HNHacker News
TopNewBestAskShowJobs

offmycloud

331 karma · joined February 27, 2013

submissionscomments
offmycloud··on Lockdown: Open-source firewall that blocks app tracking, ads, snooping
If Apple keeps pushing their Bitcode LLVM IR trans-compiling, along with magic App Store re-linking, they will kill the possibility of reproducible builds forever. In Apple's world, you are supposed to trust their app vetting process, not the source code on some website.
offmycloud··on U.S. Officials Say Huawei Can Covertly Access Telecom Networks
Why do they need a back door when they can walk right in through the front door? I used to work for a large company that purchased Huawei 4G gear and had a paid support agreement. A condition of the agreement was giving VPN and SSH access to Huawei support engineers, so that they could "debug" their products in our network.
offmycloud··on Google is finally killing off Chrome apps, which nobody really used
The end of support for Chrome Apps on Windows, Mac, and Linux is June of this year, unless you have paid Enterprise/Education support.
offmycloud··on Google is finally killing off Chrome apps, which nobody really used
I believe that Authy has both a Chrome app and an extension.
offmycloud··on OpenBSD won't update Firefox, advises users to switch to ESR
I hope so, but Fedora is dragging their feet putting out a patched Firefox package on Fedora 30, which is still suppoted.
offmycloud··on SMS is not 2FA-secure
To defeat the Authy account recovery process, you need to perform an active SMS attack (SIM swap, etc) and then prevent the target from seeing the recovery warning emails for 24 hours. Therefore, Authy customers should only tell trusted people that they are going on a weekend off-the-grid camping trip.
offmycloud··on Re Accuracy Concerns Regarding FBI Matters Submitted to the FISC [pdf]
From the first page:

> A finding of probable cause to believe that a U.S. citizen (or other "United States person" as defined at Section 1803(i)) is an agent of a foreign power cannot be solely based on activities protected by the First Amendment.

offmycloud··on Show HN: Passbox – Give access to your data only after you're dead
If a person dies and their payment card stops working, does the account get suspended for non-payment?
offmycloud··on Comcast Is Lobbying Against DNS Encryption
It is much easier for the ISP to just inspect the smaller amount of DNS traffic on port 53, than to inspect all traffic including port 443, and scan for HTTPS and SNI. Also, the destination IP does not revel much for CDNs.
offmycloud··on Ask HN: Why do we now need to inform Google via captcha when logging into HN?
I just has to solve three "traffic lights" and two "crosswalks" to login into HN. Why should I help Google train their ML algorithms for self-driving cars? Maybe I'll just stop logging in and voting on HN. No, I was not using a VPN.
offmycloud··on The U1 chip in the iPhone 11 is the beginning of an Ultra Wideband revolution?
Could someone who understands the radio technology please explain why using time-of-arrival and phase tricks with existing WiFi and Bluetooth signals is "wide-banded" in any way?
offmycloud··on Apple Card launches today for all US customers
Privacy? It's still a credit card. MasterCard still gets all your purchase data and can do whatever they want with it. Goldman Sachs gets your SSN, credit report, and bank account info.
offmycloud··on Inaccurate chart led to unwarranted fears of 5G wireless technology
It is unfortunate that the NYT is confusing 5G, which is a certain version (15?) of the LTE advanced specification, with the use of millimeter wave frequencies. Here in the U.S. at least one major carrier is deploying 5G on frequencies below 1 GHz.
offmycloud··on Bash 5.0 released
A good first step is disabling SSL 3.x and TLS 1.0 in your daily browser. I would also recommend the excellent Qualys SSL Server Test: https://www.ssllabs.com/ssltest/
offmycloud··on Bash 5.0 released
It's sad that lists.gnu.org is running obsolete TLS 1.0 crypto with weak 1024-bit DH. Either upgrade to TLS 1.2 with reasonable cipher suites, or just go back to plain HTTP.
offmycloud··on New Satellites Will Hunt Pirates, and Maybe Terrorists
So ... SIGINTaaS ?
offmycloud··on Before Snowden, a debate inside NSA
The phone companies store the records for at least some period of time already, why make unnecessary copies?
offmycloud··on T-Mobile quietly hardens part of its U.S. cellular network against snooping
Unless you are using VoIP, all of your voice calls go over the 2G network.
offmycloud··on The Home Depot confirms payment systems breach
Official SEC Edgar filing: https://www.sec.gov/Archives/edgar/data/354950/0000354950140...
offmycloud··on Netflix Open Connect Content Delivery Network
(From the Netflix PDF)

Each appliance stores a portion of the catalog, which in general is less than the complete content library for a given region. Popularity changes, new titles being added to the service, and re-encoded movies are all part of the up to 7.5TB of nightly updates each cache must download to remain current. We recommend setting up a download window during off-peak hours when there is sufficient free capacity.

offmycloud··on 8088 Domination Post-Mortem, Part 1
KryoFlux is a USB-based floppy controller http://www.kryoflux.com/
offmycloud··on Poll: Do you have a 3d printer?
A friend of mine bought a real CNC milling machine for < $5K and it can make things out of plastic and metal with real software tools and MUCH better tolerances. Most 3D printer are just ... meh.
offmycloud··on Linode hacked, CCs and passwords leaked
That's a great way to screw up the filesystem on the destination. You'll get mounted fs write combined with low-level block writes, filesystem in a blender.
← PreviousPage 4 of 4