Hacker News Reader

stoneprestoon Show HN: Atomd.py v0.2.5 – Markdown Lexer and HTML Parser

The purpose of this project is to provide "atomic" control over how the markdown is parsed.

This is achieved by allowing the developer to have direct control over what the tokens are replaced with.

I apologize for the lack of documentation, but if you take a look at html.py it's pretty self explanatory.

Would love some feedback!

stoneprestoon Show HN: Atomd v0.2.0 – Markdown Lexer and HTML Parser

Designed this to give "atomic" control over every tokenization and substitution.

Finally have some good unit testing and workflow in place, so looking for bugs!

stoneprestoon MDcat – Simple Markdown to GitHub styled HTML converter

I like it, simple solution. I wanted to do stuff locally for a project I’m working on, so I built an MD lexer and HTML parser. The downside is I have to implement everything manually, but the upside is I have atomic control over every token, and writing parsers for another markup language is simple.

https://github.com/stonepresto/atomd

stoneprestoon Microsoft warns thousands of cloud customers of exposed databases

They seemed to be sandboxed to some extent, the researchers mention a privesc which could either be user -> root and then accessing other users accounts, or it could be a sandbox escape through the hypervisor to the host and a pivot from there. Regardless, shouldn’t be possible.

You see the former with a lot of “online Python interpreter” sites.

stoneprestoon Show HN: Atomd v0.1.0 – Markdown Lexer and HTML Parser (Python)

This project came to light while working on a larger one. I was looking for something that would give me easy atomic control over the HTML tags that replace the markdown syntax. After looking at a few, I decided to implement and open-source my own.

The basic idea (and the biggest difference from other markdown libraries) is splitting the functionality into a lexer and a parser, so other parsers can easily be created by simply adding a parse map and replacing the tokens from the lexer. Both the lexicon and the parse map are exposed to allow for specific modification of HTML tags.

It's in a working state at the moment, but certain things such as syntax highlighting and markdown within quote blocks will depend on how much use it gets.

Hope someone finds this useful other than myself!

stoneprestoon US companies hit by 'colossal' cyber-attack

“tl;dr REvil popped @KaseyaCorp. Abused Kaseya's auto update to conduct supply chain attack that DLL side loads Windows Defender binaries and ransoms the customer

tl;dr tl;dr REvil just pulled off a colossal ransomware supply chain attack” @vxunderground

Thread includes samples.

https://twitter.com/vxunderground/status/1411058433558786049...

stoneprestoon U.S. to give ransomware hacks similar priority as terrorism, official says

The downward trend in bug bounty payouts and frustration from researchers might also sweeten that deal for more experienced persons.

stoneprestoon U.S. to give ransomware hacks similar priority as terrorism, official says

If the USG treats this even close to the way they treat terrorism in regards to policy and funding, I’m curious what that will look like and how nation-states harboring those people will react.

stoneprestoon Show HN: Tmpcli.py: Tether Management Protocol Client

I recently created a client after reversing the closed-source binary TP-Link uses as a client for their Tether Management Protocol (TMP) and Tether Discovery Protocol (TDP - possibly stands for something else).

stoneprestoon “I will slaughter you”

This mental health problem is called defense contracting.

stoneprestoon DOJ Argues: US can kill own citizens without review when state secrets involved

> Judge Patricia Millett characterized the DOJ’s argument as giving the government the ability to “unilaterally decide to kill U.S. citizens,” according to coverage of the argument by Courthouse News Service. “Do you appreciate how extraordinary that proposition is?”

“DOJ” in this case is the defense attorney. What a shit job. Regardless, the DOJ is not giving the USG the ability to kill US Persons with no judicial review. Judge Millett’s exasperation should be an example of how preposterous this is.

The way this post is titled is misleading and is intended to flame.

stoneprestoon The Buzzword.engineering Tech Stack

As far as I know it’s not open source either, which I don’t mean to be the Stallman-type, but is kind of a deal breaker for me.

I wrote my own, if it ever gets to a point of not being terrible I will open source it as a not-as-pretty FOSS alternative.

I think the second brain notion is very powerful though, regardless of platform.

stoneprestoon Show HN: Lfbr, JSON Formatted Book Recommendations from the Lex Fridman Podcast

There was no easily-parsed list of book recommendations for the podcast, so I made one. Hopefully someone finds it useful.

stoneprestoon YouTube Down Worldwide

502 bad gateway for redirector.googlevideo.com seems to be the culprit, twenty-ish second response time

stoneprestoon YouTube Down

502 bad gateway (21s response time) for redirector.googlevideo.com

stoneprestoon EU Draft Council Declaration Against Encryption [pdf]

Not to mention those same bad actors will gladly risk going after those keys. Given the track record of government organizations' secure storage of data, I think it's likely they would succeed.

stoneprestoon EU Draft Council Declaration Against Encryption [pdf]

Considering governments have about the same capacity to store data securely as a twelve-year-old, those decryption keys basically open up the door for everyone who is willing to put the effort into retrieving them.

And considering the retrieval would certainly be breaking at least a few laws, the people who are going to pull it off are going to be

- nation states

- APTs

- large criminal organizations

- large corporations (corporate espionage)

So you arguably defeat the entire purpose of having encrypted data streams. Sure, the barrier of going and "stealing the keys" is still there, but given the track record large governments have at not leaking data, it is safe to say there would be little barrier aside from legal ramifications if caught.

stoneprestoon Oregon hospital shuts down computer system after ransomware attack

Yes, my fault. I blame it on my lack of sleep and already shite morning.

stoneprestoon Oregon hospital shuts down computer system after ransomware attack

The hospital is still moving forward with scheduled procedures, although those requiring imaging services may be delayed, according to a Herald and News report.

Misleading title

EDIT: turns out lack of sleep is bad, mmmkay? Misread the title.

stoneprestoon Spy agency ducks questions about 'back doors' in tech products

"Device" has taken on a few different meanings in this thread. To clarify I was speaking generally and not specifically about mobile phones, which is certainly in error due to the context of the article.

stoneprestoon Spy agency ducks questions about 'back doors' in tech products

I agree with the second part of your statement, but I think being alone in acting in your own best interest still holds. Good projects such as those are a result of many similarly aligned self-interests.

I'll admit I was being a bit dramatic, and as you have pointed out it's certainly more complex than a single sentence. I was trying to highlight that blindly trusting another human or organization can leave you vulnerable.

stoneprestoon Spy agency ducks questions about 'back doors' in tech products

That's certainly fair, especially if the password is then set to some variation of "password"...

Although for some devices if you can root it, you probably also know methods of securing it.

stoneprestoon Spy agency ducks questions about 'back doors' in tech products

Root everything. FOSS all the things. Tear everything apart.

There will always be a BBEG, no matter what part of the world you are in or what sort of government you live under.

You are the only one who acts in your best interest.

stoneprestoon Ask HN: Best Dev Laptop 2020

Nothing. If you're thinking about the "Privacy Guard" it's Fn+D for me.

stoneprestoon Ask HN: Best Dev Laptop 2020

I run a tiefighter monitor setup (2 vertical 1 horizontal in the middle) so I'm not super concerned with the laptop resolution.

My main thing was the viewing angle being very small for privacy in cafes. It also has Fn+D to toggle small vs. wider viewing angle.

So overall it works well for me.

stoneprestoon Ask HN: Best Dev Laptop 2020

I recently transitioned from desktop to a T14. Although my time-with-product has been relatively short (a week or so), I am really happy with it.

Pros:

- Ryzen 7 4750U is awesome.

- Lots of RAM.

- Easily customizable orders from Lenovo with great features to add

- Renoir graphics are pretty solid

- keyboard is fantastic, classic ThinkPad feel and usability

- Easy to upgrade. Ordered with a 128GB nvme and immediately upgraded to a 1TB, saved about $200.

- docking station allows for easy desktop use with multiple monitors

Cons:

- libfprint is still in it's early stages imo, so the finger printer reader is tough to set up with linux.

- no backlit keyboard (on the one I ordered, can't remember if that was an option or not)

stoneprestoon Curated list of tech landscape maps from around the world

Curated *infographics

stoneprestoon Ask HN: What action can the Discord community take against dis[dot]cool?

Even if it's being monetized?

stoneprestoon NSA collected 500M U.S. call records in 2017, a sharp rise: official report

I don't think they have the authority to stop a private company's service (verizon, etc.). Also, they don't monitor the calls themselves, so it would be impossible to tell if it was a scammer until someone reported it, and blacklisting one-by-one will never be effective since they can just change the number.

stoneprestoon Amateur Radio on the International Space Station

Amateur Radio Licensing at http://www.arrl.org/getting-licensed for those interested. You'll need it if you want to attempt to contact the ISS.