HNHacker News
TopNewBestAskShowJobs

manjalyc

256 karma · joined June 14, 2020

submissionscomments
manjalyc··on A Caltech Nobel laureate celebrates his 100th birthday, then gets back to work
Look I get it, he’s passionate and loves what he does. But there’s something about not even taking a day to step back on your 100th birthday that just doesn’t sit right with me.

Although from the sentiment in this thread I guess that makes me the minority. I’m also not a Nobel laureate, to each their own I guess.

manjalyc··on Why did we ever think a student's first programming language didn't matter?
100% population literacy is neither reasonable nor attainable. Yet, functional literacy has drastically improved throughout the past century.

To say programming is never to attain such a characteristic is making a statement against the trends of history in all other academic disciplines. Focusing on the present state is an ignorance of underlying trend.

A couple thousand years ago, groundbreaking advances in trigonometry were made by some of the worlds smartest people. Today the average high schooler knows soh cah toa.

manjalyc··on What Satoshi Did Not Know (2015) [pdf]
I simply do not have the time nor motivation to conduct an attack on the Nano testnet. I've responded to your other reply with the technical shortcomings of the mitigation, my proposal is still open somewhere in github's issues but I've since moved on from cryptocurrency as a whole.
manjalyc··on What Satoshi Did Not Know (2015) [pdf]
The current mitigation enables attackers to raise the difficulty at whim and effectively disables any cached PoW's by large entities. This hurts Nano's primary feature - speed - for the end user. Also, while it certainly makes it harder for an individual attacker to attack the network, it is still very doable given enough time and resources. My proposal (which was shortly after the blog post you've cited came out) included a concept of leniency while making any possible attack exponentially more difficult both to plan and execute over a period of time while maintaining a constant ability for entities to precompute PoWs. However the biggest issue would be the introduction of synchronicity in an asynchronous network through probability and is not exactly trivial to implement. I've since moved on as I don't have the time or motivation to further pursue this (I am not exactly very hyped on the idea of cryptocurrency anymore).
manjalyc··on What Satoshi Did Not Know (2015) [pdf]
Security wise Nano is DOA. Currently any attacker can effectively DDOS the network with trivial resources. I’ve personally proposed a complete solution to this problem over a year ago but it’s implementation is complex and would require a network split and my proposal has effectively been ignored in favor of other mitigation’s that fall far short of protecting the network. I’m not a security researcher and hell I’m not even in the CS field anymore so if I could figure out and implement an network wide attack on my own the barrier to entry is low (to be clear I have not executed any such attack). If you want to read further, the issue is a precomputed PoW attack. Nano’s very benefit - speed - is it’s biggest pitfall.
manjalyc··on What Satoshi Did Not Know (2015) [pdf]
Nano is an interesting cryptocurrency, but it’s very benefits are attack vectors. Currently Nano has no way of dealing with a precomputed PoW attack which means a single attacker has the ability to effectively ‘DDOS’ the network. This is briefly discussed in their white paper, and AFAIK I’m the only one to have proposed a complete comprehensive solution to their problem, but the implementation appears to be so complex and would require a network split that the nano team has moved on to less comprehensive mitigations. Currently any actor, including myself with my trivial resources could easily DDOS the entire network, which is a major concern I hold to the cryptocurrency and cannot advocate its usage at least until this has been appropriately addressed.
manjalyc··on Why Understanding Beats Knowledge
I get your premise, but that has nothing to do uniquely with liberal arts.
manjalyc··on Feds say Yale discriminates against Asian, white applicants
Your argument is a misnomer, equal access is just a restatement of belief in equal rights. Equal opportunity is the belief that everyone should be given a level playing field.
manjalyc··on Feds say Yale discriminates against Asian, white applicants
> Consider that most people here on HN have some level of privilege simply by being in the tech field.

I have to disagree with this statement. My view on "privilege" in its contemporary usage is that it is any advantage which comes "naturally" without any (or at the very least a relative minimal amount of) effort. Being in the tech field is something you have to work for, develop your skills for, etc. That isn't what privilege is, that is the result of your own work and ambitions.

manjalyc··on Ask HN: What are some available force multipliers that most people don't know?
> Most workflows can benefit from multiple monitors.

Maybe some people benefit from this but I’ve always found it distracting and in some cases a bit annoying. I’ve always preferred simply having multiple desktops and switching between them instantly with a keystroke which is great in most Linux DEs/WMs but a terrible experience in Windows. It’s gotten to a point where even though I have 2 displays, I just turn one off 99% of the time.

manjalyc··on Tampa teen accused of being ‘mastermind’ behind Twitter hack
If anything I'm amazed at this level of technical incompetence (or is ignorance a better word) from a group of people that hacked twitter...
manjalyc··on Philosophers on GPT-3
I do believe you, in this exact order, missed my point and then proved it...
manjalyc··on GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
https://wiki.archlinux.org/index.php/Unified_Extensible_Firm...
manjalyc··on GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
https://wiki.archlinux.org/index.php/Unified_Extensible_Firm...
manjalyc··on GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
What you mentioned is rEFInd’s auto detect feature which by design doesn’t work with encrypted disks. rEFInd will automatically detect other .efi binaries so you can just install your other bootloaders alongside rEFInd, make rEFInd the default and chainload into your other bootloaders when you need to boot an encrypted disk.

I have a setup where I moved /boot of the encrypted luks partition to the esp and boot from there using a custom entry in rEFInd

manjalyc··on Philosophers on GPT-3
Well that seems awfully close minded. “Good writers” are those who can engage their audience, your perspective of a “Good writer” is simply a reflection of you as a target audience. No need to put everyone in your box.
manjalyc··on GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
rEFInd can automatically detect linux, Windows, and mac partitions and boot them. You could just install it to a usb stick and use it whenever necessary.
manjalyc··on GRUB2 UEFI SecureBoot Vulnerability: 'BootHole'
You could just install rEFInd and make it the default bootloader with its auto find mode enabled.
manjalyc··on Website allows you to experience what it is like to live with dyslexia (2016)
Hi, sorry I missed this - I seemed to misunderstand the question. There's a simple fix that I guess I might now make an extension either today or tomorrow depending when I have free time.

Here's how you could do it on your own, this is for the google cloud docs reference https://cloud.google.com/compute/docs/apis.

Note you have to allow pages to set their own fonts in firefox if you use this option

0. Open up your console in dev-tools (F12).

1. Load Jquery (Give it a second, let the script load)

  var jq = document.createElement('script');
  jq.src = "https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js";
  document.getElementsByTagName('head')[0].appendChild(jq);
2. See all the font-families the page is using

  fontSets = new Set();
  $('*').each( function() {
    fontSets.add( $(this).css("font-family"))
  });
  console.log(fontSets)

for google cloud docs this reveals:

  Set(7) [ 
    "Roboto, Noto Sans, Noto Sans JP, Noto Sans KR, Noto Naskh Arabic, Noto Sans Thai, Noto Sans Hebrew, Noto Sans Bengali, sans-serif", 
    "\"Material Icons\"", 
    "Google Sans, Noto Sans, Noto Sans JP, Noto Sans KR, Noto Naskh Arabic, Noto Sans Thai, Noto Sans Hebrew, Noto Sans Bengali, sans-serif", 
    "Roboto, RobotoDraft, Arial, sans-serif", 
    "Roboto, RobotoDraft, Helvetica, Arial, sans-serif", 
    "Google Sans, Roboto, RobotoDraft, Helvetica, Arial, sans-serif", 
    "Material Icons"]
3. Make an educated guess, I guess its probably Material Icons that OpenDyslexic is messing up, so lets update all the font-families that don't contain Material Icons

  $('*').each( function() {
    if ( $(this).css("font-family").indexOf("Material Icons") === -1)
      $(this).css("font-family",`OpenDyslexic, ${$(this).css("font-family")}`);
  });
manjalyc··on An update on our security incident
Doesn't matter how fast GPUs are, they only get linearly faster. Passwords are exponential in terms of difficulty so assuming your password isn't password123 no GPU in the world is going to crack a 'decent' password in a decade on any modern algorithm memory-intensive or not.
manjalyc··on NewPipe – ad-free, open-source Android YouTube client
IIRC they used to let you do that a decade ago, then slowly made it harder and harder until it was impossible. Its a 'feature' now of youtube premium so take that as you will.
manjalyc··on Ways to make a web component
I've just heard about it, but Shoelace [1] is a component library designed to work with any and all frameworks. To quote from their website, web components address these problems:

  Unfortunately, framework-specific components fail us in a number of ways:
    - You can only use them in the framework they're designed for 
    - Their lifespan is limited to that of the framework's ⏳
    - New framework versions can lead to breaking changes, requiring substantial effort to update components 
There's another discussion on the frontpage [2] about Shoelace that addresses some of your questions.

[1] https://shoelace.style/

[2] https://news.ycombinator.com/item?id=23866894

manjalyc··on Shoelace 2.0 release: UI toolkit that works with all frameworks or none at all
Sounds great! I'll have try it out in my next pet project.
manjalyc··on Shoelace 2.0 release: UI toolkit that works with all frameworks or none at all
Longtime user of bootstrap & tailwindcss for pet projects. I've looked at the 'What Problem Does This Solve', but I'm not sure where Shoelace could fit into my workflow.

Bootstrap is great for when I just want to quickly prototype and build a decent looking interface, but it feels confined when I start wanting to style things myself. When designing MPAs I typically use Bootstrap.

Tailwindcss is great for styling anything and everything, but I find sometimes I waste too much time styling little things that other CSS frameworks already have nice defaults for (and I am a terrible designer so this compounds my dificulties). I often use tailwind for SPAs.

Forgive me if my question is a little naive, but where could I fit Shoelace in for pet projects? Do you see it as being a suitable replacement for one of these usecases? Complementing them? Does it lie somewhere in the middle?

manjalyc··on No, you couldn't have made more money than the Twitter hacker
There's a variety of well known ways to launder bitcoin. Most popular ones being

- You could use a tumbler.

- You could use an exchange without KYC. Not all exchanges are US based.

- You could use websites such as morphtoken (preferably over a VPN, TOR, or i2p proxy) convert to any blockchain (perhaps Dash to create anonymized transactions) then convert back to BTC.

And a few more...

Playing the stock market is a huge risk as the SEC can probably filter down most participants who would've benefitted. It's far riskier.

manjalyc··on Hackers take over prominent Twitter accounts in simultaneous attack
Most communities that would actually have buyers for high level information are well hidden, you basically have to know someone to get in. I don't know of any sites on TOR that have a marketplace for this kind of high level information, but there's defintely a couple russian marketplaces on i2p. I don't have the links anymore but they're probably somewhere out there on the clear web.
manjalyc··on Hackers take over prominent Twitter accounts in simultaneous attack
Doubt it, that would open up too many vectors on an otherwise easily anonymized operation.
manjalyc··on Website allows you to experience what it is like to live with dyslexia (2016)
This sounds like a problem a simple extension would trivially solve, I might write one up and publish it later today when I have some free time. I’ll edit this comment when I do.

Edit: Should've googled first, there seems to be plenty of extensions that solve exactly this issue.

manjalyc··on Sandboxie-Plus – a fork of Sandboxie with improved functionality
Sandboxie is one of the few programs that I allow to autostart on my Windows installations. It is an ingenious piece of software with a dead simple yet extremely powerful interface. Glad to see it’s free software/open source instead of just dying a slow death. It’s saved my ass more than once and made my life a lot easier.
manjalyc··on Linux kernel in-tree Rust support
It is also a blessing for paywalled news sites.
← PreviousPage 2 of 3Next →