HNHacker News
TopNewBestAskShowJobs

X-Istence

7,174 karma · joined February 18, 2010

[ my public key: https://keybase.io/deltaregeer; my proof: https://keybase.io/deltaregeer/sigs/fB1spa9ustk6eYzq4uXRVHb1D85EaTlipzh1uutGT34 ]

Portfolio: http://deltaregeer.com/ Engineering Notebook: http://funcptr.net/

delta@regeer.org

submissionscomments
X-Istence··on YouTube says it will crack down on bizarre videos targeting children
I'm from The Netherlands, and I can't say for certain, but I can't remember a product being sold at a grocery store that had characters from a children's TV show/movie on the label to try and sell it.

Cereal is less of an issue in the first place (that's a very US thing, didn't even know it existed till I moved to the US when I was 10), but you just don't find brands associating themselves with characters from movies/tv shows.

The closes you get it Sinterklaas/Zwarte Piet on seasonal items and Santa Claus.

Action figures are something you have to get at a specific toy store. Large "super store" like WalMart/Target/others don't really exist. I can't go buy a couch at Albert Heijn. I don't go buy a TV at Aldi. In the US however going to Walmart for electronics is as normal as going to get groceries.

X-Istence··on The end of the cloud is coming
Except that with IPv6, your telco could delegate you an entire /64, or potentially less and turn your phone into just another router in the network.

Just asked my friend who is on Verizon, when he is tethered to his phone his laptop/computer gets a full globally unique IPv6 address, every device that is tethered gets one. So it already exists.

X-Istence··on The end of the cloud is coming
Your ISP likely gave you a single IP address for your router, and will happily also give you a /64 or larger for your internal network.
X-Istence··on Apple Should Buy Sony
Something in the article that made me go: "Wait, what?"

Apple is paying 17% average tax rate, and is in red, yet Coca-Cola does the same, yet is in green.

What gives?

X-Istence··on Advanced secondary DNS for the technically inclined
I was not aware of HE's DNS service! This is excellent!
X-Istence··on Xeno Kovah: macOS 10.13 EFI firmware integrity check
Until Apple can guarantee they have every single last version of EFI in their database, I think it is the best they can do. Those that know what that check is about are also generally the targets that would have to worry about it.
X-Istence··on Super-Accurate GPS Chips Coming to Smartphones in 2018
This should be an "and", unfortunately many GPS receivers consider it an "or".

Makes them worthless for high altitude near space balloons :-(

X-Istence··on Some .io nameservers are returning wrong results again
nic-io would need to remove the delegation entries, since it is the .io servers that are returning the wrong response. This has nothing to do with any DNS servers actually hosting the <domain>.io zones.
X-Istence··on IO name servers down
Noticed this issue this morning too...

https://twitter.com/bertjwregeer/status/910515512903319552

Interestingly enough I found that only some of them were returning NXDOMAIN's, so resolution would sometimes work and sometimes it would fail completely.

X-Istence··on Apple blocking ads that follow users around web is 'sabotage', says industry
I have location history turned off on Google and I have my home address set in Google Maps...
X-Istence··on iOS 11 reviewed
Rosetta was also removed after two or three releases. 32 bit support for applications in iOS was also supported for a couple of releases and is now gone.

How is that not similar? I can't still run Rosetta to this date...

X-Istence··on Chrome to force .dev domains to HTTPS via preloaded HSTS
If you use mDNS to publish things into .local then you are using it for what it was designed for.

I wrote such a tool:

https://github.com/bertjwregeer/mdns-announce

It allows you to easily announce CNAME's in mDNS to do the sort of dev testing locally that requires alternate domains, without the possibility of leaking them outside of your own local network.

X-Istence··on Chrome to force .dev domains to HTTPS via preloaded HSTS
I wrote a tool that does exactly this a while back:

https://github.com/bertjwregeer/mdns-announce

It publishes CNAME records into mDNS for adding additional "hostnames".

X-Istence··on The IPv6 Adoption Curve
Comcast is a dual stack network, and their IPv6 network is faster and better than their IPv4 network. Faster RTT between two endpoints, and overall I am happy to have IPv6 turned on.
X-Istence··on Apple Watch 3
You could already load music onto your Apple Watch from your iTunes library and then pair your Bluetooth headphones with your watch.

The only thing this changed is allowing you to use LTE to stream music instead of having a static playlist.

X-Istence··on The Equifax breach may be the worst leak of personal info ever
There's three other companies that do the same thing.

TransUnion

Experian

Innovis

X-Istence··on LoRaWAN packet received at record distance of 702 km
Using ARPS when I helped launch a weather balloon while in college, we were recorded by a station in Las Vegas. We launched south of Phoenix so at least 300 miles.

We were transmitting at 3 watt using a small Yaesu hand-held connected to a micro-controller.

X-Istence··on Equifax Faces Multibillion-Dollar Lawsuit Over Hack
They just tell you after the fact that a new credit line has been established. It's still on you as the consumer to go prove that it wasn't you and that you didn't open it...

And guess what, the same questions that they ask you to prove you are who you say you are, are the ones that have likely been stolen!

X-Istence··on HomeBrew Analytics – top 1000 packages installed over last year
Many people on MacOS use Postgres.app for their PostgreSQL needs.

http://postgresapp.com

X-Istence··on The qmail security guarantee
systemd by default limits programs to a certain amount of memory (this bit me in the ass while working on getting OpenStack running on Ubuntu 16.04, and MySQL would get killed because of memory usage).

Various other systems also limit with things like /etc/login.conf on FreeBSD. There is also /etc/security/limits.conf on Linux for non-systemd stuff.

Limits for memory usage/open files/things of that nature are natural. You don't want one runaway process to cause the rest of your system to OOM.

X-Istence··on The qmail security guarantee
qmail-smtpd is a very small binary that is run per connection received through tcpserver.

There is no good reason to give it even a gigabyte of ram, let alone many multiple gigs.

I would say the notion that small binaries working together (the unix way) would still allow him to believe to be the case.

X-Istence··on The qmail security guarantee
> In May 2005, Georgi Guninski claimed that some potential 64-bit portability problems allowed a ``remote exploit in qmail-smtpd.'' This claim is denied. Nobody gives gigabytes of memory to each qmail-smtpd process, so there is no problem with qmail's assumption that allocated array lengths fit comfortably into 32 bits.
X-Istence··on Same day ACH: moving payments faster in the USA
By November 2017 in Europe you will be able to transfer money almost instantly:

https://www.ecb.europa.eu/press/pr/date/2015/html/pr151127.e... https://www.europeanpaymentscouncil.eu/what-we-do/sepa-insta...

Same day transfers have been a reality for a long time (at least in The Netherlands), the fact that it takes 3 - 5 days here in the US is absolutely insane.

X-Istence··on Introducing Network Service Tiers
OVH has a datacenter in Canada which is very well connected to North America, they are also working on their USA datacenter.
X-Istence··on TunnelBear Publishes Security Audit
TunnelBlick comes with a tun/tap kext that is signed. This is not required on systems where Apple already has tun/tap support compiled in (not sure when that started, but it's been a long time)

From the known issues page:

"If you are running on OS X 10.6.8 or higher and using OpenVPN 2.3.4 or higher and using a TUN device, the default Tunnelblick setting to "Load Tun Automatically" (on the "Advanced" settings window) will avoid this problem by not loading the tun kext — OS X's built-in "utun" device will be used instead of a "tun" device."

X-Istence··on Rowhammer-like attack on SSDs can provide root privileges to attacker
Google cache as it seems to be offline for me: http://webcache.googleusercontent.com/search?q=cache:LREtpAA...
X-Istence··on The HDFS Juggernaut
In many cases these systems are installed behind firewalls in corporate locations, where this is less of an issue. It becomes a bigger issue when you then just deploy it into the cloud without knowing what or how it works.
X-Istence··on Node 8.3.0 released
25 seconds when the yarn cache is cleared... downloading is not the slow part here.

Old results from about a month ago:

https://twitter.com/bertjwregeer/status/887450964420055043

  npm 5.3.0: added 1991 packages in 538.289s  
  yarn v0.27.5: Done in 58.42s.
X-Istence··on Node 8.3.0 released
This is so completely and utterly wrong, unfortunately...

Yarn takes 12 seconds to install all of our node_modules, npm@5 (latest) takes over 12 minutes.

This made it completely and utterly untenable for our CI system, so we switched to yarn and shaved 12 minutes off our CI builds. It's been fantastic.

X-Istence··on Salesforce fires red team staffers who gave Defcon talk
Before DEF CON there are about 20 cell towers in the area, during DEF CON there were almost 130 (rumour I heard, while gooning in the contest area)...

Pretty sure some of those are FBI and other agencies ;-)

← PreviousPage 16 of 34Next →