HNHacker News
TopNewBestAskShowJobs

cryptarch

1,001 karma · joined July 28, 2016

submissionscomments
cryptarch··on Postal: Open source mail delivery platform, alternative to Mailgun or Sendgrid
Do you have a system to prevent trusted users from being given low-reputation ip addresses without them having to pay for a dedicated ip?

Something like, "if you don't pay for a dedicated ip, but have been a non-spamming client for a month, we move you to a higher-rep ip address pool"?

cryptarch··on Access Now and EFF Condemn the Arrest of Tor Node Operator Dmitry Bogatov
Many consumer ISP's use an IP pool, and do not store logs in a tamper-proof way.

Wifi routers are insecure and often can't be flashed with more transparant/secure software, so in practice anyone within 100m with a directional antenna can connect to your wifi.

People let guests on wifi, and students tend to share internet connections.

Some devices randomize their MAC address by default (Apple stuff I think) and MAC addresses are trivially spoofed.

If I'm on your wifi router I can probably spoof the MAC addresses of any and all of your devices, and I definitely can if you've ever connected to an AP managed by me.

Lastly, ISP's can spoof everything and fabricate logs with ease.

So no, technically there is no proveable link between IP address and person or device. Perhaps legally but that has no bearing on the technical reality.

cryptarch··on LSD microdoses make people feel sharper, and scientists want to know how
Around the likelihood that it gets earmarked at the post office and you proceed to fall for a Controlled Delivery.
cryptarch··on Access Now and EFF Condemn the Arrest of Tor Node Operator Dmitry Bogatov
How exactly is wifi traceable?

IP addresses of what is connected to can be hidden by proxies or anonymizing networks, or even just TLS. MAC addresses are spoofed routinely. It's wireless so fat chance it's reachable from places not under your surveillance, if you have any of that in the first place.

I also don't agree that an IP address is your personal identity, I think that's a very harmful idea. I am not a computer and I just barely control part of what my machines do.

Do you believe in the possibility of a risk-less society?

cryptarch··on Access Now and EFF Condemn the Arrest of Tor Node Operator Dmitry Bogatov
Are you also of the opinion that providing free wifi access is "assisting unknown criminals" and should be prosecuted?
cryptarch··on Google Rewrites Its Powerful Search Rankings to Bury Fake News
Microsoft Expands Its Search Rankings to Include Relevant Results?
cryptarch··on LSD microdoses make people feel sharper, and scientists want to know how
NBOMe's are! They also have psychadelic effects but are a lot riskier and tend to last longer.

It's a good thing they have a bitter taste, and if your LSD has a bitter/metallic taste: spit! It shouldn't taste like anything and you don't want HPPD.

cryptarch··on LSD microdoses make people feel sharper, and scientists want to know how
Darknet markets, there's a subreddit for it with good information and a helpful community.
cryptarch··on LSD microdoses make people feel sharper, and scientists want to know how
Anything that results in a blood alcohol percentage between .12 and .15, it's that easy!

Source: https://www.xkcd.com/323/

cryptarch··on Bose Headphones Spy on Users, Lawsuit Says
Sorry for going meta, but I find it very odd your comment was dead, as your GP post was not.

I've been seeing this quite a lot in the last 2-3 months, perfectly reasonable comments that are [dead] for no discernible reason; could this be trolling or a form of botting?

cryptarch··on [ -z $var ] works unreasonably well
I've just tried that out, it seems like it's OK as long as the argument is not exactly `-[abcdefgGhknoprsStuwxz]`, it's ok to have "-d test" or "-dtest".
cryptarch··on Imitating people’s speech patterns precisely could bring trouble
uBlock Origin fixed that for me.

Link for the lazy: https://github.com/gorhill/uBlock

cryptarch··on Thousands of computers now compromised with leaked NSA tools, researchers say
> how do you get the message out about a 0-day in windows

Force-push a Windows 10 update? That seems like one of the few legitimate usecases of Win10 being a corporate botnet.

cryptarch··on [ -z $var ] works unreasonably well
How is:

    [ -z $var ]
different from:

    [ $var ]
? I don't understand the distinction between a length-0 string and "the null string" in the context of /bin/sh.

I always just use [ "$var" ] and it's never failed me so far; should I be worried?

cryptarch··on A Facebook bot purge clobbered USA Today
Maybe they just wanted a picture of you?
cryptarch··on Thousands of computers now compromised with leaked NSA tools, researchers say
Who cares what nation state actor alledgedly moved the exploits from an NSA employee to WikiLeaks? Why would the medium matter in the least, in the case of hoarding 0days?
cryptarch··on Torching the Modern-Day Library of Alexandria: The Tragedy of Google Books
Wouldn't it be easy to have a provision for bulk registration?

Like, "renew the photographs with SHA's .....", and then providing a simple tool to list all the SHA's of all files with a given extension in a directory?

One request with 50.000 photographs?

cryptarch··on Google's controversial groundwater withdrawal sparks question
Huh, I think I read it as "It's amazing how Seattle is is heating their new buildings:".

That remark of mine was unwarranted, while I don't agree the comment makes it clear that it's special to use water from data centers, I didn't get that from it.

cryptarch··on Torching the Modern-Day Library of Alexandria: The Tragedy of Google Books
I think it's the scans, yeah, so ~50mb for the scans and ~1mb for the OCR'd version.
cryptarch··on Ask HN: Alternatives to Vagrant for development environments?
I'm currently using docker-compose for work on a SaaS product written in Java, it's quite a joy to work with.

I am struggling with slow image builds, but that's more of a problem of "not having a build server", "not having a Docker registry set up" and "using a lot of 3rd party online build dependencies".

cryptarch··on Emacs 25.2 released
On remote hosts, is there a trick like having an Emacs-slave on the remote hosts? Something like SSH for Emacs, that makes use on remote systems seamless?
cryptarch··on Torching the Modern-Day Library of Alexandria: The Tragedy of Google Books
The thing is, you have to index the pieces of metadata or otherwise make them discoverable, and then decide which parts you trust.

This would need some kind of signing/trust-distribution scheme, something like namespaces ("YIFY can only approve movie and show releases because they only do movie and show releases").

It would also need way to blacklist malicious metadata (automatic scanners that publish lists of files with viri?).

It's very much non-trivial as far as I can see.

That's ignoring the copyright issue, which can mostly be ignored if you somehow make it impractical to prosecute the distributors of the metadata. But I think (part of) the metadata will still be subject to copyright lawsuits, in the context of "the right to be forgotten" and fair-use safe harbors.

cryptarch··on Emacs 25.2 released
Thank you for the well-thought-out and very helpful post, I feel like you've given me a model of thinking that will help me get started faster.

Would you happen to have ideas about pinky-saving layouts/modifications to Emacs? I'm not quite ready to ascend to Dvorak layouts but anything short of that I'll try, I'll need to with the state of my fingers.

It's my first week, so I guess I should read the manual instead of deep-diving without scuba gear and trying to manage with Evil-tutor and wishful thinking :')

I'll start with Org mode, I've been meaning to move away from Google Calendar and into Org mode for months anyway.

Thanks again :)

cryptarch··on Google's controversial groundwater withdrawal sparks question
Wow, so that's why I've seen steam so often as an element of the NY landscape! Very cool, thank you.
cryptarch··on Google's controversial groundwater withdrawal sparks question
Bang! You're no longer dead! (maybe)

That's exactly what I mean though you posted it with a click-baity lead-in.

cryptarch··on Torching the Modern-Day Library of Alexandria: The Tragedy of Google Books
Well... I'd say it isn't solved. What.CD went down. Fuck, that still hurts.

People now speak of Google Books as a library of Alexandria, but What.CD was the real thing. Google Books was barely available to anyone, ever.

That shouldn't be possible the next time. How though? Distributed metadata curation is a problem we haven't worked out well. I know I haven't.

Especially if the metadata is stored on and for data stored on a diverse set of platforms, like "not only BT", but also Freenet, HTTP, FTP, IPFS... It just doesn't exist.

cryptarch··on Emacs 25.2 released
You're touching on some of the same painpoints I encountered, though I don't know what Jedi is.

My impression is, we might both benefit from starting from a bare-bones Emacs setup and expanding that by hand.

I guess vanilla Emacs would be the most bare-bones experience, or at least the most bare-bones experience you can find help for on Google (which kinda hurts me to say, but DDG has worthless search results and only sticks in my browsers because of the !bang functionality).

cryptarch··on Emacs 25.2 released
Might I ask how you've picked up Emacs?

Did you start with Spacemacs or did you have prior experience and understanding of Emacs?

cryptarch··on Emacs 25.2 released
Thank you for reminding me of the security implications!

I tend to forget there's a more reasons I develop on Debian Stable than "it's convenient to standardize on something you can run on prod".

cryptarch··on How Airline Workers Learn to Deal with Passengers
Ah, I'm Dutch so flying within the country isn't really a thing. The longest train ride possible is about 3,5 hours and goes every hour.

I think that suprises most people :)

Hard to do on a Ryanair/Easyjet flight though, where your legs slowly merge with the chair in front of you...

← PreviousPage 6 of 16Next →