HNHacker News
TopNewBestAskShowJobs

andreasley

1,585 karma · joined May 12, 2014

https://www.andreasley.ch
submissionscomments
andreasley··on Apple iMessage Zero-Click Hacks
Usually by exploiting holes in some code that does parsing, e.g. for images. Here [1] is a nice write-up.

[1] https://googleprojectzero.blogspot.com/2020/04/fuzzing-image...

andreasley··on M1 Icestorm cores can still perform well
"The TDP of the [AMD 5850U] APU is specified at 15 Watt (default) and can be configured from 10 to 25 Watt by the laptop vendor (most chips are configured higher than 15 Watt)." [1]

I'd love to see actual measurements for both chips.

[1] https://www.notebookcheck.net/AMD-Ryzen-7-PRO-5850U-Processo...

andreasley··on 25 Gbit/sec residential FTTH in Switzerland [German]
Not only is it fast and inexpensive, it's also regular ethernet (no PON weirdness), so you can use any router you want – as long as it has an SFP28 port. ;)
andreasley··on How Intuitive Are Macs Really?
My 16-inch MacBook Pro sleeps just fine.

I assume you have Power Nap disabled and no devices attached that try to wake the MacBook?

andreasley··on Belarus 'diverts Ryanair flight to arrest journalist', opposition says
Similar incident: On October 21, 2016, Belavia flight B2-840 from Kyiv to Minsk (of all places) was told to immediately return to the departure airport, or fighter jets would be scrambled [1]. They were only 50km from their destination country's airspace. After the plane landed in Kyiv, Ukrainian law enforcement agencies escorted a passenger off the plane.

Not quite the same, of course (no third-party country involved and passenger in question was released shortly thereafter), but forcing commercial airliners to land seems to be somewhat more common than I thought.

[1] https://en.interfax.com.ua/news/general/378383.html

andreasley··on Thunderbird stored OpenPGP secret keys without master password protection
Chrome and derivates require the user's account password to view the stored passwords. Safari uses the macOS keychain and won't show passwords easily. The trick you mentioned only works on Macs without Touch ID and requires more work, so not really the same.
andreasley··on Thunderbird stored OpenPGP secret keys without master password protection
This reminds me of the fact that Firefox, by default, allows anyone to view stored credentials – no authentication required, as no master password is set. It boggles my mind.
andreasley··on Setting up Starlink
More like $10/month, not a penny.
andreasley··on Soviet TV version of Lord of the Rings rediscovered after 30 years
Part 1: https://www.youtube.com/watch?v=vquKyNdgH3s

Part 2: https://www.youtube.com/watch?v=oLevCLNnLmg

andreasley··on My apartment was built on toxic waste
Interesting. But it makes sense: Vaporization of detergents and other elements in the water.

Some sources: [1] https://www.haywardscore.com/articles/is-your-dishwasher-imp... [2] https://repositories.lib.utexas.edu/handle/2152/826

andreasley··on Sailor survives for 14 hours in Pacific Ocean by clinging to abandoned buoy
The article says 400 miles south of French Polynesia, so it's not cold water. Since he was able to see a football-sized fishing buoy, the water must have been very calm. Still extremely scary, imho.
andreasley··on A Swiss company says it found weakness that imperials encryption
Looks more like a russian company to me (with a mailbox in Switzerland). Pity; I wish there was more revolutionary engineering happening here.
andreasley··on The Dunant subsea cable
From 2016: "THE LOC’S DIGITAL COLLECTION currently comprises over 7 petabytes (7 million gigs) with more than 15 million items, including 150,000 print books. In an ideal future scenario, the LOC estimates that it could digitize a further 3-5 PB a year" [1]

So only the raw texts, probably. 10TB sounds about right for that.

[1] https://nplusonemag.com/online-only/online-only/the-library-...

andreasley··on System separation in the Continental Europe Synchronous Area on 8 January 2021
While ENTSO-E does have a map [1], it's not as nice as the one described above.

[1] https://www.entsoe.eu/data/map/

andreasley··on ownCloud Infinite Scale: Go instead of PHP, microservices instead of LAMP
It's always about trade-offs. For our use-case, I trust it well enough to prefer it over something cloud-hosted in another country. But I don't doubt that Seafile contains security holes and I wouldn't be surprised if there were backdoors. But I assume that for quite a lot of the gear I manage, so... :)
andreasley··on ownCloud Infinite Scale: Go instead of PHP, microservices instead of LAMP
We've been using Seafile for two years at my workplace. So far it's been very reliable and much faster than Nextcloud for file transfers. The current drive clients work well, but aren't as polished as Google File Drive Stream, for example. On macOS, I hope they will transition from macfuse.fs to the new FileProvider framework soon.

Seafile's file storage format has the advantage that it's easy to revert a file or folder to some earlier revision, for example after accidentally deleting files.

andreasley··on System Separation in the Continental Europe Synchronous Area on 8 January 2021
Previous discussion about this incident: https://news.ycombinator.com/item?id=25685646

"Europe: close to power grid blackout (49,74Hz power line frequency)"

andreasley··on U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise
I wonder if this unintended transparency actually makes for a safer world. The cold war might have been shorter if both sides would have been able to see that their enemy does not intend to escalate the situation.
andreasley··on FSB Team of Chemical Weapon Experts Implicated in Navalny Novichok Poisoning
Assuming the stated information is accurate, it's both remarkable and quite scary how much information is being leaked just by doing everyday things like calling and travelling – even for people that try to fly under the radar.

Considering that most of this information is publicly available (well, at least on the grey market), I would think that some intelligence services have a complete, way more detailed directory of every person on earth. I'd love to know just how extensive we all are documented in there. :)

andreasley··on A Mac / Linux Decompiler
Did you mean "available on Windows and Linux"?

A Linux version is available (based on Qt).

andreasley··on Second Swiss firm allegedly sold encrypted spying devices
Here's PDF that has specs for some Omnisec products: http://www.universal-defense.com/UD/Communication_files/11_C...

It's probably 20 years old, but still interesting I think. They also seem to have sold a VPN client.

andreasley··on Beirut Port Explosion
Thanks; I followed a broken link on the About page. Just sent them an email about it.
andreasley··on Beirut Port Explosion
While not directly assembled by state intelligence services, some of today's "independent" reports surely are supported or financed by them.

I'm not saying this one is, but verifying the independence and financing of any organisation is quite hard. A lot of work has gone into this fantastic presentation, and somebody had to pay for that. Since I watched it for free, it wasn't me...

andreasley··on World of Warcraft 9.0.2 client runs natively on Apple Silicon
Gaming on the Mac was basically dead and will be revived with Apple Silicon, I believe. Even the MacBook Air now has enough power to run modern games smoothly, and more powerful models are to follow. A considerable amount of iOS games are suddenly playable on the new Macs, too. And yes, native support for Apple Silicon and Metal is clearly the way forward.
andreasley··on macOS Big Sur
Even worse, other stuff is breaking because Apple's infrastructure is on fire. Apps don't launch because signature checks are failing (ocsp.apple.com and crl.apple.com seem to be unreachable for me) and my Mac Pro hangs randomly for a few seconds every minute or so. It's quite ridiculous. :)
andreasley··on Apple Silicon M1 chip in MacBook Air outperforms high-end 16-inch MacBook Pro
Also GPU: https://browser.geekbench.com/v5/compute/compare/1799092?bas...

The Vega II is even faster (but quite a bit more expensive).

andreasley··on Apple Silicon M1 chip in MacBook Air outperforms high-end 16-inch MacBook Pro
If the Geekbench scores are to be believed, the M1 in the MacBook Air scores 7,500 multithreaded. So yeah, the 28-core Mac Pro is quite a bit faster (and can sustain that performance), but the performance of the Air looks extremely good.
andreasley··on Swiss report reveals new details on CIA spying operation
What people? Vetting how? The problem remains: If you don't read and understand all the code (which is basically impossible for most people), then you have to trust some source of information, which in turn is based on some other source etc.

In short: You can basically never know for sure if any complex product is completely secure. You can make guesses, and the more research you do, the closer you get to an answer. At some point, you have enough information to deem a solution "secure enough" for a specific use.

For regular users, it's mostly a question of belief.

andreasley··on Swiss report reveals new details on CIA spying operation
The actual report, in german: https://www.parlament.ch/centers/documents/de/bericht-gpdel-...

Interestingly, the report states that the collaboration of the Swiss Intelligence Service with the CIA and BND was known to only a small group of people; even the Federal Council supposedly did not know about it.

andreasley··on Apple blocks game streaming services unless individual games are approved
That's simply not true.

To the people saying it's obviously a joke: The App Store Review Guidelines have become huge and I wouldn't have been surprised to find something like this in there, although not in these exact words. Actually, I wish the App Store Review Guidelines WOULD state exceptions like the one mentioned. At least that would be transparent.

← PreviousPage 3 of 8Next →