HNHacker News
TopNewBestAskShowJobs

dbalan

506 karma · joined August 17, 2013

submissionscomments
dbalan··on Magic/tragic email links: don't make them the only option
The 404 article irked me a lot, thanks for writing this.
dbalan··on Icecream: Never use print() to debug again in Python
This is a really nice tool. But the fundamental reason most go for print is because its right there and that wins over other UX improvements or machinery. Python is a language where you can get a reasonably good debugger with a single line almost anywhere, still people reach for print()
dbalan··on Backblaze Hard Drive Stats for 2020
HGST is sadly just WD now.
dbalan··on Keybase cancels Stellar token airdrop
For people like me who is confused about what this means: https://airdrops.io/stellar/
dbalan··on Ask HN: What are some good, technical podcasts?
I am not sure what do you mean by technical,

- but 99% invincible is a podcast talks about how things (a very broad definition) work - often from a design/interconnections viewpoint.

- Beats, Rye and Type is nice but they seems to be dead

dbalan··on Amazon Ring went from a smart doorbell company to a surveillance network
That's the central problem, isn't it? Technology only gets more complicated, and we have never bothered much about giving general population effective tools and skills to make informed decisions for themselves. A well-known company vouches for something, and that's all I'd know if I was buying a ring device.
dbalan··on Samsung Announces Key-Value SSD Prototype
It won't be much different than what the current generation storage devices contain.

You already need to upgrade SSD firmware these days. Linux fwupmgr has support for few of them.

dbalan··on Extended Validation Certificates Are Really Dead
I don't have any solutions to your last statement, but one of the problem is that legal name of the entity matching doesn't really mean its the same entiy you think it is - the example ( also in the original page): https://stripe.ian.sh/
dbalan··on Plotty Bird: flappy bird on the HP7440A pen plotter
Ebay has a tonne of them. https://www.ebay.com/sch/i.html?_from=R40&_trksid=p2334524.m...
dbalan··on Keeping a plaintext “did” file
Self plug: I wrote https://github.com/dbalan/idid to do more or less the same thing when my did file needed a bit more structure (also an excuse to write some haskell).
dbalan··on Use a Mikrotik as Your Home Router (2017)
As a side note, I'd consider trying to flash something openWRT on other routers that anybody owns. There are not really many companies that keeps releasing patches for consumer devices unless there is a major outcry (for e.g KRACK). In most cases your router in a small MIPS box running linux (consumer ones), treat it as you'd treat your other systems and update it often!
dbalan··on Use a Mikrotik as Your Home Router (2017)
The original seems to be down. Google cache: https://webcache.googleusercontent.com/search?q=cache:c9vt2e...
dbalan··on Facebook Container for Firefox
I like this, but 2018 Internet is essentially needing this for every website you visit.
dbalan··on Guide to Slack import and export tools
This is going to be a problem for open source communities that use a semi-public slack as the communication platform. I don't think the users expect the DMs to be public to the project admin.

Its not necessarily bad. Bit it might be time for those communities to move.

dbalan··on An analysis of the Nomx secure communications device
GCache: https://webcache.googleusercontent.com/search?q=cache:3TT35M...
dbalan··on iPad 9.7‑inch
Its nice to give consumers choice, but it puts extereme pressure on Apple to commit to their things works across every apple product policy. Most of loyal [non dev] apple consumers count on this.
dbalan··on Enroute Airbus A380 wake flips Challenger business jet upside down
IMO this has slightly better info: https://avherald.com/h?article=4a5e80f3&opt=0
dbalan··on Python moved to GitHub
So python eventually moved to git from mercurial.
dbalan··on Apple Said to Work on Mac Chip That Would Lessen Intel Role
Both CPUs are connected with a PCI bus and as far as the main SOC is concerned its a bunch of peripherals on PCI

https://media.ccc.de/v/33c3-7946-console_hacking_2016

dbalan··on Club Penguin is shutting down
For people who is wondering what it is.. "Club Penguin is a massively multiplayer online game (MMO) involving a virtual world containing a range of online games and activities,"

https://en.wikipedia.org/wiki/Club_Penguin

dbalan··on About backdoors in crypto messengers
Some observations, 1. At this point its extremely hard to use XMPP - there are too many competing standards that implements encryption (of which a subset has forward secrecy), and if sender server doesn't implement any the other end does, usually falls back to plain text, one can disable it - but this is just too much overhead for a regular user. (food for thought [1])

2. Again, reminder from countless HN comments - there is a PR in works to make GCM optional[2], as soon as its merged, this will be solved

3. Maps seems to the real problem here: this could be disabled after 2? (otherwise, whats the point?)

[1] https://whispersystems.org/blog/the-ecosystem-is-moving/ [2] https://github.com/WhisperSystems/Signal-Android/pull/5962

edit: formatting, forward secrecy not e2e

dbalan··on 33C3 talk on dissecting cellular modems
system() is one of the most abused function in that code.
dbalan··on Add-ons in 2017
Added OT tag, I was not comparing webextensions, pointing out, this is still an unsolved problem.
dbalan··on Add-ons in 2017
Slightly OT: There is another problem that most people seems to miss. Add-ons in their current form in ff are tightly coupled to the browser to the point that it's the browser itself. In the modern web, the browser knows too much about you, and so does the add-on, and it's not unheard of them to explore it[1]

How does that free webpage to PDF converter add-on make money? By selling your web history of course.

[1] https://www.google.de/amp/thehackernews.com/2016/11/web-of-t...

EDIT: added OT tag

dbalan··on Show HN: StockDroids.com – A curated list of near-stock Android devices
Adding a row about the update situation of device would be nice. 1. Updates promised untill X year 2. Only security patches, etc.
dbalan··on 700 megapixels served in under 700 miliseconds
Can somebody explain how this works?
dbalan··on Oracle is gunning for AWS with new infrastructure offering
Oracle built hardware == so Solaris on SPARC?
dbalan··on Think You Bought Red Snapper? Don’t Be So Sure
Apparently it's not limited to fish industry. A lot of ingredients are substituted behind the scenes and recipes altered when crossing geographic boundaries. [1] https://nypost.com/2016/07/10/the-truth-behind-how-were-scam...
dbalan··on Why aren’t we using SSH for everything?
Mosh helps in this case, they buffer the keystrokes and liberates user frustration by giving a visual response.

[1] https://mosh.mit.edu

dbalan··on How foreign governments spy using PowerPoint and Twitter
The original report has much detailed explanation with all the facts[1]. I was left wondering how an ppt downloaded an app into an Android phone.

[1] https://citizenlab.org/2016/08/group5-syria/

Page 1 of 3Next →