Hacker News Reader

ewamson Apple Stole My Music

The old Zune music is awesome. Just don't upgrade to XBOX music. https://www.microsoft.com/en-us/download/details.aspx?id=271...

Lots of people swear by winamp.

ewamson 1995 Programming on the Sega Saturn

Thank you for sharing. I recently have begun an interest in programming for old 1990's systems and this provides a great insight into the "best system" of the time and how developers felt about it.

Curious about the dev kit. You mention that Sega provided sample code and there was at least one other dev platform, did Sega provide support and good documentation or did you always basically have to figure everything out for yourself? Is this true for other vendors (ie, Nintendo, Sony and now MSFT)?

ewamson Never consider a travel planning startup

You can share your photos from your travel with your new date on our new app. We are changing the world!

ewamson Do the math on your stock options

Do companies actually change the type of options to NSO, ISO, RSA, RSU, etc? Or are they usually stagnant and non-negotiable?

Thanks for responding folks.

ewamson Do the math on your stock options

In the US, do you pay taxes when you exercise your option to buy the stock?

For you example, say I exercise my option to by 1 at strike price of $100 in 2015. I hold on to it and sell it in 2017 for the FMV of $1000. Do you only pay the capital gains tax of the $900 gain?

Ignore state rules, just at the fed.

ewamson Show HN: Lescript – Simple PHP client library for Let's encrypt

Thanks, nice looking code that is pretty darn clean. It is always refreshing to see an application that is as self contained as possible without all the multitude of required dependencies.

ewamson PHP 7 Released

Very first part of the tutorial: "Use the Current Stable Version (5.6)"

ewamson Beware of ads that use inaudible sound to link your phone, TV, tablet, and PC

Over 2 years ago: http://arstechnica.com/security/2013/10/meet-badbios-the-mys...

ewamson Beware of ads that use inaudible sound to link your phone, TV, tablet, and PC

Feasible and in action 2 years ago: http://arstechnica.com/security/2013/10/meet-badbios-the-mys...

ewamson Faxes from the far side of the moon

Wouldn't at most they just have to move a quarter across the moon? Just thinking out loud.

ewamson Ask HN: Any recommendations for selling hardware in developing markets?

You may think I am joking, but Coca-Cola or Dean Kamen might have some ideas for you:

http://www.coca-colacompany.com/ekocenter/ekocenter-empoweri...

http://www.popsci.com/article/science/pure-genius-how-dean-k...

ewamson PoC || GTFO Episode 9 [pdf]

PASTOR MANUL LAPHROAIG'S tabernacle choir SINGS REVERENT ELEGIES of the SECOND CRYPTO WAR:

9:2 A Sermon on Newton and Turing

9:3 Globalstar Satellite Communications

9:4 Keenly Spraying the Kernel Pools

9:5 The Second Underhanded Crypto Contest

9:6 Cross VM Communications

9:7 Antivirus Tumors

9:8 A Recipe for TCP/IPA

9:9 Mischief with AX.25 and APRS

9:10 Napravi i ti Raˇcunar „Galaksija“

9:11 Root Rights are a Grrl’s Best Friend!

9:12 What If You Could Listen to This PDF?

9:13 Oona’s Puzzle Corner!

ewamson Data, Technologies and Security – Part 1

Business model: scan the Internet for exposed and outdated technologies. Contact the company with a link to your article. Wait a few days, offer your services to upgrade and secure the specific system.

ewamson PoC || GTFO Episode 8 [pdf]

Articles from this wonderful episode presented by the honorable Pastor Manul Laphroaig.

Backdoors from Compiler Bugs

A Protocol for Leibowitz

Reprogramming a Mouse Jiggler

Exploiting an Academic Hypervisor

Weaponized Polyglots as Browser Exploits

On Error Resume Next for Unix

Sing Along with Toni Brixton

Backdooring Nothing-Up-My-Sleeve Numbers

Building a Wireless CTF

Grammatically Correct Encryption

ewamson The Agile Delivery Blanket Purchase Agreement is almost here

This is not open to anyone, you still have to be gsa sched 70.

ewamson Real-Time Full-Text Search with Luwak and Samza

http://www.pgadmin.org/

http://phppgadmin.sourceforge.net/doku.php

ewamson I made an NES emulator – What I learned about the original Nintendo

I have always wondered how did they get all the ROMS for the games. Any insight?

ewamson What happens to your brain when you stop eating sugar

Do you not eat fruit at all? I do not eat sugar often (cakes, cookies, desert, candy, etc) but I have fruit all the time.

ewamson Electronic Reservation System – 1952

The whole video is neat but check out the "Electronic" Reservation System starting at 12:20. How long we have come with databases!

ewamson U.S. Spies on Millions of Cars

Repo-groups use this already. Police cars have them too.

http://www.popsci.com/article/technology/scan-artist

ewamson What is the best hard drive?

It is just under the title at the top of the article: " What is the Best Hard Drive? January 21st, 2015 "

ewamson Those making $1,000+/month on side projects – what did you make?

Viktor, do you take all the photos? Does the site pay for your travel? Great idea, it is all free but get someone to pay for convenience.

ewamson Hotel Wi-Fi blocking: Marriott is bad

Is that LAN controller illegal? According to the article:

"Federal law prohibits the operation, marketing, or sale of any type of jamming equipment, including devices that interfere with cellular and Personal Communication Services (PCS), police radar, Global Positioning Systems (GPS), and wireless networking services (Wi-Fi)."

If that disconnect is disabling wifi aps then technically it is "intefering" with wifi services and thus illegal?

ewamson XSA-108 Advisory

Inherently, adding more systems creates more risk vectors. When an application is installed on an operating system, both the OS and application now have to be protected. An example would be Flash ontop of an OS. You have to defend, patch, and architect based on whether your systems have Flash or not.

With virtualization you have the hypervisor that has applications running along with it (ie: ssh, a cli, syslog, bash etc) and then you install a guest in a VM on top of the hypervisor. The OS on the VM is another vector which has applications on it (DB, web, ftp, etc).

If I have a bare metal server with just an OS installed on it and its applications on top of that, I only have to worry about that set of OS and applications and their associated risk vectors.

If I have a bare metal server with a hypervisor and then the above OS and set of applications, I have increased the number of risk vectors by however many applications are running along with the hypervisor.

“but do people actually believe that it makes it less secure?”

Just bringing a hypervisor into an environment does not of itself immediately make it less secure. I agree with you, I don’t think it makes it less secure. It does increase the risk of the environment and appropriate architecture and action must be taken to prevent your statement from being true. A large number of environments do not architect and manage properly.

Another very realistic, and happening today, example: Bare metal server with Windows OS installed. Bare metal server with a hypervisor which just happens to have bash on it (or is susceptible to this memory issue). The same Windows OS is installed as a VM. In the second instance with the hypervisor I would have, indirectly and out of my immediate control, made my environment less secure.

An increase in complexity or increase in components will increase the risk of an environment.

ewamson The Trucking Industry Needs More Drivers. Maybe It Needs to Pay More

They pay $1.10 per mile in my area plus gas.

ewamson Google Imagery: Cost-effective, accurate imagery for your operations

Title is wrong, these are aerial photos - from the linked page: "Google has global ambitions for our consumer aerial imagery."

ewamson China bans use of Windows 8 on government computers

Source for your incorrect information?

DoD approved for more than a year:

http://iase.disa.mil/stigs/os/windows/win8.html

ewamson Network Neutrality

Meeting information: http://www.fcc.gov/document/fcc-hold-open-commission-meeting...

Related Topic Info: http://www.fcc.gov/guides/open-internet

ewamson TurboTax Maker Intuit Funnels Millions to Lobby Against Easier Tax Returns

It creates jobs.

ewamson TrueCrypt Security Assessment [pdf]

TrueCrypt is also opensource: http://www.truecrypt.org/downloads2

The security assessment is for the Windows version of TrueCrypt only. Which also answers your question, TrueCrypt is appealing because it works on *nix, BSD, and Windows. It is also free and open source. The Windows version is easy to use, has a nice GUI and actually works as stated.