Hacker News Reader

paralelogramon CEO demanded all employees return full-time to the office. Only half showed up

This Great Barrington Declaration is more restrictive than current laws in my Eastern European country.

For example, it says "Retired people living at home should have groceries and other essentials delivered to their home. When possible, they should meet family members outside" but in my country there is no such lockdown for any age group.

It says "Young low-risk adults should work normally, rather than from home" but in my country employers aren't required to stop allowing young people to work from home (before 2020 working from home without breaking laws was basically impossible in my country).

paralelogramon Face masks, public policies and slowing the spread of Covid-19

https://www.who.int/news-room/feature-stories/detail/the-sin...

A large phase 3 trial in Brazil showed that two doses, administered at an interval of 14 days, had an efficacy of 51% against symptomatic SARS-CoV-2 infection, 100% against severe COVID-19, and 100% against hospitalization starting 14 days after receiving the second dose.

Pfizer and Moderna vaccines aren't easily available outside of "first world" countries because of vaccine nationalism.

paralelogramon Bangalore has 12M residents and only 385 Covid-19 cases

I think that in some of these countries the virus doesn't exist anymore, for example in Montenegro: https://www.worldometers.info/coronavirus/country/montenegro...

paralelogramon Should you use www or not in your domain? (2017)

App Engine uses four anycast IP addresses:

https://www.bing.com/search?q=ip%3A216.239.32.21

https://www.bing.com/search?q=ip%3A216.239.34.21

https://www.bing.com/search?q=ip%3A216.239.36.21

https://www.bing.com/search?q=ip%3A216.239.38.21

paralelogramon TLS 1.3 and Proxies

The largest ISP in Kazakhstan believes that it should be able to intercept all TLS traffic on their network: https://bits.blogs.nytimes.com/2015/12/03/kazakhstan-moves-t.... Because there are no technical differences between your TLS interception and what Kazakhtelecom is doing and no legal differences in most non-Western countries, I believe that all software should be changed to make TLS interception as hard as possible.

paralelogramon Issue with TLS-SNI-01 and Shared Hosting Infrastructure

DirectAdmin, the most popular webhosting control panel in my country.

In my opinion this is not a bug because when I need to test a website, I often create an invalid hostname on the server and add the server's IP address to my computer's /etc/hosts. When I need HTTPS, I upload a certificate for the test hostname signed by my private CA.

paralelogramon Issue with TLS-SNI-01 and Shared Hosting Infrastructure

I can create "773c7d.13445a.acme.invalid" in almost all shared hosting control panels I have access to.

When I send an HTTP request with Host: 773c7d.13445a.acme.invalid, the server responds with a file from ~/domains/773c7d.13445a.acme.invalid/public_html or a similar directory available through my FTP account.

When I connect using openssl s_client ... -servername 773c7d.13445a.acme.invalid, the server sends a certificate configured for 773c7d.13445a.acme.invalid in my control panel.

Is this a problem for Let's Encrypt? Doesn't Let's Encrypt's verification require creating files with random names in http://example.com/.well-known/acme-challenge where example.com is the certificate's common name?

paralelogramon What is our action plan against foreign interference?

When I click on "Investing in operations" or "Updating our policies", I see US-formatted dates such as "August 28, 2017", so foreign probably means non-US.

paralelogramon Data Center TCP: TCP Congestion Control for Data Centers

Is this better than Google's BBR?

https://cloudplatform.googleblog.com/2017/07/TCP-BBR-congest...

paralelogramon China Blocks WhatsApp

All traffic to/from some IP addresses is blocked, additionally all Chinese DNS servers respond with random A records when the domain name is banned, for example:

  $ host facebook.com 202.97.0.6
  facebook.com            A       8.7.198.45
  $ host facebook.com 202.97.0.6
  facebook.com            A       243.185.187.39
  $ host facebook.com 202.97.0.6
  facebook.com            A       243.185.187.39
  $ host facebook.com 202.97.0.6
  facebook.com            A       46.82.174.68
  $ host facebook.com 202.97.0.6
  facebook.com            A       59.24.3.173

(202.97.0.6 is an open resolver in China)

paralelogramon Google tries to patent ANS, which they did not invent

https://en.wikipedia.org/wiki/Asymmetric_Numeral_Systems

paralelogramon Did the Intercept bungle the NSA leak?

Why are almost all official documents about Russian government-sponsored hackers "secret" or "top secret"?

paralelogramon Leaked document reveals UK plans for wider internet surveillance

In 2003-2004 I had a non-SSL IRC server in a German datacenter and found that something between my server and large British ISPs was rewriting all "ISON <nickname>" strings in TCP streams to "PRIVMSG <nickname> :!kapa". I moved the IRC server to another IP address and never had this problem again.

I think that GCHQ was monitoring the network traffic and had a bug in their IRC protocol implementation.

paralelogramon Chrome Widevine DRM can no longer be disabled

Non-standard ways of embedding Flash are common because of Eolas patents:

https://en.wikipedia.org/wiki/Eolas#Effects_on_other_browser...

https://msdn.microsoft.com/en-us/library/ms537508.aspx

paralelogramon Shutting down FTP services

Some FTP servers support compression: http://www.proftpd.org/docs/contrib/mod_deflate.html

paralelogramon Symantec issues more illegit HTTPS certificates

How does issuing certificates for test1.com, test2.com, test3.com etc. "threaten the integrity of the encrypted Web"?

paralelogramon Freenom World – A fast and anonymous Public DNS resolver

https://sockpuppet.org/blog/2015/01/15/against-dnssec/

paralelogramon Ask HN: What are your favorite thin websites (text only or limited images)?

http://lartc.org/howto/

paralelogramon Ask HN: I missed upgrading to Windows 10 from Windows 8.1

https://www.microsoft.com/en-us/accessibility/windows10upgra...

paralelogramon Wikileaks: Julian Assange's internet access 'cut'

It's possible to use Twitter via SMS: https://support.twitter.com/articles/14014

paralelogramon Ask HN: What's the best tool you used to use that doesn't exist anymore?

RSS, Usenet newsgroups, netbooks, 4:3 CRT monitors, GNOME 2.x, non-BitTorrent file sharing networks.

paralelogramon You thought that “This should never happen was bad”? search – eval($_GET)

https://github.com/search?p=2&q=mysql_connect+root+NOT+local...

paralelogramon Avast: a Chromium fork with critical security checks removed

OS X has less users than Windows XP: http://gs.statcounter.com/#desktop-os-ww-monthly-201501-2016...

paralelogramon AT&T Hotspots: Now with Advertising Injection

All Android phones emulate an Ethernet connection.

paralelogramon IPv6 Exhaustion Counter

https://www.arin.net/policy/archive/ipv6_policy.html#34

paralelogramon Firefox 39.0 released

https://bugzilla.mozilla.org/show_bug.cgi?id=567365

paralelogramon Logjam TLS attack

Is TLS_DHE_RSA_WITH_AES_256_CBC_SHA with a 768-bit group less secure than TLS_RSA_WITH_AES_256_CBC_SHA? Doesn't DHE just add an extra perfect forward secrecy layer to the non-DHE cipher suite without changing anything else?

paralelogramon Google Ends Page Speed Service

http://en.wikipedia.org/wiki/Gizmo5

paralelogramon Diaspora 0.5 released

Some phpBB sites are very popular, for example:

http://arstechnica.com/civis/

https://forum.nationstates.net/

paralelogramon Truecrypt report

Most Windows 7 versions (Starter, Home Basic, Home Premium and Professional) don't support full disk encryption.