HNHacker News
TopNewBestAskShowJobs

yatsyk

503 karma · joined February 18, 2010

http://andrey.yatsyk.com

yatsyk@gmail.com

submissionscomments
yatsyk··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
I've not found any attempts to help them apart from this bug report.

>TextSecure's interest is in security, whereas Telegram's interest seems to be in money and power

I can't read minds or even their messenger logs so I can't comment what is their interest but I'd be interested to know why you think so

> TextSecure completely safe app

Just wrong. How could you call something "completely safe" or bug free?

>Each of these messengers is safe to passive listening >This is mistaken because Telegram has been proven vulnerable to MITM attacks

How Telegram is prone to passive listening?

yatsyk··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
Snapchat creators claim (at least imply) that messages could not be saved which is untrue.

Most advices to telegram developers at previous HN discussion were to stop doing crypto and do something else. I would not consider them as “gentle advices”. The only help from the community to their application is the bug report x7mz user from habrahabr site.

yatsyk··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
I’m not security expert, but I believe that:

- military-grade encryption – true

- world's most secure protocol – I’d consider this statement as false, I don’t know what they mean by most secure and what protocols were considered. May be messengers available at app store, better to ask them

Why do you think that they “rejected any attempt from the crypto community to help them”, especially after bug bounty proposition?

Why do you think that they lie more then TextSecure advocates? Each of these messengers is safe to passive listening. But unsecure to similar degree if user downloads them from app store and runs on hardware and software that could be easily patched. Current implementation of telegram api is prone to MiM attack but I would not consider TextSecure completely safe app and that every other app should be thrown out.

yatsyk··on Telegram protocol defeated. Authors are going to modify crypto-algorithm
Hate tone discussion makes me sad.

Telegram is very young project and it has bugs for sure. Some guy found potential issue in protocol and developers committed to fix it soon. There is no information that any messages were revealed due to this bug but Telegram should go away and developers should do something else.

Whatsapp is less secure then Telegram but I have not seed “Whatsapp RIP” messages. Not so hard to save videos in snapchat but no one propose to close the application. About a year ago YAML vulnerability was found but no one proposed dhh to stop development and focus on race driver career.

I think that we need more competition for TextSecure.

Terms of bug bounty are very hard to satisfy even with bad protocol but Durov seems decided to play safe with such amount of money. Guy that found problem in MTproto doesn’t win money according to conditions of the bug bounty because message is not decrypted.

Disclaimer: I don’t have any affiliation with telegram besides living in the same city as telegram developers.

yatsyk··on DDoS Attack on DigitalOcean.com
Adblock works for desktop browser. But I watch youtube on mobile or android media player in app mostly.
yatsyk··on I'm learning to code by building 180 websites in 180 days. Today is day 115
Some domains are free. Why limit yourself to second-level domains?
yatsyk··on ASUS Launches Monitor with 3840 x 2160 IGZO Display
Similar Sharp costs $5500 [1]

[1] http://www.computerworld.com/s/article/9234078/Sharp_to_laun...

yatsyk··on Parallella, a $99 Linux Supercomputer
How many megahashes this hardware computes?
yatsyk··on Serve Your Music Collection Using HTML5, Backbone, and Flask
Have you considered to implement subsonic api to support native apps for iphone and android? I run subsonic server on my home server and it's quite resource hungry.
yatsyk··on Latency Numbers Every Programmer Should Know
Very useful!

What is the license of the code? I'd like play with visualization some day. Some of the bars is not very comprehensible due to height.

yatsyk··on Startup idea list
Service that stores all your measurements for prefect clothing sizes matching. If you decide to purchase something you allow clothing store to access your profile on that service, same way as you allow some site to access your facebook details. Your order will be sent to tailor in China after payment. More advanced idea would be to use 3d model of customer. After that it's possible to show me clothing ads with me as model while I browse ecommerce site.
yatsyk··on Startup idea list
Hardware product idea: ~7 inch screen with keyboard for administration of headless servers. It's very annoying to use large monitor and full keyboard when all you need is change line in BIOS or press few buttons when OS stopped to boot.
yatsyk··on Introducing Prose: A Content Editor for GitHub
It doesn't work with files from HNResources.com for some reason. Are textile files supported?
yatsyk··on Ask HN: What did you build in March?
Created one page site for browsing and filtering GitHub watches http://gh.hnresources.com/
yatsyk··on How I survived a plane crash
It would be interesting to have seat numbers of survivors.
yatsyk··on List of cognitive biases
I've created document with pages from this list [1] It could be little outdated.

[1] https://www.dropbox.com/sh/75vmgs6qspjf9q3/Uaw-jNBU9l/List%2...

yatsyk··on Show HN: GitHub Watches for User
Thank you!
yatsyk··on JQAPI - Alternative jQuery Documentation
I like http://jqapi.ru because I can search everything with Ctrl/Command-F on one page.
yatsyk··on Microsoft, Apple, and Google: where does the money come from?
Apple got most of the revenue from iPhone and iPad products that appeared just few years ago. iOS devices drives sales of other Apple products such as macbooks for sure so we could speculate how small revenue would be without these devices.
yatsyk··on Bootstrap 2.0, From Twitter
Bootstrap looks better then 95% of sites in internets. Actually I hope that more and more sites will use bootstrap. I've tired of different look and feel. There are zillions of autocompletes and everyone behaves differently (different animations, keyboard shortcuts and so on). Even buttons works differently on different sites.

If you look at iPhone or Mac or Windows application they looks the same as other application on particular platform and no one annoyed. Each application use same keyboard shortcuts and controls and frequently share same colors. There is even UI recommendations for most of the platforms. You could use owner-drawn controls for sure but it usually they are used only if default controls are unsuitable for some task or in games.

yatsyk··on Show HN: SocialFolders, "Dropbox for social"
How can you compare it to Locker [1] ?

[1] https://github.com/LockerProject/Locker

yatsyk··on Victorinox squeezes 1TB of high-speed storage into a Swiss Army Knife
or they licensed technology from this hd manufacturer: http://www.cracktwo.com/2011/04/chinese-fake-hard-drive.html :-)
yatsyk··on Show HN: My iPad Hacker News Client, Hacker News Paper
added to http://hnresources.com/apps/#iphone
yatsyk··on 497.1-day uptime bug
I'm not sure about details but as far as I remember Windows CE uses a brilliant approach to fix this bug. System tick count is set to value equal three minutes before overflow. And system counter overflows three minutes after OS starting. 3 minutes usually enough to load all applications that could be buggy but this time is less then usual debug session.

edit: found details:

http://msdn.microsoft.com/en-us/library/ms885645.aspx

For Debug configurations, 180 seconds is subtracted to check for overflow conditions in code that relies on GetTickCount. If this code started within 3 minutes of the device booting, it will experience an overflow condition if it runs for a certain amount of time.

yatsyk··on BicaVM: A JVM in JavaScript
applets 2.0 :)
yatsyk··on HTML5 (plugin free) web-based terminal emulator and SSH client
I've thought about similar ssh client for Kindle Keyboard 3G web browser. With 3G you are getting free over the world coverage with no issues with battery. Slow e-ink screens are not a problem for terminal. So you are able to fix problem on your server almost any place in the world.
yatsyk··on Show HN: My table of tools for startups [Google Docs]
Impressive list. I agree that spreadsheet with open editing will be spammed very quickly (especially this type of spreadsheet with different tools). I've hoped to solve this issue in http://hnresources.com/ with github. If someone want to share resource he creates a pull request but this approach seems too nerdy even for hn audience :)
yatsyk··on Amazon reveals $79 Kindle
Kindle uses 600x800 screen. eInk HD which is used on new Sony and iRiver readers would be better for pdf reading.
yatsyk··on Setting Up A New Machine for Ruby Development - as used at 37signals these days
Thank you for clarification!
yatsyk··on Setting Up A New Machine for Ruby Development - as used at 37signals these days
And what about system configuration? Your chef cookbooks repo is not updated for a long time. Do you still use chef, switched to puppet or use something else?
← PreviousPage 3 of 8Next →