klapinat0r

Somewhat relevant, Yann LeCun insisted the research should be open sourced. At least in an academic sense.

He touches on it briefly in this podcast episode: https://www.therobotbrains.ai/who-is-yann-lecun

What is e98e?

Medium comes to mind (for embedded) https://medium.com/policy/how-we-handle-do-not-track-request...

I think he meant to use exclusivity as a straw man to show that "IP is not food", instead of the more often misused: "not paying is not equal to stealing".

Both are obviously false, but I think that was the intend (argument by confusion?).

Your reasons may be plentiful, but if it's because you prefer the protocol, without the obstruction of handshake, I'd recommend using openssl s_client.

Obvious disclaimer: openssl binary may or may not be part of your system (although the same can be said about netcat and telnet)

Is it down?

  $ ssh ghost@theshell.xyz
  ssh_exchange_identification: Connection closed by remote host

Possibly, but you'd still have to (try to) "render" it in your browser by opening the mail.

On a similar note, your web mail could fetch images in emails ahead of time, but that would still be out of your browser's context

> if somebody sent you an email with that code (even if you never open the email)

What is he trying to say here? How on earth would it be possible to execute the url in the context of your zecco cookies unless it's openend in a (browser) in which you've logged into zecco?

How so? The benefits are worth it, and I doubt any CEO will be argue against having fault tolerant code :)

You catch bugs, and no one says you can't run Chaos Monkey in staging or a similar environment if it really is a tough sell.

I'm confused. It seems you have more information than the blog post and attached documents entail.

Do you know both how long the investigation would be under for? Do you know the timing?

Stating there's no good reason is not true - it's quite possible that a gag order is issued to protect the investigation, including identification of suspects, the number of suspects (at least two in this case), change of behavior (e.g. switch from Signal to smoke signals, fax, or just lay low for a while), etc.

What happens when two days after a terrorist attack, OWS publishes a subpoena for the first time? I for one welcome that they go through the official channels to get the redacted version approved. Let's not botch investigations for the sake of pitchforking the "everything should be public" slogans.

That's a fair point, but it sounds like we're moving into a debate on OSes switching to systemd by default.

If we're comparing running a binary on startup vs. setting it up as a service in systemd, I wholeheartedly agree that you should always use the right tool for the job. So let's discuss the software, not the politics :)

If we're talking about the original story (crontab) people should compare it to systemd timers if they're looking for alternatives - which I still prefer.

I have no stake in OSes choice of default installed packages (be it init, openrc, or systemd), and agree with your parent comment that OSes shouldn't break (dropping crontab as an installed base package) without consideration.

I haven't come across one of these OSes where it wasn't possible to install crontab from their default package managers, and in their main repositories, though.

Care to give an example? What I'd call "dead simple init.d custom services" I find very easy to do in systemd, so I wonder if our definition is the same.

Here's what I'd call a simple init.d-like example. non-needed things (if you think it's too complex) include: wait for fs mount and network, custom reload command, "don't log stdout"

  [Unit]
  After=network.target
  AssertPathIsMountPoint=/mnt/service-data-if-needed

  [Service]
  ExecStart=/some/binary
  Environment=CONF=/etc/i/guess.conf USER=nonrootmaybe
  ExecReload=/bin/pkill binary
  KillMode=process
  Restart=always
  StandardOutput=null

  [Install]
  WantedBy=multi-user.target

EDIT: man 5 systemd.unit

Previous (fruitful) discussion here: https://news.ycombinator.com/item?id=11774850

> What then struck me was the way he casually decided to hack a VPN

He's intentionally vague, but given he mentions two routers and two vpn systems, it's highly probable that he's referring to one of the two routers (which is embedded, and has firmware). Furthermore, he refers to a website[1] which predominately deals with routers.

> is it really so straightforward?

Routers, yes[2], VPN daemons, not as much.

[1]: http://www.devttys0.com/training/ - which can also contain a vpn daemon of course.

[2]: https://github.com/darkarnium/secpub/tree/master/Multivendor...

Would love to hear how the IC-connected network was setup.

> disconnect the cable from the IC and plug my earlier cable in to it. This allowed me to make a special REST call to the CID

So the cable from the side panel connects to the above network via VPN? Interesting approach :)

Whether docker in aptitude will be configured to use zfs by default is impossible to guess. It is however possible to say that ZFS is already supported by docker, e.g.: https://docs.docker.com/engine/userguide/storagedriver/zfs-d...

> if you didn't fetch the file at the right time, you will lose some history after rotation

Very true, and that's a trade-off, not unlike what Twitter does today. In my pseudo-code I didn't make the -n part of the url (it easily could be, but that'd add changes to the client). So I agree with your criticism, but a "since" lookup would be a fairly easy extension of the client (i.e. part of query, so unsupported frontends still work), as the data file already contains date.

> Before you know it, you have reinvented the WWW

Yes. :)

This could be solved by archiving/rotating old entries, and have the webserver return the n latest.

For instance, you could let nginx do this:

  location /masukomi.txt {
     default_type 'text/plain';
     content_by_lua 'local tail = io.popen("tail -n 20 ".."/chroot/twtxt/masukomi.txt", "r")
     for line in tail:lines() do
       print(c, line)
     end
     ';
  }

I agree, and it's really a shame. However, wasn't there such a category once? At least in 2009 there was (recall seeing various winners from 2009 in a "Oscar" category)

Thanks. Yes it did build just fine. Now I just have to figure out what's "stalling" during boot.

It compiled with zfs and all fine though :)

While I haven't tried crochet, I have tried building my own RPi-B+ image. You mention in your guide that you'll post updates "when you have something", and judging by your post it seems you have.

Since I had difficulties compiling the zfs (and one other, which I don't recall) module, I'm wondering if you'd care to share your experience in your guide?

Kudos to your very well thoughtout and thorough guide.

vu0tran, I'm almost sold. It looks great, and I love the private part (which was the one thing I could barely live with in Mailbox).

If you do snooze[1], I'll throw all my money at you :)

[1]: which of course either requires server side (e.g. Mailbox) or (preferably) client side logic. I'd be fine with the latter, but I agree it's a non-trivial problem.

This is slightly off-topic, but I hope moxie (or an employee of WhisperSystems - nothing official needed) wouldn't mind chiming in:

Since I loved the fact that I can run my own TextSecure server, I'm wondering why Signal does not run a similar model?

I'm curious which considerations went into this decision.

Depends on the client implementation. You should expect applications like Twitter for iOS to become inaccessible as it pins the certificate (correctly), i.e. adding the world of (rogue) CA's still wouldn't make the certificate valid. Apart from replacing the (hardcoded properties of the) certificate

Okay, so it's (just) for reading the delivered data. Somehow I keep considering MitM a harmful attack (i.e. manipulating the data before it hits the user). My bad :)

Curious. How do you go about (trivially) defeating asymmetric encryption?

EDIT: or do you mean to replace "all" (content + js)?

2FA doesn't mean phone number. There's also HOTP and TOTP, dongles, bio, etc.

I read it as, commenters should not resort to gleeful uproars following said comment.

As in, let's not turn this:

I've temporarily banned Michael's account

Into a plethora of snarky/glee comments like "yay, finally" (contributing nothing but a lynch mob)

I could be wrong though, but that's how I understood it.

Would you mind elaborating on "because I was in Ycombinator"? Typo or did something change during today?

> Why We Need a Common Graph Query Language

> I believe that graph query language is Cypher.

I, and others, believe gremlin is that common graph query language.

My first meet with graph databases was in fact Neo4j, but quickly pivoted to Titan, and now using Cayley for smaller projects (although its Cassandra model will make an interesting future).

All except Neo4j supported gremlin, which to me is expressive, formal and actual-human readable.

Cypher looks cool, and has intuitive method of writing the edge query parts, but while it looks hip, I didn't find it obvious nor human parsable. Human readable yes. You recognize the terms, but translating it into an AST is simpler and easier in gremlin than in Cypher (in my opinion)