HNHacker News
TopNewBestAskShowJobs

y0ghur7_xxx

2,612 karma · joined May 15, 2008

submissionscomments
y0ghur7_xxx··on Purism Librem 5 Pre Order
I will buy it and I am sure I'm gonna love it. I will feel good having it in my pocket and knowing nobody gets my data if it's not me giving it to them. I will develop software for it and I hope others will too. I really hope THIS is the future of personal mobile devices, and I want to help make that happen.
y0ghur7_xxx··on Show HN: Encrypt data using a users ssh public key
Make a pull request!
y0ghur7_xxx··on Show HN: Send encrypted secrets from the command line
I made something similar, but the payload gets encrypted with the users ssh rsa key instead of pgp (that not many use):

  ./sshencdec.sh -p <(curl -sf "https://github.com/S2-.keys" | \

  grep ssh-rsa | tail -n1) < plain-text-file.txt
It's just a simple bash script really, but it works, and almost everyone has a github account and an ssh key set up, so it works out of the box with most developers.

https://github.com/S2-/sshencdec

y0ghur7_xxx··on Ask HN: Career advice for the next years?
I think you should do what you like most. There is money to be made in both sectors (pentest and cloud), so imho choose what you think you will enjoy most in the coming years.
y0ghur7_xxx··on How Juul became worth $38B
> https://thorax.bmj.com/content/73/12/1161

Thank you I didn't know about this.

y0ghur7_xxx··on How Juul became worth $38B
> Several flavours are linked to lung damage.

If this is the case, then some flavors are dangerous, not vaping in itself.

y0ghur7_xxx··on How Juul became worth $38B
> I don’t love paying for people picking up smoking / vaping since the dangers were known

Are the dangers of vaping known tho? Is there any study that shows it causes physical damage like inhaling smoke from a burning cigarette? Is seems fairly obvious to me that inhaling vegetable glycerin and nicotine does not cause any harm. The only "problem" is the nicotine addiction, but that one does not cause any physical harm, it just costs money to buy refills.

y0ghur7_xxx··on WireGuard for iOS
I hope pfSense implements this soon: https://redmine.pfsense.org/issues/8786
y0ghur7_xxx··on EU Copyright: Block Everything, Never Make Mistakes, but Don't Use Upload Filter
> If you ask for your data to be deleted does that include your address in my contacts?

If that address is visible to you because I gave you access to my data, then yes.

If that address is visible to you because I gave it to you and you put it there by yourself, then no.

> Does it include your messages to me?

No. Messages I wrote to you are yours. I gave them to you. You can keep them. They get deleted when/if you ask for your account to be deleted.

> Does it include your posts that appeared on my feed?

Yes. My posts are mine. If I make them public or share them with you, you can look at them, copy them, do what you want with them (depending on the license). If I remove my account they get deleted from my account. If you made a copy for yourself, you can keep the copy.

> It's not clear to me how those are handled by the GDPR and at what point things sent digitally from you to me end being my property and no longer your property.

As always, ask a lawyer.

y0ghur7_xxx··on The Bootleg Video Vans of the Soviet Union
You made me remember this kid: https://www.youtube.com/watch?v=pLix4QPL3tY

Seems like exactly what you describe. Must have been fun.

y0ghur7_xxx··on Introducing Navigate on Autopilot
> In both of these scenarios, until truly driverless cars are validated and approved by regulators, drivers are responsible for and must remain in control of their car at all times.

This makes it sound like it's just a problem with evil legislators not making it legal for Tesla drivers to drive without paying attention.

Is this the case?

y0ghur7_xxx··on Study shows massive insect loss
>> Blaming us single individuals is easy, but we a are not directly responsible for this

> Companies are comprised of people. Governments are comprised of people. We absolutely are responsible and we have the power to do something about it. Stop being so passive and dismissive, if you care.

So what do you suggest? Blow those 100 companies up with TNT?

y0ghur7_xxx··on Study shows massive insect loss
> I'm already a vegan and don't drive much

Since 71% of pollution is coming from 100 companies[1] I don't think that you can stop global warming by being vegan or driving less. Blaming us single individuals is easy, but we a are not directly responsible for this. The most we can do is stop buying stuff from these polluting companies.

[1]https://www.theguardian.com/sustainable-business/2017/jul/10...

y0ghur7_xxx··on Nasa crew is returning to Earth in a ballistic descent after issue with booster
https://news.ycombinator.com/item?id=18191966
y0ghur7_xxx··on The death of Google
https://web.archive.org/web/20181009200058/https://lauren.vo...
y0ghur7_xxx··on First-ever DNSSEC root key rollover
> This was supposed to have happened a year ago

The article says that this HAPPENED a year ago:

> Note that this has been included for at least a year now [...]

y0ghur7_xxx··on Ask HN: What things have richly rewarded the time invested in mastering them?
- Learning x86 assembler back in school: knowing what everything comes down to in the end has no price.

- reading "Smashing the stack for fun and profit": I learned so many things from that article, that I felt like a god when I finally understood all the things. And all of those things are still relevant today when debugging stuff.

- learning ruby: when rails came out I jumped on the hype train and started learning ruby. I was mainly a java dev, so learning all the new ways of doing things made me grow a lot.

- javascript: I hated the language, but once I bit the bullet and overcome my hate for it and started learning it, I now love all the things I can do.

- learning git: it was an uphill battle at the beginning, but now I can't live without it.

I am sure there are a lot of other things I am forgetting, but these come to mind now.

y0ghur7_xxx··on Modern Code Review: A Case Study at Google [pdf]
I am sure they are rebased several times before going public
y0ghur7_xxx··on Introducing the Librem Key
What are these keys used for? Is it for 2FA? I would love to use my phone for 2FA, and not have to carry an usb device with me, because

- I often log in to web services on my phone, and I don't have an usb adapter cable with me to use the key, and

- because having to carry a device always with me sounds cumbersome. My phone is always with me anyways.

Is there some other use case I am overlooking? I am eagerly awaiting browser vendors to implement these use cases: https://w3c.github.io/webauthn/#use-cases

y0ghur7_xxx··on Ask HN: What made your favorite manager/supervisor/CEO so great?
> What if your boss is a woman?

Then I would write "she" instead of "he". But Fabio is a man.

y0ghur7_xxx··on Ask HN: What made your favorite manager/supervisor/CEO so great?
I work for someone who I can trust when he says something, he does what he can to get it done. He tells me the goal we need to archive, and asks me how we can do it. Then he does everything he can to make sure I have all my stuff ready to do it. If there is a problem he helps me fix it. If something goes wrong he blames himself. If the project goes right and the customer is happy he tells everyone it's my accomplishment.

We are a team and we trust each other. I feel he knows I am good at what I do and he let's me do it, and I feel he is good at what he does and together we can accomplish great things.

We are friends, and we like each other. We disagree sometimes, but we work it out by making compromises.

y0ghur7_xxx··on Hyperledger – Linux’s open source approach to blockchain building
A blockchain "without a consensus mechanism" is git: every commit has at least one parent. There is no consensus mechanism, as everybody can commit "to the blockchain".
y0ghur7_xxx··on Cookie policy notifications have ruined user experience on the web
There is an adblock filter list for cookie warnings: https://github.com/r4vi/block-the-eu-cookie-shit-list
y0ghur7_xxx··on Chrome 68 Released: HTTP Sites Marked as “Not Secure”
There is a difference between an information and a warning. If I am entering information on an unencrypted connection on the internet I want a warning. And I don't want to get accustomed to that warning, because if it happens I want to be alerted.

If the same thing happens in my local lan I don't want the same warning, because if I get the same warning I will start to ignore it, and not only when I'm in my local lan.

y0ghur7_xxx··on Chrome 68 Released: HTTP Sites Marked as “Not Secure”
> the market share of people with your problem is small

I don't have stats or data, but I don't think the households with devices that have web interfaces like a nas, routers, media centers, and stuff like this are small.

y0ghur7_xxx··on Chrome 68 Released: HTTP Sites Marked as “Not Secure”
> What’s to deal with? It’s still the same as before: not secure.

But there is no meaningful way to make it secure. So marking it not secure creates just noise.

y0ghur7_xxx··on Chrome 68 Released: HTTP Sites Marked as “Not Secure”
> Parent comment was talking about routers and network printers. No CA (except for if you're your own CA) would provision a certificate for "192.168.0.1" or "hp-laserjet".

hp could get a cert for 15327c5ba80d1b8933.hp.com and make it resolve to 192.168.0.5 (your printer).

y0ghur7_xxx··on Chrome 68 Released: HTTP Sites Marked as “Not Secure”
> Your devices can get letsencrypt certs

I don't want all my internal network hosts exposed on a certificate transparency log.

I want my http connections to work without scary warnings in my local home network. Because if you show me scary warnings, and no meaningful way to implement the http connection securely, I will just start to ignore them. And if I ignore them in my lan, I will ignore them on the internet too. And that would be a net security loss.

So either use something else entirely inside a lan, like ToFU like ssh, or allow http connections without tls and without scary warnings. But I think deprecating http in local home lans with no meaningful way to make them secure is not a step in the right direction.

y0ghur7_xxx··on Be Nice and Write Stable Code
> I enforce high-quality release notes like you describe. Representative example: https://github.com/sapcc/swift-http-import/blob/master/CHANG.... (note that this also takes SemVer seriously)

Nitpick: you are not using SemVer.

A normal version number MUST take the form X.Y.Z where X, Y, and Z are non-negative integers, and MUST NOT contain leading zeroes. X is the major version, Y is the minor version, and Z is the patch version. Each element MUST increase numerically. For instance: 1.9.0 -> 1.10.0 -> 1.11.0.[1]

[1]https://semver.org/#spec-item-2

Some of your version numbers lack the patch version.

y0ghur7_xxx··on Why I use the IBM Model M keyboard that is older than me
I don't understand why so many people are in love with the Model M. I used one for nearly 3 years before switching to a Cherry MX blue keyboard.

After using a modern mechanical keyboard, I would never switch back to a Model M. Probably because of time, on the Model M every key has a different feeling. You never know where the activation point of the key is, because it is a little bit different for every key. The same is for the feedback the keys give you when pressing them down: those old springs just don't give you that reliable feeling the Cherry MX Blue keys give you.

← PreviousPage 2 of 17Next →