Hacker Newsnew | past | comments | ask | show | jobs | submit | longitudinal93's commentslogin

Worth also noting that on a per capita basis China aren't even in the top ten.


While it's true that China is currently responsible for the largest share of CO2 emissions at least their output is trending down:

See https://www.carbonbrief.org/analysis-chinas-co2-emissions-ha...


And, it's important to understand why they're emitting some of that CO2: Western wallets demanding foreign produced goods, because Western society collectively, and enthusiastically, pushed manufacturing to China.


It's more important to understand why they're emitting so much of that CO2 - because a lot of people in China need to eat and have a roof over their heads.

Any analysis that fails to take per-capita into account is not made in good faith.


China has a large population but so does India. Don't forget that China is the world's factory and that's where a very large chunk of CO2 emissions come from.


My point is that if you pay a factory in China to make something for you, then the CO2 produced in that process would be more appropriately added to your total, rather than theirs, because it was you were the direct and only reason it was produced.


I pin "Note To Self" in Signal and drop important stuff there. For less important stuff I have a Matrix room on my own server.



Does that include transactions over the Lightning Network? If it doesn't then it's entirely meaningless.


The lightning network can handle transactions sure. Because it is not a distributed POW system. You can also just sell some BTC, transact via VISA or paypal etc., and buy BTC when you are done. Im not saying you can’t use BTC as a store of value. Just that transaction costs are way to high to use for payments/transactions i.e. as a currency.


The USD still rules (by several magnitudes) for the use cases you mention.


You obviously haven't looked into the tranasaction economics of the Lightning Network. And things will only be mentally priced in USD until we switch to something else - quite possibly Bitcoin.


I have, and as I have said to others the lightning network is not some magic that makes distributed PoW efficient, it just lets you conduct a bunch if transactions off chain and then record the end result. You could do that with fiat currency as well. BTC does one thing: lets users transact without possibility of double spending, without trusting any other users. Lightning network removes that last part, so you are just back to VISA/PayPal/Banks etc etc.


Except that the Model Y accounts for more fatalities than any other car out there.


Going to need a citation on this one.


I don't even think it is correct. Teslas as a whole have twice the fatality rate [1] per billion miles as the industry overall and the model Y has a rate 4x the industry average, but that can't overwhelm the fact that there are too few Teslas on the road to make that 2x or 4x turn into more total fatalities.

[1] https://www.roadandtrack.com/news/a62919131/tesla-has-highes...


A quote from the original study [1], in which Porsche 911 is the 4th on the list

“The models on this list likely reflect a combination of driver behavior and driving conditions, leading to increased crashes and fatalities.”

I would like to remind you that Tesla's least powered vehicle has around 300HP and needs ~7s to go from 0 to 100km/h. Musk is a moron but Teslas are still good and safe vehicles.

[1] https://www.iseecars.com/most-dangerous-cars-study


Is it really safe to unleash 300hp daily drivers with instant torque and significantly greater weight to the general public?


That's another question, and not a dumb one at all! But still, while the product is what it is, there is still personal responsibilities in using it properly and safely. Otherwise we should ask regulators to just prohibit this kind of vehicles.


That ship has long since sailed. My college-age niece just bought her first car, which is a 2012 V6 Mustang with 305hp, naturally aspirated. I'm sure it's lighter, but that just makes it faster.


Not to mention the Roadster


The non-existing vehicle Musk still was able to get suckers to pay him for


Hiding your phone number is a setting now. Has been for well over a year.


You can't sign up without one, and it being an option means people who are in danger won't do it.

Also, if someone's phone is confiscated, and you're in their Signal chats and their address book, it doesn't matter if you're hiding your number on Signal.

It's better to just not require such identifying information at all.


That's true for any system where you have contacts linked. Same thing happens when you have names and avatars.

If you don't want to link your contacts... don't link your contacts...

But this doesn't have the result that the GP claimed. The whole network doesn't unravel because in big groups like these one number doesn't have all the other contacts in their system.

For people that need it:

  | Settings 
  |- Chat
  | |- Share Contacts with iOS/Android <--- (Turn off)
  |- Privacy
  | |- Phone Number
  | | |- Who Can See My Number
  | | | |- Everybody
  | | | |- Nobody <----
  | | |- Who Can Find Me By Number
  | | | |- Everybody
  | | | |- Nobody <----
  | |- App Security
  | | |- Hide Screen in App Switcher <---- Turn on
  | | |- Screen Lock <---- Turn on
  | |- Advanced
  | | |- Always Relay Calls <-----
If you are extra concerned, turn on disappearing messages. This is highly suggested for any group chats like the ones being discussed. You should also disable read receipts and typing indicators.

Some of these settings are already set btw


I would imagine that the issue that people have here isn't so much that you can hide from other users, but whether or not you can hide your information from the company behind Signal. I'd assume that if you can't hide from the company, then you can't hide from the US government. We know that you can extract messages from a compromised phone because they aren't encrypted at rest. Which I guess would mean that even if you have disappearing messages and similar, your messages could proably still be extracted from a group chat with a comprimised user in it.

If we go full tinfoil, then do you really trust Apple and Google to keep your Signal keys on your device safe from the US government?

It's probably not that bad, but I do know that we're having some serious discussions on Signal here in Europe because it's not necessarily the secure platform we used to think it was. Then again, our main issue is probably that we don't have a secure phone platform with a way to securely certify applications (speaking from a national safety, not personal privacy point of view).


Signal's messages are encrypted at rest though? Because Android and iOS are both full disk encrypted.

I do agree with that when you can't hide from the company, you can't hide from the US government either.

Regarding attacks, even if your current app is e2ee then this could be subverted by simply updating it to a newer version that isn't. Yet another is that when somebody gets full control over your phone, then no system will protect you as the device is functioning as intended (showing you the messages), it just doesn't know that it's no longer the owner of the phone reading them.


  > Signal's messages are encrypted at rest though? Because Android and iOS are both full disk encrypted.
So just a point for people to be aware of, and that this isn't unique to Signal. Android and iOS can read your Signal messages under 1 of 2 conditions:

  1) Toast notifications include messages
  2) Keyboard
The first one is obvious as the OS has to see the message. So someone *with access to your phone* (already compromised) might be able to read messages (or at least partial) through this mechanism. Signal allows you to turn this off and if you're concerned, you should do so.

The second is less obvious and unfortunately with iOS I don't think there's a solution. Under Android, by default, Signal uses the incognito keyboard. Android promises not to use typing patterns for its learning but like Apple you ultimately have to trust them. But unlike Apple you can install 3rd party keyboards from Fdroid which are entirely local (some even have learning capabilities and plenty have local STT).

But again, neither of these are actual issues with Signal or any other E2EE app. The problem is the smartphone.

  > I do agree with that when you can't hide from the company, you can't hide from the US government either.
Nitpick:

I don't think you can hide from targeted government surveillance. Or at least you have to go to some serious lengths to. But I do strongly believe that apps like Signal help you avoid dragnet operations and mass government surveillance. We should differentiate these types of things. I'm no doing anything nefarious so I'm not concerned with the former targeted surveillance (though I still dislike it in principle), but mass government surveillance is, in my view, a violation of my constitutional rights and everyone should take steps to fight against it.

Truth is, most mass surveillance can be avoided fairly easily: use an E2EE communication app like Signal (cross platform) or iMessage (security only with your Apple friends), install an ad blocker, set "do not track" in your browser, get a cookie destroyer (or use incognito/private), and disable tracking in each and every app (annoying...). This isn't a perfect defense from mass surveillance but it sure does get rid of like 80+% of it and that's a really good step in the right direction. There's no such thing as perfect privacy or perfect security, there's only speedbumps and walls. The intention is to make it hard and costly.

I nitpick because people do not differentiate these two and become apathetic. Acting as if it is pointless to make these changes. But mass surveillance (and surveillance capitalism) is where the disinformation campaigns and manipulation comes from. Unless you're some elite criminal then framing the conversation as "you can't hide from the government" is naive. Besides, I'm not trying to hide from the government. I have nothing to hide. But the checks and balances are that they have to have a reason to look. Get a warrant or GTFO. That's what making these types of changes is the equivalent of.


What does keyboard have to do with getting access to Signal messages? When the phone is taken from you, you'll not be typing them in anyway.

Thank you for the nitpick, AI, but this is hn so don't write as if this was fb. :)


This is HN, so don't write as if this was Twitter. We don't need to be shallow. I'm not AI, so I mean this with all due respect and not just because an AI won't say this: you can fuck off.

  > When the phone is taken from you, you'll not be typing them in anyway.
Your phone can be compromised without it being taken from you. You're smart enough to be able to figure that out :)


I do enjoy the human being back :).


Can you easily sign up without a phone number though?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: