagging and other things.

This becomes a constraint because a user who just got to 500 karma and downvotes would lose the privilege immediately. A user at 10k karma can downvote pretty much everything. You could also have it cost more to downvote more in a period of time. Like 0 karma to downvote once an hour. 0.5 karma for two or three times an hour. 1 karma for four times an hour. Some scale (linear or faster).

This would prevent or mitigate people going through and downvoting all of a particular commenters posts in a thread just because it's controversial or they wrote one controversial thing. It creates a cost for moderation.


Oh I see what you mean. You can see a system like that in action on Stack Overflow. I don't think it really does very much at all there either, under what seem like much more favourable conditions: harder to accumulate karma, lots and lots of permission thresholds, a community involved in far more moderation than here and piles of caps on all sorts of user actions.

On HN, this would also favour commenting participation over curating participation. It's not obvious this is a win over the way things work now.


And if you didn't like the notion of 1/2 karma, you could flip a coin to determine whether to subtract 1.


I always thought that a user's votes should be normalised by something sensible, like total number of votes or time spent online (with sensible scaling). That way opinionated clickers don't have outsize influence.


If either intended or not intended, talking about the downvoting system seems unnecessarily taboo(gets downvoted). Which is a shame because there is an interesting effect that it has on the community which would be worth looking into.

One of the biggest questions I have: are downvotes an accurate way to moderate low-quality comments? I'm not sure how that can be proved by data but it would be interesting to see someone prove it.


I find myself thinking of the Slashdot system (also used by Soylentnews, a Slashdot "spinoff"), where people get to "flag" a certain number of comments on an article they themselves have not participated in. And said flags can never lift the post above +5 or send it below -1, but the most common flag given to a comment is represented next to the score.


Are there any thoroughly documented examples demonstrating use of an RTL-SDR to view these wireless cameras?


I was literally about to say.. sometimes the dumb ones are actually worse as many of them are transmitting the sound and video over the air with no encryption either :)

I imagine probably 99% of them are but I don't have any research to actually back that up.


Many use the DECT Standard that was developed for mobile handsets. It’s not high security, but it’s also not plain text.

They’re also not networked, so an adversary would have to get into range, making a potential attack much more complicated. It certainly won’t defend you from a targeted attack, but it will keep $random_person_on_the_internet reliably away and I don’t have to rely on $companies server/network security.


Well thats comforting :)


Exactly... there are many things for which not being connected to the 'net increase security a lot. You decrease the pool of crazies and crooks. However, once a stalker is interested in spying on your house... physical proximity isn't so much of a barrier.

"We begin by coveting what we see every day... Clarice"


I live on the fourth floor and the reception from my (audio only unidirectional) baby monitor doesn’t reach to the ground floor. So the stalker would need to be in one of the adjacent flats. Not an insurmountable barrier, but one that I feel comfortable with, since all I need protecting is baby babble.


Or just a better antenna. :)


Maybe. It’s still just baby babble.


This is why I went with an IoT network in my house, that doesn't have access to the outside world (ingress or egress) except through a carefully controlled firewall.

And as of right now, the only 2 things that go through that firewall are the nest thermostat (yeah, it's pretty and hasn't given me any trouble, so i'm happy with the tradeoff here), and the google homes (again, another tradeoff myself and my family are comfortable making).

Everything else is on that network without access to the "internet" directly, with WPA2 encryption for protection against local eavesdropping, and pushed through an open-source home-automation controller called "Home Assistant" running on an intel NUC served up over HTTPS to our devices.

I don't have any baby monitors yet (no babies!) but we do have cameras and with this system they work great and I sleep pretty well at night knowing it's all secure enough that i'm happy buying cheap devices knowing the security is garbage.


The problem with these devices is that they want to communicate via a vendors server, so a firewalled network will certainly improve security, but will massively reduce usability.


I wonder if a proxy device with some smarts regarding data transmission patterns (learned from when a device is newly added to the network) could provide some security.

Get a new device, plug it in to a locked-down network that passes all packets through a deep packet inspector connected to some ML. Add in proxy features so if the vendor turns off their service, your personal network MitM can mimic the server on the other side.

I doubt this is feasible due to the fact that consumers clearly value "it just works" (implying simplicity/less security) over secure/private. (And probably a bunch of other factors I'm not thinking of.)


Sometimes, but often the only proprietary part of these things is the app they want you to use.

Most of them will output standard formats and streams that you can hook into in my experience (but i might be inadvertently selecting for those)


If I understood the article correctly, the devices that this article mentions communicate exclusively via the vendors server.


> I was literally about to say.. sometimes the dumb ones are actually worse as many of them are transmitting the sound and video over the air with no encryption either

Many of the smart ones both broadcast like the dumb ones and, separately, send a signal on wifi to a central server for online viewing, so they fully incorporate the problems of the dumb ones.


This is a common problem in areas with multiple new parents: turning on your video baby monitor and watching your neighbor's cam.


I didn't document it, but the baby monitor we used just transmitted raw FM audio at ~900Mhz. You could listen to it with SDR# no problem. It wasn't one of those fancy video kinds though, just an old fashioned audio only monitor.

https://www.amazon.com/Sony-BabyCall-Receivers-Discontinued-...



I'm out because there is zero accountability for downvotes, they are completely anonymous.


Why does IPFS get all the HN attention?

In my ignorance I'm not really aware of the landscape for these types of technologies; does anyone have time to share a brief summary or link to further info?


The short answer is that a great many techy's are working on decentralization because the present centralized model has a lot of serious problems, like Facebook et al making their money selling ads that may have malware, and also selling your data to who-knows-who.

There are many projects to decentralize the web. IPFS gets so much attention because it is such a broad platform that other technologies (like Ethereum) can operate on top of, and because in some important ways it is farther along than anybody else.



Interesting to consider WebTorrent vs. BitTorrent in this context; BitTorrent has grown much closer to mainstream but WebTorrent doesn't seem to be growing.


Show HN: VPS Comparison – Automated tests to compare VPS by yourself | https://news.ycombinator.com/item?id=14245538


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: