HNHacker News
TopNewBestAskShowJobs

nyc_pizzadev

365 karma · joined November 9, 2018

Just another dev working for pizza.
submissionscomments
nyc_pizzadev··on Neat URL cleans URLs, removing parameters such as 'fbclid' and 'utm'
This is a browser extension, I think. No where does it actually say that.
nyc_pizzadev··on I love coding in C
I'm pretty certain the CPU engineers at Intel/AMD/etc aren't pulling out K&R 1978 and then telling themselves this is their new reality. All kinds of new safety, virtualization, and ML instructions have been added to CPUs without consent from the "C language". Infact, its Google, Amazon, Apple, Microsoft, and Facebook who are controlling CPU roadmaps!
nyc_pizzadev··on Ha-ha wall
https://www.autodraw.com/share/SOZ6P8TKWJO3
nyc_pizzadev··on Ask HN: Why do maintainers optimize for small binaries?
Instruction cache. If your mega binary doesn't fit into cache, instructions jump around to different and unpredictable address spaces. You are fetching and executing instructions directly from memory. This is why huge applications are so slow, they are both instruction memory bound and data memory bound. Imagine how slow a CPU is with no cache!
nyc_pizzadev··on An F-22 Raptor’s Crumbling Radar Absorbent Skin
The heat signature of the engine, which in part is connected to the entire plane. Burning that much jet fuel produces a tremendous amount of energy. You literally have a glowing ball of energy streaking thru a vast void of no to low energy. Clouds have heat, but not at the huge concentration a fighter jet has.

I guess you have flares, but now its an "AI" problem of choosing the right target.

nyc_pizzadev··on An F-22 Raptor’s Crumbling Radar Absorbent Skin
Why is there no mention of IR (heat) radar? As far as I know, its impossible to hide a jet engine heat signature. Thermodynamics 101. This is especially true when you are looking up and the thermal background is pretty much black space.
nyc_pizzadev··on Capital One’s breach was inevitable, because we did nothing after Equifax
Wasn't this a private S3 bucket and she somehow hacked permission access? Anyone know the full details of how this came to happen?

As for mitigation, does S3 encryption happen at the user access level (GET) or S3 system level. Basically, does each GET call pass in the decryption key? This means an attacker needs another piece of information. More encryption wouldn't hurt here. This goes for Equifax too.

nyc_pizzadev··on OpenBGPD: The OpenBSD BGP internet routing daemon
Anyone run their own Linux/BSD/Unix BGP? I heard bird is pretty good:

https://bird.network.cz/

What about non-free?

nyc_pizzadev··on A "cure" for baldness could be around the corner
I took propecia in my late 20s and early 30s. I was lucky, it stopped my hair loss and slightly reversed it as I started growing new hair. However, sexual drive kind of disappeared. I could still have sex, but the drive I previously had was much much lower. I stopped. My hair loss returned and my sex drive did go back to previous levels. It was then when I realized the sexual side effects propecia had on me. Looking back, not sure I really gained much by taking it.
nyc_pizzadev··on Another dubious claim that someone has “decoded” the Voynich manuscript
This video explains it all:

https://youtu.be/lhtZc-nFNt0

nyc_pizzadev··on Fastly S-1
Just did and I think it furthers my point. Cloudflare now owns your key and the edge is now their network.

My concern is cert/key management where the edge is somewhere you have very little control over, like a cell tower, random building network, or a users house. Even with keyless, once that device is in my home, Im pretty sure that entire thing can be reverse engineered. Not easy, like probes and oscilloscopes on exposed leads hard, but physical access is pretty much game over, no?

I've worked in this space and the solution is detection and mitigation. Limit the damage to single devices, workflow the user in, look for human attack patterns. Defense is futile.

nyc_pizzadev··on Fastly S-1
For an edge to work, you need security. That means transport encryption which requires certs. I think this fact alone will keep the edge at modern secured datacenters. There is limited physical security at cell sites. Even less at the users home. This could mean there is no more transport encryption for this kind of edge. Or even worse, private key loss.

Not saying no here, just pointing out a very large concern.

nyc_pizzadev··on Fastly S-1
That's only good for small media like websites and images. Videos and downloads need to be cached in the provider networks, you simply cannot serve terrabits of data from a single origin. Well, you can, but networks don't like to operate like that. So ya, at scale, you need edges. The internet is dominated by companies at scale.
nyc_pizzadev··on Fastly S-1
Those accounts aren't the big fish. Well, github possibly is. Websites are tiny, especially when your revenue is based per byte. The money is in video and downloads. Getting a fraction of Apple's or Microsoft's CDN spend for downloads is probably worth tens of millions.
nyc_pizzadev··on Are Mail-Order Meal Kits Doomed?
For me, the quality had gone downhill considerably. First, missing ingredients or completely mis-boxed orders. Then, the actual ingredients started becoming low quality. Stuff that would remain on the shelf at the grocery store. Then stuff started coming damaged. And all the sides are cheap (high) carbs. I was ok with the packaging, it never bothered me.

Going to the store, you get exactly what you want, good to high quality choices, and no damage! Plus, endless variety. And its way cheaper. So for me, there was little value left.

nyc_pizzadev··on Linux Kernel Through 4.20.10 Found Vulnerable to Arbitrary Code Execution
Its a kernel based crypto API. Ciphers, hashes, and keyed hashes (HMAC). It uses sockets to move data back and forth. Because its kernel based, there is going to be the usual kernel switch penalty. Sure, its hardware accelerated, but there are user space alternatives with zero kernel overhead. However, it does let you stash your private keys into kernel space and wipe those keys completely from user space. You then simply reference the keys you need to use. So in this regard, it can provide a higher level of key protection.
nyc_pizzadev··on Glowing reviews tout counterfeit cash on the dark web
I've heard stories that this is sometimes an issue for the film industry. See:

https://propmoviemoney.com/what-does-rush-hour-2-have-to-do-...

nyc_pizzadev··on Voynich Manuscripts Problematic Pipes (2018)
Im guessing they are doing this as we speak. These guys are smart and breaking this "code" would be a lifetime achievement.
nyc_pizzadev··on Voynich Manuscripts Problematic Pipes (2018)
Very compelling theory laid out here:

https://youtu.be/4cRlqE3D3RQ

There have been a few updates since. Very promising stuff.

nyc_pizzadev··on Lottery-Like Prizes Coax Savings. What’s the Risk in Expanding Them?
Ya, sorry, I jumped to that conclusion based on an early statement.
nyc_pizzadev··on Lottery-Like Prizes Coax Savings. What’s the Risk in Expanding Them?
Not the whole thing, sorry, you are correct.
nyc_pizzadev··on Lottery-Like Prizes Coax Savings. What’s the Risk in Expanding Them?
"...something that truly benefits ticket-buyers: by nudging people to save more or, even, to engage in safer sex."

Whoa. I guess poor people should not be allowed to participate in the joys of family and child raising. How did this get by editorial?

Edit: at the end of the article, the author links sex to health. I apologize, I didn't make it that far. Would have been better to say heath education in the earlier statement...

nyc_pizzadev··on Remote code execution vulnerability in SQLite
Or lets wait and see what the bug is and why it wasn't detected in the testing coverage.
nyc_pizzadev··on Super Micro says review found no malicious chips in motherboards
Seems like a lot of people don't know who to believe. Me too. Hasn't anyone pulled a few Supermicro boards and confirmed that this chip exists? It was reported that the chip might be inside the wafers, but still, that would make finding this a clear smoking gun.
nyc_pizzadev··on Two Cybercrime Rings and Eight Defendants Indicted for Digital Advertising Fraud
"Ad Network #1 rented more than 1,900 computer servers housed in commercial datacenters in Dallas...spoofing more than 5,000 domains...leased more than 650,000 IP addresses...$7 million in ad fraud"

"Ad Network #2 carried out another digital ad fraud scheme...botnet...more than 1.7 million infected computers...download fabricated webpages...$29 million in ad fraud"

nyc_pizzadev··on Waymo CEO Says Alphabet Unit Plans to Launch Driverless Car Service
On this topic, I have nothing against paying for content, I pay for NYT and lots of other (video) content services. $40 a month seems like a bit much, no? Worth it? Comparitively, other similar services seem to be in the $10 range?
← PreviousPage 4 of 4