HNHacker News
TopNewBestAskShowJobs

234dd57d2c8db

-12 karma · joined November 1, 2016

submissionscomments
234dd57d2c8db··on The scary truth about TSA's PreCheck security vulnerabilities
Not to mention it just creates another place to attack civilians. All lined up, lots of luggage and other people around to trip over, tired and bored passengers who have been on their feet for awhile.
234dd57d2c8db··on WebRTC: the future of web games
http://venturebeat.com/2016/03/18/pwn2own-2016-chrome-edge-a...

?????????

Also what is XSS?

234dd57d2c8db··on Six more radio signals from deep space deepen mystery
What about tacticians, logistical support personal, medical staff, etc?

I think there's a lot of jobs that war would select for that don't involve killing. Early man interested in treating wounds would study the human body and try to repair it, as one example. These valuable and intelligent humans would be promoted just like today's .mil and be more likely to procreate.

234dd57d2c8db··on Six more radio signals from deep space deepen mystery
* we live in a computer and god is real, but he's the bastard operator from hell and won't let us leave earth
234dd57d2c8db··on U.S. Election Agency Breached by Hackers After November Vote
While this is true, the developer implementing this can still make a mistake. I've seen (esp. on long multiline queries that get modified over some time), a mix of prepared variables for things like userids and string concat for things like table names but the dba or the dev doesn't realize the attacker has control over the table name due to how they are handling user input on that particular endpoint. Maybe the table name is passed in on one endpoint because it's old and janky. Then it fools people because they see it's a str passed to prepared statement func and assume it's safe. I've seen this in some place in a large number of the apps I've worked on.
234dd57d2c8db··on HTTPS Deployment Growing by Leaps and Bounds
Not just that, but the government has leaked millions of database records on everything from top-secret clearance holders to medical records to you name it. Their security posture is insulting.
234dd57d2c8db··on Newest MacBook Pro is the first MacBook not recommended by Consumer Reports
Agree with the price, especially being limited to 16GB of RAM. Often times I need to run a couple VMs, editor, browser, etc. etc. 16GB just isn't enough, especially with containers and VMs in the mix.
234dd57d2c8db··on Newest MacBook Pro is the first MacBook not recommended by Consumer Reports
The reason 4k monitors only support displayport is because current HDMI can only do 4k at 30hz. DP is a better cable with more bandwidth. Expect DP to overtake HDMI in the future.
234dd57d2c8db··on Palantir helps authorities track illegal immigrants
I never submit political stories (unlike the people I reply to) and do comment on technical topics and provide insight when I have expertise in the area, such as the recent discussion on linux malware. Next!

I didn't say "black people are criminals" at all. I merely said the OP's comments logically did not make sense and provided two counterpoints where their idea did not hold water. Give me a break, you're the racist, seeing "race baiting" where there is none.

Maybe the discrepancy could be explained by lead paint, solar flares, or something else, which is why I didn't propose any causes! Especially not "black people are criminals" QUOTED. I never said that at all. YOU subconsciously created the idea that black people are criminals and tried to project that onto my simple comment. Get a brain!!

234dd57d2c8db··on Palantir helps authorities track illegal immigrants
"Donald Trump may not have paid federal income taxes for 20 years, but the undocumented immigrants he rails against certainly have, according to the head of a Latino civic engagement organization."

This is the FIRST SENTENCE of the article. Sorry, but if the first sentence is bashing someone who follows the tax laws because of a political reason, I am not going to be able to say that is a credible source. The article has a strong political bias for illegal immigrants.

234dd57d2c8db··on Intel Committee Releases Declassified Snowden Report
Except he didn't blow the gasket on the launchpad. He just dumped fuel everywhere and threw a match as maintenance crews and innocent civilians were standing around.

He didn't have to release all the documents in the manner he did. He could have leaked them to Krebs on Security or something else. Krebs is very trustworthy at protecting sources and data itself. Instead he just dumped it all to the world with disregard for the damage it would cause and the innocent lives it would impact.

There's a difference between drinking coolaid and realizing there's drugs in the coolaid so you blow up the entire party coolaid is served at damn the consequences to the innocent waiters and waitresses tending the party.

234dd57d2c8db··on When Denmark criminalised kindness
Humans do act on instincts, what do you think hormones are? Humans are not special, we're animals too.

I also never compared people to animals in a zoo. That would imply we have control over said people. Instead, we have people from a foreign land who are here for free stuff (Aka wild animal coming up to you in national park).

I'm suggesting that maybe if we don't give them free stuff, they will go home and stop trying to get free stuff from us. Every time you give these people free stuff, it encourages them more. Every time you feed the bear in the woods, it encourages bears to accost people on the trail. Did not know this needed such an explanation.

234dd57d2c8db··on When Denmark criminalised kindness
Depends on what the definition of "need" is. I don't think a million migrants need to come over here and suck the welfare system and people of Europe dry, but a lot of people do. It's all relative.
234dd57d2c8db··on Tim Cook assures employees that Apple is committed to the Mac
The problem with your rant is that people have different opinions on what is "good". You would probably hate my setup because it's a tiling WM with nothing. No conky bar, no date/time in the bar, no power monitors, etc. But it works the best for me because I don't like any distractions at all.

Linux gives you the freedom to choose the environment that suits you personally best. Windows doesn't give you ANY choice, and it's still bad! If you like to be told what is good and make no optimizations for your personal workflow, more power to you. But don't go saying that Linux is "not the right answer", that's just silly. Works on my machine :)

234dd57d2c8db··on The Story of Apple's $14B Tax Bill
Problem is inflation statistics can (and often are) manipulated. Just look at how the government swaps things out of the "inflation basket" when the levels start getting too high. Food, rent, healthcare, college education, etc some of the fastest growing (also unavoidable costs) that are not taken into account for CPI.
234dd57d2c8db··on When Denmark criminalised kindness
You missed the largest point, it makes them dependent on the easy handouts and kills their instincts.
234dd57d2c8db··on Careers in security, ethical hacking and advice on where to get started
A lot of security boils down to bugs in software. If you don't have any programming skills, how do you expect to quickly and accurately find bugs in software? Sure you can go around banging on things and you might get lucky with the easy cases, but you will struggle to exploit and pivot out of the difficult cases.
234dd57d2c8db··on Getting Rid of Comments on Vice.com
If you want to put your head in the sand, more power to you. Might benefit you though to look at the whole picture and really try to observe what's happening though.
234dd57d2c8db··on So you want to expose Go on the Internet
You're missing the sysadmin angle of this entirely. Nginx has amazing tooling around load balancing, configuration mgmt, multiple languages, logging options, rewrite rules, rate limiting, file upload size tuning, HTTP tuning in general, the list goes on and on. What if your site needs to support multiple backends like a JVM app, a wsgi app, and an old crufty cgi app. You gonna write backends for all that shit too in Go?

Sorry but I'm not going to be writing ansible code that modifies structs inside of some program then compiles said program. No thank you that sounds like crazy town. Also other sysadmins and infrastructure engineers will actually know how things work and won't have to go reading the source code for some crazy Go app program at 2am that also is a webserver for some reason?

Separation of concerns, use it!!

234dd57d2c8db··on World Energy Hits a Turning Point: Solar That's Cheaper Than Wind
Maybe Trump is just actually good at negotiating like you'd expect a NY real-estate mogul to be. He might say dumb stuff but you have to admit, it isn't easy succeeding the Manhattan 5th ave. type real-estate.
234dd57d2c8db··on GitHub lost $66M in nine months of 2016
The way you phrased your question made it sound like you were snarkily implying that, yes. If that's not what you were doing, ignore my comment and move on.
234dd57d2c8db··on Fedora and Ubuntu 0-days show that hacking desktop Linux is now a thing
Neat. Some steps that I take on my desktop linux on machines like my work machine that mitigate this attack:

- always run your browser in a restricted firejail. this prevents browser exploits from reading your ssh keys. It also makes it much harder to pivot to a root shell or maintain a persistent backdoor because the filesystem is deleted upon jail exit.

- don't install multimedia applications on sensitive machines. My default install is ubuntu server with i3-wm,vim,git and other dev tools. No mplayer, no vlc, no multimedia. I listen to music on my phone if I want to jam out. The work computer is for work.

- use snapshotted VMs for interacting with sketchy files such as word docs, xlsx, mp3s, etc.

- default deny rules in iptables to block inbound connections

- static arp entry for the default route to prevent MITM on lan if possible. I do this on my work machine where the network is well known.

234dd57d2c8db··on GitHub lost $66M in nine months of 2016
Do YOU have any rigorous analysis that "inclusive" practices like insulting white people by saying "white middle managers can't have empathy" in internal company presentations increases profitability and success at a company?
234dd57d2c8db··on GitHub lost $66M in nine months of 2016
You know, I can't say I'm surprised. When github first started, it was just about code. Nothing else. Then they started with all the identity politics crap.

As soon as a company starts parroting political messages like "white middle managers have no empathy" instead of, you know, building good tools, I know it's time to find another solution. I was a paying customer, and when github got into the political game, I dropped them like a bad habit.

I'm not screwing around here, I'm trying to build a business and your political aspirations do _nothing_ for me as a customer, so why don't you take them and shove em. Happy customer at bitbucket ever since.

234dd57d2c8db··on Psychiatrists Must Face Possibility That Medications Hurt More Than They Help
Stimulants work because ADHD brains have whacked out dopamine regulation. Stimulants help smooth out the peaks and valleys associated with ADHD. Hyperfocus = overstimulated by dopamine, inattentiveness = understimulated. Taking a stimulate provides a consistent baseline level to help reduce the extremes.
234dd57d2c8db··on Schooling in adolescence raises IQ scores (2011) [pdf]
Sorry but I completely disagree. The D students I knew were dumb as rocks. I got As through my engineering degree with a few Bs in a few of the classes I was less interested in and I have to say, it's completely ridiculous to suggest the D students knew more than I did.

You could either solve the problems using techniques taught or you couldn't. Grades were a direct measurement of this ability. Maybe grades don't matter in Psychology or Sociology class, but I don't want to rely on an electrical system designed by the D students in my classes. It would probably kill me.

234dd57d2c8db··on Yahoo discloses hack of 1B accounts
Racist is the laziest argument ever and it's diluting the word. If people were more accurate about describing problems, their criticisms wouldn't be dismissed to easily.

A perfect example is Donald Trump. Every argument about Trump became "he's a racist!!11", which caused people to ignore and focus on the wrong problems with him! There was a lot of negatives to Trump, and yet everyone just said "Racist, boom I don't need to argue any more!"

People started ignoring completely legit arguments because the racist angle was so overplayed. I'm sick of hearing racist as the end-all be-all argument. It doesn't work anymore, the card is overplayed. The only place it still works is in liberal bubbles. (Note I'm socially liberal, fiscal conservative moderate, no dog in this race)

234dd57d2c8db··on Yahoo discloses hack of 1B accounts
... "offshore workers" are not a race. You realize offshore workers could be the same race as the person posting right?
234dd57d2c8db··on Arctic Is Warming At 'Astonishing' Rates, Researchers Say
I think you ought to keep an open mind and realize that skepticism is healthy, not "brainwashing" as you call it.

https://www.theguardian.com/environment/georgemonbiot/2010/f...

If you show evidence contrary to the "consensus", you get labeled as a practitioner of "voodoo science" by the IPCC, such as when Indian researchers reported that the IPCC study on Himalayan glaciers disappearing. Oops turns out the Indians were right after all.

Examining claims made by climate scientists is no different than examining claims made by physicists or chemists. I have seen examples of the "models" being manipulated or wildly inaccurate in climate science. There's a large monetary incentive to produce climate science research, and a large amount of the process (IPCC) is controlled by politicians and their appointees.

It's ripe for abuse and we need to stay vigilant, because every solution that's come out of these groups has been cap-and-trade and carbon taxes, both of which are total garbage solutions that just result in govt. taking more of our money. If we were really serious, we'd be funding the crap out of fusion power research. Fusion is the only way imo, the current renewable energy approach is too slow to advance, too inefficient, and too resource intensive. If we could get that working, we could power the planet on a bathtub of water and we wouldn't have to waste time and massive resources blanketing the planet in solar panels.

234dd57d2c8db··on An exploit kit hiding in the pixels of malicious ads
This is false, Angular expressions / sandbox are NOT security. They are not safer at all. Do not execute untrusted Angular expressions.
Page 1 of 3Next →