HNHacker News
TopNewBestAskShowJobs

xytop

503 karma · joined November 19, 2010

submissionscomments
xytop··on Alleged Mt.Gox code leaked on IRC node by Russian Hacker
Stripe?
xytop··on Online Partime Job PHP/RoR programming
http://www.toptal.com/?ref=10185
xytop··on ProsNear.me - Putting professionals on the map
why does it show Cyprus Map whereas im in Moldova?
xytop··on Custom Reddit CSS (stylebot)
Dont like it:

1. Spacing between posts should be bigger.

2. subheader of post should have a more readable color.

3. Font is bad (For reading it is better to use monotype fonts and 16-22 font sizes)

xytop··on Is this how opensource usually works?
shouldnt they accept it as it is and then reformat code if they are unhappy with this? My opinion is that it is better to have a non-very-styled but working code than cool looking slow code with bugs.
xytop··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
no, but it allows server to decrypt it. Government in case of the need can "ask" them to forward your chat and they will do it, but it was stated in their PR that server is unable to decrypt your messages.
xytop··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
in cryptography nothing is hardcoded (or at least hardcoded values should have enough entropy) :) if client doesnt use caching - then every message user sends should obtain a new pair of p/g (which is expensive) - and it will make telegram not only insecure but also "slow" messenger :P
xytop··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
old copy of their doc which has 'xor nonce' inside: http://webcache.googleusercontent.com/search?q=cache:FAntx8l...
xytop··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
Yes, outside. Although the underground of this contest was to prove security and inability to read messages by 3rd parties contest was about decrypting Durov's chat. Chat is not decrypted and as many say - it's nearly impossible (http://thoughtcrime.org/blog/telegram-crypto-challenge/). But "bookmark" is found and it means that all the PR was shit. Telegram already removed 'xor nonce' from their documentation and added a new layer to their api but who knows where they will put a next bookmark. Probably it will be hidden in a deeper place. But trust is already lost. It appears that either their secure protocol was containing the bookmark specially or that protocol is getting written by non-specialists which cant guarantee any security.
xytop··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
In short: telegram in secure chats (http://core.telegram.org/api/end-to-end) was using modified version of Diffie-Hellman algorithm: key = (pow(g_b, a) mod dh_prime) xor nonce (original: key = pow(g_b, a) mod dh_prime) That custom 'nonce' is derived from server and in theory server can send a specially formed nonce which will lead to known client keys ("bookmark"). It means that server as MITM can read all needed chats by request.. Authors of Telegram agreed that it is a big hole and their algorithm needs modification. User, who found the issue will get a prize (not 200,000$, but good enough).
xytop··on Syntax Off (2012)
It reduces productivity and adds headache. Code is not a textbook. A good programmer has to always look at different pieces of code and would lose himself in the mess of symbols if there is no indents and block highlights..
xytop··on Markdown in HTML
By my opinion markdown sux..

I'd rather write in pure html.

Markdown is irrational, unhandly thing.

The only reason to use it in projects is to make life easier for developer and avoid using wysywyg and html sanitising..

But for me as for end user (wikipedia, googlecode.. other shitty editors..) it is incredible headache..

xytop··on Programmers' salaries at Google $250k (and up)
Looks like Poland/Czech?
xytop··on Programmers' salaries at Google $250k (and up)
I'm web developer, 25 years old, I'm raising 21000 euro/year. What I'm doing wrong? :/
xytop··on Opera 11 - new and improved (Alpha)
http://groups.google.com/group/google-maps-js-api-v3/browse_...

http://www.questionhub.com/StackOverflow/3899985

Aggressive opera caching and different behavior from others browsers is not what I like.

xytop··on Content scraper (based on Readability) in Python
Not tried that script but this should be cool. Would be nice to make some program based on this script to fetch full content of news posted on ycombinator :)
xytop··on Opera 11 - new and improved (Alpha)
Let me disagree here. Although Opera is positioned itself as standard compliant, it has many issues with javascript. Some functions are working incorrectly, some just not working, some events firing, some not. Right click is disabled too.. I'm not against Opera, but we should think about stuffs above. Regarding Google - google making their money from adverts, from people who using google. Do you really think that google could deliberately disable Opera support due to some internal polytics and renounce from money of many opera users? I think there were good reasons such as bad js support, because javascript is widely used by google in their services.
xytop··on Opera 11 - new and improved (Alpha)
Still waiting for news: Opera xx - now we support google services!
← PreviousPage 3 of 3