HNHacker News
TopNewBestAskShowJobs

msantos

1,320 karma · joined July 17, 2012

submissionscomments
msantos··on My website is being stolen in real time and I don't know what to do
The javascript solution has already been suggested, but take a step back and think about it: the same way the leech worked out your links, domain name, logo and all the stuff that brands your website, he can easily figure out the simple JS code suggested here.

<img src="x" onerror= "if(document.location.href==='http://4co.in')document.location='//xxxxxx.xxxx';">

So I say, go a step further:

- do not send his users to a black hole, instead show a banner warning them about the leech and then after a few seconds redirect the user to your website.

- The JS code for the above should go in the same JS file that provides core functionality to your website.

After done that, run your JS past http://closure-compiler.appspot.com/home or if you better still install the yuicompressor cli (http://yui.github.io/yuicompressor/) in your machine.

The resulting code will be minified/compressed and seriously obfuscated. So trying to defeat it will that the leech hours if not days depending on his experience.

- encode/obfuscate the warning string (1st topic) to make it harder to find within the JS code.

- and finally do a daily spot check on website following @jarrett comment below

msantos··on Why Stack Overflow in Portuguese?
I don't believe the OP actually meant, strictly speaking, Japan, China and Russia full stop. It was more like: name any famous developer from the non-English speaking world...

And yes, the three names I listed are all Brazilians.

msantos··on Why Stack Overflow in Portuguese?
Roberto Ierusalimschy

Waldemar Celes

Luiz Henrique de Figueiredo

The folks behind Lua (programming language)

msantos··on Cockpit, a web-based server management interface
Be aware that

> Cockpit is under heavy development and it's advised you only run it in a virtual machine for now.

Another interesting Red Hat backed project in the same field of server management and deployment is The Foreman http://theforeman.org/manuals/1.4/index.html

msantos··on The mystery doge ad in the Guardian's financial pages
Anyone interested in the original print ad, here it's https://pbs.twimg.com/media/Bf3U1C7IMAE_MkJ.jpg:large
msantos··on Dogecoin market manipulation?
I guess this Wolong person is taking the scam serious..

> Wolong To Launch A Forum

> The plan is to make the forum private and tight-knit; thereby locking out trolls. According to him, the entrance fee will be between $25-$30 USD

http://www.dailydoge.org/2014/01/wolong-to-launch-a-forum/

msantos··on Can’t get there from here
Both websites hitb.org (199.58.210.36) and thc.org (199.58.210.16) have A records part of the Rokabear's CIDR 199.58.208.0/21 and some IPs in that block are responding as expected i.e. 199.58.208.36 and 199.58.215.36

However not a single IP in the range 199.58.210.0/24 responds to ICMP or TCP probes. My only guess is this is more likely a faulty or misconfig router.

    # Dirty TCP check
    nmap -v -Pn -p 80 199.58.210.0/24

    # Dirty ICMP check (1 means failure, 0 means success)
    for i in {1..254}; do echo -n "199.58.210.$i "; ping -c2 "199.58.210.$i" >/dev/null 2>/dev/null; echo " $?";  done
msantos··on Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
I wonder if the reason why they are asking for AppleID and password is because that's the only way they found to overcome the iCloud integration problem described back in April/2013

From http://sunrise-product.tumblr.com/post/47802736454/why-doesn...

Why doesn’t Sunrise support iCloud/Exchange yet?

Every other calendar app seems to do it, what’s taking Sunrise so long?

To explain let’s breakdown a calendar app into two parts, the presentation layer and the storage layer. In the stock iOS Calendar app, Calendar is the presentation layer and EventKit is the storage layer, both developed by Apple. Other calendar apps in the App Store also follow this two layer design but only redevelop the presentation layer while continuing to use Apple’s EventKit storage layer. In other words, these apps quite literally take your data and dress it up in a different color. What we do at Sunrise is redevelop both the presentation layer and the storage layer.

You guys are crazy, why bother reinventing EventKit?

The storage layer is responsible for keeping your data in a structured format. If we were to use Apple’s EventKit storage layer, we would have no control over what can be stored and how to store it.

Okay, so what’s wrong with not having control over the storage layer?

The storage layer needs to be revolutionized. Why can’t my calendar store anything besides text? What if I wanted to attach a picture to an event? Better yet, why not a video? What about other rich media that I would want to be included?

Herein lies the problem, the current storage layer isn’t capable of storing anything other than basic data. Not only that, it only stores certain kinds of basic data: titles, descriptions, dates, etc. We want to break these barriers and let you store anything!

Revolutionary features are coming to your calendar. We’re working as fast as we can.

msantos··on Apparently It’s OK For iOS Apps To Ask For Your Apple ID And Password
I can't take anyone serious when they try to justify a potential security flaw with "to provide a better user-experience".

And as for "to offer a Sunrise experience everywhere, on all platforms", but at what cost?

msantos··on French-UAE Intel Satellite Deal in Doubt – US Parts Raise Security Concerns
US Air Force using counterfeit Chinese parts [1]

s/counterfeit/backdoored/

[1] http://rt.com/news/us-air-force-counterfeit-electronics-879/

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid

  > they do not have police powers and thus cannot arrest people
Let's face it, that's not exactly what their website says. A translation would be more like ... policing is beyond their "job scope" and detaining, arresting and interrogating are activities incompatible with the Intelligence work they do - for obvious reasons.

So, saying that they don't detain nor arrest people is fair point. Although they could detain and so could any other Brazilian citizen detain any person caught red handed (Latin In flagrante delicto) as stated in the Brazilian constitution.

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
There's big money to be made launching satellites. The Alcantara Launch Centre (http://en.m.wikipedia.org/wiki/Alc%C3%A2ntara_Launch_Center) is in theory the biggest competitor to the French launch centre in Guiana, where most of the European satellites are launched from. I say in theory because although they share the best geoloc in the world when it comes to geosync orbit launches, the Guiana centre is a fully functional space centre while the Brazilian counterpart is not much more than a naked launch pad.

But with the right partners and some investment the Alcântara could become a real treat to the French centre in Guiana.

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
A lot was said about it back then.

After the explosion, the Brazilian Space Agency was criticized for using solid-fuel rockets, which are easier to build and ignite than liquid-fuel rockets, but also dangerous because they lack throttle controls and emergency shut-offs.

(http://en.wikipedia.org/wiki/Brazilian_rocket_explosion)

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
"Fun fact" two of the worst accidents with the Saab JAS-39 Gripen were blamed on software faults.

Sources: http://en.wikipedia.org/wiki/Saab_JAS_39_Gripen#cite_ref-FOO...

http://www.flightglobal.com/FlightPDFArchive/1989/1989%20-%2...

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
As the article clearly says, this was an off-and-on deal rolling for years.

"Fan fact" the Brazilian government has been seating on this project to renew the aging Air Force's fleet since 1994.

And in 2001/2002 the contenters were (in no specific order):

    - Sukhoi Su-35
    - Eurofighter Typhoon
    - General Dynamics/Lockheed Martin F-16
    - Mikoyan MiG-29
    - Saab JAS 39 Gripen
    - McDonnell Douglas/Boeing F/A-18 Super Hornet
    - Dassault Rafale
msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
Your comment is borderline idiotic. And you clearly don't understand the difference between multirole, flighter and attack jets.
msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
Done
msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
Yes it can, I know that for a fact. It doesn't normally do it because it would blow the agents covers and so they rely on "Policia Federal" to carry out arrests.
msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
Surely not "because NSA" entirely.

It could also be because the USA has stopped a big sale from Embraer to Venezuela years ago.

And earlier this year the USA annulled a contract that Embraer had won to supply Super Tucano to the US Air force in favour of a local plane maker.

EDIT: http://www.forbes.com/sites/kenrapoza/2013/03/15/u-s-air-for...

msantos··on Saab wins Brazil jets deal after NSA spying sours Boeing bid
The French bid was turned down by the President herself after major set backs in the current France-Brazil partnership building a nuclear submarine for the Brazilian Navy.

Not mentioned here is the fact that old conspiracy theories surrounding the explosion that destroyed the Alcantara launch pad and killed the cream of the crop of the Brazilian space program, have recently been resurrected and it's believed plausible by some members of the Brazilian government although not widely publicized. Some blame the French for possible sabotaging it.

Over the years the Brazilian secret service (ABIN), have arrested several French spies around Alcantara - the latest case was that a French spy posing as kitesurf instructor. Other cases include water buoys found at sea near the Air Base loaded with electronics, also blamed on the French.

EDIT: added a few sources (sorry portuguese only)

http://www1.folha.uol.com.br/fsp/poder/137424-suspeita-de-sa...

http://www.metro.org.br/jose_alves/os-cacas-militares-e-as-b...

http://jornalpequeno.com.br/2013/11/22/governo-confirma-cont...

http://www.planobrazil.com/dez-anos-depois-explosao-de-fogue...

http://en.wikipedia.org/wiki/Brazilian_rocket_explosion

msantos··on Don't commit when you're drunk

    > Don't commit when you're drunk 
That's a valid premise for whatever you do in life, not only Git.
msantos··on Gmail blows up e-mail marketing by caching all images on Google servers
This is what I'm seeing when testing it and found that all my tracking images (tracking pixel) have hits as below.

Remote address: 66.249.x.x [any google ip]

Referer: [not set]

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (via ggpht.com)

msantos··on Microsoft Makes Moves To Protect Customers From Government Eyes
Anytime Microsoft comes up with their fake privacy promises one particular case always comes to mind: Mordechai Vanunu http://en.wikipedia.org/wiki/Mordechai_Vanunu#cite_note-55

Microsoft is running an anti-Gmail campaign blasting Google for snooping on emails in order to serve ads. http://betanews.com/2013/11/05/microsoft-is-at-it-again-new-...

msantos··on Ask HN: Client refused payment, told us to come back with lawyers
I'm sorry I can't offer you a solution. However, I'd like to suggest you do not do something like this => http://nycfreshmarket.com/
msantos··on F1 2014: All aboard the 'power train' - new rules explained
Several F1 teams are hiring C/C++ engineers currently. Mostly looking for C brainers with experience in embedded systems and C/C++ Matlab programmers.
msantos··on Amazon Prime Air
Waterstones, one of UK's biggest bookseller has just announced its response to Amazon's Prime Air: O.W.L.S = Ornithological Waterstones Landing Service

http://www.waterstones.com/blog/2013/12/introducing-o-w-l-s/

msantos··on Get out, Glasshole: Geek kicked out of restaurant for wearing Google Glass
He should know that his space ends where the next person's start.

https://www.facebook.com/NickStarr/posts/781394843146

msantos··on Email Account Security: Hacking a phisher
Claiming that the authorities in Brazil would not act is a massive understatement. Granted.

But the OP hacked someone's account. And that's also a crime.

From victim, the OP could very well end up in the other side of the system, being accused of hacking into someone else's accounts. And to make matters worse, because those services are hosted in the US, then Tom could be prosecuted there and very likely being convicted.

Never take the law into your own hands. It's not worth the risk of an eventual table turning.

msantos··on JPMorgan PR disaster after asking for questions on Twitter
Here are three fine examples of the #AskJPM backlash (tweet includes screen shot) https://twitter.com/BeccaDwyerPR/status/400754694404206592
msantos··on Running an English speaking company in Europe
BTW my mention refers to a case in the UK not in Norway.
← PreviousPage 4 of 5Next →