HNHacker News
TopNewBestAskShowJobs

div72

143 karma · joined November 13, 2021

I like cryptography, programming languages and stuff.

Feel free to say hello on Matrix. (@div72 on matrix.org)

submissionscomments
div72··on DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
It'd be far more acceptable to block the CG-NAT IPv4 addresses if you knew that the other non-compromised hosts could utilize their own IPv6 addresses to connect to your service.
div72··on Google has most of my email because it has all of yours (2014)
Have you seen headscale? It's a bit of work if you don't have a selfhosting setup but it enables you to use the service without being at the whim of Tailscale.
div72··on Xiaomi MiMo Reasoning Model
> The largest portion of all languages in Common Crawl

https://commoncrawl.github.io/cc-crawl-statistics/plots/lang...

div72··on I think we need a bigger boot partition
What? Why is your NVIDIA modules even in the boot partition? My largest /boot is on Fedora and that's 454MiB, 87MiB on Arch and 30MiB on NixOS.

EDIT: "With grub, the situation varies; if the device has a graphics card, it usually means that driver modules need to be placed in the boot as well.", "usually" carries a lot of weight here, none of the systems I had had this kind of a requirement.

div72··on Reviewing the cryptography used by Signal
Except TLS-SNI sends the hostnames in plaintext during the handshake and you can't disable it in at least Firefox AFAIK.
div72··on Ask HN: Is it a bad idea to make an email domain with an uncommon TLD?
Are you sure you were informed by Thunderbird and not by your SMTP server?
div72··on ROOT: analyzing petabytes of data scientifically
Only for the optional "read time travel and world domination plans" module.
div72··on Copyleft licenses are not "restrictive"
Copyleft licenses are restrictive as obligations are restrictions. "You must provide a source code to your users" is equivalent to "You cannot use this software if your source code is not available to your users".

Freedom is a finite resource in which copyleft licenses take from the developer to give to users. (which ends up at the same point as the article but I prefer wording it this way.)

div72··on China blocks use of Intel and AMD chips in government computers
Isn't ARM's TrustZone equivalent to ME/PSP on Intel/AMD?
div72··on Open-Source AI Is Uniquely Dangerous
> This is a guest post. The views expressed here are solely those of the author and do not represent positions of IEEE Spectrum or the IEEE.
div72··on Web Browser Telemetry
The post is about unsolicited requests at startup, Tor Browser does not connect to Tor unless you click Connect or enable the auto-connect option.
div72··on It's never been a better time to switch to Firefox
Weird thought, but have you tried using Selenium?

Seems like launching a browser tab with:

    from selenium import webdriver
    driver = webdriver.Firefox()
and navigating to duckduckgo.com:

    print(driver.current_url) # https://duckduckgo.com/
works.
div72··on Servo announces grant from the NLnet Foundation
> When are we going to talk about how openly corrupt Mozilla has become?

It's routinely discussed on HN, whenever a topic about Mozilla/browsers comes up. The real question in my opinion is what can we do about it? Start an awareness campaign? Stop using Firefox? Stop donating to Mozilla?

div72··on City officials attempt to doxx Wikipedians
Probably because of attribution. I assume that most Wikipedia articles are licensed under a version of CC with attribution requirements.
div72··on How to store a permutation compactly (2022)
For something to be used in PoW, it needs to be both hard to solve and easy to verify. Protein folding checks the first box but not the second. As an example, prime number calculations check the both boxes and there's Primecoin which bases its proof algorithm on prime chains.

This only applies if you prefer to be trustless though. If you are willing shed a bit, you can trust Folding@Home's scoreboard data (and whoever supplies the data to you) to use it as a pseudo-"PoW" and run a proper proof algorithm beneath. (which is also done by a number of coins like Banano, Curecoin, Gridcoin. You can see their people on the leaderboard with weird names like x_ALL_x, x_GRC_x or just bunch of non-sensical alphanumeric characters.)

div72··on ChatGPT's Chess Elo is 1400
I agree with your conclusion but the example you gave of Magnus Carlsen doing an illegal move is a pretty bad one imo. That was clearly a trap from his opponent as he did an illegal move first by checking Magnus while he was under check and then immediately calling the arbiter when Magnus moved his king in response. Magnus also probably did not have had much time left as it was a Blitz game.
div72··on Stride – Open-source C# Game Engine
Seems like a typo, dropping the s at the end works.
div72··on Show HN: Socketify.py: Http/Https and WebSockets servers for PyPy3 and Python3
Probably should add that it's faster with PyPy as it might not be obvious on how an interpreted language like Python can beat an AOT compiled language like Go.

Interesting results nevertheless.

div72··on FreeBSD: Stack Overflow in Ping(8)
Dupe of https://news.ycombinator.com/item?id=33798604.
div72··on The End of /R/GPUMining
That's a pleasant mention of Gridcoin but I'd like to clarify that you do not actually mine Gridcoin. Gridcoin rewards scientific work for the BOINC(Berkeley Open Infrastructure for Network Computing).

(Not that your comment is wrong but one could miss the mention of scientific computing while skimming.)

(Also BOINC and Gridcoin both are open source and needs some love from contributors. I'd like to drop their links for anyone who has free time.

https://github.com/BOINC/boinc https://github.com/gridcoin-community/Gridcoin-Research )

div72··on Erg: a statically typed language that is Python compatible
It'd not fully solve your issue, but have you ever seen https://github.com/py2many/py2many ?
div72··on Show HN: Formie – an open source (WIP) form website made with pure HTML/JS/CSS
Yes, that is on my mind. I was actually planning on letting the user do some queries as the form data is actually stored in a sqlite database anyways.

Can you link to your format if it's public? I'm interested.

div72··on Show HN: Formie – an open source (WIP) form website made with pure HTML/JS/CSS
I suppose something like WebTorrent could be used in that instance? The peers could eliminate the need for the server.

Still that's too much JS for my minimal/no-JS goals.

div72··on Show HN: Formie – an open source (WIP) form website made with pure HTML/JS/CSS
I've semi-thought about that and edited the post but wish I actually edited the title instead(the option is gone now). I was thinking of pure as in no React etc., did not think that this could be interpreted in that way initially.
div72··on Show HN: Formie – an open source (WIP) form website made with pure HTML/JS/CSS
Bottom of the post: https://formie.div72.xyz/forms/

What makes it special for me is that it's simple, open source and does not track you. (and the lots of bugs hiding I suppose)

div72··on Over 13k Vivo phones found to be using same IMEI number (2020)
They probably filter foreign SIMs so you won't have an issue but people with local SIMs do need to pay a one time fee for phones you bring from abroad. (not for the ones you can buy here)

I've heard some people clone IMEIs from the old phone when getting a new phone from abroad and that it does reduce the cost significantly.

div72··on Crypto exchange revenue jumps by 600% and surpasses traditional markets in 2021
> Lots of people get their crypto seized by the government, all the time. At one point the biggest single Bitcoin wallet holders were the FBI and the Bulgarian FBI. It's time to let that narrative go.

Cryptocurrencies are not "backdoored" like the banks as governments cannot order Bitcoin to hand over a specific person's money. While you can bug their keyboards or compromise their OSes etc., the best you can do is a $5 wrench attack if your target is not willing.

div72··on Fix the unit test and open a giant hole everywhere
I am not exactly sure if parent's code execute the way you think it does. path is provided as an argument to mkdir -p, even if you set path to be a string with 20 arguments copied from your shell, it'll get passed as one.

I assume you meant something like subprocess.run(['mkdir', '-p', '--', *path.split()]), which in that case using shlex.split will fix your problems with quoted strings.

div72··on Man to sue parents for giving birth to him
Every reason you provided besides the last one is void in my opinion.

> Because you have no right to kidnap someone else’s child. Humans also have a right to live. Parents with better opportunities(whether through a better lifestyle or through better medicine) will be able to grant a better life expectancy for the child than the biological parents. This means that while there's no defined right to "kidnap" someone's children, the non-existence does infringe on an existing right.

> Because the human rights of the parents to raise their child and the rights of the child to be raised by their parents both determine that you shouldn’t. Ditto.

> Because you have no authority to determine what is better for the child And who does exactly? The people bringing the child to this world without consent? The government? Hypothetical better parents? Once a child grows up to a sufficient age we assume that the person has gained enough sufficient mental capacity to decide for themselves(which is also debatable but let's leave that for another day). That line gets only more blurry the younger the child is and how do we know who exactly has this "authority" to determine this?

Modern family structure gave this authority to the biological parents due to the complexity of the question above but this is still a debatable point in my opinion. I heavily doubt that the status quo will be challenged in the near future.

> Because the ends don’t justify the means. I agree with this as taking children of people can cause significant distress for reasons I assume evolution related. And moving whether ends justify the means or not aside, no one has the authority know whether an outcome is the "better" outcome for a child or not so the ends are also blurry.

div72··on Clumps of human brain cells in a dish can learn to play Pong faster than an AI
Although another commenter said that they are signaled electrically, neurotransmitter might be the word you are looking for.
Page 1 of 2Next →