HNHacker News
TopNewBestAskShowJobs

red0point

635 karma · joined March 23, 2015

submissionscomments
red0point··on TLS certificates have at least two internal representations of time
Instead of feeling personally attacked and resorting to pettiness, maybe you could instead start by explaining why existing standards are bad and why your proposed standard is superior.

The xkcd pretty neatly summarized the situation as of now. You developed and self-promote a new standard but do not explain why anyone should care.

red0point··on TLS certificates have at least two internal representations of time
Relevant xkcd:

https://xkcd.com/927/

red0point··on SFML – Simple and Fast Multimedia Library
The last release was back in 2018. Why is this posted now?
red0point··on Drunk as a Lord: the Regency Bottle Men
I‘ve heard that 6 weeks without a drop of alcohol should be sufficient for the liver to recover. But it is very important to very strictly not consume alcohol. Just reducing alcohol a little bit will help nothing.

The NHS is of the opinion that 2 weeks suffice.

https://www.nhs.uk/conditions/alcohol-related-liver-disease-...

red0point··on Has UML died without anyone noticing?
Nice! What tools do you use to achieve this?
red0point··on FLoC Away from Chrome
Check this:

https://news.ycombinator.com/item?id=26828967

red0point··on PSD is not my favourite file format
The Affinity suite is quite decent, among them Affinity Photo would be the Photoshop replacement. It‘s fast, easy to understand, a pleasant UI and has all the features you need.
red0point··on FFmpeg 4.4
Sadly, HDR passthrough is still an open issue from 3 years ago:

https://trac.ffmpeg.org/ticket/7037

I really hoped they could complete this behemoth of a task.

red0point··on A detailed guide to SSO on Kubernetes
Keycloak does have integrated authentication and user storage if you don‘t really need LDAP and want that Wordpress experience. I agree that setting LDAP up is a little involved.

Regarding RAM, Wildfly uses 650MB. Keycloak.X is a new, more lightweight approach using Quarkus.

red0point··on A detailed guide to SSO on Kubernetes
No. You can use any LDAP server as a backing store for your users.
red0point··on A detailed guide to SSO on Kubernetes
I googled that for you, first result:

https://github.com/ivangfr/springboot-keycloak-openldap/blob...

red0point··on A detailed guide to SSO on Kubernetes
I think Keycloak ticks all those boxed rather nicely. While it does support more than a few hundred users, I doubt that this will be a serious issue.

Perhaps you could enlighten us with a few key differentiators of your ideal solution to other common ones?

red0point··on Backblaze Hard Drive Stats
Yes, until you actually want to download your data and pay 85 USD for downloading it once.
red0point··on Show HN: I built Creodocs, a document creation platform based on LaTeX
Just tried your product.

1. You have no way of previewing your entered data - if you mess up, you just wasted 0.05 - 0.12 USD. Does it really cost that much to render a PDF once? With Overleaf, you get essentially unlimited previews. Consider providing a watermarked preview, or a lowly-res png render.

2. Why do the credits expire? As a casual user, I'd need to buy credits either again and again, or pay more than double the price so I can just use my credits. I think that's really unfair, and coupled with your pricing model above is limiting my interaction severely.

3. However, as a technically adept customer I like how it's done now. I can create as many free accounts as I like, each with about 7 USD worth of credits. I just need to set up a spam account every time I run out.

## Alternative model: ##

- Unlock templates by paying for them. All generation is then free (up to a certain high limit for your enterprise customers and limit abuse).

- Provide packages of templates to buy together (the finance department package, the communication package, ...) - For an even higher licensing fee, the templates can be downloaded as well and integrated into products.

I think this would suit your existing business of providing custom LaTeX templates well.

## Alternative model 2: ##

1. Bog standard subscription (pay x per month to do y pdfs)

## Security: ##

The rendered LaTeX may include files such as /etc/passwd. I did not try to get an RCE on your rendering server, but I'd spend some time isolating it as much as possible. Consider getting a pentest done, especially given your high privacy claims.

red0point··on Redefining what a map can be with new information and AI
I find it hilarious that the GIF showing it in action at the airport is giving totally wrong directions.

It sais "Go down one level to Floor 2", to apparently reach gate E27. However, if you go down this escalator, all you will find is 2 train tracks with trains taking you out of the airport. You indeed need to take a train to gates E, but those depart from a totally different location.

red0point··on Are “bring your own storage” apps a thing?
How did you prove your protocol is secure? I couldn't find any Tamarin, TLA+, ProVerif, ... in the Github.
red0point··on I am a heroin user. I do not have a drug problem
Consider doing absolute abstinency for at least 6 weeks every few years.

Really, not a single drink or sip.

That way your liver has time to heal itself again, lest it will develop a cirrhosis, which will signifanctly decrease your quality and expectancy of life. If you have a cirrhosis of the liver, it's too late, you're going to die in at most 5 years, and it won't be pleasant until then, either.

That's got nothing to do with "doing better", "perfection" or whatever, just hard facts.

red0point··on ZFS copies=n is not a substitute for device redundancy (2016)
First of all, this needs a (2016) tag.

Would an exact duplicate of the existing working drive, maybe done with dd, help with this? Maybe some Metadata from the drive layout would have to be changed, too.

Other than this workaround, it seems that ZFS could be changed to allow an import again. Has this been changed in recent years?

red0point··on Razer N95 masks
A lower transmission probability is always a good thing, no matter what your probability of being infected is.

In a public space there is simply no way of efficiently knowing and verifying everybodies P(infected), thus the only remaining measure is to reduce P(transmission).

And yes, if that‘s the time it takes for your mask to get wet, then it is time to replace it.

red0point··on Razer N95 masks
This is only good as long as you can guarantee that you're not infected. Remember, you're potentially infectious a few days before your first symptoms even develop, if they even develop.

This is why valves are not useful and not accepted.

If your mask gets moisture-saturated, just replace it.

red0point··on Jamming Attacks and Anti-Jamming Strategies in Wireless Networks
Funny, I just finished my master thesis in this area. I implemented a highly effective DoS attack for LTE which relies on reactive signal overshadowing, a very efficient type of jamming. Sadly, overshadowing attacks in LTE are not covered in the paper, but have been present for some years now.

Here's the link if anyone is interested: https://doi.org/10.3929/ethz-b-000455834

red0point··on ZeroPi – $9.99 SBC with 512MB and Gigabit Ethernet
Site is currently down:

https://web.archive.org/web/20201229204523/https://www.frien...

red0point··on Ask HN: What startup/technology is on your 'to watch' list?
I find it odd that forestadmin boasts security, but requires you to setup your project over HTTP, although there is a HTTPS version available.

https://app.forestadmin.com/new-project redirects (via JS, if https is detected) to: http://app.forestadmin.com/new-project

red0point··on Double Blind Passwords a.k.a. Horcruxing
Can you elaborate on why all security will eventually rely on obscurity?
red0point··on Camouflaged Military Bunkers of Switzerland (2015)
They weren't lost, this politician just talked some nonsense

"die Logistikbasis der Armee hätte ihn darüber informieren können, denn trotz ihren Informatik-Problemen hat sie den Bestand an M-113 und M-109 säuberlich registriert, wie mehrere Stellen im Verteidigungsdepartement betonen.

red0point··on What we can learn from the latest indoor dining study
Well forgive me but I was hoping for more than a first hit from Google and apparent common knowledge.

Since you mentioned having read studies about airborne transmission and aerosols, I was hoping you could point me to one where they examined the masks and found them to be significantly worse than FFP2.

Because in this study presented, only the people in the direct path facing the infected person were infected, not everyone, so wearing even EN14683 IIR masks could seem effective.

My guess, and this of many doctors in my area, is that EN14683IIR are, in fact, enough (if properly worn etc). If that is not true, I‘d like to know - from a reputable source.

red0point··on What we can learn from the latest indoor dining study
Do you have evidence to back up your claim that properly worn EN14683 IIR masks are not sufficient?
red0point··on What we can learn from the latest indoor dining study
True, however it makes sense if you look at the figure they provide, which shows airflow and infections:

https://jkms.org/ViewImage.php?Type=F&aid=694440&id=F3&afn=6...

If it were contact based, this would mean that at least one other in the restaurant must have contracted it that was outside of the airflow path. Since this not the case, the most likely thing is that transmission was with the airflow.

Why is it that you are so certain about this being surface based transmission?

red0point··on What we can learn from the latest indoor dining study
Well this is clearly stated in the paper.

* Only the visitors (cases A and C) sitting in the air flow path of case B were infected with COVID-19, while other visitors (V2, V3) closer to the infector for a longer period of time but in the absence of direct air flow did not become infected. In addition, the visitors sitting at tables with cases A and C (V1, V6, and V7) were not infected with COVID-19 because they faced away from the infector’s face. These findings strongly suggest that this outbreak occurred by droplet transmission exceeding a 2 m distance and excluded contact and fomite transmission. This transmission pattern is similar with the outbreak of a restaurant with air conditioning in Guangzhou, China.21 In this article, the authors concluded that the most likely transmission was done by droplet and also emphasized the direction of air flow.*

Also they analyzed the RNA to confirm linkage.

red0point··on Qualcomm Details The Snapdragon 888: 3rd Gen 5G and Cortex-X1 on 5nm
There‘s also Amarisoft, which does it in „real time“ in software, but not open source.

I believe srsLTE, used to turn SDRs into eNodeB/UEs, adds support for 5G soon (tm).

← PreviousPage 3 of 5Next →