HNHacker News
TopNewBestAskShowJobs

45h34jh53k4j

555 karma · joined November 23, 2015

submissionscomments
45h34jh53k4j··on Someone is massively registering multiple *.eth domains
Yeah; I mean if the key does not exist, as in the registration party deletes the key after it has been created.

Of course the state can torture a person until they hand over the key -- if it exists.

45h34jh53k4j··on Someone is massively registering multiple *.eth domains
I agree, there will be both central and decentralized namespaces; I do love the idea of decentralized, but I am realistic about the limitations. CocaCola can ether buy the keys (or have a court requisition them from something.. ) Now, this relies on the keys that registered this domain still existing!

No court in the world can force a deleted key to be transferred to CocaCola. Likewise any cryptocurrency cannot be forceably stolen by the threat of state violence -- the math does not permit it.

So either, cocacola has to have cocacola1.eth (lol), or they have to institute a court ordered hard fork to recover the keys.

Both seem undesirable!

45h34jh53k4j··on Someone is massively registering multiple *.eth domains
this is the 'cocacola' problem. No strong name system can work in the real world if cocacola has no legal right to their name. Sue a smart contract, lol!

Considering cryptocurrencies supposedly 'square' zooko's triangle, a fraud namespace like this eth registration can not survive the real world.

45h34jh53k4j··on A Rare-Book Thief Who Looted College Libraries in the ’80s
Nah, once you are stealing books from a public university you have crossed the ethical line. I think crimes against libraries rate up there as some of the worst social or even war crimes, similar to the destruction of ancient historical landmarks.

It is good this person can not anymore deprive future generations of readers books and the knowledge they contain.

45h34jh53k4j··on Master Card, Cisco, and Scotiabank Join the Enterprise Ethereum Alliance
If you are into the EEA, you should check it out its cousin, the Monero Enterprise Alliance: https://mea.business/
45h34jh53k4j··on Photos: Life inside of China’s massive and remote Bitcoin mines
check out bitshares, steemit and eventually EOS. Their DPoS model uses exactly that -- users vote on the witnesses that will produce blocks. Every witness gets a shot at producing the next block. If the witness fails to produce a block, they will be voted out by the users.

Scales to 100k tx/sec, supposedly.

45h34jh53k4j··on The Facebook Algorithm Mom Problem
Im sorry dang. its become a bit of a dirty habit to throw shade on FB whenever it comes up. I hate it with a passion.

My goal is to get as many people to question their usage of FB and if it really enhances their lives.

Ill try to be more constructive with my comments.

45h34jh53k4j··on I made my own VPN server in 15 minutes
you are very wrong about this; dan is most certainly an infosec expert and I take his recommendation not to use openvpn seriously.

Seems he was correct: https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quark...

45h34jh53k4j··on The Facebook Algorithm Mom Problem
Facebook is disgusting.

* Delete your account * Convince your mother to delete her account

45h34jh53k4j··on Show HN All US doctors ordered by their opioid prescription count
Doctors who specialise in pain management or painful surgery regularly prescribe a large number of pain killers, news at 11!
45h34jh53k4j··on Unikernels are secure
lets not go too far! tests can provide a security advantage over regressions or bugs introduced in the future. They are necessary but not sufficient to prove a particular security level.
45h34jh53k4j··on Ask HN: What other career choices can one do with CS degree?
I realise that infosec is a component of CS, but it is different enough to day-to-day programming that you might find it interesting. Have you considered application security or related fields?

If you have years of development experience helping younger developers learn how to write secure code is a worthwhile endeavour.

Frustrations, I dont think you can detach that from CS!

45h34jh53k4j··on Ancient Iraqi Artifacts Imported By Hobby Lobby to be Forfeited
Buy priceless artefacts from warzones and funding terror groups who steal them!

Hey Hobby Lobby, you should also build a conflict diamond collection. If you want to take a chance you could also get into human trafficking or organ smuggling.

45h34jh53k4j··on Why traditional password managers are flawed
I strongly recommend that we stop inventing new implementations of a very flawed concept. Derived passwords from a seed is practically and operationally worse than a encrypted password database.

This keeps popping up lately, and every suggested implementation has objectively worse security, scalability and integrity than 1Password, KeePass, Dashlane or Lastpass.

Some simple problems that means this cannot work for me:

* Many password context's dont have a 'site' to derive from, now need to remember the IV for some random non-internet password (my luggage combo lock PIN, was the seed 'luggage' or 'travel bag' or 'samsonite'?)

* Might need multiple passwords per site; Multi users (need to remember all these shuffle codes)

* passwords are compromised all the time, now I have to remember the nonce/shuffle value for every one that gets leaked? (how do track this?)

* Storing non password data, like 'secret questions' or 'PINs' (not a generic secret store)

These same issues come up with every seed derived password scheme.

The only place this concept works is a very specific and metadata less context, such as HD derived cryptographic keys.

45h34jh53k4j··on What are truly anonymous cryptocurrencies? Dash, monero zcash Bitcoin ethereum?
Sure, if your on the train. What do we tell those that are yet to purchase coin, and wish to anonymously?

Coinbase now requires 'selfies'!

45h34jh53k4j··on My Failed Attempt at Engineering Love
Also -- here is a good moral thermometer:

"PS: I will not open-source the code since it could be used to hurt people, but I might share it if you ask nicely."

If you write code for fun (not commercially owned IP), and you are not willing to share it because 'it could hurt people', you might want to re-evaluate if you should write it in the first place.

45h34jh53k4j··on My Failed Attempt at Engineering Love
I find this creepy and weird. How could you possibly tell the love of your life (if and when you found that person) that they were nothing more than a toy in your little data harvesting exercise.
45h34jh53k4j··on Hacks Raise Fear Over N.S.A.’s Hold on Cyberweapons
With the initial vector being some widely used Ukranian tax software, and the network vector as psexec/wmic mimikatz harvested credentials, the actual usage of 'NSA cyberweapons' was just a backup.

I suspect this attack would have had a similar number of victims without EtBl/DoPu and EtRo.

The existence of 'nation state' offensive tools has little baring on exploitability for poorly configured enterprise network, when most victims were exploited by open source offensive tools, even when patched.

45h34jh53k4j··on Facebook Hits 2 Billion Users
Lets watch as this goes down to 0.

DELETE YOUR FACEBOOK ACCOUNT TODAY

45h34jh53k4j··on [dead]
I suspect this will make a million dollars. If you feel generous, please send BTC here: 19sAWNDzNWP2HNdhezndSen7HycR8aXxV4
45h34jh53k4j··on Ask HN: Do you use creatine as a brain supplement?
Give it a try! Do stack it with Alpha GPC, you will need a cholinergic compound with the racetam family or else you will get headaches.
45h34jh53k4j··on Ask HN: Do you use creatine as a brain supplement?
My current nootropic stack is:

* Pramiracetam 500mg * Alpha GPC 50% 600mg * Noopept 10mg * Agmatine Sulfate 500mg

I am convinced that these chemicals work, improve mental ability, memory/recall and focus. Ive found myself able to handle more task simultaneously, even able to understand to multiple conflicting conversations.

If you can handle the awful taste of Pramiracetam (its bad... probably the worst thing ive ever tasted) you may find quite the boost in awareness. Some may find it too intense. In general nootropics are non-addictive, especially with the awful taste of Pram, you might need to force yourself to take them...

45h34jh53k4j··on A California Dream
The three biggest silicon valley firms should buy up all the land, buy new campuses and house for all the workers.

Would reduce strain on bay area and its only a few hours south so good connectivity.

45h34jh53k4j··on AI Hedge Fund Goes Live on Ethereum
I think turning your back on BTC is the worst mistake you could make. Enjoy your ride down with ETH, as it struggles under the weight of (scam) ICOs.
45h34jh53k4j··on SQLite small blob storage: 35% Faster Than the Filesystem
Except when they are not. Just because malcode is encapsulated doesn't mean it is neutralised. The issue is untrusted data, not how it is stored.

Word Docs with embedded content or can trigger code execution on parsing, data structures that break AV parsers, image or font data that causes system libraries to overflow/UAF/etc; There all could potentially be a security issue in a DB, the same as in a FS.

45h34jh53k4j··on E-cigarettes ‘Potentially as Harmful as Tobacco Cigarettes’
Thank goodness we have CRISPR to fix our DNA corruption problems. Keep vaping, crew!
45h34jh53k4j··on Show HN: A password manager using Keybase for encryption and storage
Great idea! i will follow the evolution of this product
45h34jh53k4j··on A peek under Bitcoin’s hood: Writing a client that can create a transaction
or you reuse the nonce in ECDSA.

This burned sony, and burned people that had faulty wallet code that submitted transactions with the duplicate nonces.

If you only published, and signed a transaction once, you would be immune to fail by ECDSA nonce reuse.

Its good to rotate the publickey/address per transaction in bitcoin

45h34jh53k4j··on Google Contributor: Buy an ad removal pass for the web
Thanks Google, but im going to stick with ublock/umatrix and get ad removal for free
45h34jh53k4j··on Google Will Help Publishers Prepare for a Chrome Ad Blocker Coming Next Year
Companies that sell both the poison and antidote are not remembered fondly in history.
← PreviousPage 6 of 10Next →