HNHacker News
TopNewBestAskShowJobs

syn0byte

637 karma · joined August 28, 2018

submissionscomments
syn0byte··on Apple Confirms $1M Reward for Anyone Who Can Hack an iPhone
Given the "kernel" requirement coupled with the design of these devices in general, any real non-interactive RCE will be claimed to not be "in the kernel"... it was a Qualcomm or ARM binary blob not the kernel!, It was the Baseband firmware not the kernel! It was libXYZ not the kernel! etc.
syn0byte··on Why is modern web development so complicated?
Why don't you drive an 18 wheeler to work every day? They are used by millions of professional people every day who's job it is to drive! Why would you be different from all those people that you think you need to use a little car instead?

The answer is obvious in both cases; You don't need it and it would be wasteful. If I don't have a huge database with constant read/write calls, If I don't have to try to manage multiple end users submitting content, if I don't need super async real-time snappy UIs to compete with the latest android app fad or session tracking of tens of thousands of users, why would I need laravel?

If nobody rolled their own specifically for what they needed, we would still be writing ASM/APL/Raw hex.

syn0byte··on 8chan goes dark after hardware provider discontinues service
The vested interest media and political parties have in making it seem like there is an insatiable thirst for white supremacy in America.

It's on average not any worse than it ever was, but showing us how bad its always been right now serves a useful political goal in division and diversion.

Its not a conspiracy, just stupidity and greed. Outrage generates views and votes, no cartel required.

syn0byte··on The Lost Art of Lacing Cable (2018)
Installation in buildings. Try pulling a bundle of CAT6 cables from a comms closet with huge plastic blocks from zipties jutting out every other foot through 10-50 feet of drywall and/or drop ceiling. Loom doesn't even warrant a sarcastic comment in that context. The biggest advantage is of course the string takes the brunt of the stretch stress.

I'm not gonna go lace up a DC but it's still useful enough that every hardware store around carries rolls of twine right next to the cable spools and zip ties.

syn0byte··on Capital One’s breach was inevitable, because we did nothing after Equifax
Lots! Tons and Tons and Tons! S3 is super secure and CAN NOT be hacked when properly configured and used according to our standard!

You got hacked? You must have configured it wrong because we already told you it was unhackable; Good luck proving it was our fault not yours.

syn0byte··on The Elite Club That Rules the Diamond World Is Starting to Crack
If there is a gold cartel to enforce it, yes.

For a humorous example see the origin of "processed cheese".

syn0byte··on The Golden Girls Would Violate Zoning Laws
“The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.”
syn0byte··on The Golden Girls Would Violate Zoning Laws
So just like real US elections. What's that got to do with it?
syn0byte··on Decades-Old Computer Science Conjecture Solved in Two Pages
Nah. Computing sensitivity has always been easy enough, flip bits and watch output. This is about how to do it in a generalized way that fits in with related work in the field.
syn0byte··on Mozilla debuts implementation of WebThings Gateway open-source router firmware
Absolutely nothing, It's worse with fewer features. Mozilla itself says as much. This is for playing around with stuff, not general usage.
syn0byte··on The Tech Industry Is Building a Vast Digital Underclass
To your entire argument I say GOOD. Can't make profitable bluebarries? Tough shit. Free market right?

Work conditions become crap? GOOD. Can't run a business without slaves in shanties tough shit. Free market right?

Product quality goes to shit because you can't afford decent employees in reasonable working conditions? GOOD. The free market in action!

Are you afraid of a free market?

syn0byte··on Attorney General William P. Barr Delivers Address Conference on Cyber Security
Warrant proof communication is absolutely in the best interests of the citizens for exactly the same reason it's not in the best interest of the ruling government.
syn0byte··on What If Consciousness Comes First?
We will be able to explain and understand consciousness in objective terms 1 second after the first person achieves flight by pulling themselves into the air with the bucket they are standing in. About 5 seconds after a computer can run a 100% simulation of itself running a 100% simulation of itself. A whole minute after someone writes a program that can tell if/when any other programs will stop running.

As a question that's dogged us for thousands of years, maybe its time to accept its just a shitty question.

syn0byte··on Visual Information Theory (2015)
Any interesting work coming out of "Olah Team"? I tried googling but found nothing specific just Distill articles and your twitter feed...
syn0byte··on Don’t Put Your Work Email on Your Personal Phone
Depends on the MDM and phone really but, No. Triangulating a cellphone on the network via cell towers is a tried and true feature of wireless infrastructure. Even your phones GPS capabilities are most likely "A-GPS" meaning Cellular Assisted; It'll use cell location data when GPS satilites are slow/unavailable.

GPS toggle isn't doing much of anything besides application permissions enforcement.

syn0byte··on Unikernels: The Next Stage of Linux's Dominance [pdf]
"Unikernel" is a overly generic term. Technically the Linux kernel is already a "Unikernel". It's just most of the time its discussed as a negative not a positive and the term used is "monolith".

The project you want is "Yocoto", a complete toolchain to build customized embedded OS images.

https://www.yoctoproject.org/

You would have to build your own analyzer. Grepping the dependencies from the makefile/build data or just parsing the output of dpkg and translating that into yocto build specs is not unreasonable.

syn0byte··on Amateur radio digital communications 44.0.0.0/8 partial sell-off
https://www.irs.gov/pub/irs-tege/rp1995-48.pdf

I'll bet you it still just vanishes...

syn0byte··on Cities Want 'Digital Twins' to Manage Traffic
Do you worry about some random asshole kid hurling a re-bar in to rush hour traffic? REing automotive tech, setting up transmitters, and spoofing traffic data to throw a virtual re-bar in to rush hour traffic could become a pandemic unless we figure out a way to fight such attacks.
syn0byte··on QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack
Unless you have persistent mount to network FSs like NFS or SMB how do you think the ransomware would spread? You sure don't need network mounts for backups.

Cronjob to an (S)FTP server and an upload script trigger to chown/chmod all incoming files making the whole thing WORM (Write Once Read Many).

Once its submitted the same user account can't alter it. Even if the malware is clever and scans for .netrc and .id_rsa and manages to create its own connection to the backup server it doesn't have access to anything anyway.

syn0byte··on MITM on HTTPS traffic in Kazakhstan
"So do we make our flagship product useless for the entire country or not?" - The real question
syn0byte··on MITM on HTTPS traffic in Kazakhstan
No. we just feel better because it just sounds so obviously reasonable doesn't it?

Kazakhstan's low-tech approach is just that, low-tech and low-effort. They could have used tons of vectors besides simply saying "install this cert."

A tiny shred of effort would have been to package an "updater" that did the install without explicitly saying that's what it was for. Or better yet: Kazakhstan is committed to a greener more ecologically friendly future! All tax documentation will go paperless! Just use the provided USB Key to access your documents in electronic format!

A small morsel of effort would be to force it on OS vendors through regulation/licensing/threats/money for localized copies. A good deal of effort would hijack CRLs, pinnings, et al while demanding/sneaking the private keys of the CAs.

Public Key Infrastructure is fucking pointless when the infrastructure is precisely what you can't trust.

syn0byte··on Zelda Screen Transitions Are Undefined Behaviour
Survivor bias. Plenty of shite code got written for the 6508 but only clever crap gets blog posts 30+ years after the fact.
syn0byte··on Hostyoself: Server in a browser – host from your computer, your phone, etc.
Not a professional liar either but I'm not sure about that. I imagine torrent trackers are a decent analog thats been through the courts already. They don't host the content, they just host URIs and metadata to people that host the content.

The drag and drop interface isn't to upload the content to be hosted like a traditional server (what's the point then?) It looks like (without digging through code) it's so they can parse the file-structure and generate the URIs to forward requests.

syn0byte··on Twitter was down
I was gonna make a joke about how much hate Trump generates ruining a brand like that but then I remember Hugo Boss, BMW, IBM, VW and Bayer among others were all knuckle deep with the Nazi's and every single one is still a popular brand to this day.
syn0byte··on Twitter was down
"Don't forget to occasionally do that thing I mentioned in passing 2 weeks ago, under my breath, during a klaxon alarm test. Otherwise the errors will DDoS the whole cluster. See you in a week, goodluck!"

Nah - that would never happen.

syn0byte··on Python consumes a lot of memory – how to reduce the size of objects?
While everyone haggles about the internals I have an interesting anecdote about the costs of tools libraries.

A small service that landed in my lap needed to read(only) a data source that was roughly 10k lines of yaml. No way that was going to be in any way efficient so I asked for suggestions. All the work-a-day devs(I am not) instantly said the same thing without a single real thought about it: Make it a database duh!

Long story slightly less long, Loading up the libraries to interface with a database ate between 2 and 3 times the memory(depending on the DB and lib) that simply loading the entire 10k line yml ate and offered slower performance and required more code.

SQLite was pretty darn close but in the interest of saving developers from themselves vis a vis parameterized queries, or the need to queries all together for that matter, increased the required code for zero benefit.

The service still hums along with a 10k line yaml in memory. "Worse is better" indeed.

syn0byte··on Moving the World to a 4 Day Workweek – An Interview with Aidan Harper
If you believe you should be able to talk down the street without getting harassed or raped, you can vote via not dressing like a slut. Who exactly should be responsible if not yourself, and how? Many people on HN sit around trying to avoid sexual violence that is laughably less brutal than what 2, 3, 4 generations ago were doing.

Morally repugnant victim blaming by any other name smells just as foul.

syn0byte··on Another wave of nootropic supplements is hitting the market
They exist, WW2 was proof of it. It gave us both Meth(axis) and Cocaine(allies) among other things. It's just that it comes at a very high cost of the users long term health and/or sanity.
syn0byte··on Database as Filesystem [video]
Everything is a nail.

Whenever developer sorts get all starry eyed over "DB as an FS", they never consider data exchange between applications vendors and platforms. Their applications always exist alone in a digital vacuum.

Example: Imagine trying to attach an MS Word document stored in this DBFS to an email from a Thunderbird client. What does that look like to the user? What does it look like to the Thunderbird developer?

Abstract and encapsulate so that each application can use their own container format that includes schema and encoding details? Other applications can read this metadata directly from each containerized db object? Cool, we just reinvented the filesystem again.

syn0byte··on BlueJeans also runs a webserver when installed on macOS
It pops up with exactly as much frequency as a normal user account in most Posix-like systems would require "su" of one form or another. For exactly the same reasons. It's just expected behavior for those systems, but completely unacceptable for Windows.

And we wonder why Microsoft sucks so bad at securing Windows.

Page 1 of 7Next →