HNHacker News
TopNewBestAskShowJobs

dlgeek

2,902 karma · joined April 11, 2012

submissionscomments
dlgeek··on A joke domain purchase turned in geopolitical warfare
Or maybe the sonde continued transmitting and they have data on where the guy took it which would help ID him.
dlgeek··on FIPS 140-3 is not a security guarantee, and auditors know it
FedRAMP actually has a bunch of workarounds for the problems of FIPS.

In the "FedRAMP Policy for Cryptographic Module Selection and Use" (https://www.fedramp.gov/resources/documents/FedRAMP_Policy_f...), there are a ton of gems that make it clear that the FedRAMP folks are fed up with the CMVP process backlog. The most explicit is:

"FRR9: CSPs shall determine if updating to a newer version of the software, whether or not its cryptographic modules are FIPS validated, would eliminate the vulnerabilities; if it would, CSPs shall promptly update if that is feasible."

dlgeek··on Show HN: We Fixed UniFi's Slow PPPoE Performance with PPPoE Half-Bridge
You're right about Quantum. I just went and checked my router config. (I switched from CL to Q about 6 months ago).

CenturyLink did use a full PPPoE stack though.

dlgeek··on Show HN: We Fixed UniFi's Slow PPPoE Performance with PPPoE Half-Bridge
Some of AT&T's fiber acquisitions still use PPPoE including CenturyLink and Quantum's fiber offerings (acquired from Lumen).
dlgeek··on Show HN: ssh ssh.place
Not OP, but agent forwarding is a significant concern.
dlgeek··on The tiny holdout building in the middle of Macy’s is back in view
You nerd-snipped me into digging through court records.

The case was 655669/2021 in the New York County Supreme Court (the Supreme Court is the name for the first-tier courts in NY state).

Docket: https://iapps.courts.state.ny.us/nyscef/DocumentList?docketI...

The parties were in settlement talks and postponed the hearing on an injunction and then settled and dismissed.

dlgeek··on PennyLane is an open-source quantum software platform for quantum
No, Penny Lane is in my ears and in my eyes....
dlgeek··on Goes-19 weather satellite enters Safe Hold mode
From the latest update (https://www.ospo.noaa.gov/operations/goes/status.html#datafi...), it looks like they're already restoring systems.

``` Update #3: DCS and SAR have returned to service as of 1630Z. Engineers will now work to restore ABI and expect imaging to resume by 1900Z. Image navigation may be slightly degraded for the first hour after imaging starts. The GOES-19 instruments will be restored in the following order:

    ABI
    GLM
    SUVI
    CCOR-1/EXIS/MAG/SEISS

The recovery process to return all GOES-19 instruments to normal operations is projected to take approximately 8 hours.

Update #2: The GOES-19 Safehold has been resolved and engineers are working to prepare for restart of the onboard instruments. More information on the recovery timeline will be provided when known. ```

dlgeek··on The 'absolute magic' of Morse code that still connects people globally
I heard incoming audio after I keyed once.
dlgeek··on The CEO of Mullvad is the main financer of the Swedish Örebro party
He's not just the CEO, he's a co-owner... Meaning that the profits from the business acrue to him... and therefore enable this party.

So, it's a question of "am I ok paying for this service, knowing that a portion of that money will flow to this political party and how do I feel about the results of that funding?"

dlgeek··on Astronauts told to return to ISS after sheltering over air leak repairs
Made by Chrysler. They had plenty of failures with the Juno I and Juno II launchers.
dlgeek··on Microsoft 0-day feud escalates as researcher threatens another exploit dump
Yes.

Some modern CPUs have moved the TPM inside the CPU itself. But traditionally, TPMs were attached via the LPC (low pin-count) bus, and you could absolutely sniff them or de-solder them and arbitrarily MiTM.

dlgeek··on AWS reportedly to tuck Grok into Bedrock, despite zero enterprise demand
Meh? First, demand isn't necessarily zero despite the author's assertion based on the exhaustive data survey of asking "a couple of other people". For instance, SpaceXAI was convincing all the banks who wanted to work on the SpaceX IP to purchase Grok.

Second, AWS's goal is clearly to make Bedrock be the place to go for all the models - they're pushing for completeness, and that includes Grok.

Would I use it? No. Am I at all surprised that AWS is adding it to Bedrock? Also no.

dlgeek··on Microsoft and OpenAI end their exclusive and revenue-sharing deal
Nope. I previously worked at a very big tech company (not Google) and they definitely had guidance like that in the social media policy.
dlgeek··on Tindie store under "scheduled maintenance" for days
It's like Etsy for small-scale electronics - if you build a cool, niche electronic device as an individual, Tindie is a marketplace to sell in low volume (possibly as a kit).
dlgeek··on Ransomware Is Growing Three Times Faster Than the Spending Meant to Stop It
https://xkcd.com/1200/
dlgeek··on Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
Wouldn't it be 75 cents then? (The cut would come out of higher pricing, since the payout is always a dollar).
dlgeek··on US appeals court declares 158-year-old home distilling ban unconstitutional
(Not the poster you're replying to)

Pretty sure they were pointing out the absurdity of Gonzales v. Raich (545 U.S. 1)... But that really is the holding of the US Supreme Court in that case.

dlgeek··on Anthropic acquires Bun
You want those people specifically. To get them, you need to hire them for a lot more money than you pay your current folks. That causes a lot of resentment with folks and messes up things like salary bands, etc.

But since they own equity in the current company, you can give them a ton of money by buying out that equity/paying acquisition bonuses that are conditional on staying for specific amounts of time, etc. And your current staff doesn't feel left out because "it's an acquisition" the way they would if you just paid some engineers 10x or 100x what you pay them.

dlgeek··on Go Cryptography State of the Union
Correctness to spec ensures interop works when everyone is on the same spec.
dlgeek··on Go Cryptography State of the Union
Yeah, there's a ton of correctness testing involved. That's mostly at the algorithm, rather than the module level, so it'll fall under CAVP/ACVP rather than CMVP.
dlgeek··on YouTube Removes Windows 11 Bypass Tutorials, Claims 'Risk of Physical Harm'
I mean... documenting the details of the investigation to support the first decision and relying on the documented details the second time would easily explain that.
dlgeek··on Norway reviews cybersecurity after remote-access feature found in Chinese buses
Whatever happened with the Polish trains that had all the backdoors that were discovered?
dlgeek··on Power over Ethernet (PoE) basics and beyond
Nerdsniped: You're describing a IEC 60320 C13 cable - they're technically only spec'd for 10A, which means you're looking at ~1200W, not 1800.

(However, UL will list them for the full 15A -> 1800W, and I'm sure plenty carry that. And for that matter, I suppose you can get twice that in Europe on 240v...)

dlgeek··on Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
Microsoft was a thing before email.

Microsoft was founded in 1975. The standard for SMTP wasn't published in 1981. Most early predecessors were the late 70s.

dlgeek··on ADS-B Exposed
Could be airlines that have a bias towards one or the other manufacturer, which results in a m'fr bias towards different origin/destination airports.
dlgeek··on What if I don't want videos of my hobby time available to the world?
I'll continue in the "not an expert" chain, but my understanding is that ITAR's prohibitions include communicating the information to a non-US person (a US person is a citizen or permanent resident), even if that is done on US soil.
dlgeek··on Signal Secure Backups
I think a large set of dictionary words are likely more user friendly. I think most people will have a lot more confidence on their ability to transcribe words to/from paper more accurately than a bunch of numbers - better built in error correction, etc.
dlgeek··on Mastercard deflects blame for NSFW games being taken down
In this case? Not that I know of, but I'm not following closely.

In general? Absolutely - search 'Operation Chokepoint'.

There's a great summary in the middle of this (very long) article under that header: https://www.bitsaboutmoney.com/archive/debanking-and-debunki...

dlgeek··on Ubiquiti launches UniFi OS Server for self-hosting
Woah...that's surprising.
Page 1 of 17Next →