HNHacker News
TopNewBestAskShowJobs

mediocrejoker

924 karma · joined March 26, 2014

submissionscomments
mediocrejoker··on Password Managers: Under the Hood of Secrets Management
They also address that in their response. It stems from the fact that they use memory-managed programming environments, so they don't have that level of control over memory.
mediocrejoker··on Password Managers: Under the Hood of Secrets Management
> What? What tools "automate" stealing your notebook??

Not the parent but I assume they meant a tool that traditional laptop thieves with little technical sophistication can use to easily extract valuable data from a machine after they have stolen it.

mediocrejoker··on Password Managers: Under the Hood of Secrets Management
I think that's a fair characterization of their response, yeah.

As someone in that thread pointed out, I would say that the onus should be on the OS SDK to provide memory management primitives specifically for the purpose of security that can be zeroed out after use.

They also point out that the threat profile is someone who can read your system memory when 1P is locked (serious compromise already), but is unable to read it when it's unlocked (otherwise why bother reading it when locked), which is a pretty small set of use cases.

mediocrejoker··on Password Managers: Under the Hood of Secrets Management
Yes sorry I replied without reading the entire paper. Would be good to see some responses from the companies.

edit: looks like AgileBits has already responded

https://discussions.agilebits.com/discussion/comment/493044/...

mediocrejoker··on Password Managers: Under the Hood of Secrets Management
Why did they evaluate 1Password v4 instead of v7?
mediocrejoker··on An Honest Living
Instead of clicking back I just started scanning the start of each paragraph until I found the one that would have been the intro in a news-style article and then I realized that the author had helpfully provided a demarcation using asterisks.

That being said after explaining that he was groomed early for academia but then fired, he sort of wanders off again before really explaining how/why and that was where I gave up.

mediocrejoker··on Data leak reveals China is tracking almost 2.6m people in Xinjiang
Are you asking why reputable news organizations don't publish assumptions?
mediocrejoker··on Reddit is raising a huge round near a $3B valuation
This is great. Now all I need is a plugin for mobile safari/chrome/firefox that rewrites all reddit URLs to append /.compact
mediocrejoker··on A “gold standard” study finds deleting Facebook is great for your mental health
I think the solution is for a photo sharing site to win over the tech crowd with well-thought-out, fine-grained privacy controls and a sustainable business model and then to make it dead easy for non-tech people to share their photos with other non-tech people.

ie. I create a single account and my friends each create a single account and I create groups out of those friends, and then I share my photos with a group, and my friends can see and perhaps comment on the photos that have been shared with them.

How much would it cost per user per month to make this sustainably ad-free?

mediocrejoker··on Prisons Are Quietly Building Databases of Incarcerated People’s Voice Prints
I asked my mobile provider (Rogers) if they had any alternatives to storing my birth date as my account verification method and they offered to enrol me in their voice print program. I declined.
mediocrejoker··on New Dell XPS 13 developer edition now available
I think that's the 2018 version. As far as I can tell the 2019 is not posted yet. 8550 is a Kaby Lake process, not Whiskey Lake
mediocrejoker··on New Dell XPS 13 developer edition now available
Has anyone been able to find the link on the Canadian site?
mediocrejoker··on Twins get different results when they put 5 ancestry DNA kits to the test
Can you explain the difference between sampling and sequencing the entire genome? I had assumed they did the latter but I guess the particular markers for diseases they are interested in are at known location that they can "jump to" somehow?
mediocrejoker··on Security Checklist
I think the parent comment's point was that you need to know your threat model before any security/privacy tool can be considered.
mediocrejoker··on Ode to the 767
I didn't know "visiting the cockpit" was still allowed anywhere since 9/11.
mediocrejoker··on Google’s Project Soli radar is sensitive enough to count sheets of paper
I think it runs around 60Ghz and uses phased arrays / doppler to make up the rest of the resolution.
mediocrejoker··on Ask HN: How do you organise your hard drive?
I thought 'freceny' was a typo until I clicked the link, but sadly the man page doesn't really explain what it is.

Could you maybe give a few examples of how you might find something eg. using find(1), and then how you could find it using z?

mediocrejoker··on China lands Chang'e-4 on far side of Moon
Although radio receivers on earth don't orbit la grange points.
mediocrejoker··on Warby Parker built a 1,400-employee company by focusing on team culture
I hate to sound cynical but I am very skeptical of the chart that claims employees place a higher importance on "Culture and Values" compared to any/all of "Senior Leadership, Career Opportunities, Business Outlook, Work-life Balance" or that they value "Compensation and Benefits" least of all
mediocrejoker··on Show HN: Strength News – An HN-inspired website for sport and gym enthusiasts
Why do you say there are no well informed people in the fitness world?
mediocrejoker··on Release Notes for Safari Technology Preview 71
Cool I just tried it with Fastmail and a Yubikey 5 and it worked. Gmail however still checks if you're running chrome so it doesn't work.
mediocrejoker··on Facial recognition: It’s time for action
Apple has been doing so for a few months at least.
mediocrejoker··on Australian parliament passes encryption laws unamended
Does anyone know of a similar service hosted in Canada?
mediocrejoker··on A blogging style guide
Trying to sound intelligent can actually have the opposite effect. I like the quote "If you can't explain something simply then you don't understand it well enough."

As for picking up idioms, I think it's something that happens gradually as you are exposed to more writing by native speakers.

mediocrejoker··on Keystone – Open-source Secure Hardware Enclave
Thanks, those slides have some great info.

What exactly does it mean to proxy a syscall to the debugging host?

mediocrejoker··on Keystone – Open-source Secure Hardware Enclave
Can anyone explain a bit more context around where this would fit in a running system? Would it handle cryptographic operations like key generation, signing etc? How does the boot loader compare to other projects like libreboot?

All of the sys calls in the GitHub repo just set flags in something called magic_mem and then call hitf_syscall, for which I can't find a definition.

mediocrejoker··on Release Notes for Safari Technology Preview 71
Hopefully someone more knowledgeable will chime in as I'm waiting for FIDO U2F support as well but I think CTAP2 is the browser-to-user layer of FIDO.

edit: just tested it on Mojave with gmail and fastmail and it doesn't recognize that the Yubikey has been inserted, so looks like support is not there out-of-the-box

mediocrejoker··on Guide to scaling engineering organizations
Can you explain how the article is "a recipe for bro-culture"?

Why is hiring fluent-speakers of the language in which the company conducts operations a bad thing?

mediocrejoker··on Guide to scaling engineering organizations
I was confused by this too.

I noticed that in both places they use the term, they say "lurk in", almost as if it's a term with an accepted meaning within Stripe.

The fact that they say "read to your heart's content" also suggests that they aren't using "lurk" in it's usual meaning (which to me is reading but not commenting).

mediocrejoker··on Ask HN: Privacy Respecting Fitness/Sleep Tracker Recommendations?
Does the Apple Watch fit your criteria?
← PreviousPage 3 of 12Next →