HNHacker News
TopNewBestAskShowJobs

k_roy

376 karma · joined September 23, 2014

submissionscomments
k_roy··on IPv6 networks do apparently get probed
> The idea of IPv6 is that every few hours or so my iPhone gets a new set of IPv6 addresses (usually 4 at a time I don't exactly know my currently config but they keep changing always). So the obscurity is from the fact that you have ipv6 ips shuffling all the time. Since the /64 address space is so vast for a home network you will ideally not notice someone targeting your IP because it may not be worth the effort for those targeting it.

This is fundamentally not a part of IPv6. It was an extension added later for privacy, but doesn't really accomplish too much in that regard except for the simplest of detection. My home address space is a /48. And when do some really simple subnet math on my IPs, you can easily identify my addresses.

And again, the point is, just because you live out in the country, doesn't mean you shouldn't lock your doors.

Even though right now it's impossible to feasibly to even really scan a /64, that may not be true in a week.

k_roy··on IPv6 networks do apparently get probed
again though, the fallacy that's repeated over and over again with IPv6 is that just because you have a public IP, suddenly everything is exploitable.

If you have an IPv4-only network, you still have firewall and routing. This is what protects your router, allows ports to be forwarded, etc.

Literally nothing changes. You still need routing, just not the NAT/PAT part of it. You still need a firewall.

k_roy··on IPv6 networks do apparently get probed
> One of the things that I take away from this is that I may not want to put servers on these low IPv6 addresses in the future. Certainly one should have firewalls and so on, even on IPv6, but even then you may want to be a little less obvious and easily found

And my takeaway here is that "Security through Obscurity" isn't actually that secure is it?

> Certainly one should have firewalls and so on

Just because every device has a public IP doesn't mean every device is available publicly. Your public little IPv6 network still goes through a router and that device can control the flow of traffic, through routing and firewalling.

This whole read really just feels like someone discovering IPv6 for the first time and fundamentally not understanding basic networking.

k_roy··on CapibaraZero: A cheap alternative to FlipperZero based on ESP32-S3
What you are saying doesn't even make sense.

They are discouraging open source hardware therefore that's what makes the software more valuable?

I invite you to hit up ChatGPT or something and shit out a flipper app. It's fun, and straightforward and most people could pull it off with a bit of time and slogging through it.

I would LOVE to see your Gerber design that fits in a case that's around 100x40x25mm and only weighs 104 grams. OH. And because of the parts involved, I'd love to see it because you'd need VERY advanced soldering skills to put it together.

I'll write the OS/SDK. But it has to be the same size or smaller and have:

1. A screen

2. NFC

3. 125 kHz RFID

4. IR Blaster and Receiver

5. Bluetooth

6. USB controller that can be tons of things

7. HID Controllers for lots of things

8. Still lots of exposed GPIO pins for external stuff.

9. SD Card

Any single one of these requires a sub $1 microcontroller/arduino/ESP + soldering ability + 10 lines of boilerplate code.

Yeah. tell me again the hardware isn't anything special.

k_roy··on CapibaraZero: A cheap alternative to FlipperZero based on ESP32-S3
You are paying for a complete package that you can fit in your pocket.

This is still at breadboard stage. If you want to put something together for yourself at sub $35 you can. It's just not going to be portable, pretty, or probably even usable. I carry my flipper zero everywhere for a variety of tasks.

The flipper zero isn't doing anything special that you we haven't been able to do for decades with a variety of parts.

* SubGHZ, you need an RF module.

* Bluetooth? yep

* IR, you need IR,

* network, hey WiFi.

* SD card for any kind of storage? yep, another module

* USB anything but charging? Yep, more wires and modules.

But hey, most devices want at least 4 wires (VCC/GND/A FEW SIGNALs), and other devices want more, to handle clocks and timing. And that's only if your thing supports IC2 and you have enough GPIO. Otherwise you need multiplexers.

Any one of these things can be done with less than a dollar in parts. But have fun combining them all into something workable AND can do them all.

But hey, you are paying for the software right?? Come on.

k_roy··on U.S. court orders LibGen to pay $30M to publishers, issues broad injunction
And how can you expect to have any level of honest discussion if you are going to make insane assertions, with zero backup of anything resembling facts, and then get bent out of shape when called out about it.

I'm sorry that I called you intellectually dishonest and you got mad, but it's the truth.

k_roy··on Open-Source Flipper Zero Firmware: Unlock Your Device's Full Potential
And much like a brick, for every nefarious use, there are 10 valid uses.

Just like anything else, it's just a tool, and because a tool can do bad things doesn't mean the tool should be illegal.

k_roy··on Open-Source Flipper Zero Firmware: Unlock Your Device's Full Potential
Except this isn't anything special.

Literally anyone can do this with an MCU of some type and a 50 cent device. Bluetooth, RF, NFC, etc. This just makes is a nice little convenient package.

There is victim blaming and there is practicality.

A pacemaker that can't withstand random radio bursts is useless, as the first time you walk down the street you are dead.

So unless you are going to ban any sort of microcontroller, and very well documented and simple circuit designs, this is still not victim blaming.

k_roy··on U.S. court orders LibGen to pay $30M to publishers, issues broad injunction
> Quite the opposite: as with all piracy, the ones who pirate stuff are also the ones who spend the most money buying the stuff they pirate. (For books there's the obvious reason that paper is still by far the best reading experience, but it was also true of DVD, video games, music CDs etc. but these people wouldn't have spent more money if piracy was impossible).

you take a few interesting leaps in a failed attempt of.... trying to turn opinion into fact?

> the ones who pirate stuff are also the ones who spend the most money buying the stuff they pirate.

Uhhh, wot??

Please provide ANY source for this. Really. Like even if it's a blog you wrote and was a creative writing experiment for you, publish it. Just so I can mock you.

> (For books there's the obvious reason that paper is still by far the best reading experience, but it was also true of DVD, video games, music CDs etc. but these people wouldn't have spent more money if piracy was impossible).

So at this point, I hope it's clear that you are a bit silly. But...

> For books there's the obvious reason that paper is still by far the best reading experience

This level of intellectual dishonest is horrible, especially if it's legitimate.

k_roy··on U.S. court orders LibGen to pay $30M to publishers, issues broad injunction
The people who are using libgen, are probably also not the people who would pay an author for a book anyway.

Not saying I agree or disagree one way or another, but that's really probably the reality.

k_roy··on Deploy a Redis Cluster on Kubernetes within 5 minutes
> Every db system has very specific nuances in data storage, io optimization, bandwidth for requests and backups, etc. a one size fits all operator project seems like it will invite trouble.

And these are all fairly well covered with standard kubernetesisms

k_roy··on Microsoft donates the Mono Project to the Wine team
"legal concerns" is not the same as philosophy differences.
k_roy··on The U.S. economy is not crashing
It's an interesting belief that all the stimulus money was fed into the stock market, and just not into survival at the time.

I can't imagine that it resembles reality though.

k_roy··on Never Update Anything
Or, alternatively, realize both are valid options and have different use-cases.

Or big-brain it and use Nix to build your containers and get the best of both worlds.

k_roy··on Never Update Anything
> In my eyes it could be pretty nice to have a framework version that's supported for 10-20 years and is so stable that it can be used with little to no changes for the entire expected lifetime of a system.

Yeah, me too. I also would like a few million bucks in the bank.

It's naive to think that every project wouldn't want to set this goal, simply because it's so unrealistic.

k_roy··on Mini PCs Database
oops.. looks like someone forgot about natural ordering on some of those sorts.
k_roy··on Xpra: Persistent Remote Applications for X11
Is this either rust or wayland? Nope. Memes are fun though.

Though I have no problem with anything being rewritten in rust. It's usually just as fast, and more importantly, freaking modern. Look at `lsd` or `ripgrep`

Python 81.7%

Cython 14.9%

Shell 1.1%

Roff 0.9%

Rich Text Format 0.7%

C++ 0.2%

Other 0.5%

k_roy··on The Space Quest II Master Disk Blunder
Sounds like the words of someone that grew up in the era of "not having to write ASM or C to get something done"

You had probably multiples orders of magnitude less people that could even speak the language, let alone do something coherent with it.

k_roy··on Microsoft Has Lost Its Mind–$450 for a Keyboard, AI Button Included
pens too
k_roy··on Microsoft Has Lost Its Mind–$450 for a Keyboard, AI Button Included
No. That's just saying that a $400+ keyboard isn't insane and has existed for a while and Microsoft hasn't "lost its mind"
k_roy··on Microsoft Has Lost Its Mind–$450 for a Keyboard, AI Button Included
I'd hate for the author of this article to run into mechanical keyboard folks.
k_roy··on Most Books Don't Sell Only a Dozen Copies (2022)
got lost in all the "quotes"

I think the main takeaway here is publishing a book isn't the road to riches, though nor has it ever been

k_roy··on I continue to no longer attend vintage computer festivals
> I never said that he was lying

but also

> Nothing in this blog post is factual.

Interesting take....

k_roy··on I am no longer attending vintage computer festivals
if this person is legit (amichlin), they did absolutely nothing to support their position.
k_roy··on Amazon Fresh kills "Just Walk Out" shopping tech–it never worked
This is a fantastically myopic view on amazon.

> They can barely deliver stuff that isn't scuffed up and damaged.

Get probably a dozen orders every week that are just fine

> Prime Video borders on almost unusable.

Umm, okay. Never had this problem.

> They still sell Kindles without USB-C.

Kindle oasis eh?

>> Currently unavailable. >> We don't know when or if this item will be back in stock.

> Their customer service is impossible to get a hold of now, as you are blocked by an inane "AI" chatbot. I've done their Amazon Day shipping, and they just toss a bunch of heavy stuff in a big box with (literally) a single piece of paper of "packing material".

Never really had this problem. Though when I've gotten an underpacked delivery they've fixed it.

> I'm still a bit chaffed by the interview I had with them. They acted like their principles made everything they touch turn to gold, whereas I can't name an Amazon product that I'm impressed by the technology or even process.

Did this really happen? Because there are a whole lot of reasons to hate Amazon, but EC2 really isn't one of them. And Amazon is a literal career springboard for everyone I've known.

To add to this, I made it all the way through the Canonical process. Which was a bit more involved than being “chaffed at a single interview”. Because if the first interview chaffs you, just wait until you get to 4 or 6.

I can proudly say, I know nothing more about Canonical’s overreaching principles and process than I would have had just farting around in the news. So I believe you are full of it.

k_roy··on Unlocking the NES (For Former Dawn) (2022)
Wish that Twatter wasn't the main point of contact/following for this.

I'd love to support this kind of thing, but just no given that option.

k_roy··on Redis changes license from BSD-3 to dual RSALv2+SSPLv1
And this will work out for what, 6 months?
k_roy··on Dissent – A GTK4 Discord client written in Go
Early 2021, as shortly after the dev shut down cordless.

I don't think they've actually reversed position at all. I think the bottom line is they don't like anything that isn't their client because they can't pump nitro at you.

And considering part of their TOS is basically they can do whatever they want, I don't know why people would even risk it anymore.

k_roy··on Dissent – A GTK4 Discord client written in Go
I used cordless exclusively. I too got my main account banned as part of the initial round where they did this.
k_roy··on Apple announces ability to download apps directly from websites in EU
> If by sideload you mean "repeatedly sign apps until your face turns blue" then yes. If you mean "install software like a normal person", then no.

Yep. Exactly.

And breaking free of the walled Kindle/Nook garden is similarly out of reach for about the same number of people that don't care about Apple's walled garden, which is the majority.

Again, they literally exist in every corner of our lives, and the 99% of consumers/normies don't care.

← PreviousPage 4 of 8Next →