Hacker Newsnew | past | comments | ask | show | jobs | submit | conanthe's commentslogin

Rails is hard-core to maintain. Every company I know that used rails for their projects says it was a mistake. It is flaky with breaking changes all over and it is hard to find good developers. Sane thing to do is to stick with Python. Django is boring but it is rock solid and it pays itself multiple times.


Kratom / Cannabis oh wait these are illegal so big pharma can milk their poisons.


Here in Canada, Big Pharma are falling over themselves to get into the Cannabis business.

I honestly think the obstacle to Cannabis legalization in the US is social conservatism, not industrial lobbying.


The social conservatism about cannabis was created and stoked by propaganda and laws created in large part due to industrial lobbying, if you look back a generation or two.


Cannabis causes low T and gynecomastia, so not really


I looked for studies supporting your statement. The evidence is conflicting, and there appears to be no conclusive evidence one way or the other, although some people certainly are fond of repeating this as if it's fact.


Still appears questionable - A few studies and more information included in this article.

https://www.mdmag.com/medical-news/is-there-a-link-between-l...


As soon as they're legal enough, they'll be milked too. I mean, you know, analogs tweaked for higher potency, etc.


I am split. This font is amazing - finally a better alternative to Helvetica, but wouldn't be better if they have used their energy on improving their CPUs?


I think you might be confusing "Inter" with "Intel". This font is named "Inter UI" since its design goal is for use in user interfaces. It doesn't have anything to do with Intel.


What free market are you talking about? There is no free market in the financial sector. Everything is regulated and licensed.


What are the alternatives?


Capitalism.


What reaction someone expected by shoving their religion down the throat of the users? This is so sad.


Snow and "ho ho ho" is hardly a religious statement. If anything, this is the capitalistic "buy lots and lots of presents" version of Christmas, not the religious version.


They are one and the same.


They overlap a lot in the West especially, but they're very different phenomena. Look at Japan, where Christmas is hugely popular, Jesus is nowhere to be seen, and a poll of schoolchildren a few years back showed that most of them thought the holiday was about celebrating the birth of Santa Claus.


Right mate and the Christ is just an old action hero.


Dropbox is a no no for one simple reason - there is no end to end encryption. Unless I don't know something? I wouldn't want a disgruntled employee to fiddle with my files.


Is there any Dropbox-like service that lets you control your own private keys, without resorting to the ugliness of uploading an encrypted image to Dropbox?




It's important to note though that their client is not open-source, so if one goes through all that trouble to use end-to-end encryption, it seems a bit unsatisfactory to me to then trust this company to actually keep the private keys on my machines (and encrypt things correctly).

Personally I used syncthing which doesn't do encryption but also only uses my own devices, so I can keep the data on my machines at all times.

In the past I used seafile which does support encryption (and it's self-hostable): https://www.seafile.com/en/home/


Tresorit is nice, but seems kind of pricy. Boxcryptor works well on top of Dropbox. Personally, I've switched to Nextcloud which keeps everything in my control, and it also supports e2e (though the e2e UX is still rough around the edges).


I think syncthing wins here. Not at rest, mind, but since you control the endpoints that should be okay.


Even though it's proprietary, Resilio Sync does encrypted peer to peer sync, plus it allow encryption-only nodes. These contribute bandwidth, but cannot decrypt the data.


I use a cryfs mount stored in Dropbox. It's been quite painless.


There is restic


Just sync an encrypted image if your threat model includes disgruntled employees motivated enough to mess with your account.


Could be problematic if the image is huge.


Anyone have experience with Boxcryptor? Haven't tried it since a few years ago (https://www.boxcryptor.com/en/)


You could use something like gocryptfs that encrypts at the file level


Cryptomator is another cross-platform alternative for file-level encryption: https://cryptomator.org

Also includes first-class support for cloud syncing apps.


If you trust https://www.dropbox.com/en_GB/security#files, then they have encryption on transport and at rest in the DC, and implement forward secrecy and certificate pinning.


End-to-end encryption means that they don't see your encrypted files at all, even if they want to. Importantly it means it is impossible by design to make mistakes like accidentally not checking passwords on login https://techcrunch.com/2011/06/20/dropbox-security-bug-made-... .

Transport security and at-rest security is very important (and is the best you can do if you want Dropbox's ability to access your files, e.g., so their servers can show your files in a web interface), but it's not the same sort of thing as end-to-end encryption.


Actually, hm, you could point Dropbox at the layer under eCryptFS and have it work (for some value of work) and get e2e that way, right?


After e2e encryption, my second largest feature request is a .dropboxignore file

I don't understand why they don't have it even after all these years.


Do you want something different than the Dropbox exclusion list ("dropbox exclude add ...")?

That only supports excluding directories not individual files, and the actual list of exclusions is buried in some local binary config both of which are moderate annoyances - perhaps those are your qualms?


If you run a project off a Dropbox directory you would want .env and similar files excluded. You don't want someone to get your AWS keys?


Wiggle wiggle click me stanger Wiggle wiggle buy me flowers


They just keep pushing their spyware.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: