HNHacker News
TopNewBestAskShowJobs

rufibarbatus

366 karma · joined May 10, 2011

submissionscomments
rufibarbatus··on TakeThisLollipop - really clever/creepy use of the Facebook API
Some of these hostnames are quite arcane to me (peace.facebook.com); did you get them from a list somewhere or did you identify each one of them yourself?
rufibarbatus··on Weird World War II Security Puzzle
I wouldn't know about pizza orientation, but here in Brazil, (some) folk from São Paulo can be recognized for pouring a little olive oil on their pizza, whereas (some) Rio de Janeiro folk can be recognized for seasoning their pizza with ketchup.

(Folk from Minas Gerais are said to sometimes dip their cheesebread loafs in their coffee; those coming from the West drink their mate cold, from a horn called guampa, and call it tereré, whereas folk from the South drink it hot, from a bowl called cuia, and call it chimarrão.)

Though a bit proverbial, those are all region-specific and common enough that they can be thought of as "reliable enough" as a conversation starter.

rufibarbatus··on Weird World War II Security Puzzle
It's food for thought, isn't it? That the Panopticon [1] has become cheaper and more pervasive over time.

[1] http://en.wikipedia.org/wiki/Panopticon

rufibarbatus··on Weird World War II Security Puzzle
You might be interested in this interview which came out just yesterday [1] about techniques for detecting people by the way they walk (apparently, throughpressure point patterns in a digital footprint) with (IIRC) 99.6% precision.

Regional identification through manners and/or phonology goes back to the concept of a shibboleth [2]. This is used rather wonderfully as a turning point in many stories (without spoiling too much, I should mention that Tarantino pulled this off nicely in one of his films).

[1] http://www.cbc.ca/spark/2011/10/todd-pataky/

[2] http://duckduckgo.com/shibboleth

rufibarbatus··on 0day vulnerability full disclosure: American Express
The question is, is the disclosure of this (technically public) resource location litigation material?

IANAL, but I can definitely see both sides of this debate being highly defensible.

rufibarbatus··on 0day vulnerability full disclosure: American Express
> When the debug flag is true on our sites, we have a link which will authenticate us as an admin without any credentials for example!

Well, get rid of that and push for a change in your company's workflow. This kind of control shouldn't be deployable to the main servers at all.

Have separate, staging servers and run your tests and debugging interfaces on it, but as much as possible, don't deploy administrator interfaces to the servers that talk to the customer. [1]

[1] I'm undecided which kinds of heisenbugs would justify breaking that lemma.

rufibarbatus··on 0day vulnerability full disclosure: American Express
Funny thing is: he didn't even try that, because he didn't accept under any circumstances to communicate by phone, fax or snail mail.

He made this big, boldface disclaimer with twitter screenshots and all trying to claim "best effort is good enough" and "they won't listen", but all I saw was them listening and him refusing to speak.

rufibarbatus··on What tool would *you* use to solve this?
Holy cow, I did the exact same thing as you!

For the sake of completeness, my first steps before sorting and plotting were to:

  1. take the mean, median and mode of each set,
  2. try and fail to use more sophisticated statistical analysis [1],
  3. have a look at the minimum and maximum value for each set.
By #3 I already had a good enough guess, but I felt I had to see it.

[1] In fact, could anyone point me to a refresher? I'm talking about distribution curves, regression, that kind of thing. I seem to have lost hang of it — couldn't pass my own "5 minutes to implement the simple thing" criterion.

rufibarbatus··on Ask HN: Anyone know where Mark Pilgrim went?
It seems his Github acount has been squatted and is being used as a mirror for his stuff.
rufibarbatus··on Belgian ISPs Ordered To Block The Pirate Bay
Stop me if for some technical reason what I'm asking here is increadibly stupid... but isn't it relatively cheap to substitute HTTP-based URL redirection for DNS in a case like this? Like so: http://hops.me/7nq -> 127.0.0.1
rufibarbatus··on Sean Parker is now on Twitter
Disambiguate, please? Sean Parker now has a twitter account.
rufibarbatus··on Joe Hewitt - What the web is and is not
I'm not sure I get your point, so I may be arguing against something else entirely here.

That said, the point of parallel offerings is not to provide identical representations of a given resource. Even XML+XSLT versus XHTML might have different semantical implications, so the best assumption is that no two ways of representing a given content can ever be identical.

Well, that's a Good Thing. If I'm requesting a given resource and I signal preference for a PDF-encoded response, that implies on some level that I want a print-formatted, print media version of that resource, whereas its HTML counterpart can be hypertext and multimedia.

What you as a server are committing to is that both servings are representations of the same given resource, but without prejudice of putting each format to its best use.

This is also beautiful in that if the HTML stack proves to be a bad idea in the long run, rather than being deprecated, it can fall into disuse slowly alongside the slow rise of its successor(s). In fact, there's absolutely zilch stopping us from having more than one canonical format — any server-side MVC (or MVCish) architecture can probably handle that off the box!

EDIT: to be sure, the question of how expensive it is to develop for two different representation formats is a whole other story.

rufibarbatus··on Richard Stallman: “Android Phones Do Not Respect Your Freedom”

  I.
This is a case where Stallman pushes the notion that software freedom === individual freedom. This notion, while defensible, is not necessarily true, and so the assessment that Android phones can't be said to respect my freedom sounds wild and passionate but while being hardly informative.

Freedom is one of those words which go deep with most people, but which for the same reason have come to mean a bunch of different, oft-contradictory things. (For some definition of freedom, the GPL can't be said to respect my freedom either.)

  II.
The problem here is that Google had commited itself to releasing Android's source code. Withdrawing from it is exactly the same kind of thing as Sony's withdrawing multiboot from the PlayStation: they sold us something and now they're taking it away.

In that sense is Android not respecting our freedom: some of us chose Android because of something that was being offered — something Google was commited to — and now that we've voluntarily locked ourselves into that platform, Google takes that decision factor away from us.

Stallman has this weird ability to get cherry-picked for his most passionate quotes. Although I not always agree with him, it's important that we go a bit deeper and try to figure out his actual reasoning.

rufibarbatus··on Announcing my second e-book "Sed One-Liners Explained"
I didn't upvote, but the 4 sed programs he offered definitely spiked my interest.

(My criterion for an upvote here would be if he had himself written and/or explained those programs in his post.)

All in all, can't complain about having found this in the front page.

rufibarbatus··on Even pure functions have side-effects
And indeed, FP hackers do mind their pure functions' performance:

- http://haskell.org/haskellwiki/The_Fibonacci_sequence

- http://vimeo.com/20655874 ("Faster persistent data structures through hashing")

rufibarbatus··on You can't google 9999999..99999999999999999999999
As of now, it has 3 results (all 3 pointing in some way or the other to your own remark). Damn. That was fast!
rufibarbatus··on Why no Steam, Notch?
Due to its language, I'm not sure the WTFPL would hold in court in just about any country. I don't mean just the profanity: it has no proper scope (i.e. it doesn't describe what's being licensed), it doesn't attach it to a proper author or maintainer (which, it turns out, may be a requirement in countries where intellectual property is described in terms of author's rights rather than copyright), and it doesn't specify what kinds of rights, warranties and whatnot the license waives the author/maintainer from.

</nitpicking>

rufibarbatus··on Account Chooser - for the next generation of web sign in
I got a little past that, up to a perpetual "Signing in" progress ticker.

(After refreshing, I could verify that I was not logged in, but I'm not sure if the demo was supposed to go as far as managing session cookies anyway.)

rufibarbatus··on GRC's | Off The Grid  
Ah, thanks for the analysis.

You're absolutely right about its use for password generation & management. I suppose the scheme might still have other uses where the proverbial "off the grid" aspect indeed strengthens security? Are those relevant at all?

rufibarbatus··on GRC's | Off The Grid  
In the Security Now podcast [1], Gibson asserted that every position in these 25x25 grids has so much entropy that even a hell of a lot of passwords wouldn't give away the whole grid.

Now, I personally couldn't pull this off, but I'd actually love to see the Math done here.

[1] Video: http://twit.tv/show/security-now/315 Transcript: http://www.grc.com/sn/sn-315.htm

rufibarbatus··on Show HN: Cilantro ("About.me for restaurants"). Feedback wanted.
I can see why you'd put the page for the same restaurant all across the tour—but if you're really going for the "about.me for restaurants" pitch, then you should be selling (and hence showing) a wide variety of designs, to show off your the flexibility of your service. A huge part of why about.me is what it is, is its simple, elegant way of making each page unique.

But really. Nice job! :-)

rufibarbatus··on Storing Data the Simple HTML5 Way (and a few tricks you might not have known)
13.0.782.112 m (on Windows) here, didn't crash but experienced a slowdown.
rufibarbatus··on Dead Man's Switch
The twilio thing sounds like a good idea. Given the mechanics, the more means of communication you have, the better you're protected against false positives.

I'm still a bit unsure about the part where "you're responsible for asserting that you're still alive." I'd like break it down to its basic premises and see if they actually make sense. :-)

rufibarbatus··on Dead Man's Switch
The beta is for a "new and improved" version. If you remove beta from the address, you can access the current let's-call-it "stable" version.

I played around with this a while ago. Didn't think the way it's implemented solves the problem as I perceive it. (Plus, the risk of these confirmation emails ending up in spam felt a bit like a downer.)

rufibarbatus··on Cryptographic stenography could thwart Internet censorship
That depends on HTTPS not being somehow blocked, impeded or stripped. Is this a good enough assumption? (Honestly curious.)
rufibarbatus··on "When you're done talking, stop"
From the book How to Negotiate Like a Child [1]:

  once someone has offered something extra, it's hard to take that back.
Further:

  often when confronted by silence, the blabber will say something that
  she didn't plan on saying.
And further:

  if you observe children, as I did while researching this book, you'll
  notice that kids are content to sit with their friends and not say
  anything at all for periods of time that would drive an adult to
  reveal all manner of personal information.
[1] isbn:081447294X
rufibarbatus··on NASA finds DNA components in meteorites, says they originated in space
Well, now you're reducing it to just Christianity. And within the context of Christianity, I don't see why people would jump to the conclusions that they have souls only to get stuck at the problem of "so what do we do with Jesus?"

I suppose people sooner call the aliens soulless demons or rethink their whole religion than go half way in one direction and then stop in the middle.

rufibarbatus··on NASA finds DNA components in meteorites, says they originated in space
It may be relevant precisely because not every living thing on earth is believed to go to heaven. "But these guys don't get to go to heaven" is part of the rationale behind a lot of modern genocides, and before that many cases of slaughter and slavery. If we or the aliens are to think that of each other, hey, that's enough premise for a real-life Hollywood classic.
rufibarbatus··on NASA finds DNA components in meteorites, says they originated in space
We seem to be reaching good enough models (arguably some of them will be thoroughly reproducible in laboratories soon enough). But I don't think we'll arrive at a definite answer here. My guess is that we'll come up with multiple ways it could've happened, along with their respective degrees of likelihood.

/me leans back on his armchair

rufibarbatus··on Life on the Command Line
Out of the box, it might not be the most intuitive text parsing tool indeed. It's trivial, but not immediately intuitive.

That said: strings are lists of chars, and Haskell is strong at pattern matching (esp within lists) in a bunch of different ways, so trivial text parsing tasks are trivial and intuitive in Haskell. For anything slightly more complex, there are regular expression and enumerating libraries which can do the job alright (and efficiently if I may say so).

EDIT: I'm sorry, can you give me an example of a problem so I can give you an example of a solution? :-)

← PreviousPage 3 of 5Next →