HNHacker News
TopNewBestAskShowJobs

dsp1234

3,944 karma · joined September 11, 2014

submissionscomments
dsp1234··on LastPass’ Authenticator app is not secure
Why?

1.) LastPass login page hashes MasterPassword on the login page to produce a hash

2.) Hash is sent to the forums, and is checked against the same hash as the vault system

3.) Hash is confirmed, and you're logged in.

1.) Later hash is grabbed by an attacker.

2.) Attacker sends the hash to get the encrypted vault

3.) Attacker gets the encrypted vault

4.) Attacker is sad, because they don't have the MasterPassword, and thus have no access to all your passwords

Note that I'm not saying that they are awesome, and/or are doing the above. But it's not immediately obvious that a MasterPassword can't hash a forum login and a vault request at the same time. I mean, that's literally what the "MasterPassword never leaves the client" is supposed to mean.

[0] - https://lastpass.com/support.php?cmd=showfaq&id=6926

dsp1234··on California employers prohibited from relying on an applicant's salary history
Oregon also had this as of Oct 1st, 2017.

[0] - http://www.oregon.gov/boli/TA/Pages/Equal%20Pay%20Law.aspx

"Effective October 6, 2017 employers are prohibited from seeking the pay history of an applicant or employee from the applicant or employee or a current or former employer of the applicant or employee before the employer makes an offer of employment to the prospective employee that includes an amount of compensation;"

dsp1234··on Harvey – An effort to provide a modern, distributed, 64-bit operating system
Note that Plan 9 is already licensed under GPLv2 (with caveats I guess)[0][1]

[0] - https://news.ycombinator.com/item?id=7232042

[1] - http://akaros.cs.berkeley.edu/files/Plan9License

dsp1234··on Study finds police body cameras had no significant impact on use of force
There exists no computer in the world that can combine the memory of hundred of thousands of police officers together. With video footage, that's not necessarily true.
dsp1234··on Enforcing New Rules to Reduce Hateful Conduct and Abusive Behavior
If the President (any of them) posted here at HN, and starting saying things against the site and community rules, then I would 100% hope that the moderators would "police his speak".

The President is a person, not a god. If they want to use a private platform to speak, then they have to accept that platform's rules, just like anyone else. If they don't like that platform's policy, then they can use any other platform in the world.

dsp1234··on Internet Chemotherapy
So what you're saying here, is that you're happy to let me drop a device of my choosing on to any part of your network, and that you'll take full responsibility for any damage caused because it was your (or your own developer's) negligence.
dsp1234··on China's Nio takes on Tesla with a car half the price of Model X
Why do they compare it to model X and not model 3; is it because its specs are simular to model X? Doesn’t look like a van or SUV at all.

ES8[0]

Model X[1]

Comparing these two, the ES8 is bit blockier like the current set of crossovers. Whereas the Model X has the body shaping of a really big sedan. Neither have the 100% of the classic SUV look, but both have 5 seats and hatchback with a dedicated cargo area. Neither is like the Model 3, which is a sedan with a normal trunk.

[0] - https://www.nio.io/prod/s3fs-public/styles/scale_width_3840/...

[1] - https://www.tesla.com/sites/default/files/images/model-x/sec...

dsp1234··on Internet traffic for Google, Facebook, Apple was briefly rerouted to Russia
ASN's switched over to 32 bits around 2007
dsp1234··on A list of ways to “Break the Internet” for the 48 hours before the FCC vote
The Open Internet Order of 2010 established a set of net neutrality rules based around 3 concepts[0]:

1.) Transparency. Fixed and mobile broadband providers must disclose the network management practices, performance characteristics, and terms and conditions of their broadband services

2.) No blocking. Fixed broadband providers may not block lawful content, applications, services, or non-harmful devices; mobile broadband providers may not block lawful websites, or block applications that compete with their voice or video telephony services.

3.) No unreasonable discrimination. Fixed broadband providers may not unreasonably discriminate in transmitting lawful network traffic.

In 2014, in Verizon vs. the FCC[1], the appeals court struck down the No blocking and No unreasonable discrimination sections of the Open Internet Order. The court at the time noted that as long as broadband providers were considered under Title I, those sections could not apply to them. However, the court also noted that, in general, the FCC did have the power to enforce the Open Internet Order using Title II, and that the FCC had the ability to reclassify the ISPs under Title II.

Thus in 2015, the FCC reclassified broadband providers under Title II, thus making the No blocking and No unreasonable discrimination sections apply to them once again.

The history goes:

2010-2014: Transparency, No blocking, No unreasonable discrimination

2014-2015: Transparency, blocking ok, unreasonable discrimination ok

2015-now: Transparency, No blocking, No unreasonable discrimination

What the FCC wants to do now is to repeal the action taken to classify broadband providers under Title II, and move them back to Title I. This would again eliminate the ability of the FCC to enforce the Open Internet Order's No Blocking and No Unreasonable Discrimination sections.

[0] - https://en.wikipedia.org/wiki/FCC_Open_Internet_Order_2010

[1] - https://en.wikipedia.org/wiki/Verizon_Communications_Inc._v....

dsp1234··on A list of ways to “Break the Internet” for the 48 hours before the FCC vote
The first net neutrality rules were implemented in 2015.

This is patently incorrect. The Open Internet Order of 2010 established a set of rules based around 3 concepts[0]:

1.) Transparency. Fixed and mobile broadband providers must disclose the network management practices, performance characteristics, and terms and conditions of their broadband services

2.) No blocking. Fixed broadband providers may not block lawful content, applications, services, or non-harmful devices; mobile broadband providers may not block lawful websites, or block applications that compete with their voice or video telephony services.

3.) No unreasonable discrimination. Fixed broadband providers may not unreasonably discriminate in transmitting lawful network traffic.

From 2010 until 2014, that was Net Neutrality. In 2014, in Verizon vs. the FCC[1], the appeals court struck down the No blocking and No unreasonable discrimination sections of the Open Internet Order. The court at the time noted that as long as ISPs were considered under Title I, those sections could not apply to them. However, the court also noted that, in general, the FCC did have the power to enforce the Open Internet Order using Title II, and that the FCC had the ability to reclassify the ISPs under Title II.

Thus in 2015, the FCC reclassified broadband providers under Title II, thus making the No blocking and No unreasonable discrimination sections apply to them once again.

The history goes:

2010-2014: Transparency, No blocking, No unreasonable discrimination

2014-2015: Transparency, blocking ok, unreasonable discrimination ok

2015-now: Transparency, No blocking, No unreasonable discrimination

What the FCC wants to do now is to repeal the action taken to classify broadband providers under Title II, and move them back to Title I. This would again eliminate the ability of the FCC to enforce the Open Internet Order's No Blocking and No Unreasonable Discrimination sections.

If you believe that Net Neutrality is something that the FCC made up in 2015 and that for 25 years the internet blossomed without net neutrality rules in place, then you are believing an obvious, and easily researched lie.

[0] - https://en.wikipedia.org/wiki/FCC_Open_Internet_Order_2010

[1] - https://en.wikipedia.org/wiki/Verizon_Communications_Inc._v....

dsp1234··on Litecoin and Ethereum buys and sells are temporarily disabled
Even better, I should sell just a paper (well, an electronic one) stating you own some thin air.

That's basically what this is:

https://www.star-registration.com/

dsp1234··on A Five-Step Process for Planning a Rewrite of a Legacy Project
delete all dead code.

Boss: Rushes in and shouts, "Our production systems all went down when you pushed the latest code. WTF DID YOU DO!"

Me: Oh, I just deleted all of the dead code that had no references. That's great right? @olavk said it was easy.

Boss: You're an idiot. We use an on demand assembly loading system! You just wiped out a quarter of our code base, so the rest is failing due those missing assemblies. FIX IT NOW!

dsp1234··on Buys/Sells temporarily disabled on Coinbase
(for 20 minutes, 2 hours ago)
dsp1234··on Quantum Development Kit preview
Quantum computers can be simulated by classical computers up to a certain point.

Note that the 'certain point' here is a practical limit of time/efficiency. In terms of computability, anything that can be computed on a quantum computer can be computed on a classical computer with exponential slowdown. It's the exponential slowdown that results in the practical limit.

dsp1234··on Quantum Development Kit preview
"Real quantum computers exist RIGHT NOW. You can even write a program and run it on one from IBM!"

Let's be a bit realistic. It's a 5 qubit processor. I'm not sure how excited the general population were when the first 5 bit processor was available. There is still a ways to go before actually useful quantum computers are generally available.

"You have access to one now with the Quantum Experience. It is small at the moment, with a five-qubit processor, but it is a work-in-progress that we are continually improving."[0]

[0] - https://quantumexperience.ng.bluemix.net/qx/tutorial?section...

dsp1234··on Ask HN: Fully online CS degrees?
It basically does.

"an undergraduate degree in computer science or related field"[0]

[0] - https://www.omscs.gatech.edu/program-info/admission-criteria

dsp1234··on Ask HN: Fully online CS degrees?
"Preferred qualifications for admitted OMS CS students are an undergraduate degree in computer science or related field (typically mathematics, computer engineering or electrical engineering) from an accredited institution with a cumulative GPA of 3.0 or higher. Applicants who do not meet these criteria will be evaluated on a case-by-case basis; however, work experience will not take the place of an undergraduate degree."[0]

So unless that other field is Math or computer-related, then that's not really going to work, which is why I specifically mentioned "another field".

[0] - https://www.omscs.gatech.edu/program-info/admission-criteria

dsp1234··on Ask HN: Fully online CS degrees?
If you already have a BS (or higher) in another field, then Oregon State University has a 60 credit completely online computer science BS degree. They have 1, 2, 3 and 4 year tracks depending upon each person's available time commitment.[0]

If you already have a BS in computer science or a related field, then see this comment[1]

[0] - http://ecampus.oregonstate.edu/online-degrees/undergraduate/...

[1] - https://news.ycombinator.com/item?id=15899756

dsp1234··on “Faking It Till You Make It” Is Disingenuous
but its not an effective strategy for learning.

'Fake it til you make it' is about getting access to opportunities you wouldn't generally have otherwise. It's not a learning strategy, so it's not surprising that it's not an effective learning strategy.

dsp1234··on The suicide rate for farmers in the U.S. is more than double that of veterans
It's not criticism, it's responding to the question asked.

Q: How do we reconcile on the one hand farmers by trade leaving and wannabe farmers wanting to join a farm life?

A: "people who want to do x and have money can end up in a better spot than people who inherited x and have less money?"

dsp1234··on DC's I-66 express lanes debut with $34.50 toll, among the highest in U.S
FTA:

"Solo drivers, who before were barred from I-66 during rush hour, can use the lanes if they pay. That includes drivers of hybrid vehicles, which are no longer exempt. Motorcycles and vehicles carrying two or more people have free use of the lanes."

This is a new toll for allowing non-HOV drivers to use the HOV express lane.

dsp1234··on FCC won’t delay vote, says net neutrality supporters are “desperate”
What makes this decision arbitrary or capricious?

Note that 'Arbitrary or capricious' is a legal standard of review for a government agency's decisions[0].

"In administrative law, a government agency's resolution of a question of fact, when decided pursuant to an informal rulemaking under the Administrative Procedure Act (APA), is reviewed on the arbitrary and capricious standard. Arbitrary and capricious is a legal ruling where in an appellate court determines that a previous ruling is invalid because it was made on unreasonable grounds or without any proper consideration of circumstances. This is an extremely deferential standard."

It's a pretty low bar, but it exists.

[0] - https://en.wikipedia.org/wiki/Standard_of_review#Arbitrary_a...

dsp1234··on Alexa, are you listening?
You shouldn't be trusting your phone any more than an Alexa device.

I don't

dsp1234··on California updates laws around salary and criminal histories of job applicants
https://en.wikipedia.org/wiki/Job_fraud

https://en.wikipedia.org/wiki/Fraud

"Although elements may vary by jurisdiction and the specific allegations made by a plaintiff who files a lawsuit that alleged fraud, typical elements of a fraud case in the United States are that:

1.) somebody misrepresents a material fact in order to obtain action or forbearance by another person,

2.) the other person relies upon the misrepresentation, and

3.) the other person suffers injury as a result of the act or forbearance taken in reliance upon the misrepresentation."

Example lie:

I'm CCNA certified.

1.) Yes

2.) Yes (I'm hired)

3.) The company loses a government contract after finding out that I'm not actually CCNA certified, and the bid required all engineers on the project are CCNA certified (alternately, I completely screw up the routers and take the companies infrastructure out of the global routing tables)

Basically, if the company relies on the lie to hire you, and then later suffers an injury from that lie, then a fraud has been committed.

Note that it works both ways[https://en.wikipedia.org/wiki/Employment_fraud]

dsp1234··on AT&T wants you to forget that it blocked FaceTime over cellular in 2012
AT&T reversed their policy without Net Neutrality rules in place

After official complaints lodged with the FCC. Also, this was during the time period of the 2010 open internet order[0] and the 2014 court case[1], where ISPs and the FCC thought that the FCC had the authority to enforce "no blocking" violations.

So, saying "without Net Neutrality rules in place" is incorrect.

[0] - https://en.wikipedia.org/wiki/FCC_Open_Internet_Order_2010

[1] - https://en.wikipedia.org/wiki/Verizon_Communications_Inc._v....

dsp1234··on Things Many People Find Too Obvious to Have Told You Already
Did those proofs have to be novel, or were the proofs of already known concepts?
dsp1234··on Things Many People Find Too Obvious to Have Told You Already
Your average undergrad program... CS degree never doing anything novel in CS

Is this different than any other field? I was under the impression that most BS programs do not require novel research. That doesn't come until post graduate courses.

dsp1234··on Uber's use of encrypted messaging may set legal precedents
Which statutory data retention obligations are being talked about with regards to uber? The original commented seems to believe it's obvious.
dsp1234··on System76 ME Firmware Updates Plan
Just running from a live cd/usb is probably less disruptive than wiping, installing, wiping, installing.
dsp1234··on Pai: Twitter Is Bigger Threat to Open Net Than ISPs
I expect that if I send a letter to the editor of my newspaper, that they are free to edit out any cursing before putting it in their newspaper.

I don't expect (or want) the post office to open my letter, read it, and decide to charge an increased fee because I mention it.

I don't expect (or want) the post office to open the reply letter, and add an advertisement for the new government owned camping that just opened.

← PreviousPage 2 of 31Next →