HNHacker News
TopNewBestAskShowJobs

thisacctforreal

1,004 karma · joined April 12, 2017

submissionscomments
thisacctforreal··on Wi-Fi Alliance Introduces Wi-Fi Certified WPA3 Security
Yes, Apple devices offer to do this for eachother if you are in the person's contacts.

Works between your own devices too, requires bluetooth but no pairing.

thisacctforreal··on Instagram announces IGTV
If you tie it to a Google account you can tune them by watching videos on topics you are interested in, as well as flagging videos & channels with "Not Interested". Their algorithms are definitely eager to find you a flood of content you'll enjoy. The hard part is seeding it with high quality channels.
thisacctforreal··on Canada legalises recreational cannabis use
I'm not sure. It's definitely not comfortable, and sometimes the thoughts/delusions are more advanced than phantom physical pain.

My first experience with weed was a couple of years ago, and there was paranoia from the get-go. My dad also got paranoia when he tried it so he stopped.

When I started smoking weed for the first time semi-regularly (~1.5 years ago, 0-4 times per week) I had become "pretty crazy", which consisted of lots of notes, voice memos, and screenshots of the notes and voice memos.

The outright-crazy stuff mostly ended about a couple months after I stopped living in my car, which I had to do because of the and it getting down to -19C at night. Within the past year I haven't been near the deep-end, but my weed use has been off and on between regularly (3-7 times per week), semi-regularly (0-4), and zero. I consistently experience paranoia/psychosis whenever I get high, but it generally isn't harmful, and is sometimes silly. My friends put up with it.

However very recently for 6 days, I lived in a cruel reality that existed in my head. It was caused by a long-term (2 yr) long-distance (6 mnth) codependent girlfriend who can be a capable and stubborn liar. Thankfully the extent of the terrible things I believed happened didn't actually happen–she didn't even make it to cheating on me, let alone the malicious delusions I experienced–and she happened to have suitable proof. If she hadn't I might still be in that reality.

I think the episode was more to do with how she shattered trust, and some coincidental events during the 6 days, but I believe my weed usage helped my brain to create the complex unimaginable scenarios, then experience the pain fully. For a handful of hours in those 6 days I was close to tell-no-one suicide, after a history of suicidal behaviour.

I'm happy to be in this reality as of a little less than 2 weeks ago, I'm also glad that I endured and survived that pain. I've become a lot stronger, more peaceful, and I feel that I have turned many corners with mental illness which I hadn't faced in the past–though perhaps I can credit that to a deeper dive into Buddhism and to the end of the codependency. We were about to restart our warm embrace the day she anchored me to this timeline, but per some timely advice from her friend we took a step back and ended it.

Whether or not the psychosis is temporary, or whether it causes early-onset schizophrenia is an area I'm excited to see more research on. It's definitely not as black-and-white as many people paint it out to be, and talking about any potential downsides of the drug is sometimes met with stigmatism because you're "falling for the propaganda".

One aspect of weed legalization is going to be psychosis in a subset of people who use it, and it's not exactly a safe phenomenon. There were definitely paths during my bouts with weed that don't lead to being here like this today. At the same time I'm grateful for the experiences it has given me, and the lateral thinking it has granted me.

Here's a good article I found, "Pot Can Trigger Psychotic Symptoms For Some, But Do The Effects Last?" [2015] https://www.npr.org/sections/health-shots/2015/03/06/3901436...

For Buddhism I've been slowly reading Siddhartha over the past few weeks, and Tales Of Times Now Past off and on over the past year.

I wouldn't generally write such a long, personal comment, but we're neatly away on the second page.

thisacctforreal··on Blender is testing PeerTube after YouTube blocks their videos worldwide
I agree with the first sentence but not the second.

I think a lot of employees are just not taking a step back to look at the sum of the parts they are helping to build, or maybe they have optimism/trust in their leaders to not fuck everyone over, and others might just draw their line further down the sand (e.g. no Pentagon contracts).

I imagine a brave few are also working to change it for the better from within. I'd definitely choose to work at Apple instead though, Google seems fundamentally creepy these days.

thisacctforreal··on Blender is testing PeerTube after YouTube blocks their videos worldwide
Same error and message in Canada.
thisacctforreal··on Canada legalises recreational cannabis use
Conversely, a subset of the population may experience weed-induced psychosis.

I experience it while high, so I only take a toke or two irregularly. I might feel as if I'm experiencing the pain of a broken leg, or that my foot is bleeding, as well as more abstract things. It also grants some introspection and lateral thinking so its not a bad time.

I've heard higher amounts of CBD can counteract this, but I just mooch from friends who regularly smoke, and all their weed is high in THC / low in CBD. When its fully legal in my province I'll try a high CBD strain.

Either way I'm excited for the neurological research to come out of Canada from legalization :)

thisacctforreal··on MacOS Caches Data from Encrypted Hard Drives
You can set the screenshot destination using:

    defaults write com.apple.screencapture location ~/Screenshots
    killall SystemUIServer
There are a few handy things you can configure using defaults(1).
thisacctforreal··on CopperheadOS update: Developer suspended from Reddit
Do check out libimobiledevice, available on Windows, macOS and Linux.

http://www.libimobiledevice.org

thisacctforreal··on Australia drafts laws forcing Facebook and Google to reveal encrypted data
Would be surprising; even the iPhone 5s from Fall 2013 is equipped with the Secure Enclave and is getting iOS 12. Including the feature to disable USB communication pins after 1 hour without the user's passcode. A feature aimed squarely at disabling Cellebrite from uploading their brute-force firmware.
thisacctforreal··on Can Facebook Be Cut Down to Size?
This can be a problem with Google, at least if you consider baby duck syndrome[1].

Google Docs is often the only comfortable and familiar way to collaborate on documents for many groups, and YouTube is often the only source of video content on the internet.

[1] https://en.wikipedia.org/wiki/Baby_Duck_Syndrome

thisacctforreal··on Apple Is Testing a Feature That Could Kill Police iPhone Unlockers
It completely disables the communication pins and only allows power.

Apple is not playing catch-up, all phones since the iPhone 5s (Fall 2013, receiving iOS 12) have a hardware encryption key entangled with the user's passcode to decrypt data.

The key is unique per phone, inaccessible to even the Secure Enclave firmware, and has PBKDF2 iterations tuned for 80ms per attempt. The Cellebrite attacks are getting closer to ~1s per attempt, and rely on being able to upload their own firmware to the phone.

This feature looks to disable the last way of getting into iOS devices without the passcode.

They certainly seem to be investing a lot in security.

thisacctforreal··on Create Previously Impossible Games
The title feels a bit clickbait, perhaps "Create multiplayer games with unprecedented scale" might be an improvement.
thisacctforreal··on [dead]
Lots of people are, at least in spirit. The current American internet is a convoluted panopticon, and many want to see more transparency and simplicity around where information about them is going.

The costs may be large and many companies may leave, but China has shuttered out these same companies and they've done well to solve their needs from within the country.

Of course China's goals were much different than citizen's rights.

thisacctforreal··on [dead]
I don't think so, it's an unbiased list of articles about companies shuttering some or all of their operations in response to the GDPR.

Sure, the companies might be "hysteric", but I don't think this list is aimed to spread that hysteria.

Edit: removed remark about reaction

thisacctforreal··on Face recognition police tools 'staggeringly inaccurate'
People with rare abilities have a chance to refuse or whistleblow unethical work.

Automated facial recognition systems will listen to whatever they’re told without question, and can watch all cameras at all times.

Add gait recognition and you won’t be able to go anywhere within CCTV without it being known.

thisacctforreal··on A dozen Google employees quit over military drone project
Looks like they are taking a stand by signing that pledge.

There is one section on resigning:

> If we discover misuse of data that we consider illegal or unethical in our organizations:

> ...

> If we do not have such authority, and our organizations force us to engage in such misuse, we will resign from our positions rather than comply.

From what I have seen, Google's help with the Pentagon seems limited to software consulting. If Google had shared any data with the Pentagon for military purposes then it would have crossed a line for the pledge.

The pledge says to try to fix it through: working with colleagues/leaders; then whistleblowing; then legal defenses if they have the authority; then resignation.

thisacctforreal··on Safe ways to do things in bash
$( allows any syntax until a non-escaped ). It's Command Substitution[1], and they run in "subshells".

    echo hello "$(
        echo hello \
        | sed 's,hello,world,g'
    )"
[ is an actual binary file that gets invoked, called test. You can "man [" or "man test" to learn about all of its uses.

I use [ exclusively, but with && and ||, instead of -a and -o respectfully.

e.g. [ -e "$file" ] && [ -w "$file" ] instead of [ -e "$file" -a -w "$file" ].

[1] http://pubs.opengroup.org/onlinepubs/009695399/utilities/xcu...

thisacctforreal··on Safe ways to do things in bash
I agree.

I've used this page successfully as reference for portable syntax:

http://pubs.opengroup.org/onlinepubs/9699919799/utilities/V3...

Some sections on features I use heavily:

- Parameter Expansion (specifically :-, %, %%, #, ##)

- Special Parameters (specifically "$@", $#, $?)

- set --, this lets you set the $1, $2, etc. variables. I use this with "$@" for arrays, primarily for building command strings.

Here's an small shell script demonstrating some of them:

    #!/bin/sh
    
    # err function
    err() { echo "$1" >&2; exit 1; }
    
    # init variables
    unset src
    unset dst
    dry_run=false
    
    # get arguments
    while [ $# -gt 0 ]; do
        case "$1" in
            -d|--dry-run) dry_run=true ;;
            --) shift; break ;;
            -*) err "unknown option: $1" ;;
            *)
                if [ -z "$src" ]; then src="$1"
                elif [ -z "$dst" ]; then dst="$1"
                else err "unexpected argument: $1"
                fi
            ;;
        esac
        shift
    done
    
    # sanity checks
    ## TODO: print usage
    if [ -z "$src" ]; then err "source not specified"; fi
    if [ ! -d "$src" ]; then err "source does not exist"; fi
    if [ ! -r "$src" ]; then err "cannot read source directory"; fi
    
    if [ -z "$dst" ]; then err "destination not specified"; fi
    
    if ! rsync --version >/dev/null 2>&1; then
        err "missing rsync(1)"
    fi
    
    # build rsync command
    set -- rsync -aq "$src" "$dst"
    
    # log command
    echo "copying $src to $dst"
    echo "    $@"
    if ! $dry_run; then
        if "$@"; then
            echo "success"
        else
            # rsync will have printed an error message
            err "rsync exited with error code $?"
        fi
    else
        echo "dry run; not executing"
    fi

Also be sure to read the man page for test (the [ command).
thisacctforreal··on Boston Dynamics will start selling its dog-like SpotMini robot in 2019
I don't think technology for the sake of technology is a good reason to build it.

Advancing technology is interesting to work on, but deploying it in useful ways to solve problems is the part nobody wants or knows how to do. There's more to be done with what we have now.

thisacctforreal··on Using Flywheel Batteries to Charge Electric Vehicles in Ten Minutes
You probably meant “No [it’s not wrong for you to get uncomfortable], because...”
thisacctforreal··on Germany adopts first ethics standards for autonomous driving systems
At least incentives for carpooling won’t disappear.
thisacctforreal··on Facebook now denying access unless EU users opt-in to tracking
The Average Revenue per User can be found in their earnings report (linked above by ihumanable): https://s21.q4cdn.com/399680738/files/doc_financials/2018/Q1...

For US & Canada this was $86.65 in the last 4 quarters.

For Europe this was $34.95.

Keep in mind they likely don't target ads using just one person's data: accuracy can be improved by looking at the data of similar people, and looking at the data of friends and family. It isn't as simple as offering a $10/month plan to keep your privacy, because they want everyone's data.

"Your data is worthless, everyone's data is priceless."

thisacctforreal··on iOS 11.4 to Disable USB Port After 7 Days: What It Means for Mobile Forensics
These are easy to calculate, the iOS whitepaper[0] specifies that it uses a PBKDF2 iteration count tuned for 80ms.

The passcode is 'entangled' with a per-device 'UID' that only exists in silicon, not accessible by any firmware.

It seems that the current GrayKey attacks are closer to ~1s/guess.

My last post on the topic: https://news.ycombinator.com/item?id=16833802

[0] Page 15 https://www.apple.com/business/docs/iOS_Security_Guide.pdf

thisacctforreal··on Our Attempt at Writing an Honest Privacy Policy
4096-bit is likely an RSA key, correct?

Encrypting directly with RSA according to PKCS#1 is limited to a maximum of 501 bytes (key modulus - 11 bytes).

Generally RSA is not used to encrypt data directly, instead you encrypt an AES key with RSA then encrypt the data with that key.

https://stackoverflow.com/a/5586652

https://security.stackexchange.com/a/33445

Edit: the messages are from a character limited contact form so it's fine

thisacctforreal··on Google Duplex: An AI System for Accomplishing Real World Tasks Over the Phone
https://en.wikipedia.org/wiki/GOOG-411
thisacctforreal··on Apple is a traditional business
Apple does not seem to want you to open the phone, but they are easily the most repairable phones available. Most repair shops will repair any iPhone, and you can stumble through it yourself using YouTube or iFixit.

According to this 2/3 Apple devices sold are still active today: http://www.asymco.com/2018/02/27/the-number/

I believe Apple gains directly from the longevity. People know that Apple products last long and hold resale value; where I am the iPhone 5s from Sept 2013 is sold second-hand for ~$150CAD

Devices with high resale value mean customers can upgrade frequently.

thisacctforreal··on Apple is a traditional business
Apple has been a leader in security, and has shown to take privacy seriously.

The "Hey Siri" wake is done completely locally, and is opt-in on top of Siri.

https://techcrunch.com/2015/09/11/apple-addresses-privacy-qu...

Apple also consistently makes the trade-off of privacy above user-experience; in order to offer similar features to Google photos, they train neural networks on-device.

As well as how seriously they take the biometric data from Touch ID and Face ID, I'm much more comfortable around a HomePod than Alexa.

thisacctforreal··on Apple iMac Pro and Secure Storage
The Secure Enclave in the T1 and all iPhones since the 5s has a unique key in the AES engine's silicon, that cannot be read even from the Secure Enclave's firmware.

This key is "tangled" with user-supplied keys for per-device access to data.

I assume the T2 offers this same feature.

See UID in the glossary (page 80) or under Hardware security features (page 12) of the iOS 11 Security Guide

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

thisacctforreal··on Apple iMac Pro and Secure Storage
I think full disk encryption with a plaintext keyfile in the boot partition is a good minimum.

To erase the drive; securely delete the key and all copies.

thisacctforreal··on Turning a broken iPhone into a working USB flash drive [video]
He also added a headphone jack to an iPhone 7;

https://www.youtube.com/watch?v=AptPGnVAXeM

← PreviousPage 4 of 11Next →