HNHacker News
TopNewBestAskShowJobs

srfilipek

371 karma · joined October 25, 2018

submissionscomments
srfilipek··on Bitcoin drops below $20k, Ether cracks $1k – what this means
Yes, in practice mining mostly follows price, but it's still not quite that cut and dry.

Miners also need to sell bitcoin to recoup operational costs. They influence the value of bitcoin by being an active trader and setting limits to their sale price.

Current price influences future mining. Past mining influences current price.

srfilipek··on Bitcoin drops below $20k, Ether cracks $1k – what this means
Well, theoretically the value of Bitcoin would be a function of energy costs and mining difficulty, but that hasn’t happened in practice, and would still be volatile anyway.
srfilipek··on Stripe 2021 Business Update [pdf]
They are legally required to report it that way. The quarterly shareholder reports include revenue with and without Bitcoin.
srfilipek··on Login with a Public Ed25519 Key
It's an okay-ish alternative to a password, but if we're going to use cryptographic secrets for auth, I'd hope to see more of a handshake and challenge-response involved.

As it stands, anyone who has access to a private key momentarily can generate any number of tokens for use, practically indefinitely (just sign a timestamp for every second for the next N years). This system is open to replay attacks as well.

It also glosses over the entire problem of trust establishment, cert revocation, etc.

srfilipek··on Why Is C Faster Than Java (2009)
> Heartbleed (and all the other serious memory exploits) required a great deal of skill and a lot of luck to exploit, and in return you either don't get a remote execution, or you get a very tiny chance of a remote execution.

Heartbleed wasn't about RCE at all. It was about memory disclosure -- memory that contained secret signing keys. The fallout was that keys needed to be revoked and rotated.

Reading out memory and extracting the secret keys was actually pretty simple. There were multiple POCs available.

srfilipek··on Fingerprints can be hacked
Any good implementation has fingerprint information stored locally, encrypted, and never transmitted off device.
srfilipek··on Heap-based buffer overflow in Sudo
> This software is maintained by Todd Miller, the well known OpenBSD developer

Ironic that OpenBSD dropped sudo in favor of a much simpler utility.

srfilipek··on It’s 255:19AM. Do you know what your validation criteria are?
The article discusses interoperability issues; it isn't an attack or vulnerability.

The issue is that implementations will reject valid signatures.

srfilipek··on Google: “Any harm Epic has suffered is not irreparable and is of its own making”
> charge as Spotify or netflix 30%

That only occurs if Apple facilitates/manages the subscription.

AFAIK, they are both generally outside of the "Apple Tax" at this time by redirecting subscription signups to a browser.

srfilipek··on Reddit Shuts Down AMA from Former NSA Technical Director Bill Binney
It provides some indication that it may have been transferred to USB at some point.

That point could be directly from the server, or from the hacker's computer to a USB drive, or from a USB drive to another computer.

It says nothing about the original hack.

srfilipek··on Ask HN: Is option trading as bad as gambling?
It depends. Many techniques are very risky, but some are safe and useful, and can have significantly less financial risk than owning stock directly.

E.g. basic call options: https://www.optiontradingtips.com/options101/payoff-diagrams...

srfilipek··on Jaguar and Audi SUVs Fail to Dent Tesla’s Electric-Car Dominance
That's a really weird and selective comparison.

Tesla has sold 1.6x the number of Model 3's in the past 2 years than Nissan has sold Leaf's... ever.

Sources (US):

* 136K Leafs: http://carsalesbase.com/us-car-sales-data/nissan/nissan-leaf...

* 223K Model 3s: http://carsalesbase.com/us-car-sales-data/tesla/tesla-model-...

srfilipek··on The electric car as a talisman of false hope
Just curious, do you have stats on your watts per mile efficiency you can share? How it compares to the EPA estimates?
srfilipek··on The electric car as a talisman of false hope
If I drove my manual better, I could probably achieve that, but spirited driving made me replace everything twice over in 100k miles, with a third needed soon. :(
srfilipek··on The electric car as a talisman of false hope
Depends on where you live. In West Virginia? No, it's almost all coal based.

In Vermont? Yes, their grid is 100% renewable.

Source: https://afdc.energy.gov/vehicles/electric_emissions.html

srfilipek··on The electric car as a talisman of false hope
Tesla's brake pads for the Model 3 are scheduled for replacement after 250,000 miles of use (according to tesla rep. I spoke to).

No, I did not mistype that.

srfilipek··on The electric car as a talisman of false hope
> high accelerations

Acceleration does not waste energy (other than speed related things like wind resistance). This is a myth that is perpetuated without merit, but probably because it's typically associated with overall aggressive driving, which implies bad braking habits.

Max efficiency is typically near peak torque for internal combustion engines [0]. For EV's, electric motors are actually most efficient at higher RPMs [1].

Fuel efficiency can be measured by breaking habits alone.

Edit: sources:

[0] https://i.stack.imgur.com/RE4SM.png

[1] https://qph.fs.quoracdn.net/main-qimg-fcf541de83bd871b9ba92d...

srfilipek··on Anyone else thinks that Whiteboard interview is just covered ageism?
I agree with your first points, but...

> Yeah, learning algorithms is a chore and a hassle

> If the interviewer can see that you're able to make yourself do that for the interview, it's a good sign you'll have the discipline to do some of the grunge work...

This doesn't make any sense, unless very, very specific bounds are put on the interview questions beforehand...

Without that, what is a candidate to do? Memorize all known data structures and algorithms?

srfilipek··on Katy Perry's Dark Horse Lawsuit Makes Waves in Music Industry
> Whats better? [...lots of straw-men...]

To start: Not removing jurors simply because they're knowledgeable or have critical thinking skills.

srfilipek··on Katy Perry's Dark Horse Lawsuit Makes Waves in Music Industry
> a jury of random people is probably the most qualified way to determine the question "would average people see these two things as substantially the same."

A jury of random people can be confused and then convinced by lawyers. That's the way they like it, and that's the problem with jury selection - they chose people specifically because they are not knowledgeable.

srfilipek··on Katy Perry's Dark Horse Lawsuit Makes Waves in Music Industry
A peer of the defendant?

Because the defendant was a musician in this case.

srfilipek··on Tesla received a cease-and-desist letter from NHTSA over Model 3 safety claims
Tesla's page in question is quite clear about their methodology, and I can't really see the fault in it:

> The Vehicle Safety Score represents the “relative risk of injury with respect to a baseline of 15%,” according to NHTSA. Model 3 achieved a Vehicle Safety Score of 0.38, which is lower than any other vehicle rated in NHTSA’s public documents.

How can the NHTSA create a safety score regarding risk of injury, and then say that you can't use it to make a statement about the risk of injury?

srfilipek··on Ask HN: The most useful Mac keyboard shortcuts?
It works in every single app that I'm running.

Did you remap that key combo?

srfilipek··on QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack
Yes.
srfilipek··on QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack
I use FreeNAS (FreeBSD NAS with ZFS). The ZFS snapshotting feature effectively gives me protections from this type of issue.

My home computers push backups regularly throughout the day, and every day I create snapshots of each volume (how long to keep the snapshots is another question). This snapshot can only be accessed or managed on the NAS itself.

This effectively creates an append-only backup NAS thanks to the periodic snapshots.

srfilipek··on At what time of day do famous programmers work?
> (so your commits would reflect the time of rebase onto master, not the time you first committed to your topic branch)

That's not the case with git. By default it preserves the original commit time.

srfilipek··on Tips for reviewing code you don’t like
> 9. Say please

I actually don't like this. Maybe it's just me, but I always read these as being condescending, written by someone who thinks that I won't take a suggestion without unnecessary pleasantries and/or begging, or they're frustrated and trying to mask it.

> “Could you please align these variable definitions so they’re easier to read?”

> “Could you align these variable definitions so they’re easier to read?”

I like the latter.

srfilipek··on Science of Science
> science of science is epistemology

That would be the Philosophy of Science.

https://en.wikipedia.org/wiki/Philosophy_of_science

srfilipek··on Microsoft explains the lack of Registry backups in Windows 10
Wouldn't this break the functionality of "system restore points"? Because those have saved me so many times in the past.
srfilipek··on SwiftWebUI
> Apple's proprietary language

While it is heavily funded and used by Apple, I would never call it "proprietary". It's open source.

https://swift.org/about/#swiftorg-and-open-source

Page 1 of 3Next →