HNHacker News
TopNewBestAskShowJobs

seisvelas

801 karma · joined November 29, 2018

submissionscomments
seisvelas··on Zip – How not to design a file format
Back in the day people used to spread zips hidden in jpegs on imageboards using basically the same idea (after the jpg data is the zip data)

The most iconic /i/ kit spread this way being Dangerous Kitten (https://web.archive.org/web/20120322025258/http://partyvan.i...)

seisvelas··on Racket v8.2
I use it for quick scripts. I do offensive security. It's a pleasant option when doing things other pentesters would do in Python or Go.

>It seems to have a pretty extensive ecosystem but are the libraries mature?

If you're just doing API calls, file IO, simple networking, then it's more than you'll ever need. If I'm doing something obscure enough to have to worry 'is there a mature library for this in Racket?' I'll just use Python at that point.

seisvelas··on Show HN: Search for candidates in HN “Who wants to be hired” threads
Haha, thanks! I've never really made anything in React, so I just used the two hooks I know (useState and useEffect) Feel free to contribute to the code :)
seisvelas··on Show HN: Search for candidates in HN “Who wants to be hired” threads
I noticed the monthly "Who is hiring" threads have a bunch of tools available for conveniently searching them. But the "Who wants to be hired" threads have NO tools!

This kinda makes sense - a bunch of underemployed, highly skilled devs are looking through job postings. So they make tools to make it easier, and then share those tools. But the "Who wants to be hired" threads are mostly searched through by recruiters who may not program at all, or might be busy with their current employment stuff.

So here is a tool to search candidates.

Sorry if the code sucks (actually I know for a fact that it does! The word 'if' is being used to minimize here), I'm a security engineer mainly, not a SWE. But if you file an issue I'll respond promptly and fix any bugs. Also, feel free to contribute directly via a PR!

https://github.com/seisvelas/hn-candidates-search

seisvelas··on San Francisco’s Shoplifting Surge
Wow, I thought the original commenter was exaggerating but nope. He was raised by members of the Weather Underground. Before law school he also worked for the Chavez regime in Venezuela.

I don't know anything about him other than what's in those wiki articles, just crazy how much he sounds like a right wing caricature of a leftist politician, to the extent it's hard to believe at first sight. He's living proof of Poe's Law.

seisvelas··on $365B wiped off cryptocurrency market after Tesla stops accepting Bitcoin
>This is a very privileged, first-world perspective on things. You probably have a checking account, and a debit card. If you only have cash, and want to send money to (for example) family in another country, it gets very expensive, very fast.

I live in Mexico, I don't know if we're first world or not. We're kind of in between. We have bank accounts and debit cards here too. In the past when I wanted to send cash to the US or vice versa, I've used Western Union for the convenience - the local corner store (which in Mexico will be Oxxo or 711) has western union. When my family here in MX needs money, I just transfer it to their bank account via my bank's app.

I think many people in the US overestimate how privileged they are compared to most of the rest of the world, to be honest. I lived in the US when I was young but left because life felt easier here in MX.

Sorry for this kind of ambling response, I don't really disagree with anything you said, your perspective just piqued my interest :)

seisvelas··on Chrome’s address bar will use https:// by default
Goodbye, ssl stripping attacks, I'll miss you so much! We knew this day would come sooner or later
seisvelas··on Flutter 2
I can't highlight text on any of the example pages. I want to like this idea so much but wow
seisvelas··on Linux Desktop on Apple Silicon/M1 in Practice
i agree but 'pretty' is the operative word. Sometimes the network gets suuuper slow inside the vm for me and i still have no idea why.
seisvelas··on Capitol Attack Was Months in the Making on Facebook
This reminded me of the song "Pirates & Emperors", which you might enjoy: https://www.youtube.com/watch?v=UQBWGo7pef8

Too long, didn't listen: If you rob with a little ship, you're a "pirate", but if you steal with a big fleet, thou art "emperor".

seisvelas··on Authoritarianism Through Coding: Signal
Just two nitpicks:

1. Marlinspike is misspelled throughout the article as "Merlinspike" &

2. This article is super mamón. That's a word here in Mexico I'm not sure how to perfectly put into English, but here are some examples from the article:

>Open Whisper Systems led by Moxie Merlinspike, who is behind Signal, is and was never behind freedom.

>People died for freedom, they are still dying and struggling around the globe. Then someone comes and stomps over every ideal which human society ever build up until this point in history and proclaims themselves the world leader! Think about it!

I think in English I might say something like 'Oh please', or 'stop wanking yourself so hard'.

The core message of 'I would prefer a decentralized messaging service and Signal is lacking in that regard' is severely diminished by the suffocatingly wanky [I want to say mamón, whoever has a better word here please offer suggestions!] tone of this article

seisvelas··on Parable of Alien Chess
>For one, it's not the case that overall white and black win 50% of the time each.

He addresses that (first-move advantage from white moving first) in the parenthesis after that same sentence:

"After extensive experimentation, they realize this: 50% of the time, the white player wins and 50% of the time, the black player wins (we'll ignore draws and any first-move advantage for the example). "

seisvelas··on hCaptcha now runs on fifteen percent of the internet
> BotStop by hCaptcha

Cool, I didn't know about this! Too bad there doesn't seem to be a strong open source option, but I'll check this out.

seisvelas··on hCaptcha now runs on fifteen percent of the internet
On the other hand, many Tor users disable Javascript. Out of curiosity, does anyone know a good CAPTCHA that doesn't use JS?
seisvelas··on Show HN: Empirical support for thirder interpretation of Sleeping Beauty problem
I'm curious for feedback. Just a warning: I am not a mathematician or decision theorist or scientist or anything. I do cybersecurity. So sorry in advance for whatever horrendous errors I've committed here.

But if you do notice such errors please let me know, so I can be less horrendously wrong next time :)

seisvelas··on I Violated a Code of Conduct
>This whole CoC thing is sadly fraught with virtue signaling psycho-sadists who enjoy playing tribunal.

Reminds me of this snippet from Nietzsche's essay, The Tarantulas:

In all their lamentations soundeth vengeance, in all their eulogies is maleficence; and being judge seemeth to them bliss.

But thus do I counsel you, my friends: distrust all in whom the impulse to punish is powerful!

seisvelas··on Simple kitten placeholder
Many sites will also have a CSP that blocks placekitten.com along with other 3rd party img tag origins. Daring users on Firefox can circumvent this protection by browsing to about:config and setting security.csp.enabled to false.
seisvelas··on Running a Unix-like OS on a home-built CPU with a home-built C compiler
Link to your emulator? I don't care if it's buggy, I want to try playing a game on it!
seisvelas··on You're enlightened – now what?
The Vimalakirti Sutra is about exactly this. Vimalakirti is a laymen householder who achieves enlightnment. Upon his passing, Buddha sends a bunch of spiritual masters and bodhisattva's to Vimalakirti's deathbed.

Vimalakirti proceeds to chastise them for how useless their 'enlightenment' is when it doesn't help anyone in the real world, and is only a self centered quest to save one's ego from suffering.

https://en.wikipedia.org/wiki/Vimalakirti_Sutra

seisvelas··on Redox: Unix-Like Operating System in Rust
Fair points! But,

>the project has been going since 2015

True, but Fuchsia started only a year later

>Fuchsia is a lot more than a microkernel, right?

Indeed, but that is also true of Redox!

seisvelas··on Redox: Unix-Like Operating System in Rust
I apologize in advance for such a brazenly ignorant question: But why is it that this small team is able to produce a working microkernel, yet GNU Herd and (more recently) Google's Fuchsia have languished eternally as vaporware?
seisvelas··on Feds move to block California’s net neutrality law
Gibbons v. Ogden was about Congress's right to regulate interstate commerce, not intrastate commerce.

The massive expansion and erosion of the meaning of interstate commerce didn't begin until Wickard v Filburn in 1942.

seisvelas··on A philosophical difference between Haskell and Lisp (2015)
Reminds of the difference between Unix and GNU. I wonder to what extent RMS's Lisp background influenced GNU's kitchen sink tendencies.
seisvelas··on Reddit's website uses DRM for fingerprinting
I recently started using lainchan, an imageboard, and I really enjoy the security board. It has some of the toxicity inherent from the chan culture, but otherwise I've been pleasantly surprised with the quality and depth of discussions I've read so far.
seisvelas··on Harvard University Won’t Require SAT, ACT for Admissions Next Year
Maybe they found that SAT/ACT were not good criteria for selecting the best candidates.
seisvelas··on How Can You Help the Internet Archive?
I recently needed to use the documentation for HTMLHint, only to find it had been deleted. So I went on Waybackmachine, and there it was.

I ended up going on the repo and asking them to undelete it, which they did, but in that moment I was lucky waybackmachine had it. This is one of hundreds of times I've used it.

seisvelas··on After 10 years in tech isolation, I’m now outsider to things I once had mastered
>Beyond vague conspiracy theories I don’t see the connection.

It's not vague at all. Private prisons lobby for mandatory minimums. Mandatory minimums remove sentencing power from the judge: https://en.wikipedia.org/wiki/Mandatory_sentencing

The older system you describe is called discretionary sentencing, it is a dissipating vestige of the era before private prisons.

seisvelas··on Tor Browser 9.5
Indeed it was! I just made it public, thanks for saying something :)
seisvelas··on Tor Browser 9.5
I highly recommend Computerphile's explanation of Onion Routing: https://www.youtube.com/watch?v=QRYzre4bf7I

After that, check out the video explaining how hidden services work.

If you want to see a simple implementation of an onion router, I built one in TypeScript: https://github.com/seisvelas/onion-router-ts

(be warned, I also did that as an exercise to learn more TypeScript. So it's not good TS. But improvements and issues are more than welcome from any TS gurus out there!)

seisvelas··on Career Choice Tip: Cybercrime Is Mostly Boring
No. By cybercrime he means a literal career as a criminal. Pentesting is done with permission from the target.
Page 1 of 7Next →