HNHacker News
TopNewBestAskShowJobs

deknos

587 karma · joined March 31, 2017

submissionscomments
deknos··on The web does not need gatekeepers: Cloudflare’s new “signed agents” pitch
> But the reality is how can someone small protect their blog or content from AI training bots? E.g.: They just blindly trust someone is sending Agent vs Training bots and super duper respecting robots.txt? Get real...

baking in hashcash into http 1.0/1.1/1.2/2/3, smtp, imap, pop3, tls and ssh. then this will all to expensive for spammers and training bots. but IETF is infiltrated by government and corporate interests..

deknos··on Ghrc.io appears to be malicious
Wouldn't DNSSEC solve stuff like this?
deknos··on Using Podman, Compose and BuildKit
i am always missing podman(-compose) cp as docker(-compose) cp :( That was so convenient.
deknos··on A privacy VPN you can verify
> has a proper signature under Intel's CA trust.

That's a pretty big trust already. Intel has much to loose and would have no problem covering up bugs for government in SGX or certifying government-malware.

And intel had a LOT of successfull attacks and even with their cpu they are known to prefer speed than security.

deknos··on Show HN: Edka – Kubernetes clusters on your own Hetzner account
it's more the thing, that if you put secrets on AWS, you are STILL dependent on AWS even if you run things on hetzner. It would be better, if you find a solution for secrets maintenance which runs on hetzner..
deknos··on Show HN: Edka – Kubernetes clusters on your own Hetzner account
Am i the only one who is confused about "Hetzner" in the title and "AWS KMS" in the body?
deknos··on Progress towards universal Copy/Paste shortcuts on Linux
instead of some universal shortcuts, i would prefer to have another meta key, that we finally can do another-meta+ctrl+alt+ascii for more combinations :D

universal shortcuts are overrated and get in your way anyway :D

deknos··on OpenSSH Post-Quantum Cryptography
I am still asking myself when we get pq keys for host and authentication
deknos··on Ring introducing new feature to allow police to live-stream access to cameras
in germany we found out about built trojans on PCs when a policeman installed that on the computer of his daughter to track her what she does.
deknos··on Microsoft Office is using an artificially complex XML schema as a lock-in tool
It's not only about the XML itself, but that microsoft really likes to change the standard any time opensource catches up.

and most of the time they do not use their open standard, but the other document type.

The artificial vendor lockin is real.

deknos··on Linux and Secure Boot certificate expiration
orrr we just have official institutions which do this and enforce vendors to add certificates from other trusted parties. not only microsoft is able to do this. also microsoft already also had fallout regarding signing.

and secure boot is still the antichrist, but we have to live with them.

deknos··on Fully homomorphic encryption and the dawn of a private internet
From your perspective: which FHE is actually usable? Or is only PHE actually usable?
deknos··on Roman dodecahedron: 12-sided object has baffled archaeologists for centuries
i would assume it has to do with thread, sewing and knitting. :D
deknos··on A Virginia public library is fighting off a takeover by private equity
This all would be so much easier, if libraries could give out electronic books
deknos··on Delta Chat is a decentralized and secure messenger app
did you look into their spec? perhaps they used the updated openpgp standard which has authenticated encryption. or perhaps they just sign everything.

and it's not just pgp with email, it's more akin to an overlaysystem.

deknos··on Why do we need DNSSEC?
yeah, the same for the rest. your fanboys are happy and the rest is just tired, because everyone who does not share your point of view has a invalid opinion.
deknos··on Bzip2 crate switches from C to 100% Rust
i wait until they come to the hard stuff like awk, sed and grep.
deknos··on Spoofing OpenPGP.js signature verification
the design is not bad per se. pgp is just a bit outdated and needs an overhaul.

And cryptographic serialization is just difficult.

deknos··on Spoofing OpenPGP.js signature verification
with that argument TLS would be insecure, because there are insecure TLS implementations.
deknos··on Why not use DNS over HTTPS (DoH)?
is it possible to route DoH over generic HTTPS service when i only inspect a certain route? so i could have a generic https-server, where at some route, DNS requests are answered, other stuff just gives me a normal website?

because then we could use DoH for hiding our DNS requests..

deknos··on Urtext: The Python plaintext library for people who've tried everything else
i just wish, somebody would ratify something like asciidoc+zim-wiki as a document format .. and include proper citing (like in emails).

Than all this code+program+data could be decoupled.

deknos··on Wikipedia’s nonprofit status questioned by D.C. U.S. attorney
To be honest, many of the people who critize wikipedia.. just do not want to fork the content. it would be possible. they all like the work people put into it. but as soon as it does not fit the worldview anymore...

are there manipulations? sure. then more people should watch it. and wikipedia should have a better process on controversal topics in own areas.

but the whining is abysmal.

deknos··on Getting forked by Microsoft
> We hear you loud and clear ..

oh, corporate wording. so you do not really care :D

deknos··on Three Felonies a Day (2013)
> The feds don’t generally indict unless it’s a slam dunk.

You do not need to. You can ruin reputation. You can starve them in court proceedings and rituals.

deknos··on Three Felonies a Day (2013)
> 1. Millions of business executives go their entire life without insider trading

Citation needed. At some point at some position you will be ALWAYS vulnerable. that's for the people at the top and at the bottom. both are very vulnerable. the people at the top have MUCH to loose. the people at the bottom can be stopped to have anything to loose and still be tortured.

deknos··on Lessons from open source in the Mexican government
i do not have your email... but you SHOULD have my telephonenumber. i gave it to you.
deknos··on Anubis Works
but i do not want to go OVER tor, i just want a service over clearnet? or is this something else? do you have an URL?
deknos··on Anubis Works
ups, yes, sorry, their.
deknos··on Anubis Works
I wish, there was also an tunnel software (client+server) where

* the server appears on the outside as an https server/reverse proxy * the server supports self-signed-certificates or letsencrypt * when a client goes to a certain (sub)site or route, http auth can be used * after http auth, all traffic tunnel over that subsite/route is protected against traffic analysis, for example like the obfsproxy does it.

Does anyone know something like that? I am tempted to ask xeiaso to add such features, but i do not think his tool is meant for that...

deknos··on Lessons from open source in the Mexican government
Well, computer power was not super, but it was enough for most tasks.

and musin is not the city of munich, that's federated governments for you

> Anyway nice to see (or rather: read) you again!

Dito, i hope you are fine :)

← PreviousPage 3 of 11Next →