HNHacker News
TopNewBestAskShowJobs

TimPrice

0 karma · joined February 26, 2016

submissionscomments
TimPrice··on NAXSI – Open-Source, High Performance, Low Rules Maintenance WAF for Nginx
Since this doesn't go well with HTTP/2 so far, we'll have to stick with ModSec for the time being.

> https://github.com/nbs-system/naxsi/issues/227

TimPrice··on The Drug of Choice for the Age of Kale
Cognitive distortion may manifest in many ways, like bad trips.
TimPrice··on How to steal a developer's local database
Selinux (semanage port) and iptables (SECMARK?) might help you there.
TimPrice··on MongoDB queries don’t always return all matching documents
Yes, as I said, all this is NOT unexpected from them.
TimPrice··on MongoDB queries don’t always return all matching documents
The article is interesting, but title is fud. Besides, all this is not unexpected:

> How does MongoDB ensure consistency?

> Applications can optionally read from secondary replicas, where data is eventually consistent by default. Reads from secondaries can be useful in scenarios where it is acceptable for data to be slightly out of date, such as some reporting applications.

https://www.mongodb.com/faq

TimPrice··on 8x Nvidia GTX 1080 Hashcat Benchmarks
(not only) Extremely common of any kind of organization where there have been computers for more than 3 decades.
TimPrice··on Thai government to MITM all internet communications
I somehow feel this is good for any of those countries in between the western capital based democracies and the extreme of North Korea: it will backfire sooner or later, but without any of this silly measures trigging public awareness, people would keep believing in their leaders and brainwashed culture.

Maybe it is what it takes to move forward from a dictatorship to a (fake) democracy these days.

TimPrice··on SELinux is beyond saving
If he calls himself a security aware sysadmin but he is somehow breaking his own beliefs for productivity/delivery reasons, I don't see much of an interest.

Let him rant all he wants on his blog. Back to work.

TimPrice··on The Golden Age of X86 Gaming
> You're committing to throwing so much money

Only if you make bad choices buying hardware, like the obsolete stuff that comes with consoles (even on release)

> console plays better most of the time

PCMasterRace plays real 1080@60 for over a decade

Enjoy your PS4K/Neo/neXt

TimPrice··on Intel's Changing Future: Smartphone SoCs Broxton and SoFIA Officially Cancelled
They are focusing on 5G

> 5G will become the key technology for access to the cloud and as we move toward an always-connected world.

https://newsroom.intel.com/editorials/brian-krzanich-our-str...

TimPrice··on Why is Amazon all of a sudden not re-investing all its profits?
How is Bezos more impressive than Jack Ma?
TimPrice··on The Best Linux Distros of 2016
Agree, specially if you add some Cinnamon.

(sorry :>) I didn't use Linux for any desktop/laptop for years until it got easily bundled last summer with Fedora. Thanks to Mint for that, though.

TimPrice··on Smart Kids Should Skip High School
> You must have discipline and passion. You must be your own boss and have a plan. You should enjoy learning on your own. Treat time as a precious resource.

Sadly, most of that is not taught at junior/middle school. Getting out of the labor force factory that 'education' is in most countries, may not be the best idea even for the majority of 'smart kids', as you say.

TimPrice··on Aphasia robs people of their language skills while leaving their minds intact
IMO there is no boring part in the video, introductions serve purpose.
TimPrice··on ECDSA smartphone key extraction using $2 magnetic probe
Only koblitz curves (secp256k1) seem to be secure?

On a related note, the Bernstein team designed Ed25519 with side channels attacks in mind. https://en.wikipedia.org/wiki/EdDSA#Features

TimPrice··on Two Explosions at Brussels Airport
This only adds to the hate between eachother.

Still can't get my head around it as to why or what they get with this.

TimPrice··on I Am Sam Altman, President of Y Combinator. AMA
If you can afford it, keep going at it!
TimPrice··on Graph Databases 101
1-Would it be more efficient to store objects that contain its relations if you only do (simple) read operations? (e.g. JSON database)

2-Instead, do graph DB engines try to break through bottlenecks for big data and analytics scenarios?