HNHacker News
TopNewBestAskShowJobs

tomesco

66 karma · joined August 1, 2017

submissionscomments
tomesco··on Global review confirms mRNA vaccines are safe, effective and full of promise 
Information won’t sway someone who’s views aren’t based on information.
tomesco··on Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign
https://news.ycombinator.com/item?id=47773812
tomesco··on US SEC preparing to scrap quarterly reporting requirement
Rather, trading periods are for a limited time after reports are released. Before employees accrue too much non public information.
tomesco··on Don't Fear Self-Driving Cars. They Save Lives.
Non-paywalled gift article.

https://www.nytimes.com/2025/12/02/opinion/self-driving-cars...

tomesco··on Cracking a 512-bit DKIM key for less than $8 in the cloud
There exist certain classes of prime numbers that should not be used for some cryptographic operations because algorithms exist that reduce the computation required for factoring attacks. This more often applies to cases where smaller primes are applied. Sources for this king of knowledge are mathematics or cryptography textbooks.

For other cryptographic operations, almost any sufficiently large prime can be used. Even a 50% reduction on a computation that will take trillions of years, has no practical impact.

tomesco··on The Soul of an Old Machine: Revisiting the Timeless von Neumann Architecture
The definition of organ in this article is closest to the body part definition. The use of organ here relies on a less common definition: roughly a constituent part of some larger whole that performs a specific function.
tomesco··on Ask HN: What is in C-00000291*.sys?
It likely contains a bug but is an uncorrupted file. Corrupted to me means the file was changed or modified in a way from it's intended state and likely won't run anymore.
tomesco··on GraphCast: AI model for weather forecasting
Yes, driven by local data collection. More tightly packed ground stations and the availability of atmospheric measurement at various altitudes will improve accuracy.
tomesco··on What researchers found when they tested Fiji Water against tap water
The article discusses the length of the bottles placed end to end. Although I agree the title isn't clear.
tomesco··on It's still easy for anyone to become you at Experian
Lyft likely cost customers' funds though a poor process like this in the past.

One could create an account, hail rides and add their own payment method while still being associated with someone else's email. Ride recipes would then be sent to someone else's email where the receiving party could add or increase a tip through an unauthenticated link and have it charged to the riders credit card.

tomesco··on Launch HN: Play.ht (YC W23) – Generate and clone voices from 20 seconds of audio
If law enforcement ever busts a scammer and discovers a tool like this was essential to the scam, that would generate lawsuits.
tomesco··on Silicon Valley Bank unmasks the hypocrisy of libertarian tech bros
True. Expected to remain solvent would be more clear.
tomesco··on Git security vulnerabilities announced
What is the recommended upgrade path for macOS' system install of git?

I have upgraded my brew install, but am unsure of what to do with the vulnerable system install.

tomesco··on Twilio’s toll fraud problem
Couldn't Twilio also close and cease providing service to any accounts that initiate chargebacks?
tomesco··on Human Chess is a chess variant where playing the top engine move is forbidden
There must be a threshold above which making an engine move is allowed. Because if there's a checkmate move, it will be the best engine move and needs to be allowed.
tomesco··on Laws barring noncompete clauses spreading
Gardening leave.
tomesco··on How This Ends
Close. The federal reserve (or any central bank) will lend money to other banks at a rate just below the target rate, and it will borrow from other banks at a rate just above. Because banks can borrow and lend largely risk free at those two rates, banks will transact amongst themselves at a rate in between. This is how the federal reserve makes banks transact at the target rate.
tomesco··on Worldcoin
> The whole idea of a hash is that a tiny perturbation makes the output completely different.

That would be a cryptographic hash you are describing. Not all hash functions share that property. As long as arbitrary input is mapped to a fixed size output it is a hash function. For example see NeuralHash [1] which is a hash function designed to be "insensitive to small changes in the input image."

[1] https://towardsdatascience.com/apples-neuralhash-how-it-work...

tomesco··on How does Google Authenticator work?
1Password had a blog post [1] addressing this concern. Essentially you still have the benefit of one-timeness, but not second factor, and need to compare that to what your security needs are.

[1] https://blog.1password.com/totp-for-1password-users/

tomesco··on Convert Apple NeuralHash model for CSAM Detection to ONNX
Hash is applied correctly here. A hash function is "any function that can be used to map data of arbitrary size to fixed-size values." The properties of being a(n) (essentially) unique fingerprint, or of small changes in input causing large changes in output, are properties of cryptographic hashes. Perceptual hashes do not have those properties.
tomesco··on A review of Thomas Piketty’s “Capital and Ideology”
Could you please share any you recommend?
tomesco··on Fuchsia Programming Language Policy
>I think the effects of memory bugs on security are often overstated.

How often?