Hacker News Reader

Consuming RSS with Inoreader here. Probably the most used app on my phone.

mrsainton Don't rinse with water straight after toothbrushing

Oh, but you can grow it back through a gun graft, and I had it done successfully. Healthy gum tissue is removed from the roof of the mouth and uses to build the gum back up where it has receded.

mrsainton SoftICE

The good old days. SoftICE for me was essentially the OS, and Windows was just a GUI around it. Windows without SoftICE felt... empty

mrsainton Reverse engineering course

Does anyone remember SoftIce here? 🧓

mrsainton Leaving Pittsburgh because of industrial air pollution

Cannot help but notice the luxury the author has of repeatedly relocating without having to look for a new job. Good for him.

mrsainton Turning off less-secure app access to G Suite accounts

I wonder how to configure Postfix if I wanted to continue using it as a relay client to Gmail. Postfix doesn't support SASL XOAUTH2 yet does it?

mrsainton Show HN: Best Keyboard for Programming

For me for many years this has been the "best" keyboard for programming: https://hhkeyboard.us/happyhacking/

mrsainton Ask HN: Which domain name registrar do you prefer?

Agreed. Nowadays I have most of my domains @ Namesilo and Porkbun.

mrsainton GitHub Is Enabling HTTPS on GitHub Page

What makes you think that they might be getting rid of the wildcard cert fee? Their pricing still lists the $250 monthly fee for a shared wildcard cert (i.e. your wildcard domain is added to one of Fastly's SAN certs).

The "Contact Sales" plan mentioned in the Github discussion applies to the "Customer-Provided TLS Certificate Hosting Service" option, where the certificate is hosted on a shared domain map and where Fastly uses SNI to select the correct certificate to serve based on the domain name sent. Note that this option is only available if you meet their qualification criteria, whatever that includes. And it doesn't say anything about pricing, but there is no reason to assume that it's going to be for free. Also, that plan has been around for a while.

mrsainton Intel Security Issue Update: Addressing Reboot Issues

Uhm, what a mess. This, just when Linux vendors began pushing updated intel-microcode packages (Ubuntu just released intel-microcode 3.20180108.0). Should we put the update on hold until this issue is hopefully resolved, or should we still update as suggested in the last paragraph of this Intel press release, somehow believing that the random reboots don't apply to "end users"?

mrsainton Another neo-Nazi site, Stormfront, is shut down

In this case, I believe, technically, the domain "belonged" to the domain registrar. Why? Because the registrant used the registrar's privacy protection.

While private domain registrations seem like a mildly useful privacy tool, factors to consider is that you are no longer the “owner” or your domain name (ICANN defines who owns the domain by what is published in WHOIS), and also that you no longer have any rights unless you sue the registrar.

mrsainton Google and Paint.NET need to stop misleading users (2013)

To be fair, this is not just Paint.NET. I am a Adsense publishers and I had the chance to talk to "optimizers" from the Adsense team from time to time, and I told them how much I loath those "Download" ads... unfortunately, up to today, things haven't improved, and there is little an Adsense publisher could do, because you can ban those ads in your Adsense panel, but usually they just show up a few days later under a different account.

mrsainton Apple EFI firmware passwords and the SCBO myth

Your list is 7 years old and relates to non-EFI bios implementations. It's hardly a valid comparison to a modern Apple bios as looked at here.

mrsainton Google Chrome 51 disables HTTP/2 on most Linux distros due to old OpenSSL

> Upgrading OpenSSL packages isn't a trivial task, either. Since just about every other service links against the OpenSSL libraries, they too should be re-packaged (and tested!) to work against the latest OpenSSL release.

Not necessarily. You could simply statically link the newer OpenSSL library with your web server and everybody is happy.

mrsainton LogMeIn acquires Lastpass

Yes, there are. The storage format is "open", and afaik, the current revision is v5. See on GitHub: https://github.com/search?utf8=&q=1password

mrsainton What we break when we fix ad blocking

The irony is that the biggest player here, Google, was also the most aggressive in placing ads. I had the pleasure of working with various AdSense and DFP Specialists. Basically it was all about how and where to place ads in the most eye-catching ways, and as many as possible, without breaking AdSense rules. Bigger ads = usually better (in particular those large rectangles, yuck). Higher up the fold = better (funny enough the Google Search team later penalitzed you when you replaced your up-the-fold content with non-content ad stuff - which shows that there are Chinese walls separating various Google teams).

mrsainton Just doesn’t feel good

There we go... muchas gracias.

mrsainton Just doesn’t feel good

Let's say I don't care about a refund but I want to continue using it, albeit unsupported.

The developer says, "It’ll keep working for a long time if you already have it, but with no updates."... but this is what I am not so sure about.

I looked at my iTunes backups and didn't see Peace. It's also not in the list of my updated apps in iTunes, presumably because it got pulled from the store. Suggestion to the developer: how about a heads up next time you're planning something like this? It wouldn't have hurt anyone.

Do you know of any way how I can backup Peace that is currently sitting in my phone, in case I need to do a full iPhone restore?

mrsainton KeePass – questionable security

Would be interesting to compare the .NET implementation to the "legacy" c version, Keepass 1.x.

https://github.com/joshuadugie/KeePass-1.x

mrsainton Lenovo Caught Installing Adware on New Computers

Some more URLs...

https://www.superfish.com/ws/sf_code.jsp

https://www.superfish.com/ws/sf_conduit.jsp

https://www.superfish.com/ws/sf_conduit_mam.jsp

https://www.superfish.com/ws/sfw.jsp

https://www.superfish.com/ws/sf_main.jsp

https://www.superfish.com/ws/getCouponsSupportedSites.action

https://www.superfish.com/ws/getSupportedSitesJSON.action

mrsainton DDoS Attack Against Default DNS System v2

>If folks are looking for an alternative DNS host, there is Google Cloud DNS, which I have been using for a while via Google Domains and it's pretty awesome.

It's pretty easy to setup too. [1] For my purposes cheaper than Route53.

[1] https://www.zeitgeist.se/2014/05/01/google-cloud-dns-how-to/

mrsainton Wire – Modern Communications Network

Yes, at this address is a "workplace provider" [1] where you can get a virtual office starting at 180 SFr/Month.

[1] http://www.en.regus.ch/

mrsainton Wire – Modern Communications Network

Interesting. Judging from this LinkedIn page [1], Wire Swiss GmbH has been around since at least March 2014, and has between 50-200 employees [2]. My guess: they renamed Zeta Project to Wire, but didn't want to wait with the announcement until it's updated in the registry?

Still not sure what's up with the two governing laws.

[1] https://www.linkedin.com/pub/pierrine-auberson/5a/70a/537 [2] https://www.linkedin.com/company/4836762

mrsainton Wire – Modern Communications Network

Something here I don't understand. First, the terms state that there are two kinds of governing laws: One for those using the service outside the US, and one for those from the US. This is the first time I see a supposedly non-US company applying two different laws. Also, if you go through the terms, you see that basically any legal aspect is governed by the County of San Francisco, California. Why not Switzerland where the company was supposedly formed and is located in?

Second, as of right now, there is no mentioning of a "Wire Swiss GmbH" in the Swiss commercial registry. That's quite severe because under Swiss law, you are not allowed to represent to the outside a juristic person as long as it is not in the official registry.

Here is the link to the registry:

http://zefix.ch/zfx-cgi/hrform.cgi/hraPage?alle_eintr=on&per...

mrsainton Cloudscale – Swiss virtual servers

>How do they differentiate themselves from other providers? Feels like the ordinary "it will sell because it says Swiss all over the place".

Good luck with that. ☺️ Swiss privacy laws aren't any better than, lets say, Germany's, but you pay a lot more for less (hardware, bandwith) due to limited competition.

mrsainton Letter to Amazon Board from Fired Ad Exec

I wouldn't call it "whining ramblings". But I find it odd that this letter, dating back one month ago, emerges two years after the news of the lawsuit. What I would like to know: what happened between those two years?

mrsainton Show HN: End-to-end encrypted email, based in Switzerland

Switzerland is currently in a state of flux. They are adopting to "international" laws at astonishing speeds. A safe heaven for data privacy? Think twice:

http://arstechnica.com/tech-policy/2013/12/switzerland-wont-...

That's the current status quo. And members of the Bundesrat (the executive gov body) have proposed more plans to ease the use of wiretaps.

mrsainton Show HN: End-to-end encrypted email, based in Switzerland

Interesting that they did not choose to support TLS 1.2 for SSL encryption, and that they added RC4-MD5 as one of their (few) supported ciphers. Certainly doesn't make me feel any warmer.

mrsainton SHA-256 Certificates Are Coming

CAs are already preparing as well.

GlobalSign for example: https://www.globalsign.eu/ssl-information-center/transitioni...

And generally: https://casecurity.org/2014/01/30/why-we-need-to-move-to-sha...

mrsainton Refactored PHP engine makes Wordpress 20% faster

And themes. It's not unusual to see themes that cause 100+ database queries. Per pageview.