HNHacker News
TopNewBestAskShowJobs

Confiks

2,429 karma · joined December 1, 2014

confiks@scriptbase.org
submissionscomments
Confiks··on Chinese may take over Mombasa port: Ouko
> Speaking furthermore, I do find it highly concerning just how much of an echo chamber this place is in regards to this notion of "Chinese colonialism" and Chinese "debt - traps". Most African countries still owe far more to the IMF/World Bank than they due to China.

I don't think that the amount of debt and the amount of countries in debt is a correct measure of influence that the IMF/WB or China has in the region. The IMF offers highly concessional loans in relatively moderate amounts with many strings attached. These 'neo-liberal' strings [1], which include mandatory monetary reforms and privatization could indeed be considered 'colonial', and their effectiveness can be doubted (or even seen as destructive), but they do seem to have a semblance of responsible debt management in their intentions (but perhaps not in their outcome).

China on the other hand, itself being on the brink of a major debt crisis, is handing out seemingly no-strings-attached YOLO-money, especially to debt-vulnerable countries that previously had large parts of their IMF/WB debts forgiven [2]. In some cases, especially in infrastructure projects, China requires the hiring of Chinese labor and further redirects money because there is a huge technology gap between local and Chinese companies.

These are no concessional loans, and China must know that (some of) these countries are inevitably going to default with major losses of land, infrastructure and natural resources as a consequence, to China's gain. It perhaps is too early to tell, but these measures seem far more 'colonial' to me in intent than the loan programs of the IMF/WB in the last 50 years.

[1] https://en.wikipedia.org/wiki/Structural_adjustment

[2] https://www.cgdev.org/blog/yes-chinas-lending-problem-debt-v...

Confiks··on AT&T will put a fake 5G logo on its 4G LTE phones
You fail to make a coherent point, because you try to differentiate a set (in)permissible actions only by assigning them different names (lying vs. marketing) without defining them or relating them to examples (of others). As you clearly don't agree with the definitions of other commenters, please construct that system of knowledge yourself, so others can even meaningfully reply.
Confiks··on Let Google do the patching with new managed base images
I came across a tool that will generate a bit-for-bit identical Debian container [1], using Debian package snapshots.

[1] https://github.com/debuerreotype/debuerreotype

Confiks··on [dead]
There is no coherent point being made in the article, which is instead filled with vacuous weasel words like "many on Twitter [called out Dorsey for being tone deaf]". It's sad to see this popping up in the NY Times. You could take that as a hint to scrutinize every article on this page a little more: https://www.nytimes.com/by/mike-ives
Confiks··on Keystone – Open-source Secure Hardware Enclave
> there's not much there

What's missing?

More:

Workshop on Building Open Source Secure Enclave, with little information about what was presented [1]. The Google slides are superficially interesting: https://keystone-enclave.org/workshop-website-2018/slides/Sc...

Documentation: http://docs.keystone-enclave.org/en/latest/Getting-Started/i...

Mailing list: https://groups.google.com/forum/#!forum/keystone-enclave

[1] https://keystone-enclave.org/workshop-website-2018/

Confiks··on Ketamine might help prevent suicide
Great television programme, in Dutch, about using ketamine in the treatment of depression (and additionally, about using GHB in the treatment of narcolepsy): https://www.npostart.nl/dokters-van-morgen/30-10-2018/AT_210...
Confiks··on Progress in performance and scalability with CockroachDB
I was wondering, quite unrelated to the article, if anyone knows if CockroachDB would be suited for small databases (and comparably modest computing/memory resources). I very much like its distributed properties, but only have a simple table of usernames and corresponding cryptographic material. Is CRDB easy to run and manage?
Confiks··on Dive – A tool for exploring each layer in a Docker image
> its like saying sftp is delta transfer because you don't have to send your entire disk image every time

I see your point, but the comparison to sftp seems really off. Overlay2 [1] indeed works on whole file differences, just as sftp would do.

Additionally, I don't think making actual byte-level deltas would yield you much improvement on container size. It would also increase access time unless you keep a cache that doubles storage requirements per image. Dockerfiles primarily add files rather than change them, and actual changed files are often small.

[1] https://docs.docker.com/storage/storagedriver/overlayfs-driv...

Confiks··on Vladimir Lukyanov's hydraulic computer
Video about the MONIAC here: https://www.youtube.com/watch?v=rVOhYROKeu4
Confiks··on How a Tech Billionaire Created Two Fortunes and a Software Sweatshop
Everyone may decide for themselves what 'the point' is, but I explicitly responded to the quote I included in my post.
Confiks··on How a Tech Billionaire Created Two Fortunes and a Software Sweatshop
> it presents me with an obviously fake "processing request" screen

You may argue about the (efficiency of the) implementation, but that processing screen isn't a fake; it sends out a large amount of HTTP requests to URLs like "cookie-policy?optout=1" and "optout" for various tracking parties. Those requests take exactly the amount of time the progress bar is indicating.

Don't lightheartedly call somebody or some party a liar before being sure of your case.

Confiks··on China blacklists millions from booking flights as 'social credit' introduced
A lot of people in here reference Black Mirror, but it also made me think of ST:VOYs Critical Care [1] (which has plot holes you can just as well drive through).

[1] http://memory-alpha.wikia.com/wiki/Critical_Care_(episode)

Confiks··on ECCploit is the first Rowhammer attack to defeat error-correcting code
Yes, indeed. Thanks for correcting that.
Confiks··on ECCploit is the first Rowhammer attack to defeat error-correcting code
On the subject of RAM encryption, there's even an kernel modification that (ab)uses the x86 debug registers to store are AES key and transparently encrypts / decrypts RAM; Tresor.

> That [encrypted memory] in itself isn't sufficient to guard against all attacks

You might want to read about authenticated encryption [2]. The authenticity of the decrypted data often lies in the block cipher mode (for example OBS) rather than the block primitive, where Tresor uses the AES-NI instruction. I would imagine SGX does something along the same lines.

[1] https://www.usenix.org/legacy/event/sec11/tech/full_papers/M...

[2] https://en.wikipedia.org/wiki/Authenticated_encryption

Confiks··on JAB Code – A high-capacity 2D color bar code
To copy a comment from a Github issue [1], comparing the different implementations:

- CRONTO, PM-Code and HCCB and AuthPaper are proprietary. CRONTO has attracted some usage mainly by banks, PM-Code looks like vaporware, AuthPaper seems inactive and HCCB is dead [2].

- CobraKing seems to be a 2012 research project, unmaintained

- HCC2D seems to be mainly academic exploration

Papers and results similar to HCC2D pop up periodically (i.e. [3]), but unfortunately nobody has released any (experimental) source code. It quite frustrating. For example, AuthPaper implemented their solution on top of ZXing, but they never contributed back. They apparently thought they could make some money out of it, but now that their venture is inactive, their ZXing modification is in limbo as well.

From my one-hour research, that makes JAB Code the only actually FOSS implementation of a high capacity 'barcode'. If you know of other (FOSS) implementations, please let me know.

I'm quite surprised JAB Code has existed for so long in a fairly production-ready state without attracting much attention. It deserves much more, looking at the rest of the field.

[1] https://github.com/jabcode/jabcode/issues/2

[2] https://en.wikipedia.org/wiki/High_Capacity_Color_Barcode#Di...

[3] https://pdfs.semanticscholar.org/95c7/fe455a084b0f0ce9923e99...

Confiks··on SIM Card Forces All of Your Mobile Data Through Tor
This must be one of the greatest examples of the Dunning-Kruger effect [1] in action that I've seen on HN in recent times. Pretty much everything in your analysis is misinformed, and you even explicitly mention in an aside that you are "not too familiar with Tor", but still state everything with an almost absolute certainty.

You could have made the argument that allowing a single bridge makes it a bit easier to do traffic analysis attacks against users (instead of having to do DPI), but the ISP interception model is pretty much what Tor tries to protect you against, as long as that ISP isn't also (aided by) a global passive adversary.

[1] https://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect

Confiks··on Medium is a poor choice for blogging
I think the main avenue for exploration in Medium are the article recommendations at the bottom of the page, above the comments.

I personally rarely click on them, but I can imagine some titles can be hard to resist. That make interaction-driven recommendations, which are becoming the dominant way of content exploration, a bit of a dark pattern.

Perhaps we're only an inch away from 'article autoplay'.

Confiks··on The Art Institute of Chicago Has Put 50k High-Res Images Online
Indeed, but for that specific case of the Van Gogh Museum in The Netherlands, the same principle from Bridgeman Art Library v. Corel Corp. was reached in the Van Dale/Romme arrest [1] and has been upheld in other cases.

[1] https://nl.wikipedia.org/wiki/Arrest_Van_Dale/Romme

Confiks··on The Art Institute of Chicago Has Put 50k High-Res Images Online
I'm glad they state on their website that the images are in the public domain.

In a similar thread on HN some time ago, I was very surprised to learn some museums (and commenters) think that they own the copyright to high-resolution digital reproductions of their (pre-1923) collection: https://news.ycombinator.com/item?id=17500312

Confiks··on HTTP-over-QUIC will officially become HTTP/3
It is addressed above:

> This effect didn't happen with in the TCP world, since most applications don't run with enough privileges to speak TCP without the kernel's involvement.

The argument is that while kernel developers wouldn't start this supposed "arms race", but application developers would.

I think we would have seen this already with things like (m)uTP if it was an issue.

Confiks··on HTTP-over-QUIC will officially become HTTP/3
You are forgetting to explain why the technology is preferable, apart from expressing that the technology is well-supported.

I know little about SCPT. Why is it preferable?

Confiks··on Limiting Social Media Decreases Loneliness and Depression
> My next step is to make a personal website with some contact details and a scraper script for the links in the HN top 30-40 that I can run as a cronjob.

About a year ago I was 30 minutes into creating exactly such a script, and then I found https://hckrnews.com, which lists all the posts that reach the frontpage (or are top 10/20/50%).

Confiks··on Android Security Auditing: Investigating Unauthorized Screenshots
Preventing screenshots and showing up in the active apps list is an option within the Signal preferences. So Signal provides a precautious default, but allows you to turn it off.
Confiks··on Reddit AMA on Photopea, a free alternative to Photoshop used by 1.5M people
As for a fully open-source Photoshop alternative, Krita [1] goes a long way. It does however have some major UX problems in minor areas. For example, yesterday I tried updating the font size of an existing text layer, and just couldn't get a proper selection on the text.

They had a funding crisis last year [2], but currently seem to be doing well with two paid developers. They could really use your (one-time) donation however [3].

[1] https://krita.org/en/

[2] https://krita.org/en/item/krita-foundation-in-trouble/

[3] https://krita.org/en/support-us/donations/

Confiks··on Researchers have busted the encryption in several Crucial and Samsung SSDs
Previous discussion: https://news.ycombinator.com/item?id=18382975
Confiks··on Show HN: Vitriol – a distributed, serverless web publishing platform
Are you sure the introductory post is a valid link?

This is what I get using go-ipfs:

    > ipfs object get QmccRaHCrUKZwZpjdJFiTTdgp8FG3ALFDZQexaYgit3NCF
    > {"Links":[],"Data":"{\"name\":\"user\",\"type\":\"eventlog\",\"accessController\":\"/ipfs/QmSucCCcNw9CUJS4MmSW86kjZwfTNExyVnMzh4eBT6Jku9\"}"}
Confiks··on Show HN: Vitriol – a distributed, serverless web publishing platform
Unfortunately, your intro article (and a user created post) doesn't seem to be loading properly. It makes a lot of connections to bootstrapping servers at libp2p.io (and specifically exchanges 10+ kbps with ws-star.discovery.libp2p.io for the entirety of the session), but the post never loads.

This is on Firefox 63 and Chrome 68 on poor cafe wifi (that nevertheless seems to be able to load every other website).

Confiks··on Google Chrome’s Users Take a Back Seat to Its Bottom Line
Your comment is too short, information-free and only implicitly makes a point; it doesn't argue why this title would be sensationalized by the EFF.

The article proposes that while "recently, developers of major browsers have started building tracking protections into their own products (...) Google Chrome, the largest browser in the world, has no built-in tracker blocker, nor has the company indicated any plans to build one.

"Alphabet has a vested interest in helping track people and serve them ads, even when that puts the company at odds with its users. And that may explain why Chrome lacks real tracking protections."

These two main points, regardless of whether you agree with them, are reflected in the title.

Confiks··on Technology preview: Sealed sender for Signal
Can the URL be changed to the Signal blog post at https://signal.org/blog/sealed-sender?
Confiks··on In a new study, those who ate more organic food had fewer cancer diagnoses
Your reply is unnecessarily combative and short. Assume good faith in grandparent's reply, and preferably try to find out yourself and report back your findings.

Meanwhile, have a bit to read on the ethics of placebo-controlled clinical trials (which is what is meant with "double blind" study here): https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3844122

← PreviousPage 7 of 14Next →