Hacker News Reader

keeperofdakeyson Ask HN: How do you manage your SSH keys?

If you use an agent, just make sure you enable the option for it to prompt you upon use. This shouldn't require you to reenter your passphrase, so it's still unlocked in memory.

If you don't do this, any root user on any machine you connect to can use your ssh-agent connection to auth to other machines.

keeperofdakeyson GCC 6: -Wmisleading-indentation vs. “goto fail;”

In Rust, code like this simply won't compile http://is.gd/e6mBlG

keeperofdakeyson Memory Usage of Firefox with e10s Enabled

From what I've seen, the current rate of progress on Servo is quite good. Here is a recent demo of what it can now do http://blog.servo.org/2016/01/25/twis-48/. In a few years, it might be able to do everything that other browsers can do.

The servo project also makes it really easy to get involved http://servo.github.io/servo-starters/.

keeperofdakeyson The Sad State of C Strings

All string manipulation code in C deals with trailing NULL bytes, so if you try doing something different, you may get issues when you try to link to other code. It's not a great system, but good C programmers should know the shortfalls.

As an example of the alternate approach, the Rust language uses (ptr, size) to represent all arrays (called slices) and strings internally. This seems like a much better method, allowing you to reference substrings without allocating a buffer, and perform out-of-bounds checking at runtime.

keeperofdakeyson How Wired Is Going to Handle Ad Blocking

Try umatrix, it's available for both firefox and chrome, and allows you to do whitelisting of third party domains for each domain you visit.

keeperofdakeyson Microsoft FFmpegInterop library for Windows

If APIs are copywritable, then the GP2.1 license of ffmpeg would apply to this library, which is only licensed under the Apache license.

This issue has popped up a number of times for Linux kernel modules, and at what point they are a derived work - https://lwn.net/Articles/13398/. Here is an email thread concerning this http://yarchive.net/comp/linux/gpl_modules.html.

keeperofdakeyson The Promise and Confusion of USB Type-C

From what I understand, beamforming won't allow high frequencies like 60GHz to 'bend it like beckham'. If your hand can block 60GHz, then the radio waves probably aren't bouncing around the room enough for it to make a difference. This is because, unlike the name, beamforming is simply phase modulation used to alter the constructive and deconstruction interference patterns of the broadcast radio waves. So for 2.4GHz, where you already have radio waves coming in multiple directions, the constructive interference patterns can give you a higher signal strength.

keeperofdakeyson Farbfeld – A suckless image format

It's worth noting that lzma decompression speeds are generally much faster than bzip2, but at a significant increase in memory usage.

keeperofdakeyson New development could lead to more effective incandescent lightbulbs

It's worth mentioning that Cree are the company that make the actual LED, and they are used in a huge spectrum of low to high quality products. Cheap Chinese manufacturers often buy these LEDs, and put them behind really cheap electronics, then sell them with a generic name including "Cree" in the brand (or -fire, for flashlights). The lumen output can also be widely inaccurate.

So if you do end up buying more online, you should be wary.

keeperofdakeyson 802.11ah Wi-Fi Standard Approved

This has been used by establishments that offer paid wifi services to block portable wifi hotspots, http://qz.com/482304/the-fcc-is-cracking-down-on-companies-t...

keeperofdakeyson 802.11ah Wi-Fi Standard Approved

The antenna is part of it, but it is also the radio. A lot of the hard work of modulating the wifi signal is done in this hardware, and low-level firmware on the device.

We do have Software Defined Radios, which practically allow you to tune to a much wider range of frequencies, and speak nearly any wireless protocol though.

keeperofdakeyson Time’s Almost Reversible Arrow

https://en.wikipedia.org/wiki/Arrow_of_time

If you go to the 'overview' section, there is a nice snippet explaining all this. It points out that gravity works fine in a universe that is running backwards, however entropy is decreasing instead of increasing.

keeperofdakeyson Postgres features and tips

I'm pretty sure that the optimisation barrier is a 'feature'. This can actually be handy, especially when replacing a complex subquery that the query planner turns into a nested loop.

keeperofdakeyson The best icon is a text label

I doubt a lot of users would know that you can even do this, as handy as it is.

keeperofdakeyson Brutal baboon battle erupts for throne at Toronto Zoo after matriarch dies

I don't know what alpha theory you are talking about, but as far as the accepted definition of alpha goes[1], it's "Denoting the dominant[2] animal or human in a particular group".

So as far as I can see, the word was being used in the correct context, implying the correct accepted definition. So it seems a bit strange that you first claim that not only is the wrong term being used, but that the term does not actually exist (or is accepted). I'm curious what you think, so would you like to expand on why you disagree?

[1] "Denoting the dominant animal or human in a particular group", http://www.oxforddictionaries.com/definition/english/alpha#a...

[2] "Having power and influence over others", http://www.oxforddictionaries.com/definition/english/dominan....

keeperofdakeyson An interesting data structure with search time O(sqrt n)

> Building the structure. Why is this O(n)? If you have already segregated the array into segments for the separate heaps, heapifying them would be O(n). How can the segmentation be done in O(n)?

Using 1 + 3 + 5 ... = n^2, wouldn't the largest segment hold roughly sqrt(n) elements. So O(sort(n)) heapify for sqrt(n) heaps, or O(sqrt(n) * sqrt(n)) = O(n).

keeperofdakeyson The youngest person to be cryogenically preserved

http://existentialcomics.com/comic/1

A long (but relevant) web comic.

keeperofdakeyson Why 'Cool' is still cool

American English was basically invented by Webster, yet there are many words from his reinvention that didn't catch on. You can also find many modern words in the Oxford dictionary, like "lol". So it seems that both deliberate, and accidental expansions/contractions of the language are possible.

keeperofdakeyson The universe's resolution limit

Here is a link to the paper http://arxiv.org/pdf/1510.04996.pdf.

keeperofdakeyson More Privacy, Less Latency – Improved Handshakes in TLS v1.3

Where is "somewhere", the kernel only has a finite amount of memory. It's still a denial of service, whether it occurs in the kernel, or a user-space program. The point is that in order to service legitimate clients, the initial request must be buffered somewhere.

For the 1rtt case, the request isn't sent till the TLS connection has been established. The attackers would have to keep track of these TLS connections, so this doesn't seem like a DoS vector.

For 0rtt the attackers might not need to keep track of state, allowing them to simply send TLS 1.3 requests, and overload the server's memory. My question is whether this is a legitimate concern.

keeperofdakeyson More Privacy, Less Latency – Improved Handshakes in TLS v1.3

I'm wondering if the 0-RTT mode brings any issues with DDoS attacks. Since the request is sent in the initial TLS request, the server must buffer it, or create a response before it finishes the handshake. Admittedly it's not UDP, so you still need to successfully perform a TCP handshake (ie: verify the reverse path).

keeperofdakeyson Scm_breeze – enhancing your Git CLI workflow

There is almost a nomadic pride in knowing the tool itself, and not a bunch of wrapper scripts around it. So if you find yourself on a different box, your 'productivity' isn't reduced as much. For editors such as vim, this really holds true, since it already has 99% of the features you really need built in.

keeperofdakeyson Environment Variables and Path in Windows 10

Not to mention that it takes ages to open a file that's even a few megabytes in size (as a programmer I wouldn't dare ask what's going on inside, for fear of nightmares). The irony is that wordpad both handles newlines properly, and can open large files. So it trumps notepad on almost everything.

Of course, by the time you've gotten to that point, you've probably installed a better editor.

keeperofdakeyson BoringSSL

Here is a rough diagram which demonstrates it http://www.2uo.de/myths-about-urandom/structure-yes.png (from the detailed page http://www.2uo.de/myths-about-urandom/). /dev/random will block when the entropy estimate in low, but in a practical sense, the output of /dev/urandom and /dev/random are both random.

keeperofdakeyson Qualys Security Advisory – LibreSSL

Unfortunately code will always have bugs, especially when you are adding or changing it. However the numbers speak for themselves, LibreSSL has been removing large amounts of code http://www.openbsd.org/papers/libtls-fsec-2015/mgp00004.html and has so far had fewer CVEs http://www.openbsd.org/papers/libtls-fsec-2015/mgp00005.html.

keeperofdakeyson Page Weight Matters (2012)

For Firefox, the real comparisons are Request Policy and ublock (origin) in advanced mode (for chrome, umatrix). These do full third-party host whitelisting per domain. So every time you visit a website on a new domain, by default all requests to third parties are blocked. Then you spend a few minutes working out which ones are required.

By comparison, noscript simply blocks javascript from third parties. It does include a number of anti-xss heuristics though.

keeperofdakeyson Why Intel Added Cache Partitioning

Such a situation did happen, Randall answered how many punch cards it would take to store all of the data in google datacenters (https://what-if.xkcd.com/63/). In response, google sent him punch cards (http://blog.ted.com/using-serious-math-to-answer-weird-quest...).

keeperofdakeyson A Linux botnet is launching crippling DDoS attacks in excess of 150Gbps

While it doesn't give any real security, changing the ssh port will at least filter out these kinds of attacks.

keeperofdakeyson BBC iPlayer begins to trial HTML5 player

I think it's interesting to note that they don't even bother listing the required version for google chrome http://blog.codinghorror.com/the-infinite-version/

keeperofdakeyson Losing a credit card due to automatic user behavior

My bank switched to this layout recently, and it took me a good minute to work out what was going on, and how I should go about getting my money out. It might not have been so bad if I had just read the screen though, but I was trying to find the normal menus.