HNHacker News
TopNewBestAskShowJobs

CapacitorSet

1,489 karma · joined July 27, 2016

[ my public key: https://keybase.io/capacitorset; my proof: https://keybase.io/capacitorset/sigs/3XQYiFYsETBVes6mFixMECaVoMYCJBjVFgwf6JikpeY ]
submissionscomments
CapacitorSet··on Dropbear SSH, a lightweight alternative to OpenSSH
If you only need a shell, adb does that, as well as blazing fast file transfer (for the standards of MTP).
CapacitorSet··on Instructions from Facebook not to touch the posts of the cabinet minister
They're imposing Facebook's moral indeed: racism is bad, but not if it's from a famous person that makes your social network relevant.
CapacitorSet··on Giant shipload of soybeans drifts off China, victim of trade war with US
The logistical inefficiencies of dealing with tariffs are arguably a minor component when evaluating free trade, since they account for a small fraction of the total value of goods.
CapacitorSet··on Practical homomorphic encryption over integers (2017)
One of the side projects I have is [FHE-CPU](https://github.com/CapacitorSet/FHE-CPU), an effort to make general-purpose homomorphic computation possible with a Moxie-like CPU, but it's a daunting effort to even get the basics working.
CapacitorSet··on Shedding Too Much Light on a Microcontroller's Firmware Protection (2017)
Eh, it still requires to de-encapsulate the controller, make a mask and expose the controller to UV light, it's not a super easy process.
CapacitorSet··on Employers will do almost anything to find workers except pay them more
That's a really weak commitment, considering that they had 2 years to comply with GDPR.
CapacitorSet··on Amazon Lumberyard: A Scream of Anguish
To add on this, clang-tidy is a tool specifically for static code analysis. I don't know if it implements all the checks mentioned in the article, but it is quite powerful, being able to detect eg. array overruns through several layers of function calls and ifs.
CapacitorSet··on The Architecture of Mailinator (2007)
I must say I'm surprised a Java application could handle 2.5M emails/day (29/second) in less than 1 GB of RAM.
CapacitorSet··on IRC.com Bought by London Trust Media, Pledges an IRC Revival
Isn't IRC compatible with e2e? I could see it working at a "transport" layer, with additional commands to import, export and view keys.
CapacitorSet··on Reverse Shell from an OpenVPN Configuration File
That's a good example of why permissions should be opt-in, not opt-out.

I recently developed an ElasticSearch plugin and I was positively surprised at the security model: plugins have to declare the permissions they intend to use and the user has to explicitly grant them when installing the plugin.

CapacitorSet··on Blooming Password – A banned password check using a bloom filter
Is it really a problem, though? Having a high false-positive-to-real-positive ratio isn't as bad for this application, since a user can just pick a slightly different password, with no significant negative outcome.
CapacitorSet··on Enforcing TLS protocol invariants by rolling versions every six weeks
>They could use Javascript to query a test server, which responds with the correct headers.

As far as I know, Javascript doesn't have low-level access to connections, not enough to run even a stub TLS 1.3 implementation.

CapacitorSet··on Avoid FIFA World Cup CDN Issues
The P2P approach is interesting. Do you have data on how much bandwidth is saved at peak usage?

It might be especially interesting when many users share the same connection, effectively achieving broadcasting - the CDN pushes the data to one client, and it broadcasts it to the local network.

CapacitorSet··on Show HN: HTTP Status as a Service
Since it's a static website, with a little effort you can have it cost virtually nothing (less than the domain, probably). S3 and Route53 can go a long way.
CapacitorSet··on Observations running 2M headless sessions
I'm amazed that one must go as far as creating different containers - duplicating the browser, dependencies and whatnot - to achieve tab isolation and browser resiliency in Chrome, when Firefox does this with as little as container tabs.
CapacitorSet··on How to Android without Google
I agree with the general feeling, but for the DNS issue specifically you can use iptables' DNAT if you're root. It is unlikely that Google went as far as bypassing iptables just to use their DNS.

Example usage:

    iptables -t nat -A OUTPUT -p tcp --dport 53 -j DNAT --to-destination 1.2.3.4
    iptables -t nat -A OUTPUT -p udp --dport 53 -j DNAT --to-destination 1.2.3.4
CapacitorSet··on China has turned Xinjiang into a police state like no other
The fact that this is done under the guise of antiterrorism ought to ring some bells to American readers.
CapacitorSet··on America has a truck driver shortage
I hope that the "shortage" of drivers will lead companies to prefer shipping by rail, which is much less polluting, easier on the workers, and more efficient.
CapacitorSet··on Mozilla to remove “meritocracy” from governance docs because it's “problematic”
I think the concept is "a purely-meritocratic system cannot be achieved without equal opportunity". This is because one's contribution to governance is proportional to their merit and to their opportunity to express this merit.

For a concrete example, a programmer in Seattle has much higher opportunities than the same programmer in rural Burundi, so he can put the same effort into much more work, and ultimately be much more relevant in supposedly meritocratic governance.

However, the original post is not concerned with opportunity due to geographic location or access to technology, but rather to a bias where code submitted by programmers with a feminine username and profile picture is approved less often than average. Note that the linked study does not refer to Mozilla explicitly, though.

CapacitorSet··on Mozilla to remove “meritocracy” from governance docs because it's “problematic”
>The first line of Mozilla’s governance[0] states, “Mozilla is an open source project governed as a meritocracy.”

>The use of the term “meritocracy” to describe communities that suffer from a lack of diverse representation is increasingly seen as problematic: it proceeds from an assumption of equality of opportunity.

Is there evidence that the assumption of equal opportunities does not hold for Mozilla? It seems to me that they went to great lengths to ensure equality of opportunities.

CapacitorSet··on FBI tells router users to reboot now to kill malware infecting 500k devices
As far as I know, they typically won't do this to avoid responsibility for bricking safety- and mission-critical routers.
CapacitorSet··on GDPR: Programmatic ad buying plummets in Europe
Which highlights the need for a neutral product-discovery tool.

Advertising makes most popular the products with a higher marketing budget, not necessarily the better ones. For example, search for "youtube downloader": at least the first ten results link to shady websites and apps which offer a crappy wrapper around youtube-dl, which is the ultimate youtube downloader but unknown by non-programmers. Even among wrappers, the clean versions are not as popular as the advertised and SEO'd crap.

CapacitorSet··on GDPR for lazy people: Block all European users with Cloudflare Workers
It's not being used as a fallacy, since it's not part of an argument that proves a point.
CapacitorSet··on Zuckerberg didn’t make any friends in Europe today
Is Facebook monopoly any worse than having multiple actors in the data collection field? If anything, having more competitors would push each to be more cunning in their collection and retention of data, to appear more valuable to stakeholders.

One evil is better than two.

CapacitorSet··on Barcelona is leading the fightback against smart city surveillance
Indeed, with "fightback" I assumed either the citizens were destroying surveillance equipment or the city prevented surveillance equipment from being installed.

Turns out it's just the government getting its piece of the cake.

CapacitorSet··on Japan's secret spy agency
>Do you think the Japanese government just want an excuse to spy on their people?

I'm not OP, but I would be very surprised if the attack was the root cause for strengthening their spy agencies. In the United States we have seen time and again that laws for a stricter surveillance are passed with the pretext of anti-terrorism or anti-child pornography; Japan could very well be using such a case to justify their surveillance needs.

CapacitorSet··on Proxy, a new JavaScript ES6 feature
I agree it doesn't seem super useful, but it can be used to pull some semantic tricks. I used it in [Rebridge](https://github.com/CapacitorSet/rebridge/) to implement syntactic sugar for database access, so that accessing a property on an object translates transparently to a query, and I've seen it used to [allow for typos in property names](https://github.com/mathiasbynens/tpyo).
CapacitorSet··on GDPR: Removing Monal from the EU
You could build and drive a car you built yourself with no regards for your personal safety - it's your car after all, and it's your business if you get injured. But could you sell such a car?

You could build and use a service with no regards for your personal privacy - it's your service after all, and it's your business if your data gets leaked. But could you offer such a service?

CapacitorSet··on Browser extension that strips Google Analytics tokens from URL query strings
A Mozilla extension that covers utm_ and more: https://github.com/idlewan/link_cleaner
CapacitorSet··on HTTP headers we don't want
Realistically, how much traffic is saved by cutting headers? A simple article like [this](https://tp69.wordpress.com/2018/04/17/completely-silent-comp...) (currently on the HN frontpage) weighs 178 KB, and that's without external resources. Unused headers account at best for 0,1% of the total traffic.
← PreviousPage 3 of 9Next →