Hacker News Reader

RubyPinchon LastPass RCE vulnerability fixed

That is software emulation though, which is restricted by various things (can't type across users (so breaks on Run As, and elevated windows), if a window implements a custom control, it won't work with that either since that window likely reads from the keyboard in a weird or wonderful way, some windows also just avoid any windows messaging and read the keyboard directly)

Hardware faking of the keyboard would work fine though

RubyPinchon Show HN: Onion Packer – An open source Textures and Images organizer

This doesn't do texture packing, does it?

The name might be a slight bit confusing

RubyPinchon LastPass RCE vulnerability fixed

I've wanted to use such a thing, but the requirement to use a specific browser is always a massive bother

same with things like yubikey

It seems like it would be better to just fake a keyboard output instead? then you could have something that could work on all platforms in all situations

RubyPinchon Ask HN: Weird, curious or bizzarre subreddits that you would like to suggest

https://www.reddit.com/r/shittyfoodporn/ and the rest of the shitty network

https://www.reddit.com/r/PeopleFuckingDying/ for when you want to see kids or animals falling over (no gore or death!)

RubyPinchon Ask HN: Weird, curious or bizzarre subreddits that you would like to suggest

https://www.reddit.com/r/potatosalad/

https://www.reddit.com/r/JohnCena/

Are the two that you are probably thinking of

RubyPinchon What the CIA WikiLeaks Dump Tells Us: Encryption Works

How much of that Telegram info applies to anything in the last 2 years or so?

RubyPinchon Cloud Hosting Showdown: DO vs. Linode vs. Vultr vs. OVH vs. Scaleway

What is meant by local storage?

edit: oh I see now, that difference for scaleway should probably be placed as a footnote of the table

RubyPinchon Cirru – An editor for AST

That does feel a lot clearer

I guess my main thing is I don't know if I should trust my understanding of the tree display or not

Perhaps, as a sort-of training assistant, have the resulting "code" optionally appear beside the editor?

e.g. https://i.imgur.com/92stVmi.png

(I also noticed that you are looking for TCO for python, In some cases Coconut can do TCO, and can compile to python, but its somewhat of an unweildly tool to use

http://coconut.readthedocs.io/en/v1.2.2/DOCS.html#function-d... )

RubyPinchon Cirru – An editor for AST

I find myself wanting to edit the textual version of the AST itself, as the tree interface seems too cryptic

edit: I'm guessing its probably a bug that is confusing me the most, as I'm getting both a inline tree and a indented tree at the same time for a node

RubyPinchon Multihash – self-describing hashes

It still needs a table, but it doesn't need consensus on what those names mean.

If someone says "sha2", that doesn't mean bcrypt, after all!

RubyPinchon SHA1 collisions make Git vulnerable to attacks

To clarify, I mean to replace the hash with something that would collide far more often, to simulate collisions, to see how git handles them

RubyPinchon SHA1 collisions make Git vulnerable to attacks

Its possible to go in and replace the hash algorithm with something else, which none of these "git is going to ruin everything with not replacing SHA1 this instant!" people seem to bother with, to prove their points, instead of endless posturing.

http://stackoverflow.com/a/34599081 has actually gone about doing it, but it has been over a year since that, and as linus says, there has been multiple collision mitigations added as well, so tests should probably be re-done

RubyPinchon Perspective API – An API that makes it easier to host better conversations

> We are also open sourcing experiments, models, and research data to explore the strengths and weaknesses (e.g. potential unintended biases) of using machine learning as a tool for online discussion.

Does that mean that practically everything to be able to run it on a server without any google API is possible (once those things release)?

RubyPinchon Announcing the first SHA-1 collision

git does some other funky things, usually it just uses the pre-existing object, or crashing

http://stackoverflow.com/a/9392525

It might change, but the response could quite likely be a stubborn "I said no before, so I'll say no now"

- - -

This attack has been known since 2013, that is a really long disclosure time (the main thing today is proving that the attack isn't theoretical)

RubyPinchon Runner Disqualified After Claiming 2nd Place in Fort Lauderdale Half Marathon

http://www.marathoninvestigation.com/2016/05/the-differerenc... this article might find some relevancy for this thread

RubyPinchon Ask HN: What's your backup setup?

what happened to the backblaze backup?

RubyPinchon Carbon fibre makes Australian debut

I'm guessing its the author's embellishment to drive clicks

they didn't invent wifi, they invented modern wifi

from the horse's mouth, the lawyer representing the company in the relevant case: "CSIRO did not invent the concept of wireless LAN, it just invented the best way of doing it, the best way it's used now throughout the world,"

In addition, it does seem they had a strong desire to make use of their patent, approaching potential partners, and creating spun-off companies, centered around making use of the technology

RubyPinchon Do we need a new heading element in HTML?

Maybe its best use would be a pre-processor feature? Best of both worlds, controllable auto-calculation, plus backwards compatibility

RubyPinchon $5 Showdown: Linode vs. DigitalOcean vs. Amazon Lightsail vs. Vultr

month is usually considered the maximum limit per period

while all of their per-hour rates can go above 5bux a month, you won't be charged more than 5 for the month period

RubyPinchon Build a serverless app with a serverless database

That's fine, just read:

    A serverless system must scale dynamically per request.
    FaunaDB is a globally distributed database that requires
    no provisioning — you only pay for what you use.

Well... I guess it does show that the entire article is just an advert? So maybe useful in that way!

RubyPinchon Build a serverless app with a serverless database

> "Here's something coming up that I think is interesting. If you are interested, you should keep reading."

But nearly no one ever uses it to refer to what is coming up, its almost always what has just happened 1 sentence ago.

> A lot of people have trouble with long runs of samey text.

nothing is more samey than repeating the same sentence!

pull quotes like how this article has,punishes the user for reading the article word for word. There are other methods that have the pull quotes outside of the flow!

And if it is a really important sentence, then throw some slight yellow background on the text or something, like a highlighter!

RubyPinchon Build a serverless app with a serverless database

I really wonder what possesses people to use pullquotes

    WHAT POSSESSES PEOPLE
    TO   USE   PULLQUOTES

Its like they don't trust you to read a couple of sentences or something

RubyPinchon I am going to eradicate the inbound Windows Support scam

from what I've read, it is meant to wait for a pause (It uses Asterisk, which in turn has some basic detection for pauses and the such, which the script uses)

RubyPinchon Ask HN: Do you avoid Medium.com links?

I don't avoid it, but it does make me want to click less

I also avoid any groups that for some reason just keep popping up over and over and over (hackernoon for example). I like content aggregates because of content coming from different sources, not the same old ones!

RubyPinchon Save Mozilla Firefox's Best Feature

I will note that that page does mention the relevant mailing lists, and I do know that the Vimperator devs also know of the relevant bugs/mailing lists (since that is where I found them)

RubyPinchon Save Mozilla Firefox's Best Feature

* Open a dialogue with the Mozilla / Firefox community to ascertain what features Firefox users rely on that are currently only available via XUL Add-Ons but not possible under the WebExtension paradigm, and

* Work with the community to develop a path forward that allows Firefox to achieve its technology goals while preventing the loss of key functionality that millions of Firefox users depend on.

Haven't they already been doing that?

https://bugzilla.mozilla.org/show_bug.cgi?id=1215059 https://webextensions.uservoice.com/forums/315663-webextensi...

RubyPinchon Million requests per second with Python

I would imagine that nginx would probably do a better job of dealing with web serving (pipelineless and otherwise) than python would, mostly due to age

And if the nginx process somehow ends up using more CPU than the python process, then using multiple nginx servers would be fairly easy, compared to multiple application servers

RubyPinchon Black market Blackphones get sent a kill message that bricks them

WhatsApp got that hassle because it failed open and didn't clearly inform the user that it was doing so.

If the user is informed they have a non genuine device that is not safe or secure (e.g. like Windows' nag notification), then they can't expect it to work like a secure device, but more like an ordinary phone.

Then both normal consumers (who will continue to use the phone since they didn't really care too much in the first place about safety) and security conscious consumers (who will re-buy asap) would be more inclined to use the same brand in the future

RubyPinchon Black market Blackphones get sent a kill message that bricks them

So, protect the profit first, protect the customers second?

I don't exactly see how it bumps up the profit though. You have a bunch of obviously interested customers, who want your product, and then the company has come out with "Actually, we expect you to buy the phone twice, because of a mistake that may or may not of been your fault"

RubyPinchon Black market Blackphones get sent a kill message that bricks them

But how does that lead to the logic of turning the hardware into a piece of trash, instead of just informing the user?