HNHacker News
TopNewBestAskShowJobs

likeabatterycar

174 karma · joined August 25, 2023

submissionscomments
likeabatterycar··on 'I've had it': JP Morgan boss rails against Gen Z in expletive-laden outburst
Listening to the audio, this wasn't some surreptitious hot mic recording, he was addressing employees about his frustrations at personally observing them fucking off in meetings and they were laughing. Somehow listening to his aggressive-but-disarming NYC style I can't help but agree with the guy.
likeabatterycar··on Neovim tee.exe binary dependency exhibiting illegitimate / unauthorized behavior
It's not.

This is almost certainly Windows performing certificate validation.

The "evidence" was just copy pasted from VirusTotal. In fact he forgot to copy from below the cut, which would have shown it also called out to www.microsoft.com - depending who you ask, definitely a malicious address!

VirusTotal just notes all network traffic during the time the binary executed in the sandbox. It doesn't mean it emanated from the binary.

likeabatterycar··on Neovim tee.exe binary dependency exhibiting illegitimate / unauthorized behavior
> It is absolutely not that. To suggest this, considering the evidence posted, goes beyond idiocy into potential maliciousness

The scary IPs are part of DigiCert's CDN for OCSP responder (probably depending where you are and their anycast):

https://github.com/hoshsadiq/adblock-nocoin-list/issues/452

The "evidence" is the system made some network calls and DNS lookups. Which you know, you would do when validating a certificate. He also lists some SMB calls to the localnet which are clearly unrelated. tee.c source contains no network code so this would be truly easy to audit. So tell me again what is the damning evidence?

Also, are we to believe malware gangs are hosting on Akamai now? They must be in the major leagues.

And you call me an idiot?

Have a nice day.

likeabatterycar··on Neovim tee.exe binary dependency exhibiting illegitimate / unauthorized behavior
Probably Windows checking certificate revocation on a signed binary (or linked library).
likeabatterycar··on Cybertrucks Are Deadlier Than Infamous Ford Pintos
Hit pieces are red meat to this place. They all high five each other, then quietly get into their Teslas for the drive home when no one is looking.
likeabatterycar··on Cybertrucks Are Deadlier Than Infamous Ford Pintos
HN has been under a major astroturfing campaign lately IMO. The question is who is doing it.
likeabatterycar··on Palo Alto Networks Patches Potentially Serious Firewall Vulnerability
Fortune 500s pay Palo Alto millions a year for their product and it's written in...PHP?
likeabatterycar··on Show HN: yknotify – Notify when YubiKey needs touch on macOS
Yubikey is an event based token. You tap it with explicit intent. If you aren't expecting to tap it, then the fail safe is you don't. It works that way by design.

You can't use a screwdriver handle as a hammer then complain it doesn't work to your expectations.

likeabatterycar··on Fake VS Code Extension on NPM Spreads Multi-Stage Malware
> is the windows platform hostile to those sort of tools

No need for hyperbolics, just say you don't know.

The built in Windows Firewall does this. No need to pay for a 3rd party magic app.

Laud praise on Little Snitch all you want but Windows could quietly do this out of the box for two decades.

25 years ago we used ZoneAlarm and a variety of other tools.

likeabatterycar··on Teen on Musk's DOGE team graduated from 'The Com'
Consider adding a mandatory keyword search when submitting a link - like every human-averse helpdesk.

Maybe if submitters see something was already submitted 800 times, they'll get the message; though, I have my doubts.

likeabatterycar··on Teen on Musk's DOGE team graduated from 'The Com'
[deleted]

Hard to hold a discussion when everyone is arguing in bad faith.

likeabatterycar··on Teen on Musk's DOGE team graduated from 'The Com'
> guy in his 50s being forced to beg for his job in a 15 minute teleconference to an arrogant zoomer

So, like every private sector job nowadays?

Everyone is acting like this is the first time in history someone's been called into a meeting with a ponytailed 25 year old to have the "What is it ya do here?" discussion.

Memorialized in a movie so old now that most zoomers haven't even heard of it, let alone seen it. Only the Bobs have now been replaced with 'Skylar'.

likeabatterycar··on Meta Prepares for Layoffs on Monday
How will these people mentally cope with the coming realities of having to trade their $300k comp (some of which didn't require a lot of work during their tenure) for making $80k writing CRUD apps and line of business software at some local shop 40hrs a week. The job market isn't great right now, not to mention oversaturated with programmers, it's not like they will all move over to Google tomorrow. Even if they have plenty of money, it's an ego hit to slash your comp by 2/3 just to stay employed. Not to mention they have the stink of layoff on them, even if you were a top performer it's the very first question recruiters ask incredulously. These people had a golden ticket but fell into the vat of chocolate.
likeabatterycar··on Hard disk fraud: long runtimes on new Seagate hard disks
No one in history has ever looked at a piece of machinery and thought, "You know what would make this better? Castration by EU government regulations."

Meanwhile the EU bathes in the same Chinese garbage imported by the boat-load as long as it carries the CE mark, which they are allowed to self-certify in nearly every case, making it meaningless.

likeabatterycar··on A brief history of code signing at Mozilla
Signtool interfaces with any kind of certificate including on smartcard.

https://www.mgtek.com/smartcard

For automating pin entry

likeabatterycar··on A brief history of code signing at Mozilla
What is wrong with Microsoft's free signtool.exe?
likeabatterycar··on Ask HN: Is Godaddy Running a Scam?
Or based out of Arizona, home of Tombstone and the OK Corral.
likeabatterycar··on Google kills diversity hiring targets
> Is Google going to avoid interviewing anyone from a HBCU now?

No, because that would obviously be racist.

DEI would be favoring one candidate over another specifically due to immutable personal characteristics, not their qualifications for the job.

The just thing would be students from HBCUs having a level playing field along with everyone else.

It's no different than hiring managers selectively preferring graduates from Stanford or based on their surname's ethnicity, but it's hard to prove those things happen.

likeabatterycar··on Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
My data says otherwise and you have provided nothing to back up your claim other than saying we have an industry full of dirty money paying programmers to write unethical code. I'm sure it inspires them to do their best work.

Half these imbeciles don't even change the user-agent from the scraper they downloaded off GitHub.

I employ lots of filtering so it's possible the data is skewed towards those that sneak through the sieve - but they've already been caught, so it's meaningless.

likeabatterycar··on Eggs US – Price – Chart
Most people with jobs and families etc. don't have a day per week nor gas money to spare to drive seven hours each way to go egg foraging. It's great you can manage this luxury but it's just not practical and a fairytale life for 99% of people. Not to mention many people in NYC don't own a car.
likeabatterycar··on Eggs US – Price – Chart
> within 7 hours of NYC

Literally the definition of "not local"

> help supply the 19 million people of NYC with fresh eggs

This sounds like it could be one of Kramer's schemes on Seinfeld, where he's loaded his rusted-out jalopy with 5k eggs to bring into the city to sell for a profit, but somehow they end up all over the freeway and chaos ensues.

likeabatterycar··on Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
> For one thing it's trivial for malicious actors to change their user-agent.

Absolutely true. But the programmers of these bots are lazy and often don't. So if Cloudflare has access to other data that can positively identify bots, and there is a high correlation with a particular user agent, well then it's a good first-pass indication despite collateral damage from false positives.

likeabatterycar··on Tell HN: Cloudflare is blocking Pale Moon and other non-mainstream browsers
I run a honeypot and I can say with reasonable confidence many (most?) bots and scrapers use a Chrome on Linux user-agent. It's a fairly good indication of malicious traffic. In fact I would say it probably outweighs legitimate traffic with that user agent.

It's also a pretty safe assumption that Cloudflare is not run by morons, and they have access to more data than we do, by virtue of being the strip club bouncer for half the Internet.

likeabatterycar··on Eggs US – Price – Chart
I love how British eggs have deep, amber yolks. Are they force-feeding the hens Earl Grey?
likeabatterycar··on Eggs US – Price – Chart
Ok, but, you can't feed 340M people with "fresh, local eggs". While it's nice you buy six eggs at a time from Joe Farmer off the back of his '72 Ford, but factory farms are an unfortunate necessity to feed everyone that isn't so privileged.
likeabatterycar··on Suspension of inbound parcels from China and Hong Kong
Next you're going to tell me that the cobalt used to make batteries for the electric vehicles literally saving the environment right now in the West is being mined by enslaved children in the Congo with archaic hand tools and no PPE under inconceivable conditions.
likeabatterycar··on Suspension of inbound parcels from China and Hong Kong
> Remember how Apple couldn't just pick up and move the production of iPhones to India or Vietnam?

You left out the part about dormitories full of modern-day slaves, complete with nets so they don't leap to their deaths. Generally this is frowned upon in the West. India and Vietnam wouldn't tolerate it either, despite being developing countries. Wasn't there a riot at Apple's India factory over work conditions or am I thinking of something else?

Bury this post all you want; I know a guy at Apple that saw the nets in person. It's quite a sight to behold and humbling experience.

likeabatterycar··on Suspension of inbound parcels from China and Hong Kong
> Why has there never been serious Western alternatives to JLCPCB, PCBWay, JLCCNC etc.?

Because the West has to actually follow environmental and safety regulations. As opposed to write them down on paper and wipe your ass with it when the West isn't looking.

Evidence: I watched a tour video from one of these Chinese PCB houses and some of the workers were wearing surgical masks.

Not for COVID mind you, for presiding over open vats of boiling poison that would need a chemical respirator in any responsible country.

likeabatterycar··on Suspension of inbound parcels from China and Hong Kong
Your company is grossly mismanaged or your work isn't very important if you are shipping hardware China Post. Which would take weeks on a good day.

Had you read the article you would realize this only affects parcels sent through the mail.

likeabatterycar··on Popular Linux orgs Freedesktop and Alpine Linux are scrambling for new webhost
Thanks for the explanation, I had been under the impression that Wireguard was "done" at this point.
Page 1 of 6Next →