HNHacker News
TopNewBestAskShowJobs

cyber

102 karma · joined April 29, 2011

submissionscomments
cyber··on U.S. Websites Go Dark in Europe as GDPR Data Rules Kick In
Careful which countries you go to with that VPN. You don’t want to intentionally circumvent an access control restriction. ;)
cyber··on Amazon sellers say that the company is losing millions to scammers
I wouldn't be surprised to if this was largely accounted for in supply side contamination issues. It appears that Amazon treats all SKUs identically, sourcing the closest one to fulfill and order, regardless of how that SKU arrived at Amazon.

A concrete example: No Starch Press customers are receiving counterfeit books when ordered from No Starch Press' Amazon store.

Even if this scam is caught, it's still cost Amazon money in dealing with the issue. (And cost legitimate vendors no end of frustration with legitimate customers receiving fake books.)

cyber··on Biomedical companies bleed 500k horseshoe crabs a year
Both of these require active threats.

"Stand your ground" laws just mean there is no duty(law) to seek retreat above all else before actively defending yourself.

"Castle", in California, simply means that if an intruder has bypassed a control (picked a lock, broke a window, etc) to gain entry then one can proceed on the assumption that they are there to do grave bodily harm. (And thus act accordingly.)

cyber··on Researcher: 4K passwords leaked from porn site, including US Govt credentials
I've for a while said that a _unique_ password is better than an _awesome_ password.

_Bad_ passwords are still bad, however.

(And for $DIETY's sake, don't use your work email address for non-work sites!)

cyber··on Clever reforms can reduce the power of NIMBYs and cut housing costs
Excepting that in SF the "everyone" does not want the land owners to make productive use of it: they want the status quo. (Well, the status quo of what the remember as being the "high point".)

Having witnessed protests that occurred midway through the reconstruction of offramps, (meaning an existing ramp was torn down, and they were half done rebuilding it), it's not so much NIMBY, but NBAA: Never Build Anything, Anywhere.

The only way that higher taxes would be beneficial is if SF landowners were actually allowed the freedom to upgrade their properties. Zoning, especially height restrictions (40' max over most of SF), as well as endless red tape, make it really hard to make productive use of prime land. Regardless if it's the original owner or new buyer.

( A new buyer is granted some slight advantage, but not enough to be meaningful.)

cyber··on Gone in Six Characters: Short URLs Considered Harmful for Cloud Services
One also needs to take into account how these larger companies' internal groups function.

"Brian" probably looked into it, knowing that obscurity != security, but got a response back from the group responsible that was the way they intended it to work, and that group's management wasn't going to do anything about it. "Brian" may have even put messages in the right ear up the management chain such that it would actually effect the outcome.

The fact that the email exchange lasted 2 months before "Brian" said "Sorry, not a case." probably means that "Brian" was trying to make it happen and had actually done an analysis.

* Note: I'm NOT Brian. I've never worked for Microsoft.

cyber··on The Untouchables – Why it’s getting harder to stop multinational corporations
If only there was a way to allow a people to hold power over their government.
cyber··on Show HN: Micro – a microservice toolkit
"""Micro was a way of creating a foundation for writing and running distributed systems. It's a pluggable architecture so that the underlying systems can be swapped out based on preference."""

At what point do we just admit that we've re-invented the large co-ordination frameworks of years past? Like CORBA? Is it the point where we add a JSON schema validator? or switch to Protocol Buffers or some variant?

cyber··on Report on Paris Attacks Shows No Encryption Evidence, NY Times Invents Them
"""One of the terrorists pulled out a laptop, propping it open against the wall, said the 40-year-old woman. When the laptop powered on, she saw a line of gibberish across the screen: “It was bizarre — he was looking at a bunch of lines, like lines of code. There was no image, no Internet,” she said. Her description matches the look of certain encryption software, which ISIS claims to have used during the Paris attacks. """

Possible explanations: 1. POST 2. Linux 3. Elm/Pine/Mutt

There are enough hints in her description that the woman they talked to would be 100% content with an OS that booted directly to the browser, and furthermore, she wouldn't know the difference.

cyber··on This is why we have Stuxnet
The issue is that it needs to be explained in terms that they can understand: ... or part of your line will fail, randomly, and may take over a day to repair, IF your maintenance procedures are current, if not, you'll lose 4-5 days of line time.

Note: not one mention of "security", or good neighbor, or infection, only cutting to the point.

cyber··on Atom 1.6 Released with Pending Pane Items, Async Git and Top and Bottom Bar API
For the people complaining that it's slow: what plugins are you running?

My contribution: Community packages used most often: api-workbench, fonts, language-sql-mysql, term3, vim-mode Others: dash, export-html, language-docker, linter, markdown-pdf, markdown-preview-plus, markdown-preview-plus-opener, markdown-scroll-sync, markdown-writer, stash-tabs

cyber··on How to Build an Electronic Bee Counter
I was really hoping they would tackle the harder problem of dealing with a production hive. Temperature and weight are fairly easy to monitor, but knowing activity would be useful in tracking hive health.

Oh, well, maybe a project for this summer.

cyber··on NetBSD support for psutil
Odd that it won't boot. What hardware are you running and which kernels have you tried? Any way for you to capture a trace?

This probably isn't the best forum to give you a hand. Can you hit one of the IRC channels or mailing lists?

cyber··on YC Updates and Additions
> In my opinion, companies like Google build one hit after another

Wait, what? Do you have any idea how many ideas they've churned through to get the relatively few hits they've had? Wave didn't do all that well. Orkut had a decent run before they dissolved it (almost 11 years) G+ is still in question.

Yes, they've had some success with some products. And made some excellent purchase decisions (you didn't think they wrote everything they released, did you? Urchin? Writely?).

They've also killed software instead of fully developing it: notebook, reader.

And that is to say nothing of the large numbers of 20% projects. I've personally heard engineers (as a whole) at Google being chastised because the success rate of 20% projects was too high.

cyber··on The WTO rules against “dolphin-safe” labels on tuna
You have it backwards. The farmed has been found to have higher mercury content.
cyber··on Google self-driving car pulled over for driving too slowly
Road speeds need to be re-evaluated every 5 years. They take into account the speeds of traffic that are currently flowing on the road.
cyber··on Google self-driving car pulled over for driving too slowly
Yes, it was: http://www.leginfo.ca.gov/cgi-bin/displaycode?section=veh&gr... states:

"360. "Highway" is a way or place of whatever nature, publicly maintained and open to the use of the public for purposes of vehicular travel. Highway includes street."

https://www.dmv.ca.gov/portal/dmv/detail/pubs/vctop/vc/d11/c...

"22400. (a) No person shall drive upon a highway at such a slow speed as to impede or block the normal and reasonable movement of traffic, unless the reduced speed is necessary for safe operation, because of a grade, or in compliance with law."

Yes, shocking. (Also, El Camino is a State Route, I'll let you look that one up.)

cyber··on Google self-driving car pulled over for driving too slowly
See CVC 360

"360. "Highway" is a way or place of whatever nature, publicly maintained and open to the use of the public for purposes of vehicular travel. Highway includes street."

http://www.leginfo.ca.gov/cgi-bin/displaycode?section=veh&gr...

cyber··on Ask HN: Why is there a black bar at the top of hacker news?
https://news.ycombinator.com/item?id=10557793 (tl;dr: Gene Amdahl)
cyber··on Firefox’s New Memory Tool
For a look into how disabling/enabling privacy trackers impact sites, try out the Privacy Badger plugin. It's got some granular support, and crowdsourced guidance. With a button to report when it broke a site!

Privacy Badger is an EFF project.

cyber··on TPP banning requirements to transfer or access to source code of software
Yes, it means that some states can allow rampant piracy, and other states who are aggrieved can not block the import from the offending stats. Which is precisely what some of those states want.
cyber··on Why DevOps Fails at Application Security
Until security is treated similarly to QA this will never improve. Along with quality, robustness, performance, etc; security needs to be treated as a first class feature.

That said, it's a tradeoff. I've seen releases with P1 bugs being released. In those situations it was a discussion between Eng, QA, and Client Operations to determine what was the best course of action. Technically a P1 went out the door. Technically there were 2 additional releases before it mattered to the client that would have been affected.

cyber··on Ask HN: Is there any Open source application performance management system?
Might as well disclose that Sentry is commercial-ware with a limited free tier:

What happens when my free trial expires?

When your trial expires we'll downgrade you to our free tier. Our free tier is limited to a single user and 250 events per day.

cyber··on A reimplementation of NetBSD using a Microkernel [video]
This is pretty cool. It would be neat to seem some of this technology folded back into NetBSD (potentially with the already existent modules infrastructure.)
cyber··on PGP released its source code as a book to get around US export law
Yes, the first book set was to test the "bandsaw" protocol and getting it back into electronic format.

IIRC, they also tweaked the font for better OCR.

cyber··on LinkedIn Ordered to Face Customer E-Mail Contacts Lawsuit
Ideally, you should be using a unique password at every site. There are plenty of secure password storage tools to help you keep track.

That way, even if there is a site breach, your other accounts are not at risk.

cyber··on Dear YC companies, I responded. You could do the same.
Unfortunately, it's also a learning experience of those padding their resumes.

If all it took was to apply, there would definitely be an opportunity for a data market: I would create submissions for the sole purpose of getting the credential response. From there I could build a map of what the industry is hiring. With that I can sell resume coaching services. (Amongst other data sales.)

cyber··on Automatic - Your car and smartphone, connected (YC S11)
I'd always been jealous of a friend's realtime gas metering on his BMW (up until the time I had to bring him gas at the side of the highway.)

I was intrigued, I hit the buy button. We'll see how well it actually works. I'd been meaning to get a code reader anyway. ;)

cyber··on 4Chan Founder Moot Sends Cease and Desist Letter to Startup Moot.It
I'll definitely be following this case! ;)
cyber··on How a Google Headhunter’s E-Mail Unraveled a Massive Net Security Hole
Also an ex-Googler here, they cast the net far and wide trying to pick up SRE. When I was there they were offering significant bounties for submitting recommendations that only had to make it pass the resume screen. Want a brand new shiny PS3? Less than 10* that made it past the resume screen, and it was yours.

I has additionally heard rumors that recruiters were so silo'ed that they would actually just throw away a resume rather than route it. Reason being that they were in a competition with all recruiters, and worst performers (based strictly on a numbers game) didn't get their contracts renewed.

*May have been as low as less than 5, its been a few years, and I never really took to memorize what was posted on the wall while I was at the urinal.

Page 1 of 2Next →