I've been hearing "Iran is weeks away from a nuke" since the 1980's.

It's almost like that dude who keeps saying, "FSD in my EVs is just months away."

That’s correct. The point is that until now Iran has intentionally not built a nuke - they’ve kept themselves within range to make it a credible threat, but they’ve not completed the project because so far the tacit agreement has been that if they don’t build a nuke, the US doesn’t let the Israelis bomb Tehran.

Wasn't there a "bounty" program where if it had a lot of views but no answers, the answer rewarded more internet ego points?

Not automatically. You could add a bounty using your own points if the question didn't get an accepted answer in 2 days.

Which is kinda cool, but also very biased for older contributors. I could drop thousands of points bounty without thinking about it, but new users couldn't afford the attention they needed.

And you can't delete your post when you realize how awful it was years later! That anti-information sticks around for ages. Even worse when there are bad answers attached to it, too.

If you're talking about deleting questions, that's because deleting the question would delete everyone's answers that they potentially worked very hard on and which others might find useful. If you think the answers are bad you can always post your own competing answer.

"A Human commented at ##:##pm" "An AI Bot commented at..." "A suspected AI Bot commented at..." "An unconfirmed Human commented at..."

ya but you assume someone worked hard on the answer. there are alot of times when you get garbage top to bottom.

Fun story: SO officially states comments are ephemeral and can be deleted whenever, so I deleted some of my comments. I was then banned. After my ban expired I asked on the meta site if it was okay to delete comments. I was banned again for asking that.

You can’t delete anything here either… so make sure you don’t say anything awful.

create a new account every few weeks and don't forget to mix you you'er writin' style to fakeout stylometrics. its all against the rules but i disagree with HN terms. internet points don't mean crapola to me. but i like dropping in here every now and then to chit caht. i should have the right to be anonymous and non-deidentifiable here and speak freely. of IP address ---are--- tracked here and you can easily be shadowbanned. but i don't say anything awful, but i am naturally an asshat and i just can't seem to change my spots. 90% of the time i'm ok, but 10% i'm just a raving tool.

Why not zoidbe... I mean, why not open ssh? It's literally a CLI that does every crypto operation with every primitive (except some PQC)?

If you mean the OpenSSL CLI, it's hard to think of a more footgun-y cryptographic tool than the one that:

* defaults to unauthenticated encryption

* buries its one authenticated mode

* requires explicit command-line nonces

* defaults to an MD5 KDF

You could probably keep going for another 10 bullets. Never use the OpenSSL CLI for anything other than TLS stuff.

You can use ssh-keygen for signing and verifying signatures.

You can also use age[1] to encrypt payloads targeting ssh public keys. And decrypt using ssh private keys.

[1] <https://github.com/FiloSottile/age>

Yeah, the OpenSSL CLI sucks. So what's to be done?

Sure, we can build a 25519-specific tool with a less footgun-y interface. Fine, whatever, for that one use case.

Or we can build an alternative OpenSSL CLI that explodes OpenSSL and its numerous useful features in a general way and helps fix lots of use cases.

Nothing is to be done. Just don't use the OpenSSL CLI. It's a deeply cursed concept for a tool!

A command like cryptography swiss army knife useful though. If not openssl, then what?

It's useful as a toy and a learning tool, but for nothing else. For those two things, OpenSSL is fine as it is.

"Quicken is a single-entry accounting system, which means that amounts can appear out of or disappear into thin air. In a double-entry accounting system you can't put amounts in an account without taking it out of another account."

This summed it up nicely, from https://github.com/mortisj/quicken2beancount

Right there with you. I've tried to leave quicken multiple times. Especially when they moved to annual subscriptions. I haven't tried to leave since 2019-ish, and all the alternatives were just clunky as hell, as if the devs completely ignored UI/UX. Also, I'm on the latest quicken for mac and it has an export feature, but I have never used it. Maybe when they start charging per transaction I'll finally leave. I'm lucky enough to be able to afford it annually, but it still stinks that there's no open source alt, even to do just the basics conveniently.

What do you mean re-enter? I've been using every new version of Quicken since 1992 and never had to re-enter all my data, and I switched from PC to MAC around 2005.

I'll see your decade old text file and raise you one more: my current quicken file goes back to 1992! Lemme tell you about gas and grocery prices back then... (hint $1.09/gallon in Oneida, NY and $15/bag at Price Chopper)

About 5 years ago I purged as many apps as I could. I still have some I need for my job, especially on my work-issued iPhone, but excluding those apps I have exactly 5 apps on my phone. Everything has a website.

I've heard that native apps are more secure than webapps, but in my experience Firefox is a more reliable steward of security, and App permissions are too obscure to really understand: it is harder to make a malicious webapp than it is to make a malicious native app. Is that a fair statement?