HNHacker News
TopNewBestAskShowJobs

thenewnewguy

811 karma · joined July 29, 2019

submissionscomments
thenewnewguy··on Let's Encrypt has turned on stricter validation requirements
Works fine for me, uMatrix with javascript disabled by default.

Edit: Ah, upon testing it breaks if you have 1st party JS allowed but not 3rd party. This is pretty reasonable in my opinion.

thenewnewguy··on Pay up or we’ll make Google ban your ads
The same botnet can back an infinite number of these ransom notices, because when you get one of these ransom notices you have no way of knowing if the ransom notice you got today is the same botnet you paid off last week but with a different name.

Add in the fact that there are botnets available to rent, and you create a near-infinite supply.

thenewnewguy··on A document that the NSA uses for teaching Python
Better link: https://archive.org/details/comp3321/mode/2up
thenewnewguy··on Sweden gives employees unpaid time off to be entrepreneurs (2019)
So, just to be clear, these are your complaints:

- You couldn't fire somebody who went on maternity leave

- You had to provide benefits to your employees, even temporary ones

Seems like the laws are working to protect employees as intended to me.

thenewnewguy··on The US Secret Service mistook a cyberpunk RPG for a hacker's handbook
https://en.wikipedia.org/wiki/GURPS_Cyberpunk

> This raid is often wrongly attributed to Operation Sundevil, a nationwide crackdown on illegal computer hacking activities that was occurring about this time.

thenewnewguy··on Time Machine in macOS 10.15.3 is very slow on first full backup
> I go my first 64-bit mac in 2006. Fourteen years later why should the Mac have to support the older slower way that doesn’t release the potential of the hardware?

Aren't 32bit binaries (when not needing 64bits) slightly faster than 64bit versions due to the smaller pointer size?

thenewnewguy··on Clang vs. other open-source compilers
This is a page about _open source_ compilers.
thenewnewguy··on Migrating to CockroachDB
I am unfamiliar with how setups like these usually work, but it could an active attacker MITM your network?
thenewnewguy··on Wacom tablets track every app you open
> Not so with Nvidia GPUs. The open drivers are awful; the proprietary drivers are good.

Good by comparison to nouveau (the open source driver) perhaps, but definitely not good compared to the open source intel/AMD drivers.

thenewnewguy··on Google tracks individual users per Chrome installation ID
> > and furthermore, even if it did (I see conflicting reports), if you collect IP Address and another pseudonymous ID and don't join them, the ID isn't personal data.

> The transmission of data is already covered by GDPR, you don't have to store the data to be bound by the law.

This cannot be the actual correct interpretation of the GDPR, because under this logic _all_ IP packets on the public internet (made by/to EU citizens) are covered by the GDPR because you are transmitting data alongside an IP address.

thenewnewguy··on Rtty – Access a device’s terminal from anywhere via the web
Basically any attacker that is able to control the certificate store on your device could also just install a keylogger.
thenewnewguy··on Null Values in SQL Queries
> if you attempt to insert an empty sting ("") into a not-nullable column, it will fail

Yes, because it will convert the empty string into a NULL, and fail to insert that NULL into a non-NULLable column.

thenewnewguy··on Libc++'s Implementation of std::string
I don't believe you can ever edit the title of a submission, but the mods can (and typically will).
thenewnewguy··on Alpine makes Python Docker builds slower, and images larger
Correct (as far as I know), but:

A) Changing a Dockerfile is rare B) Typically the lines that change (adding your code) are near the end of the Dockerfile, and the long part with installing libraries is at the beginning

thenewnewguy··on Russia blocks ProtonMail
Why would they block a service they found a way to compromise?
thenewnewguy··on Kali Linux 2020.1 Released – Non-Root by Default
I believe they just mean the setup doesn't default to a root user, you can still use sudo.
thenewnewguy··on Thunderbird’s New Home
XUL is no longer exposed to plugins (in non-ESR FF), but is still used internally in some places - where it is slowly being replaced.
thenewnewguy··on How to Become a Centaur (2018)
Not even close, at least with chess. Chess games expand too rapidly that even with tricks to catch duplicates and discard obviously bad states and whatnot we're nowhere close to "100% depth inspection".
thenewnewguy··on Access to Wikipedia restored in Turkey after more than two and a half years
Ignoring widespread belief that the Turkish elections were less than fair, this kind of sentiment about politicians always surprises me. If I vote for a candidate why am I required to forever support every thing they do? I can vote for someone and still disagree (even strongly) with some of their decisions.
thenewnewguy··on Is This Site Secure?
No they wouldn't, because this is trivially easy to MITM. The whole reason CAs exist is to verify the identity of the domain owner, because any random MITMer can claim to be yourbank.com and you can't prove it either way.

Very technically this would be slightly better because it stops passive observers, but in reality I suspect it would be worse because tons of websites would use this broken by design solution and think they were perfectly secure because encryption.

What we really need is to stop making HTTPS so hard to setup. It has gotten better in the last 5-10 years, but you still have to do this whole rigamarole with Apache2/nginx to disable weak cipher suites, setup all the right TLS parameters, etc because the default configuration is so bad. Imagine a world where I just installed an HTTP server and it asks me if I wanted to get a cert from Let's Encrypt (or any other ACME provider) and just did all the setup correctly for me.

thenewnewguy··on Is This Site Secure?
> So Internet security has become a big and ongoing business, which has to be paid for. If I want to have a secure E-commerce site so I can make money, I have buy security services on top of the basic web services: an HTTPS address instead of the original HTTP: — OK, fair enough.

Has this guy not heard of Let's Encrypt? HTTPS certificates are literally free. I was astounded when I got to the end of the article and saw it was published in 2020 and not 2015.

thenewnewguy··on Google backtracks on search results design
I'll get right to installing that extension on Chrome for Android...
thenewnewguy··on Lego ISS
Unfortunately I cannot find a weight for the set on either this website or LEGO's official website.
thenewnewguy··on WordPad Is Gettings Ads in Windows 10
As far as I know there is basically no reason to use OO, it is a completely dead project. All of the development effort is being focused on LO, so if you want a FOSS word processor use LO.
thenewnewguy··on Why build this blog, or anything, on IPFS?
The blog is hosted on IPFS. To allow normal web browsers without IPFS support to view the website they use Cloudflare's IPFS gateway, which is a service that serves content from IPFS over normal HTTP.
thenewnewguy··on Staff emails claim Boeing 777X ‘shares Max problem’
> Yes, Boeing was too aggressive about reducing cost to compete with Airbus and they need some major reform because hundreds of people are dead. But ...

"Yes, Boeing killed hundreds of people due to their negligence, but think of the cost savings!"

thenewnewguy··on DuckDuckGo Lite
duck.com/lite does not work though
thenewnewguy··on A new browsing experience arrives in Firefox for Android Nightly
I "systematically" downvote comments that exist solely to advertise an alternative to the software being discussed. I would do the exact same thing to "hey, use firefox" comments on a Brave-related article.
thenewnewguy··on What DoorDash pays, after expenses, and what’s happening with tips
In an ideal world, maybe - but most delivery drivers employed by the restaurant (like pizza delivery drivers) take multiple orders at a time to deliver. You're going to have to get very lucky to beat this on average with DoorDash or similar services.
thenewnewguy··on FBI unlocked iPhone 11 Pro via GrayKey, raising more doubts about Pensacola case
4 digit codes are obviously easy to crack. That's a pathetically low number of combinations.
← PreviousPage 4 of 10Next →