HNHacker News
TopNewBestAskShowJobs

omh

1,776 karma · joined September 13, 2010

Email: hn @ doublegeek.com
submissionscomments
omh··on Netflix to get its own ‘cable channel’ next week
This has been available in the UK for a while (on Virgin Media TiVo boxes, the only cable supplier here).

I don't have a Netflix subscription so I haven't tried it properly, but the integration with TiVo is good. If you're browsing an actor and find a film, as well as any upcoming TV showings it will give you the option to launch it from Netflix.

It's obviously a big move away from the major TV channels, but (in the UK at least) I think the big money is in the sports channels and Netflix isn't competing with them there.

omh··on Nginx 1.6.0 stable released
In some cases it would be useful to perform session handling like this in nginx. I like the idea of building a reverse proxy which handles authentication and sessions, in front of a backend web page which wasn't designed to handle it. Something like giving access to an old internal intranet without having to change the app.
omh··on IFTTT launches on Android with deeper integration than on iOS
This looks promising. I've got several IFTTT recipes in mind that I'd like to try out when they support my phone.

Unfortunately my Facebook related recipes never go quite so well, but I think that's Facebook's fault really.

omh··on Microsoft Offers Office Online apps via Chrome Web Store
Windows RT devices do have a native version of Office though - in fact I think that's one of their main (only?) selling points.

I know it's limited compared to the full x86 version (I've only played with one briefly), but I suspect it fills a gap that the Chromebook can't for people who aren't comfortable using "office" web apps.

omh··on Using Git Grep
It looks like the server is slightly misconfigured, it isn't serving the required intermediate certificate[1].

Desktop browsers are smart enough to find the intermediate certificate and then verify the chain, but technically I don't think this is part of the spec.

[1] https://www.ssllabs.com/ssltest/analyze.html?d=blog.afoolish...

omh··on LastPass and the Heartbleed Bug
Yes, I'd say most MITM scenarios are at the client end.

But you could, for example, be an evil network admin near the LastPass servers. That would let you MITM almost everyone who connects.

omh··on "Unbreakable" Encryption Almost Certainly Isn't
Nit: I would consider one time pad to be a method of encryption.

Ah, true. But the encryption algorithm is much simpler to implement than most :-)

omh··on "Unbreakable" Encryption Almost Certainly Isn't
If I was using one-time-pads I'd probably be using them because I didn't trust encryption, so "unencrypted" wouldn't matter here.

In real-world implementations I think the security is probably based around a large number of men with guns.

omh··on A tube map of the Internet
The pages says that it was based the the “Enemies of the Internet” report from Reporters Without Borders[1].

There are plenty of issues with internet freedom in the USA, UK and Western Europe but I don't think they're on the same scale. I'm happy to criticise the government from my UK connection[2]. Would you want to do the same from a Chinese, Syrian or Saudi ISP?

[1] Probably http://12mars.rsf.org/2014-en/ , but the list of countries looks clearer in their 2013 report http://surveillance.rsf.org/en/wp-content/uploads/sites/2/20... [2] David Cameron sucks!

omh··on BlackBerry loses $423M in last quarter as revenue plunges
Their new OS is security certified as well: http://bizblog.blackberry.com/2012/11/blackberry-10-fips-cer...
omh··on End of Windows XP support puts 95% of world's ATMs at risk
In all seriousness - with modern software, there can be all too small a gap between bleeding edge and end of life.

A piece of software might be supported for 5 years. But perhaps it's 4 years into that period before the new version is available and considered stable enough to use. That gives you less than a year during which you have to upgrade - including any other changes, integration testing etc.

omh··on Los Angeles Cops Argue All Cars in LA Are Under Investigation
The London Congestion Charging scheme is an interesting example of this.

There is a network of number plate recognition cameras to enforce the congestion charge. But there were initially assurances that this wouldn't lead to a blanket database for policing, they can just request particular images.

Pretty rapidly there was an exception for "national security" purposes, and more recently the mayor has proposed giving the police full access to the camera network[1].

[1] http://www.london.gov.uk/media/mayor-press-releases/2014/02/...

omh··on Raspberry Pi gets its own sound card
It looks like the P5 header that it uses was only added in rev2, and "intended to be a suitable attachment point for ... audio codec boards"[1].

It's definitely a shame that things are fragmented, I was considering adding audio to my old Pi. But at least they're cheap enough to justify buying a second one :-)

[1] http://www.raspberrypi.org/archives/1929

omh··on Sony and Panasonic announce the Archival Disc format
The economics are certainly moving, but I think it will be a long time before on-site storage is obsolete.

A reliable fast connection is still very expensive, and there are several other considerations. When we looked at offsite backup a major consideration was restore times. Even if you can do differential backups, in a disaster you might need to get everything back ASAP and even the best internet connection can't get near the throughput of onsite disks/tapes.

omh··on NHS England patient data 'uploaded to Google servers', Tory MP says
Not even that - they say "We uploaded it into a traditional Microsoft SQL database on a 1TB drive". So it sounds like they were just using a single spindle. Purchasing an SSD for that SQL Server would probably have given comparable performance benefits.
omh··on E-mail didn't really evolve since Gmail. Why is it so hard to innovate?
Tags have an important difference from folders in that messages can have multiple tags and you don't think of messages as being in a folder.

Personally I find this quite useful and it definitely improved the way I use email.

omh··on Has goto fail been fixed yet?
Are you sure? The old 'British Billion' was 10^12, but even that is rarely used any more. I've never seen an 'M' suffix used to mean anything other than 10^6.
omh··on Explicit Trusted Proxy in HTTP/2.0
The "old way" is actually to install a new CA on the device. Then the proxy can just dynamically create dummy certificates signed by that CA.

This is simple on the client and avoids any security warnings. It's supported in quite a few firewalls and even squid, so it would be very easy for a carrier to roll out tomorrow if they needed to.

omh··on `three = 1` in the linux sourcecode
I always assumed it was the more general "coming up with names" - for variables, hostnames, project names etc.

The non-human-readable things like MACs, IPs and auto-increment keys are easy. But when I have to come up with a short, memorable and non-confusing name for something like a script that can take me longer than writing the code.

omh··on Facebook quietly ends email address system
Ah, thanks. Missed that. So it doesn't look like there will be a way of getting an email in to their Facebook inbox.

Unfortunately my grandmother never quite figured out email but she's very comfortable with Facebook.

omh··on Facebook quietly ends email address system
That's a shame.

I use this to send emails to a couple of older family members who are happy using Facebook but don't use any 'real' email address. Is there any chance they'll keep some forwarding option around?

omh··on Explicit Trusted Proxy in HTTP/2.0
The same thing is possible today by getting users to install a new CA and maybe configuring a proxy for them. It doesn't seem like these proposals would make this significantly easier.
omh··on IBM to Acquire Cloudant
It is funny this kind of came full circle. Damien Katz, the original CouchDB author was working on Lotus Notes as some point in his life

It's definitely interesting. I can remember people in the Notes community wondering why IBM didn't either take CouchDB and use it as a new Notes backend, or alternatively push the existing Notes bits as a mature document-based database.

The end quote from Katz's "Formula Engine Rewrite" post[1] is interesting:

"But ultimately IBM killed Iris. In late 2001 IBM folded Iris Associates and converted all the employees to IBM. All the energy the Iris building had was seeping out. Really it was more pushed out by the BS that IBM management kept trying to sell us..."

[1] http://damienkatz.net/2005/01/formula-engine-rewrite.html

omh··on Google Cloud SQL now available with an SLA, 500 GB databases, and encryption
Any modern CPU has dedicated hardware for encryption. And a huge number of storage devices have it too - either storage arrays (which perhaps Google aren't using) or standard hard disks, especially SSDs.
omh··on Google Cloud SQL now available with an SLA, 500 GB databases, and encryption
Does anyone who is concerned about the NSA issues seriously think that encryption (in the way it's implemented here) would be any help?
omh··on Google Cloud SQL now available with an SLA, 500 GB databases, and encryption
What is the purpose of encryption in these cases? Is it just a compliance tick box?

The keys are managed by Google and obviously this won't protect against them getting at your data. And any external attacker who gets into Google's infrastructure could (in theory at least) get the keys as well. It presumably protects against someone stealing the hard drives from the data centre, but that doesn't seem like a significant threat.

omh··on Google Cloud SQL now available with an SLA, 500 GB databases, and encryption
Why would there be a significant performance degradation?

I'd expect this to be implemented by hardware encryption, probably at the storage layer, with minimal speed impact.

omh··on NZ court rules Megaupload warrant legal, dealing blow to Dotcom
Sorry, my reply was badly phrased. I understand NZ's anti-nuclear stance, I was just wondering why the US think that's so important for free trade agreements.
omh··on HP to begin charging for firmware updates and service packs for servers
That sounds plausible. For the most part though I'd expect those users to just use the old hardware anyway, so it's not a loss of revenue. And I'm sure the resources used to serve the updates wasn't significant.
omh··on Life of Brian (Krebs)
Note that the resources required to launch that attack were relatively small. From the cloudflare article:

it is possible that the attacker used only a single server running on a network that allowed source IP address spoofing

So perhaps one technically adept attacker, which isn't quite so surprising.

← PreviousPage 5 of 14Next →