HNHacker News
TopNewBestAskShowJobs

flipp3r

956 karma · joined February 20, 2015

submissionscomments
flipp3r··on Hijack of Amazon’s domain service used to reroute web traffic for two hours
What's also interesting is in the comments someone stated they'd used a Godaddy certificate issued on april 7. Maybe they had access to their account, or Godaddy's internal systems?
flipp3r··on Oracle owns “JavaScript”, so Apple is taking down my app
"Suyash Joshi is a a senior software engineer at Oracle"

Next time, just put "Disclaimer: I work for Oracle"

flipp3r··on One of Estonia's first "e-residents" explains what it means
e-Residency doesn't but you could set up a company in Estonia and I've read that basically all b2b transactions would be untaxed, and simply holding money inside the business would be untaxed (from my interpretation of their website) which would allow you to have a basically tax-free business in the EU which could then forward the cash to some offshore entity in any way you'd like.
flipp3r··on Running Java in a Container
Where I work most of our dockerized services are Spring Boot in Kubernetes, they do need more memory than what you've posted and generally run with about 300M ~ 600M usage depending on what they need to do.

You can also use smaller frameworks (Vertx? Javalin? possibly Spring Boot 2). I hope that with Java 9 we won't see this amount of memory usage anymore, however our organisation isn't there yet though.

flipp3r··on FastPhotoStyle from Nvidia
The user manual literally has a setup for Ubuntu, using CUDA & cupy.
flipp3r··on Crypto-currency craze 'hinders search for alien life'
I think the solution here is very very easy...

Aliencoin when?

flipp3r··on Tether says its cryptocurrency is worth $2B–but its audit failed
>All of a sudden, in the course of about two minutes, a rapid cascade of very small trades (a few tens to a few hundreds of dollars) propelled it back to ~98.5 cents. It looked really dodgy.

What's dodgy about that? I think everyone here would love to buy a virtual dollar for 90 cents. Especially given the behavior of the market the past month.

flipp3r··on Curry spice turmeric boosts memory by nearly 30%, eases depression, study finds
Yeah, that's from the same channel :)
flipp3r··on Curry spice turmeric boosts memory by nearly 30%, eases depression, study finds
Very interesting to see this posted. In Japan its ingredients are used in an anti-hangover drink, this youtube video https://youtu.be/Ij_aJI5O9Rs goes somewhat deeper into it, where the poster tried a combination of it and pepper to strengthen the effect.
flipp3r··on Why treating diabetes keeps getting more expensive
> Why treating diabetes keeps getting more expensive

Because there's a "type 2" diabetes epidemic, and instead of doctors telling people to stop eating for a while, they sell them insulin.

flipp3r··on Exercise Alters Our Microbiome
Every day the human body burns a substantial amount of calories just being alive. You have to simply not eat insulin-raising bullshit for a couple days, and start eating less or even fasting so your body starts burning the bodyfat it's been storing all that time. Worked for me (-8kg in approx 2 weeks) no exercise involved..
flipp3r··on Portugal’s radical drug policy is working. Why hasn’t the world copied it?
America still has about a 4x homicide rate compared to my examples Finland and Switzerland. This is not much different from the gun violence rates per country (&race) You can even pull out approximately the same graph for homicides(Actually, here you go; https://www.theatlas.com/charts/E1pEnFs7e ). Did you honestly believe a country can have triple the gun violence of every other western country, but at the same time get away with a low homicide rate?
flipp3r··on Portugal’s radical drug policy is working. Why hasn’t the world copied it?
According to Wikipedia's "Firearm-related death rate per 100,000 population per year" America is at 10.54, compared to countries like Finland and Switzerland which are at 3.5-ish, it is very high. You can however see America's cause of the gun problem clearly, but you're not allowed to say it out loud; https://www.brookings.edu/wp-content/uploads/2015/12/Reeves-... You could call it "culture" which the other countries do not have.
flipp3r··on Why Did ProtonMail Vanish from Google Search Results? (2016)
We're now 5+ posts down the tree and people still aren't getting the post, probably the reason it was flagged and silenced.

Currently a human is making the judgement call to ban someone, based on their feelings. They could very well be looking at misinformation, but have no way of verifying.

The address banned could be completely unrelated to this hate group, maybe the hate group doesn't even exist, this is the point the poster was making. You easily can misinform, and get someone behind a protonmail address banned.

flipp3r··on Why Did ProtonMail Vanish from Google Search Results? (2016)
What the parent post was saying is that anyone can print out a piece of paper with your mail address on it, complain on twitter, and ProtonMail's feeling-based policy will have you banned.
flipp3r··on Ask HN: How do you stay healthy?
Because there are enough sugar replacements that will spike your insulin regardless, and that makes you stop burning fat. Try entering Ketosis and then have something containing Sorbitol & Xylitol, just 2 pieces of chewing gum messed me up for a good couple hours.

This is not to say that there aren't better sweeteners than sugar, but anything saying "less sugar" or "zero sugar" is likely just a technically correct marketing ploy.

flipp3r··on Ask HN: How do you stay healthy?
Been reading more about what's actually in food and what you need to stay alive.

Intermittent fasting and fasting on water (with some salt) has been working very well for me. Burning away 3kg per week. Not really losing muscle, just burning away my fat at an insane rate. Just don't consume carbs or sugar (or "zero sugar" crap). Eat vegetables. Read labels.

flipp3r··on CVE-2017-16544: A Busybox autocompletion vulnerability
> If a terminal actually executed commands based on data printed to stdout, that would be a very significant vulnerability. It seems far more likely that the gibberish you're talking about is the usual mess of escape sequences.

Well, this is what happened. It was a few years ago on some IBM copy of Linux, don't know the exact system or shell. It was like Linux except most of the things you'd expect to exist on a Linux box were missing.

flipp3r··on CVE-2017-16544: A Busybox autocompletion vulnerability
I find these type of vulnerabilities very interesting.

I've also seen a sysop once using curl or wget in such a way that it would print out the response, while checking for an image file; it outputted all kinds of special characters. Then, afer some magic character was printed, their terminal would start interpreting the rest of the output as commands. The commands were gibberish, nothing happened, but very dangerous nonetheless.

flipp3r··on How to Get Rich Playing Video Games Online
Yeah that part was about Starcraft 2, for Osu! its the 10 actions per second bit. I've played long enough to know I shouldn't be playing it anymore.
flipp3r··on How to Get Rich Playing Video Games Online
> Most of the kids watching these streams own a decent computer and can play.

Youre making it sound not only as if only kids watch this, but also like playing any sport at all is so much different - and then compare it to Reality TV instead of live sports. Actual WTF? Some of the streamers (variety streamers) do play for just entertainment value, but most stick to just one game. A lot of it is also being able to live chat with other people watching and interact with the person streaming.

> This isn't like F1 racing where I'll never be able to afford a racecar, or football where I don't want to exercise.

Why isn't it like that? That's exactly what it is. Do you have any idea how long professional esports players competing in tournaments have to work, to stay at the top level? And do you think they can play at the same level on the average person's hardware? Have a look at Starcraft 2, Counter Strike Source, or Osu!. These are games where top players make 100+ strategic actions per minute, need to have lightning reaction speeds and accuracy, and make bursts of 10 actions per second for full minutes, respectively.

How can it be such a shock to non-gamers that people watch other people play a game, rather than play it themselves? Just imagine it - people watching a game! /s It's exactly the same as every professional sport that has ever existed.

flipp3r··on Bitcoin's Enormous Energy Costs May Prove to Be Its Biggest Risk
Why is their claim nonsensical? Just do the math, politics and countries are not relevant. Take the hash rate, transactions per second, and power consumption of any mining rig. The current hash rate is about 11 ExaH/s (; 11 Million TH/s) supporting approximately 3.81 transactions per second. Meaning power to support about 3 ExaH is used, for every transaction. Taking a decent mining GPU youre at about 3MH/J.

To perform this amount of hashing with this example it would take 3TJ. Or for comparison, the energy in about 170 barrels of oil, for one Bitcoin transaction.

The numbers may be a bit off, but they're not off by a factor 100, and my house for sure doesn't even need 1/100th of this to run a day.

flipp3r··on Segwit2x Bitcoin Fork Suspended
What I find more interesting is there were people trading Segwit2x futures. https://coinmarketcap.com/currencies/segwit2x/ In an hour the price dropped about 85%.

Very funny for a currency with no central control that a few people in central control can just call off a hard fork, and make ridiculous amounts of money in doing so.

flipp3r··on Sonar, a linting tool for the web
What a great idea, naming your tool almost exactly the same as biggest code quality / static analysis tool that people already use. /s
flipp3r··on Show HN: Product Substitutes – what software top companies are replacing
Websites like this are completely useless once you know where to get real comparisons.

Just go to Google and type in "<product> vs " and let Google's autocomplete suggest the top competitors.

No need for sites like these.

flipp3r··on Obscurity Is a Valid Security Layer
Yes I understand an experienced pentester will have a different approach, YOU are at it for 30 years, you're not bulk-scanning the internet on port 22, and you're not a script kiddie trying out hydra for the first time.

> Good job securing ANY of your systems against me.

You completely missed the point of my post. To quote another post;

> In meatspace there's the advice of "don't leave valuables in your car in plain sight," that's uncontroversial but its also security through obscurity, covering up your iPad when you leave it in the car doesn't mean you don't lock your door.

flipp3r··on Obscurity Is a Valid Security Layer
If you like it you can put the lazyness of attackers in your threat model.

Most attackers are just systems that are scanning parts of the internet for the low hanging fruit. They want easy targets, they don't want to spend time on your systems, and they like using their usual tools that work for everyone else. They aren't going to put in the effort to work out your slightly different hashing method and make a GPU based cracker for it. They aren't going to employ a giant network to bypass fail2ban. They arent looking for nonstandard ports. Etc, etc.

Yes, you can hypothetically have an attacker that works around all your obfuscation, but it simply requires much more effort. By employing these kind of techniques, you beat the script kiddies and the automated systems, which in my experience is 99% of attackers.

flipp3r··on How to lie about your programming job title for great profit
So, CV SEO?
flipp3r··on Dragon Helmet: Open-source collaboration that aims to create a high tech helmet
From the sample videos I'm not sure if it's intended to be used on a bike. It seems to be popping up almost full screen windows, which looks insanely dangerous to me if on a bike. The video on their page is someone presumably using it / a concept of it, while walking.
flipp3r··on Crypto Anchors: Exfiltration Resistant Infrastructure
This looks like a pretty good technique, that's coming from someone who has collected 240GB+ of user:password dumps.

I certainly wouldn't get 16TB of disks just for that if it were ever leaked.

Bummer(not for me :p) that you guys went the route of patenting it and keeping it proprietary & only available through an API.

I think it would be adopted in no time if it were open source, and I'd definitely like to see something like this available as a service on clouds like GCP/AWS/Azure/etc for my day job.

← PreviousPage 2 of 5Next →