HNHacker News
TopNewBestAskShowJobs

andreasley

1,585 karma · joined May 12, 2014

https://www.andreasley.ch
submissionscomments
andreasley··on Days Since a Cryptocurrency Exchange Has Lost More Than $100M
Ghostery blocked the Twitter Button for me, which prevented the scripts from executing and updating the counter (which be default is 0).
andreasley··on Linus Torvalds: “Somebody is pushing complete garbage for unclear reasons.”
Question is, is it constructive? Does ranting really yield better results than just stating the facts (both short term for fixing the problem and long term for working together)?

It might work for Linus on the LKML, but it certainly doesn't for everyone and in all circumstances.

andreasley··on Find every domain someone owns automatically
Why do you think privacy should be easier for domain owners? Shouldn't it instead be easy for a visitor to find out who owns the domain and is responsible (content, technical or legal) for a certain site?
andreasley··on About the security content of Security Update 2017-001
The update didn't auto-install for me. I suppose it only does that when "Install system data files and security updates" is enabled in System Preferences -> App Store.
andreasley··on CUPS License Change Coming
Not obvious, but you can also use the command line tool lpadmin.
andreasley··on WikiLeaks: CIA source code leak shows agency impersonating Kaspersky
On WikiLeaks' web based repository browser, some files referencing Kaspersky can be found here: [1] (e.g. client.crt and kaspersky.conf). In the dump, the files are in the directory /client/ssl up to commit da81be4.

[1] https://wikileaks.org/vault8/document/repo_hive/client/ssl/C...

andreasley··on Plastic-eating caterpillars: An escape from a shopping bag triggers an idea
This was in April 2017. A more recent report questions the previous publication:

"Although the biochemical decomposition has not yet been disproven, the sensational report of plastic eating caterpillars at least appears highly doubtful in the light of these results." [1]

[1] https://www.sciencedaily.com/releases/2017/09/170915144156.h...

andreasley··on The impossible dream of USB-C
If there's a port, there has to be sufficient bandwidth available, regardless if anything is connected and what that might be. USB 3.1 Gen 2 supports 10Gbps, so 4 ports means 40Gbps. If it's a MacBook Pro, it has to support Thunderbolt 3 on all ports. That's 160Gbps for 4 ports, or 16 PCIe lanes. That happens to be exactly the number of PCIe lanes the Intel i7-7920HQ CPU has.
andreasley··on Someone stole my identity on Upwork (2016)
Needs (2016) in the title.
andreasley··on Documents Reveal Top NSA Hacking Unit (2013)
Title should contain [2013]
andreasley··on PET scans show many Alzheimer’s patients may not actually have the disease
A study from 2014 could not replicate this:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4167392/pdf/nih...

andreasley··on Apple Teases Upcoming Space Gray iMac Pro, "the most powerful Mac ever"
It's for people like me. I need something with more power than my current "classic" Mac Pro, preferably with fewer cables and more energy efficient. 2 SSD slots are sufficient for my internal storage needs, especially considering the Nbase-T Ethernet port. Vega-based graphics should be able to properly run the 5K display for the next few years.

I've swapped out a lot of parts in my old Mac Pro, but at this point, I'd rather have something that "just works". And if my needs change, the resale value of this thing will still be good.

But I'm just an iOS developer, doing some multimedia and web stuff as well. Maybe that's not a "pro" by today's definition. :)

andreasley··on Swift's Evolution
Just give it a try. While Swift is not perfect, it really is great for macOS/iOS development and continuously getting better. I'd never go back to ObjC.
andreasley··on Why Do North Koreans Hate Us? One Reason
You mean by letting MacArthur nuking Korea and start bombing China? Do you really believe this would have helped making anyone safer?
andreasley··on Why Do North Koreans Hate Us? One Reason
I found the following interview with two north koreans who escaped very insightful and touching: https://www.youtube.com/watch?v=DyqUw0WYwoc
andreasley··on Incident report on memory leak caused by Cloudflare parser bug
Basically yes. If some of your traffic was flowing through a server on which any customer had the vulnerable features enabled, parts of your traffic may have been dumped.
andreasley··on SpaceX Dragon Rendezvous and Docking Waved Off for Today
The second attempt at docking Dragon was successful: https://twitter.com/SpaceX/status/834716206930108416

Progress MS-05, the first russian resupply mission after the failed Progress MS-04, should arrive tomorrow, February 24th: http://www.russianspaceweb.com/progress-ms-05.html

andreasley··on Apple Park Opens to Employees in April
The Apple Park main building has such a large diameter that GCHQ headquarters would fit inside it. That's why it looks slender. :)
andreasley··on SpaceX: CRS-10 Hosted webcast
Gorgeous external video of the landing: https://www.youtube.com/watch?v=glEvogjdEVY
andreasley··on SpaceX Hyperloop Pod Competition
"Pod race" happening today (Sunday, January 29th). They say that coverage will begin at approximately 1:55pm PT and to follow @Hyperloop for updates on when to tune in.
andreasley··on The abandoned ice sheet base at Camp Century, GL, in a warming climate (2016)
Restored film about Camp Century, "The U.S. Army's Top Secret Arctic City Under the Ice!":

https://www.youtube.com/watch?v=1Ujx_pND9wg

andreasley··on How China Built ‘iPhone City’ with Billions in Perks for Apple’s Partner
It is, but Apple seems to have become the largest customer and Foxconn's revenue seems to rise and fall with Apple's iPhone sales. This article [1] from 2013 states that "Hon Hai [...] draws an estimated 60 to 70 percent of its revenue from assembling gadgets and other work for Apple Inc.".

[1] http://www.businessinsider.com/apple-moving-from-foxconn-to-...

andreasley··on Live display of CO2 emitted to produce electricity in European countries
I've noticed that Switzerland, using a lot of hydropower, has a worse intensity than I expected.

The CO2 numbers for the different types of power generation seem to come from Wikipedia [1], where Hydropower has a median gCO2eq/kWh of 24 and a maximum of 2200 – much worse than coal. This seems to be based on the fact that large areas may be flooded when filling the dam initially, and CO2 from rotting plants is released [2]. The numbers vary depending on the amount of vegetation.

According to a study [3] from 2012, "electricity generated in storage hydropower stations in Switzerland causes emissions of 10.8 g CO2-eq/kWh", so it's less than shown in the emissions chart and comparable to nuclear.

[1] https://en.wikipedia.org/wiki/Life-cycle_greenhouse-gas_emis...

[2] https://www.newscientist.com/article/dn7046-hydroelectric-po...

[3] http://esu-services.ch/fileadmin/download/publicLCI/flury-20... [PDF]

andreasley··on Microsoft wins $927M Pentagon contract
Here [1] is the actual statement on defense.gov.

[1] http://www.defense.gov/News/Contracts/Contract-View/Article/...

andreasley··on Miserable Battery Life on 2016 MacBook Pro with Radeon Pro 460
The 2016 MacBook Pro (15-inch) has a 76.0-watt-hour lithium-polymer battery. The AMD Radeon Pro 460 has a TDP of 35W and will have to run at close to full power to fill a Retina display's 5 million pixels at reasonable frame rates (running with less-than-optimal OpenGL drivers; Civ VI doesn't support Apple's "Metal"). The 2.6Ghz "Skylake" i7 (i7-6700HQ) has a TDP of 45W that won't be maxed, but there's also display backlight, WiFi and some other stuff to be powered. So yeah, one hour seems reasonable.
andreasley··on A presentation about optical networking [pdf]
Only mentioned briefly in this document, but may be of interest to some: 10GBASE-LR optics work with old multimode fiber [1].

Replacing the 10GBASE-SR optics with 10GBASE-LR fixed a flapping OM2 link for me (using mode conditioning patch cables).

[1] https://www.flexoptix.net/en/blog/2011/09/getting-a-10g-stab...

andreasley··on Tesla cars can be stolen by hacking the app
This was done by installing malware on a Tesla owner's Android smartphone. Tesla's response to electrek [1]:

The report and video do not demonstrate any Tesla-specific vulnerabilities. This demonstration shows what most people intuitively know – if a phone is hacked, the applications on that phone may no longer be secure.

That is, of course, true. However, is a login and password [2] really sufficient to secure access to a car? Why isn't there some kind of paring between the smartphone and the car?

Some argue that stealing a physical key is even easier. Of course it is, but that doesn't mean we can't do better.

[1] https://electrek.co/2016/11/23/tesla-hacker-steal-car/

[2] https://www.youtube.com/watch?v=vlVFhT-DjnI

andreasley··on How Hackers Broke into John Podesta and Colin Powell’s Gmail Accounts
The open redirect on google.com has been known for a while: [1]

Google's official policy regarding open redirectors: "Our take on this is that tooltips are not a reliable security indicator, and can be tampered with in many ways; so, we invest in technologies to detect and alert users about phishing and abuse, but we generally hold that a small number of properly monitored redirectors offers fairly clear benefits and poses very little practical risk." [2]

[1] http://seclists.org/bugtraq/2016/Apr/70

[2] https://sites.google.com/site/bughunteruniversity/nonvuln/op...

andreasley··on Dash developer's response to Apple's response
Lessons:

  - Apple considers Developer Program memberships "linked to the same entity" if they are paid for by the same credit card.
  - If one of these accounts violates rules, all accounts of this entity are being closed.
  - As always, it's difficult to get any useful information from Apple.
  - Apple will listen and try to find a reasonable solution – at least if the public backlash is big enough.
In my opinion, Apple should communicate this more clearly and, upon closing an account, provide all relevant information to the membership holders as well as providing a means of appeal. Mistakes do happen.

I welcome Apple's crackdown on fradulent activity. However, as an iOS developer, stories like these are the reason why I don't want to bet my livelihood on distributing apps through the App Store. While the risk of having my app rejected or account closed for no particular reason is small, it's still there. Are developer's voices being heard, even if they don't have a blog and a twitter account? My experience with Apple's Bug Reporter says no.

andreasley··on Implication of sabotage adds intrigue to SpaceX investigation
SpaceX IS the newcomer and underdog, but one that's advancing very quickly. The big monopolist in this case is ULA, the "United Launch Alliance", which was created in 2006 as a joint venture of Lockheed Martin Space Systems and Boeing Defense, Space & Security.

For years, ULA was only option for US government launch contracts. They had more than 100 launches – all of them successful except one single minor anomaly [1].

SpaceX tried and succeeded [2] to get into the lucrative government contract business, arguing that their launches are five times cheaper (90M vs 460M USD).

Before that, an interesting meeting of the U.S. Committee on Armed Services took place [3], discussing ULA's dependency on russian-made RD-180 rocket engines for their Atlas V launch system.

[1] http://www.spacepolicyonline.com/news/ula-traces-atlas-v-ano...

[2] https://spaceflightnow.com/2015/05/27/spacex-cleared-to-laun...

[3] https://www.youtube.com/watch?v=2Ff_5jF_3QU

← PreviousPage 6 of 8Next →