HNHacker News
TopNewBestAskShowJobs

brohee

3,042 karma · joined June 21, 2011

Random hacker, Paris, France.

Contact me at bruno@rohee.com

submissionscomments
brohee··on Onlookers freak out as 25-year-old set loose on Treasury computer system
I had to truncate the title a bit from:

'Go haywire': Onlookers freak out as 25-year-old set loose on Treasury computer system

brohee··on Ross Ulbricht granted a full pardon
Illegal online marketplaces absolutely do reduce "turf wars". It's argueable that there is harm reduction compared to street dealing. Then I suspect it creates new consumers so there is that too.
brohee··on Platforms systematically removed a user because he made "most wanted CEO" cards
OK. The question is now why is it such a rare instance of doing the right thing. Facebook was the engine of the Rohingya massacre and did absolutely nothing. Some lives are clearly more precious than others.
brohee··on Cracking a 512-bit DKIM key for less than $8 in the cloud
I'm well aware I should have added a "still" in the sentence somewhere. All efforts to have Ed25519 on the general web seem to run out of steam, we can find https://www.ietf.org/archive/id/draft-moskowitz-eddsa-pki-06... IETF side, https://lists.cabforum.org/pipermail/servercert-wg/2024-June... is the last discussion CABforum side.

Ed25519 certs do work with TLS (OpenSSL support at least), but without browser adoption it's machine to machine with private CA only .

brohee··on Cracking a 512-bit DKIM key for less than $8 in the cloud
THE CABForum just updated its guidelines (in December) and elliptic curve wise only NIST P-256, NIST P-384 and NIST P-521 are accepted. (See https://cabforum.org/working-groups/server/baseline- requirements/requirements/#615-key-sizes)

So on the general web it seems remote at best.

brohee··on Ukraine's three nuclear power plants have restored electricity production
Russia made it clear that if those "misguided Russians" insist on staying misguided they will have to genocide them.
brohee··on Two undersea cables in Baltic Sea disrupted
The large drones (if you mean Shahed by that) absolutely don't need a Patriot response. More Gepards would help with those OTOH.

The West could definitely manufacture enough counter to the ballistic missile menace.

brohee··on Teen behind hundreds of swatting attacks pleads guilty to federal charges
Looks like they changed the URL https://www.cbsnews.com/baltimore/news/john-fauver-harford-c...
brohee··on Teen behind hundreds of swatting attacks pleads guilty to federal charges
Going in details on how they were armed would be interesting. How many people with a limp "armed" with a cane...

Pretty sure they managed to sneak this one (https://www.cbsnews.com/baltimore/news/john-fauver-harford-c...) in the armed category

Also dogs are not any more armed in the US than in Europe, yet American cops shoot a lot more dogs. They do so because they are antisocial and know they'll face no consequences (and even if they get fired from on PD, another will recruit them). I'd say there is both a recruiting issue and an immunity issue.

brohee··on Cargo Airships Are Happening
Big transformers are now limited to boat transportation, and it's a constraint on grid design. I assume this is also the case for other industries that become river bound but wouldn't necessarily be so if not for equipment transportation. So this could be a game changer (more so I think than this faster than boat slower than plane thing).
brohee··on Why U.S. Regulators See Minicars as the Enemy
Not prominently noted in the article, but at least in rural France where Citroën Ami are pretty popular they are mostly replacing mopeds ans scooters for teenagers, parents deeming them safer.

Not displacing cars, if anything adding to congestion.

brohee··on Ruby-SAML pwned by XML signature wrapping attacks
"Nobody cares about XML Signatures anymore, except in the context of SAML"

I wish, but I'm pretty sure that it's still used in EBICS (latest version of the standard here https://www.ebics.org/securedl/sdl-eyJ0eXAiOiJKV1QiLCJhbGciO...), which is even scarier than SAML.

brohee··on OpenSCAD: The Programmer's Solid 3D CAD Modeller
Multi thread support is an experimental feature available on nightly build (and needing to be enabled). The bug tracking it is interesting to read, it has been a long journey... https://github.com/openscad/openscad/issues/391
brohee··on OpenSCAD: The Programmer's Solid 3D CAD Modeller
As scary as the last two lines are, it's not the developer abandoning ship, it's just him optimizating the process. Cutting releases was taking time best spent on dev, and commiting to main as a mainly solo project is perfectly reasonable.
brohee··on Synthetic diamonds are now purer, more beautiful, and cheaper than mined
Diamond coating is a thing for IR optics: https://sinoptix.eu/2023/10/27/what-is-dlc-coating-in-optics...
brohee··on Bypassing airport security via SQL injection
Mandatory audits by accredited auditors in order to participate in a market, inevitably create a market for accredited auditors that don't uncover too much but ensure all checkboxes are ticked. Much of the security industry is actually selling CYA and not actual security. The same dynamic at play means buyiong a home/boat/car you should get your own inspector, not blindly trust the seller's.
brohee··on RISC-V CPU arrives on a tablet starting at $149
https://semidynamics.com claims to be able to integrate tensor units to their design... I guess the standardized part is not there but if you can use standardized APIs...
brohee··on BMW tests AI humanoid robot on South Carolina production line
Anyone know why they went full humanoid and not tracked or wheeled centaur? I get the advantages of a humanoid upper body but legs and their complexity look super overkill on what is presumably a flat factory floor...
brohee··on Declaring 'Crisis,' South Korean Firms Tell Managers to Work 6 Days a Week
That sure will help with the Korean demographic crisis, they'll be fucking like rabbits after those long days. And they can't wait to give the same future to their children...
brohee··on France high-speed rail traffic disrupted by 'malicious acts' on Olympic ceremony
The accidental Mont Blanc Tunnel fire (https://en.wikipedia.org/wiki/Mont_Blanc_Tunnel_fire?wprov=s...) puts it out of commission for three years, and that's a very important link between France and Italy...
brohee··on CrowdStrike update that caused global outage likely skipped checks
Can their legal means beat a senate inquiry?
brohee··on State of Text Rendering 2024
Servo is tagged as dead but the revival seems to have somewhat worked. I guess nto nearly as many full time people than when it's was under Mozilla umbrella but not dead. And by the look of it neither is Pathfinder the rasteriser.
brohee··on Cold shipping might be the next industry that batteries disrupt
Well if you need a precise temperature (like really cold but must absolutely not freeze,) it's a lot better, and USB is absolutely everywhere including bikes nowadays, so I really get the appeal.
brohee··on More Memory Safety for Let's Encrypt: Deploying ntpd-rs
When one can make a stratum 1 server for $100, there is very little reason for the continuous existence of public NTP servers. ISP can offer the service to their customers, and any company with a semblance of IT dept can have its own stratum 1.
brohee··on Social engineering takeovers of open source projects
If the "Jigar Kumar" kind ends up in a CIA black site mailing lists will be a lot more enjoyable.
brohee··on Macroquad – Simple and easy to use game library for Rust programming language
It was highly praised in the blog post that led to this huge discussion https://news.ycombinator.com/item?id=40172033
brohee··on TSMC unveils 1.6nm process technology with backside power delivery
Not ELI5 but I found this 20mn video pretty informative https://www.youtube.com/watch?v=hyZlQY2xmWQ
brohee··on Addiction Activists Say They're 'Reducing Harm' Locals Say They're Causing It
So she can dispose of the syringes she sweeps on your kids playground? Easy to criticize her, when it's not your neighborhood being ruined. Also I didn't think she was arguing for indiscriminately locking the addicts, she just couldn't help but notice policing was different when white people were involved...
brohee··on Addiction Activists Say They're 'Reducing Harm' Locals Say They're Causing It
Maybe the research is worthless because of data quality issues. Pushing all the junkies on an area where people don't trust the police isn't a good way to have accurate statistics on the increase (or lack of) in crime. But also there could be a feeling of insecurity that is disconnected from reality, but with the state of social sciences, hard to know...
brohee··on Rust Nation UK 2024: Renault wants to sell cars with Rust!
Rust must be such a breath of fresh air compared to MISRA C for the devs involved.

For those who don't have time to watch the talk, the backdoor used by Rust to penetrate the ecosystem was protocol parsing on exposed interfaces, then the oxydation spread from here.

← PreviousPage 5 of 34Next →