HNHacker News
TopNewBestAskShowJobs

kazazes

126 karma · joined September 29, 2014

[ my public key: https://keybase.io/pck; my proof: https://keybase.io/pck/sigs/fow3XIN9P11EaQArS9wLJdFiqq8IgyAzSO8oInpIzRA ]
submissionscomments
kazazes··on How much did a tunic cost in the Roman Empire? (2021)
Enticed by the wiki, I went to buy of off eBay and ended up finding the author's personal library copy with his bookplate.

Will find a friend when I'm finished, as well.

https://www.ebay.com/itm/304333942417

kazazes··on Recent version of Handbrake download infected with malware
Password managers aren't implicated in the compromise of the OS X keychain or your browser... this is FUD.

Your browser's native store is probably unencrypted [1], and the OS X keychain password can be snatched with a clone of the native password prompt. Neither is true for any respected password manager. They keep you safe.

[1] https://news.ycombinator.com/item?id=10884000

kazazes··on A practical guide to securing macOS
I've run 1Password in wine on Arch for years. Both the app and the browser plugin are styled like Win95 applications (even after changing the winecfg settings), but otherwise run flawlessly.

I have wondered if running 1Password through wine would introduce some not-considered attack vector, but I've yet to hear it.

kazazes··on Launching the Electronic Frontier Alliance
The ACLU specifically was on the opposing end of plenty of Bush-era legislation and got labeled as such. My childhood memories are pocketed with soundbites of Bill O'Reilly denouncing the ACLU as a bastion of American liberalism.
kazazes··on Transmission BitTorrent app contained malware
Would brew cask have helped you here? It doesn't build from source, it just downloads a precompiled binary.
kazazes··on The kids are all right
I took this survey in 2011. Teachers were not allowed to be present while we took it. There was no moral pressure to be honest beyond "answer to the best of your abilities" so as not to alienate the group. The entire room openly read the questions and people answered with varying degrees of absurdity. Whatever the results of that room were, they were not representative of the group's risk taking behavior.

Take this anecdote as you will, but it will take me a lifetime to be convinced that a faceless government form can poll the group of cards closest to a teen's chest with any aggregate accuracy.

kazazes··on Show HN: LogDNA – Easy logging in the cloud
Are there any client libraries for LogDNA or does it just stream /var/log/* and other logs to LogDNA? Also, you provide APTs and RPMs, but no sources. Is there any way I can build LogDNA and run it on Arch Linux?
kazazes··on Department of Homeland Security Devices on SF Streets
These have been in New York City for years, but are labeled as EPA devices here. You can always find them on the block of a police precinct (sometimes right next to the front door) and in other major tourists spots (I've noticed them in Times Square and Grand Central).
kazazes··on HN is in the same cluster as 2ch, not Techcrunch, on Twitter
Wouldn't it be more reasonable for browsers to not cache them at all and universally reject missing intermediate certificates? (IIRC correctly, Chrome doesn't mind but Firefox will give you the train conductor)
kazazes··on FlapIt: A physical counter for all your social accounts
If they made it hackable or released an SDK with a published spec at launch (instead of waiting for the community to reverse engineer it), I would be way more interested and I think a lot of others would too. Prefab digitally addressable flipboards aren't something I've seen.
kazazes··on 2^74207281-1 is Prime
Apparently a $3,000 GIMPS research discovery award. What's the practical utility of knowledge of a prime, especially considering that upon announcement it's immediately disseminated?
kazazes··on 191M US Voters’ Personal Info Exposed by Misconfigured Database
It's not any of those. Are you sure it's running linux? Also, you're off by a few orders of magnitude. 191mm records * 1kb each is 191 gigabytes.
kazazes··on 191M US Voters’ Personal Info Exposed by Misconfigured Database
A well crafted shodan.io search given the already public information (approximate size, in the US, no password, etc.) should give you a good start. It's already been found once.
kazazes··on 191M US Voters’ Personal Info Exposed by Misconfigured Database
Yes, my point is that the author did not care to redact the other booleans for the other years, but did redact those two specifically.
kazazes··on 191M US Voters’ Personal Info Exposed by Misconfigured Database
That's the question: why are the "primary_2000" and "general_2000" fields redacted strings? http://www.databreaches.net/wp-content/uploads/DataFields.jp...
kazazes··on Show HN: Swifty – Learn to code in Swift
The lessons and exercises are limited in scope enough that they are entirely static. The work the app needs to do is limited to parsing, stylizing, checking (simple) syntax and matching user input to the task, not executing it. The lessons themselves are no more complex than a programming PPT presentation that looks prettier.
kazazes··on Signal Desktop
In the same vein, the signup form allows you to trivially tell who and roughly when someone has signed up for the beta.
kazazes··on HangoverApp – Share pics without Internet, only visible if all devices present
What's the second phone doing in that scenario?
kazazes··on Mac Store Apps Stopped Working Due to Expired Security Certificate
He's most likely saying that while the MAS is broken, you can still download something via git and build it yourself.
kazazes··on Congressman introduces bill to end warrantless Stingray surveillance
The existing Android solution only works for Qualcomm chipsets [1], so it must require some radio-level access to verify the presence of an IMEI device. You won't be seeing it in the iOS App Store. Maybe someone can find the relevant private APIs to make it happen.

http://www.slate.com/blogs/future_tense/2014/12/31/snoopsnit...

kazazes··on How New Long-Range Radios Will Change the Internet of Things
If you haven't lost your faith in Kickstarter yet, this project has $180k committed. A €40 pledge will get you a LoRa board and €200 for a LoRa gateway and what is essentially a demo dongle.

https://www.kickstarter.com/projects/419277966/the-things-ne...

Edit: fat thumbs, on mobile.

kazazes··on Bitbucket is down
On the flip side, whatever the point of failure is, it's probably pretty high up in their stack.
kazazes··on Yet another pre-installed spyware app discovered on Lenovo computers
A refurbished Thinkpad. Can anyone confirm if this is included in the factory install?
kazazes··on Snapchat Discloses $650M Private Placement
Some of the more fanatical users I'm acquainted with have a 200+ second story, every single day. Three minutes a user gets you to 45 pretty quickly.
kazazes··on Privacy Behaviors After Snowden
FastMail isn't scanning your emails to generate a profile of you in order to serve you highly targeted advertising all over the web.

https://support.google.com/mail/answer/6603?hl=en

kazazes··on Here’s how much of your life the United States has been at war
Except United States' technical definition of war, which must be authroized by Congress.

https://en.wikipedia.org/wiki/Declaration_of_war_by_the_Unit...

kazazes··on U.S. NSA domestic phone spying program illegal: appeals court
I have faith in the power of the judiciary, still. While putting illegal surveillance programs to bed may feel like a half century long game of wack-a-mole, precedent still has power in American courts.
kazazes··on Instagram engineer delves into emoji madness
"In the IT world, regular expressions searches justifiably have gained a reputation for being fiendishly complicated. Instagram’s regular expressions for finding emojis may be the most complicated yet."

This stack overflow post [1] and Perl module [2] both come mind.

[0] http://stackoverflow.com/questions/1732348/regex-match-open-... [1] http://www.ex-parrot.com/pdw/Mail-RFC822-Address.html

kazazes··on Google Says More Searches Now on Mobile Than on Desktop
It may seem obvious, but check the proxy's logs. Perhaps you're not the only one connecting.
kazazes··on On Mozilla's forced SSL
Chromium/Chrome have already proposed a step in the same direction, pushing your market share figure up to 37.4%. [1]

[1] https://www.chromium.org/Home/chromium-security/marking-http...

Page 1 of 2Next →