HNHacker News
TopNewBestAskShowJobs

sky_nox

623 karma · joined March 6, 2018

submissionscomments
sky_nox··on An Analysis of Godlua Backdoor
It's interesting this malware uses DNS over HTTPS to avoid detection.
sky_nox··on [dead]
The best way to prevent abuse is not separating children from their families. In Canada, when the government separated indigenous children from their families through sixties scoop and residential schools, the children suffered tremendous abuse by the teachers and staff members.

The separation policy needs to change.

sky_nox··on The CIA Spied on People Through Their Smart TVs, Leaked Documents Reveal (2017)
'Samsung itself is aware of these risks. In its privacy policy, the company warned customers to be aware that "if your spoken words include personal or other sensitive information, that information will be among the data captured and transmitted to a third party through your use of Voice Recognition." The language reminded some of the George Orwell classic dystopian novel 1984.'
sky_nox··on HK's extradition law: Not just HK people have reason to fear Chinese “justice”
It's interesting that Japan also has a conviction rate that exceeds 99%, and Canada has a conviction rate of 97%.
sky_nox··on HK's extradition law: Not just HK people have reason to fear Chinese “justice”
That Canadian man smuggled 200 kilos(440 pounds) of meth into China. If he did that in Singapore or Japan, he would get death penalty too.
sky_nox··on U.S. now seeking social media details from most visa applicants
"The U.S. State Department is now requiring nearly all applicants for U.S. visas to submit their social media usernames, previous email addresses and phone numbers. It's a vast expansion of the Trump administration's enhanced screening of potential immigrants and visitors."

Does freedom of speech only apply to Americans? Can foreigners get penalized and denied entry for what they say on social media?

sky_nox··on Cisco Nexus 9000 Switches Allow SSH As Root
It allows anyone who knows the default SSH key pair to login as root. How is that not a backdoor?

Backdoor definition: "A backdoor is a method, often secret, of bypassing normal authentication in a computer system."

sky_nox··on Cisco Nexus 9000 Switches Allow SSH As Root
If you have the Cisco 9000 Series, patch them now! This SSH backdoor allows an unauthenticated, remote attacker to login as root.
sky_nox··on Huawei savaged by Brit code review board over pisspoor dev practices
"We have no real (at least not this in depth) assurance that products from rival vendors are more secure"

It should be a requirement to similarly audit every supplier. Cisco has a history of backdoors and serious bugs.

sky_nox··on Worried about Huawei? Take a closer look at Tencent
Click on his profile. He's the CTO of the company.
sky_nox··on Ask HN: Those who moved careers from the West to China, what's your experience?
The problem is that Asians hit bamboo ceiling when they try to climb the corporate ladder in the west. It's very difficult for them to get into upper management. Google "bamboo ceiling", it's an interesting read.
sky_nox··on Chinese Data Breach Exposes 'Breed Ready' Status of Almost 2M Women
I read on Reddit that it was a bad translation of "has had children". We don't know who owns the database. It might be from a life insurance company.
sky_nox··on China orders its airlines to suspend use of Boeing 737 Max aircraft
Two plane crashes under six months, something is seriously wrong with this model. New planes never crash this much.

Rest in peace to the 157 deceased.

sky_nox··on Warren Buffett: “Really Successful People Say No to Almost Everything”
>Buffett Strategy #6: Avoid the technology bandwagon

That's not true. Buffett bought a lot of Apple stock in 2016.

sky_nox··on Huawei is treated differently from other companies that have violated sanctions
I changed the original title because it seems unnecessarily provocative. Regardless the article has some interesting paragraphs:

Ms. Meng is charged with violating U.S. sanctions on Iran. Yet, consider her arrest in the context of the large number of companies, U.S. and non-U.S., that have violated America’s sanctions against Iran and other countries. In 2011, for example, JP Morgan Chase paid $88.3 million in fines in 2011 for violating U.S. sanctions against Cuba, Iran and Sudan. Yet Jamie Dimon wasn’t grabbed off a plane and whisked into custody.

And JP Morgan Chase was hardly alone in violating U.S. sanctions. Since 2010, the following major financial institutions paid fines for such violations: Banco do Brasil, Bank of America, Bank of Guam, Bank of Moscow, Bank of Tokyo-Mitsubishi, Barclays, BNP Paribas, Clearstream Banking, Commerzbank, Compass, Crédit Agricole, Deutsche Bank, HSBC, ING, Intesa Sanpaolo, National Bank of Abu Dhabi, National Bank of Pakistan, PayPal, RBS (ABN Amro), Société Générale, Toronto-Dominion Bank, Trans Pacific National Bank (now known as Beacon Business Bank), Standard Chartered and Wells Fargo.

None of the CEOs or CFOs of these sanction-busting banks were arrested and taken into custody for these violations. In all of these cases, the corporation – rather than an individual manager – was held accountable.