HNHacker News
TopNewBestAskShowJobs

red0point

635 karma · joined March 23, 2015

submissionscomments
red0point··on Getting Started with DNS over HTTPS on Firefox
Of course there are benefits.

Assume a large entity willing to do some mass surveillance (NSA, ...). Now with unencrypted DNS this entity just has to MITM a link on the last hop of a few DNS providers (Google, Cloudflare) and voila, the IP's of the clients and the domains visited are pouring in.

With encrypted DNS, for an entity to get the same amount of information they need to MITM a much larger amount of links.

Though I agree the benefits are clearly limited, the idea is to eliminate all weak links. If there are 2 broken windows in your house and you can fix one - why not do it?

red0point··on Getting Started with DNS over HTTPS on Firefox
The point of DNS over HTTPS is enhanced privacy. Currently, DNS packets are unencrypted, but can be signed (with DNSSEC). DNSSEC does nothing to hide to content of DNS requests /responses, but makes sure that they can't be tampered with. Adoption (client side DNSSEC validation) is currently at around 14% [1], which is indeed low.

There is the DNS Privacy project, which proposes some solutions to the privacy issue [2].

The alternatives you're mentioning are really not alternatives at all (except namecoin, but only for .bit). How the other solutions (e.g. Steemit) are connected to the problem at hand is beyond me.

[1]: https://stats.labs.apnic.net/dnssec/XA?c=XA&x=1&g=1&r=1&w=7&... [2]: https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+-+The+Sol...

red0point··on Show HN: CSRF Protection Using Cloudflare Workers
I've seen that (current) browsers won't send Origin / Referer Header for GET and HEAD requests, so I'm whitelisting these request types.

Other than that, it seems that IE is not sending the Origin Header for POST requests, so I simply use the Referer Header in this scenario.

Assume an attacker site sets the Referrer Policy header to no-referrer, IE sends no Referer / Origin at all for POST requests, so I block those requests.

The real origin must thus not have a Referrer Policy of "no-referrer".

Other than that, I'm observing the impact of the rule in production but haven't encountered any problems thus far.

red0point··on Ask HN: Are hourly priced dedicated servers for AI/ML a good idea?
Thank you for your feedback.

I will do such research in more detail in the future.

Back of the napkin calculation results in 0.5 USD / h for an instance with a GTX1080 - compared with an equally GPU performant EC2 instance g3.8xlarge clocking in on about 2.28 USD / h.

red0point··on The need for tooling and the need for mastering your tools
I study at ETH Zurich in Switzerland. In each one of my courses all students devote countless hours to solving the problems the instructors throw at us, there is explicit assistance given if you need it and each problem you solve is then corrected & graded (if you want).

It‘s very satisfying, say in an algorithms class, to come up with an algorithm that satisfies the given runtime requirements, often taking ideas from multiple basis courses - and this is expected. It‘s always explicitly stated that the goal is not to, say, remember an algorithm like Dijkstra by heart, but to internalize how to come up with such an algorithm, as the exam is also structured around coming up with new algorithms.

red0point··on Ask HN: What stack would you use to build a CRUD web app in 2018?
I build lots of CRUD apps very fast with JHipster, which is designed to handle the initial bootstrapping of traditional CRUD apps very well, while also allowing you to choose your tech stack (in some ways). Because it's giving you a nice boilerplate, you can customize it as you go.

The stack ist mostly Java with Spring and AngularJS on the frontend.

http://www.jhipster.tech/

red0point··on Backblaze Hard Drive Stats for 2017
As I was dissatisfied by their provided graphs, I made up my own using R & Kaplan Meier Survival tools to determine how long I could expect a hard drive to „survive“.

https://medium.com/@simonerni/dissecting-backblaze-hard-driv...

red0point··on Image text recognition APIs showdown
Is there any service that converts scanned PDF's using the Google Cloud Vision API to searchable PDF's? If so, that would be highly useful for me.
red0point··on Voyager 1 Fires Up Thrusters After 37 Years
Why is this posted again? This is from the 1th december 2017.
red0point··on Why Wikipedia cannot claim the earth is not flat
What article exactly where you editing?
red0point··on Applying medical statistics to Backblaze Hard Drive stats
Thanks for pointing that out! I didn‘t know that he did it as well, I just think its a really good way to visualize the data and to draw some conclusions from it.
red0point··on We will no longer use the phrase “zero knowledge” to describe our software
Just clarifying on that encryption bit - they do indeed encrypt the data, but when restoring (e.g. logging into the web view & selecting files to restore) you're handing over your passphrase in plain text, as the decryption is done on their side.
red0point··on GitHub commit search: “remove password”
Fell for it, this is the first time I connected to a honeypot (or so I think). I especially liked the part where you type 'exit' and it just keeps you connected but the command line changed to 'root@localhost' at the beginning. Had a good laugh there :)

What software are you using?

red0point··on Ask HN: Why is it cheaper to buy a new laser printer than replace the cartridge?
Is there any printer that represents the opposite of that statement? I recently tried to find a cheap way to print stuff, but all I found were cheap printers with expensive ink, even the ones designed for businesses, those even more so.

Why is there no 'opensource' / 'ecofriendly' / ... printer that's expensive to buy, but the ink is cheap & easy to replace?

red0point··on OVH: PaaS DB PostgreSQL
Please note that all RunAbove stuff is Beta and will be discontinued at some point in the future and either integrated in OVH.com or completely dropped.

Had a service running on RunAbove Cloud, and suddendly they pulled the plug with 1 month notice - and nowhere on their page was something that hinted on that.

red0point··on How We Built a Scalable Malware Detector
>At first, we looked at services like VirusTotal and a few other open source options. But there was nothing that would run independent and download the file and scan quickly.

VirusTotal is actually downloading the file from a URL independently and (from my experience) near - instantly scanning it. So why reinvent the wheel? (Plus, VirusTotal uses many scan engines to determine a result...)

red0point··on Never Buy a Phone Again
The title of this pist is a typical view grabber. Apart from that, the author doesn't take into account that when you leave an area without LTE coverage, your call will be disrupted. I did this only Skype experiment myself, to try and minimize my phone costs. It resulted in big hassles, the connection dropped, slow initialization and good luck while travelling by train.
← PreviousPage 5 of 5