HNHacker News
TopNewBestAskShowJobs

eboyjr

195 karma · joined August 12, 2011

[ my public key: https://keybase.io/dsamarin; my proof: https://keybase.io/dsamarin/sigs/XG7cH9pQrtkHLyhKe5KmthUe8oVPwimAW3IeafmcPxI ]
submissionscomments
eboyjr··on We (reddit) had a security incident. what you need to know
Who would have the resources for an SMS intercept?
eboyjr··on Rapidstring: Maybe the fastest string library ever
The Boyer–Moore string-search algorithm?
eboyjr··on Detecting the use of "curl | bash" server-side
I'd like to point out that the author is not directly discrediting shell pipes.

> a knowledgable user will most likely check the content first

The obvious workaround would be to download with curl, inspect, then run the virtually same inspected file through bash. This workflow is easier without necessarily using pipes. Package files can also be inspected before running and are not directly inspected in the browser.

Trust on the other hand is more complicated. Without doing tedious manual inspecting, you have to rely on the distributor. In this case, public keys aid in this regard, but also does not work with the `curl | bash` workflow.

eboyjr··on Melting metal with a magnetic field
Is this technique applied anywhere?
eboyjr··on What OpenStreetMap can be
Keep watch for the live streaming[0] of the State of the Map 2018 event tomorrow (July 28-30). They already have interesting videos on their channel such as using OSM for traffic simulation.

[0]: https://www.youtube.com/channel/UCLqJsr_5PfdvDFbgv1qp2aQ

eboyjr··on Color or Fruit? The Unlikely Etymology of “Orange”
Orange you glad that etymological histories are studied so in depth?
eboyjr··on Lab Spend – Pricing Search Engine for Research Chemicals and Supplies
Allowing the searching and purchase of used equipment would also help those facilities running on a shoestring budget.

How to start a lab when funds are tight: https://www.nature.com/articles/d41586-018-05655-3

eboyjr··on Egypt zoo accused of painting donkey to look like a zebra
At least they weren't using stuffed animals

https://www.bbc.co.uk/news/av/world-middle-east-17817602/gaz...

eboyjr··on Waymo’s autonomous vehicles are driving 25,000 miles every day
Thanks for playing Devil's Advocate. This technology applies to mobile transportation in general and it doesn't necessarily have to effect greenhouse gas emissions. Additionally, I believe the infrastructure for producing cars applies to such a broad category in regards to driving climate change. The manufacturing industry needs to independently solve this problem.
eboyjr··on The moving sofa problem
> ...describing sofas in terms of the translations and rotations as a function of time is by now a standard way of thinking about the moving sofa problem, and has been used in the attack on the problem by Joseph Gerver in his paper from 1992, and in my own recent paper, where among other thing I made precise your suggested notion of describing the sofa shape that results from the continuous intersection of corridors rotating and translating over time. See my paper (available here: https://www.math.ucdavis.edu/~romik/data/uploads/papers/sofa...), and especially Theorem 1 in section 2.

Dan Romik

eboyjr··on No Paper Is That Good
You said it. He proposed the model for digital AND analog communication still in use today. Although being a digital software person I admit I've never been motivated to read the part about continuous channels.

I was motivated however to install an archway for my house from the exact shape in Figure 7 (binary entropy function)

eboyjr··on (Very) Basic Eliptic Curve Cryptography
In this example, an EC private key is made up of 256 bits of "randomness". Nearly every 256-bit number is a valid ECDSA private key.

However, an RSA private key is made of up specific numbers like a modulus, private exponent, etc that contribute to its length. In principle this is all you need. But usually other generation parameters are included that speed up calculations for the Chinese Remainder Theorem.

When it comes to network bandwidth, the number one concern relates to the symmetric algorithm used for message encryption and Message Authentication Coding (MAC) for integrity checking (this is unrelated to the choice of RSA versus ECC). Smaller embedded systems may start sessions more frequently, or the asymmetric authentication may be a larger percentage of the overall traffic and the size of the keys and signatures can make a difference. At the 128-bit security level, public keys and signatures are six-times larger for RSA than for ECC. Private keys are 12-times larger for RSA compared to ECC at the 128-bit security level. The key size generally has no impact on performance, but size matters when it comes to the cost of secure storage of the keys.

eboyjr··on I had to learn assembly language to truly understand my grandfather
A great simple story. This will potentially mov eyes, tears;
eboyjr··on Choice of search engine on Android nuked by “Anonymous Coward” (2009)
I would love to know if this commit was directly to master or if it was merged by someone (or something) else...
eboyjr··on Amiga 600 FPGA Conversion
It’s been a good amount of time for me seeing custom mouse cursors (maybe since the days of MySpace). Very fitting. Thanks for taking me back, amigalove.com
eboyjr··on Is My Phone Recording Everything I Say? Researchers Investigate
Her credit card and per item purchase history is in a database somewhere linked with her social network identities. Combine that with targeted ads and you have a consistent personal reminder of your purchase history.
eboyjr··on How a Hacker Proved Cops Used a Stingray to Find Him
Just a half-baked idea: If you don't want to make a new request for every connection, and the recipient owns a huge block of IPv6 addresses, the recipient can create an asynchronous key pair where the public key is used as the IPv6 suffix. The United States Department of Defense owns /13. This provides 115 bits of public key information. The sender can use the IPv6 address as the public key.
eboyjr··on Ask HN: Old CS lecturer looking for advice from current and recent students
I think we all love stories about how a certain technique was applied in practice to reduce memory or speed complexity. You can even play with their intuitions, asking how much memory or time they can save by switching an algorithm. And then revealing the truth!
eboyjr··on The Pros and Cons of Stealing Fine Art
How do you advertise only certainly to shady people?
eboyjr··on Codec2: A Whole Podcast on a Floppy Disk
Xerox copier flaw changes numbers in scanned docs: https://www.theregister.co.uk/2013/08/06/xerox_copier_flaw_m...
eboyjr··on Sony Develops 4,032ppi OLED Micro-Display
This must have applications for VR as well.
eboyjr··on Oracle Separation of BQP and PH
A more readable editorial can be found here: https://www.quantamagazine.org/finally-a-problem-that-only-q...

> Computer scientists Ran Raz and Avishay Tal provide strong evidence that quantum computers possess a computing capacity beyond anything classical computers could ever achieve. . . . They prove, with a certain caveat, that quantum computers could handle [a specific kind of computational problem] efficiently while traditional computers would bog down forever trying to solve it.

eboyjr··on Goodhart's Law: When a measure becomes a target, it ceases to be a good measure
Reducing a situation to a single measurement hides the dimensionality. I think intuition accounts for more kinds of measurement albeit less accurate or describable.
eboyjr··on Methods of Comparison, Compared: A Visual Guide to Comparing Change
Useful for some politicians.
eboyjr··on How to Print Floating-Point Numbers Accurately (1990) [pdf]
For reference and discussion, skimming the docs, the algorithm is described here [0] and contains some improvements suggested by the "Errol paper"[1]

[0]: http://www.cs.tufts.edu/comp/150FP/archive/florian-loitsch/p...

[1]: https://news.ycombinator.com/item?id=10915182

eboyjr··on Setup an Nginx reverse proxy for your Docker containers
I have had great success with docker-gen which allows me to generate nginx configuration so that I can reload automatically.
eboyjr··on “Good Luck with That” Public License
Basically yes. Thinking as a lawyer though you don't want to leave interpretation of "trace or track" to a judge. In the rare case that there is a dispute, it opens it up for ambiguities which increase risk.
eboyjr··on DropIt – A file uploader built with Node.js
There is also https://github.com/oftn-oswg/zerodrop which supports expiry and blacklists with geofencing.

Info: https://eligrey.com/blog/zerodrop/

eboyjr··on Beware of strncpy and strncat
Interesting how the "solutions" to the buffer overflow problems don't provide for all of the modern assumptions of programming with strings. I would love to know the history of the development of strncpy.
eboyjr··on “Good Luck with That” Public License
Right. I hope nobody actually uses this joke because to a lawyer it is not so.
← PreviousPage 2 of 4Next →