HNHacker News
TopNewBestAskShowJobs

lowpro

647 karma · joined December 15, 2013

Network security, love to write, travel, hike. reach me asnair (at) protonmail.com

https://gooddebate.org/

submissionscomments
lowpro··on $15 minimum wage didn’t hurt NYC restaurants
I think you have this backwards, paying others to make food for you is a luxury. If you can afford a $50 microwave that you can then use to make meals that cost less than a dollar, that is the standard. You don't need a 'nice kitchen' to eat at home. Not to mention, their wage is double the $7.25 national minimum wage, but food prices at these restaurants do not double in response, so they still come out ahead.
lowpro··on Ask HN: What are unintended consequences of new tech you've noticed?
Do you have a link or guide on where to start with this? It sounds like something that would be really useful!
lowpro··on A russian man is suing apple for “turning him gay”
The article mentions that in 2013 a "gay propaganda" law [0] was signed by Putin, I wonder if this lawsuit is simply trying to take advantage of the anti-LGBTQ movement that seems to be happening in Russia.

[0] https://en.wikipedia.org/wiki/Russian_gay_propaganda_law "for the Purpose of Protecting Children from Information Advocating for a Denial of Traditional Family Values"

lowpro··on Edward Snowden says he didn't cooperate with Russian intelligence services
I think his status makes him more believable, considering he is one of the only ones who told the truth about the American surveillance system. You know his conscience is more important to him than his job or family. I would say that makes him pretty trustworthy.
lowpro··on TSMC to Keep Supplying Chips to Huawei
Just a note: the author claims Huawei is the number 2 smartphone company ahead of Apple, but the cited story was regarding a 2 mo streak in 2017 before Apple released the iPhone 8. According to IDC [0], the rankings currently go Samsung, Apple, then Huawei in smartphone market share.

[0] https://www.gizmochina.com/2019/01/31/idc-xiaomi-is-fourth-l...

lowpro··on FBI has seized Deep Dot Web and arrested its administrators
Luckily we still have the archive https://web.archive.org/web/*/https://www.deepdotweb.com so the valuable information the site made available is still around. Really a shame to see such an informational site go.
lowpro··on Docker Hub Hacked – 190k accounts, GitHub tokens revoked, builds disabled
Fun fact, there was a universal XSS vulnerability on google (including search, support, accounts, cloud, etc) found just last week [0]. I'd say it's always just a matter of time. That doesn't mean they don't have everything in order, but securing everything as much as possible is half the battle. The other half is a solid response when things do happen, which we will now see in how Docker handles this situation.

[0] https://twitter.com/WHHackersBR/status/1118393568656334850

lowpro··on Marcus Hutchins Stopped WannaCry – He Deserves a Pardon
As much as I like Malwaretech, and followed him long before WannaCry was around, stopping malware isn't a reason for a pardon.

Arresting him by waiting until he came to the US rather than issuing when they knew they wanted him should be a reason, or the fact that when the crimes were commited he was a minor. But being famous for stopping malware is no reason to pardon someone.

All the best to him though, I still can't believe it's legal to detain people for so long without a trial.

lowpro··on Amazon ‘flooded by fake five-star reviews’ – report
I would say societal collapse happens when regulating bodies no longer align participant self-interest with the greater good. Everyone is self-interested, which is why central authorities must step in for things that benefit individuals but hurt society such as tax evasion, pollution, and (maybe one day) fraudulent reviews.

Note I'm not saying this is practical to implement or easy to do, just that central authorities exist for this very purpose.

lowpro··on Julian Assange arrested in London
Even if Russia leaked the emails (not certain as the media would have you believe at all, not saying it’s conspiracy but It’s not conclusive), the information regarding massive corruption in the DNC was true, and that information being public is 1) good and 2) important.
lowpro··on Implementing a Neural Network from Scratch in Python
This is a great write up! I'm in the process of writing a similar article, although I think for many non-programmers, neural networks can be useful through using algorithms that are already made to solve problems where people have the data but don't understand the math.

This article is good if you've been around some math and have a little coding experience, I think Neural Nets are even more accessible than the author is making them out to be however.

For example, using something like YOLO for object detection can be done even if you've never taken algebra or a programming class, and really just requires some configuration and training on a dataset you have.

lowpro··on Ghidra, NSA's reverse-engineering tool
Because although you don't have source code (like other commenters are saying), reversing a program to get into a company would be the hardest way to go. Red teams are used to test a company's overall security, and reversing normally wouldn't make sense compared to phishing, using common exploits, and owning the network. Reversing binaries is not the job of a red team, but pentesters of specific systems.
lowpro··on Ghidra, NSA's reverse-engineering tool
If your Red team is reversing binaries you’re doing it wrong.
lowpro··on Ask HN: What VPN service are you currently using?
There's a website[0] that goes into detail comparing different providers. This used to be a shared spreadsheet but the author chose to turn it into a website. I still have the old spreadsheet if anyone wants it (from 2016?).

I was looking for a reasonably priced VPN not based in the 5 eyes territory, and I came to iVPN as the best solution for my criteria and at $110 per year.

[0] https://thatoneprivacysite.net/vpn-comparison-chart/

lowpro··on UBS Is Fined $4.2B in French Tax-Evasion Case
I think that’s definitely the exception, moving money internationally is a PITA unless you want to pay high fees for less hassle. It’s definitely more trouble than moving money within the same country.
lowpro··on Notices have already been issued under Australia’s new encryption laws
I'm not sure there are Australian cert providers... at least the government (gov.au) uses common ones such as Entrust and Digicert, and companies like Atlassian use Digicert.
lowpro··on Intro to Docker, React, and Security
Definitely agree! This project was put together in order to learn more about the technology itself, and much of this wouldn't be useful in production. For example our versioning was broken and we didn't figure out why, but that wouldn't be tenable either. We concluded for smaller projects Docker may be more trouble than it's worth, at least from a little experimenting with it. Thanks for the link!
lowpro··on Intro to Docker, React, and Security
Yeah, that's why in the 'Lessons from Docker' section in point #3 I mentioned that docker might be better off for larger projects, since it seems excessive, especially for small projects. The point of this exercise was to learn more about the technology itself, this clearly isn't a viable way of doing things in production though :) Thanks for the feedback!
lowpro··on DuckDuckGo will use Apple Maps
With Apple pushing privacy as a major feature of iOS compared to alternatives, if the company continues taking a consumer focused, privacy respecting approach acquiring DDG could help strengthen branding, and maybe bring together an integrated privacy solution competing with Google’s integrated ad solution.
lowpro··on They Rejected Us
In response to these people being hired by twitter: I think all of these statements are being sourced from twitter, and the links to their names all point to twitter, so it makes sense that people working at twitter would more often say how they got there on the platform.

Many others in the list never made it past the phone screen for twitter.

lowpro··on Building a company is fucking hard
I've never heard this story, thank you for sharing. As hard as I (and many others in the West may try), I wonder if it's possible to bring as much determination to my field as someone from such harsh circumstance can. What an interesting person.
lowpro··on The U.S. Housing Boom Is Coming to an End, Starting in Dallas
I think the OP meant “make their last tuition payment to the university”, in other words, they’ve fully taken on the debt of education and are about to graduate.
lowpro··on Flying for Thanksgiving
Do you remember how you found it?
lowpro··on Nearly half the world lives on less than $5.50 a day
Although the report is cautionary, it definitely shows how far we've come in just the last 20 years!

> "At the $5.50-a-day threshold, global poverty fell to 46 percent from 67 percent between 1990 and 2015. The bank reported last month that extreme poverty had fallen to 10 percent in 2015."

The article just cautions this rate will slow down as the global economy slows, and although rates world wide are much better, certain areas (specifically sub-sahara africa) are not doing so well.

lowpro··on Ask HN: What discontinued company/product do you wish was still around?
It was the same functionality, however the UI was better imo and the platform integrated with almost every service. And since I use Microsoft for work and Google for school for me it was nice to have one with everything I wanted in it. Maybe any 3rd party app would have worked that way but I haven’t found it.

It’s been awhile now, but I remember it took me about 10 seconds to add an event which was really nice and all the fields I cared about were right at the top, so I didn’t have to stop in the middle of a conversation to actually add an event.

That’s what I remember anyway, technically pretty much every calendar app has the same functionality, sunrise just had great UX/UI, and integration so I could avoid the big players.

lowpro··on Ask HN: What discontinued company/product do you wish was still around?
Sunrise calendar app.

I’m a naturally unorganized person, and sunrise was honestly the only calendar/task tracker that has ever kept me organized. I loved it and really used it, but it was bought by Microsoft and shutdown.

They integrated some parts into outlook, but outlook is used for work and I don’t like to get my work schedule and personal schedule mixed up. Sunrise just worked and I really haven’t found something that’s helped since. I’ve paid for some other calendar apps and they just aren’t the same. RIP

lowpro··on Show HN: Python library to create Siri shortcuts
They might mean YouTube red? Which is the premium version of YouTube where videos keep playing in the background on your phone and no ads so it’s mainly used for music. It’s just the YouTube app itself however.
lowpro··on The Student Debt Problem Is Worse Than We Imagined
Still being in college, so many people I know just assume debt is no issue. It's not a concept that hits close to home, and most people seem to be fine with repaying them forever, like buying a new phone every 2 years or a new car every 3. I've never known anyone who couldn't get a loan, no matter how bad their grades or weak their employment after college looks. I don't really understand how that works and who would loan them money in the first place, but I feel bad that so many just assume they debt they take on will be automatically paid for.

Many I know use their loans for not just school, but life. They spend money like they're rich and already have jobs when they're broke college students living off loans, and it just seems to me either the government, the banks loaning the money, or the schools, are using this monetary ignorance to their advantage. It'll fold some day I assume, considering student debt is 50% of the assets of the Federal Government [0], if those default rates rise to high that could wreck havoc in the trust of the financial well being of the US government (Disclaimer: I'm a student, I don't really understand most of what's happening here)

[0] https://s3-us-west-2.amazonaws.com/gs-live/uploads%2F1521231...

lowpro··on Credit-Card Backlash Mounts as Kroger Weighs Expanding Visa Ban
I hate credit card fees as much as the next guy, but to be fair my credit card was the only way I could pay for things in Asia since I just lived there for 6 months. If I had used cash, the only ATM near me stole my friends debit card, and multiple people I know were robbed and pick-pocketed. My credit card insulated me from those risks, which I was fine paying an extra 1% for.

Now that I’m back in America the risk is far less, but what alternatives in America are there? I hope the payment apps/wallets become universal but we definitely aren’t there yet.

lowpro··on Effectively using AWS Reserved Instances
AWS has different options for different companies/data. They even have options for US government data that are certified by DSS I believe, and they have options if you need PCI, HIPAA, and other types of compliance.

See: https://aws.amazon.com/compliance/hipaa-compliance/

https://aws.amazon.com/compliance/pci-dss-level-1-faqs/

← PreviousPage 2 of 7Next →