HNHacker News
TopNewBestAskShowJobs

ippisl

1,236 karma · joined December 4, 2008

submissionscomments
ippisl··on A Secret Race for Abandoned Nuclear Material
>>impossible to hide you're enriching.

With laser enrichment, you can do enrichment in a typical house with typical power consumption, so it seems easy to hide.

But building the tech today is quite complicated, and hopefully that stays that way in the future.

ippisl··on Inside story of the Moto X
>>quick access to the camera

There's An app for that :

ibtimes.com/moto-x-how-get-its-features-android-prior-google-phones-release-date-1378597

ippisl··on JavaScript right on the hardware
I agree about the arduino and batteries, but this board is a bit different.

It uses external memory which takes more power. It uses javascript which could take much more power. And the wifi also might not be low power. So it's not clear yet how low power it is.

ippisl··on Yesterday I Wrote My First Firefox OS App
Gingerbread(2.3) on 512MB works fine.Yes 2.3 isn't the latest, but it offers much more than FxOS.

The price is the price at a Chinese webstore including shipping. Not sure about european custom fees, but wouldn't they apply to buying on ebay ?

ippisl··on Yesterday I Wrote My First Firefox OS App
Does that debate interests plain consumers ?

Edit: and wouldn't it make sense to fork a version of android, like amazon did, to achieve openness and privacy , than to start over ?

ippisl··on Yesterday I Wrote My First Firefox OS App
When you can buy something that looks like a decent(512MB, 4.5",dual core) android phone[1] at less than $100, and many similar models are coming from china , why bother with this phone ?

[1]http://www.pandawill.com/simdo-d98-smartphone-mtk6577-dual-c...

ippisl··on The president is wrong: The NSA debate wouldn’t have happened without Snowden
And possibly that healthcare thing, depending on how it will turn out ?
ippisl··on Top Rift Experiences Right Now
How does people who have used it for quite some time respond to it? Are there any fear Reactions or other extreme emotions?
ippisl··on Senic (YC S13) builds a laser distance meter for smartphones
This device has better range and better accuracy than kinect(less than 2mm error instead of 5-25mm at 2m distance).
ippisl··on Why is encryption so hard?
Encryption is basically a tool against wiretappers and men in the middle. But what if you don't fully trust your users, and fear they'll try to add exploits to your software ?

Another high level effort in security is meredith paterson's "language theoretic security"[1] can help you code secure protocols, to fight against this problem.

There's also a tool to help implement it called hammer[2].Not sure if fully developed yet.

[1]http://boingboing.net/2011/12/28/linguistics-turing-complete...

[2]https://github.com/abiggerhammer/hammer

ippisl··on Amazon's profits
Amazon currently plays a dual role; both a traditional retailer and a 3rd party logistics business, and they'll probably be quite good at both of those, see the kiva purchase for example.

I think they could probably beat ebay in this kind of game if they'll be interested.

ippisl··on Lavabit abruptly shuts down
Political change on it's own won't work. They will still keep the infrastructure in case they need to spy on someone(with a court order). But if they have the infrastructure , conceptually it's just a press of button again to full blown illegal surveillance.
ippisl··on Amazon launches Amazon Art marketplace
Maybe their strategy is to build generic stores, but let affiliates do customizations ?
ippisl··on Torsploit takedown: analysis, reverse engineering, forensic
Yes, the transparency does make sense. Maybe the NSA guy didn't tell him anything about the exploits of tor.

But the fact that it financed tor implies heavily that there are such exploits accessible to NSA. And the fact that it is known that tor is sensitive to global passive attackers is another. Even plain me can guess this.

Maybe the calculation favors tor, because if we assume you need to be a global passive attacker to exploit it, this favors large coalitions of many (currently democratic) nations collaborating over you're single repressive regime, and that seems like a reasonable compromise in thinking about a very hard ethical choice.

ippisl··on Torsploit takedown: analysis, reverse engineering, forensic
I only known of dingledine.

>> I believe both of them(Nick Mathewson and Roger Dingledine) have very high ethical standards and are great people;

This all issue of cryptography is ethically complex. One the one hand, too much state power can lead to bad things, definetly. On the other, strong crypto/anonymity can be a risky tool at the hands of terrorists. And in reality , terror can cause very bad stuff[1].

Say you are roger dingledine, and a very convincing NSA guy comes to you, and shows you the evidence that some terror act , that killed X people, has used anon-remailers. How would that make you feel ?

Except the guilt, one implication would be that USG would fight hard against mixminion.

And then he offers you to lead tor, with funding, and explains that this is a network that is hard to break ,so even if NSA can break it, it wouldn't do it for silly stuff , only for emergencies.

You don't need to be a bad person to accept. It's seems like a perfectly ethical thing to do.

Regarding bottom-up or top-down:

My guess is that NSA has a top-down strategy regarding cypherpunks.That's the way military forces work. And it would make sense for this tactic to be part of their strategy.

[1]WWI , The iraq war, and the cease of the israeli peace process were all at least partially caused by terrorists. And we still haven't seen WMD based terror.

ippisl··on Torsploit takedown: analysis, reverse engineering, forensic
I wonder if it is used as a pressure release valve for anonymity software developers. That way they focus their efforts on tor, which might be more amenable to USG exploits, than other anonymity networks.

One relevant data point:the author of mixminion remailer is working for the tor project,probably killing mixminion(a far more secure anonymizer).

Another relevant data point(for a similar strategy): Most of the research on JPEG steganography is done on grayscale images, which is mostly useless since mostly nobody sends grayscale images. Alot of What's done on color images is being done in places like iran, china and india(?).

ippisl··on Best dev environment for a novice?
For crud apps, Ms lightswitch seems like a good tool for non programmers.
ippisl··on Distracting the NSA
That could easily be filtered by timing analysis. You're the first to search.
ippisl··on YouTube co-founder calls for global access to TV online
I wonder: can espn , which holds streaming right for most live sports event until 2020 , use that power to start an online subscription service that also includes other content , and become the de facto tv provider ?
ippisl··on NSA Collects 'Word for Word' Every Domestic Communication, Says Former Analyst
You're right, that's a very big if.

Also, most of the research in the field has been done on black and white image, so it not directly usefull.

And come to think on it, if we're talking about image stego, what prevents the NSA from controlling the statistical distributions of output of cameras in such a way that stego will be noticed(even after some image transforms) ?

ippisl··on Ask HN: light technical read for commute hour?
The first half vontains only pseudo code.
ippisl··on Mailpile: Let’s take email back
What about anonymity ? email has a potential for better anonymity than TOR via mixmaster or other remailers. Are you considering those features ?
ippisl··on NSA Collects 'Word for Word' Every Domestic Communication, Says Former Analyst
I read some research about provably secure steganography , which claim that if you know the statistics of the communication channel, you can build secure steno, at least to the level one way functions.

So it is interesting if in reality there is a stego detection tool.

www​.cs.umn.edu/~hopper/tc-stego.pdf

Btw one of the authors is Luis von ahn, the founder of duelingo, the language teaching/translation app.

ippisl··on Ask HN: Python open source projects i can contribute to
have a look at openhatch.org.
ippisl··on Ask HN: light technical read for commute hour?
If you haven't read it already, applied cryptography by schnieir is a fun read.
ippisl··on Google offering same-day delivery from retailers in the Bay Area
When self driving cars become popular, the double parking issue could be solved, by many ways from parking automation , to regulation(even by the people living in the building), to the problem not being there at all, since nobody would own cars.

And conveyors are pretty reliable in industry.

ippisl··on How Big Data Is Taking Teachers Out of the Lecturing Business
Well, there's a computer game[1] for people with depression that teaches them to change though patterns, and at least according to preliminary results, it success rates are much better than that of a therapy.

And, there's the field of persuasive technology that works on building technology to help people change behavior. According to wikipedia, there are numerous studies showing changes in health behaviours.

So i wouldn't rule out computers inspiring people(which seems like an interesting problem to think about/work on).

[1]http://pandodaily.com/2013/06/25/a-game-thats-better-than-th...

ippisl··on Prim (YC S13) Does Your Laundry. Pickup, Wash, Fold, Delivery, Awesome
You can easily make doing laundry relatively nice experience, just find a nice podcast to listen to. But watching game of thrones or programming something interesting is more fun.

This kind of dynamic is not with hard to beat I think.

ippisl··on Ask HN: Cryptographic salary negotiation protocol?
This type of problem is called secure two party computation. Tasty looks like a good framework to use for this kind of problems.

http://code.google.com/p/tastyproject/

ippisl··on Super-cheap online master’s degree could change American higher education
One counterpoint to this is daphne coller's claim that pass rate is about 70 percent for people who paid $50 for a special track that includes verification of identity and means to prevent cheating.
Page 1 of 25Next →