HN user

CapacitorSet

1,489 karma

[ my public key: https://keybase.io/capacitorset; my proof: https://keybase.io/capacitorset/sigs/3XQYiFYsETBVes6mFixMECaVoMYCJBjVFgwf6JikpeY ]

Posts40
Comments267
View on HN
reanahub.io 3y ago

Reana: Reproducible research data analysis platform

CapacitorSet
1pts0
jerrygamblin.com 5y ago

CVE Stuffing

CapacitorSet
290pts102
www.sixxs.net 5y ago

Sunsetting SixXS (2017)

CapacitorSet
1pts0
techworkersberlin.com 5y ago

Rough week for tech organising in Berlin

CapacitorSet
2pts0
apple.stackexchange.com 6y ago

I included emoji in my password and now I can't log in on Yosemite (2015)

CapacitorSet
1pts1
en.wikipedia.org 6y ago

Darpa LifeLog

CapacitorSet
2pts0
blog.mapbox.com 7y ago

Fast Geodesic Approximations with Cheap Ruler

CapacitorSet
2pts0
jwlss.pw 7y ago

Show HN: Fingerprinting TLS Clients with JA3

CapacitorSet
1pts0
screenshots.firefox.com 7y ago

Firefox Screenshots will no longer offer online storage

CapacitorSet
1pts0
jis-eurasipjournals.springeropen.com 8y ago

Honeypots and honeynets: issues of privacy

CapacitorSet
1pts0
freedom-to-tinker.com 8y ago

The Linux Backdoor Attempt of 2003

CapacitorSet
2pts0
twitter.com 8y ago

Linux on Pixel C is now “an usable system”

CapacitorSet
5pts1
github.com 8y ago

JA3 – A method for profiling SSL/TLS clients

CapacitorSet
1pts0
www.schneier.com 8y ago

The NSA is not made of magic (2014)

CapacitorSet
127pts43
www.welivesecurity.com 8y ago

New traces of Hacking Team in the wild

CapacitorSet
2pts0
www.cbc.ca 8y ago

If you're going to blame a cyberattack on North Korea, you better show your work

CapacitorSet
3pts0
www.unicode.org 8y ago

Unicode Security Considerations

CapacitorSet
3pts0
www.youtube.com 8y ago

Windows 95 video guide (1995)

CapacitorSet
1pts0
github.com 8y ago

GNU/Linux on Pixel C

CapacitorSet
3pts0
www.oracle.com 8y ago

GraalVM – New JIT Compiler and Polyglot Runtime for the JVM

CapacitorSet
2pts0
news.ycombinator.com 9y ago

Ask HN: How to give a good tech talk?

CapacitorSet
3pts4
qntm.org 9y ago

Gay marriage: the database engineering perspective

CapacitorSet
1pts0
www.eff.org 9y ago

Printer Tracking Dots Back in the News

CapacitorSet
1pts0
elementary.io 9y ago

Human Interface Guidelines

CapacitorSet
1pts0
github.com 9y ago

Decentraleyes: privacy-oriented emulation of Content Delivery Networks

CapacitorSet
1pts0
modelviewculture.com 9y ago

I Can Text You a Pile of Poo, but I Can’t Write My Name

CapacitorSet
10pts2
capacitorset.github.io 9y ago

How we exploited a code execution vulnerability in math.js

CapacitorSet
151pts29
www.romanblack.com 9y ago

Simple multi-thread systems to make a PIC do parallel tasks (2010)

CapacitorSet
2pts0
wiki.osdev.org 9y ago

OSDev: a wiki for OS developers

CapacitorSet
4pts0
www.bunniestudios.com 9y ago

From Gongkai [Chinese open source] to Western open source

CapacitorSet
2pts0

This reads a lot like a PR piece for Amazon, with most "answers" promoting Amazon nearly like a press release and very little negative points.

A few sentences that stand out:

If you have a ton of data in your data center and you want to move it to AWS but you don't want to send it over the internet, we’ll send an eighteen-wheeler to you filled with hard drives, plug it into your data center with a fiber optic cable, and then drive it across the country to us after loading it up with your data.

Q: I know there have been a number of collective actions among Amazon warehouse workers around the issue of safety during the pandemic. A: (a series of measures implemented at Amazon)

Internally, people say, “Oh, we’re probably better than our competitions, or other warehousing and logistics companies.”

Q: Has Ring brought Amazon into much closer relationships with law enforcement? A: it would really surprise me if any of those relationships were the result of the Ring acquisition [...] I think Amazon also kind of backed into that situation. We only realized after the fact that we had all this data about who was coming to people’s front doors.

I feel like the article went way too much over aspects like TPDNE and the non-existent lawyer, which - while being useful to know - are somewhat poor indicators of fake profiles especially in a tech circle. I personally know a few people who use TPDNE profile pictures and many who use fake names, although none do both (a wise thing in this day and age). The rest was quite lacking.

Am I Unique? 6 years ago

All the fingerprinting tools I've seen so far do not include JA3 signatures, which in my opinion make for an interesting bit of information - they introduce few bits of entropy since they depend on the TLS implementation, but for the same reason they can't be easily spoofed.

Plugging in an article and demo I wrote some time ago: https://jwlss.pw/ja3/

I feel like the title is somewhat appropriate: part of the post was about selectively removing parts of Kubernetes networking, and digging through the kernel networking stack, to troubleshoot the issue

if firefighting is privatized, insurance companies would require more fire-resistant building materials and design (instead of the typical match-box American single-family home or low rise apartment)

This is what happens when firefighting and house maintenance are in the same interest. The libertarian argument argues for a private interest, but it could very well be turned on its head in favor of a public interest.

An error occurred during a connection to www.dailymaverick.co.za. Peer using unsupported version of security protocol. Error code: SSL_ERROR_UNSUPPORTED_VERSION

How can you test so little on Firefox that it doesn't even connect? (FF Nightly, Linux)

Gates access to whom? Trade-offs in favour of what?

Introducing a fixed price gates the poor the most (eg. a wealthy individual can afford to spend a couple hundred pounds on a yearly subscription without much thought), and often incentivises trade-offs in favour of individual transportation (i.e. cars), which is less desirable in terms of pollution and traffic.

It's a matter of cost and disincentives.

Want to pass a law that cuts on workers' rights in a country that typically doesn't protest? Sure, go ahead. Want to do that in France? You'll think twice about it after the clashes of 1st May and of the gilets jaunes.

Arguably, point 2 is the only real concern about releasing the source code - 1 and 3 are optional responsibilities that people take to a varying degree, with "Works On My Machine (tm) - no documentation - here be dragons" being a valid (though in my opinion not very kind) option.

Why can't pi be used as a PRNG, and why does converting each digit to its parity lose a possible PRNG property? Sure it removes a lot of entropy, but it does so by destroying information, not from creating/overwriting memory.

The uniformity argument becomes rather silly when applied to other constructs.

Would you ditch switch-cases in favor of if-else chains (leaving aside fallthrough/Duff's/etc for a moment) because the latter is uniform with existing constructs? Would you ditch "for (int i = 0; ..." in favor of "int i; for (i = 0; ..."?

Think of a filter as an electronic circuit that has a voltage input and a voltage output. In control theory a filter is described by how it reacts to an "impulse", which is essentially a brief peak followed by zero voltage.

Finite Impulse Response means that the output of the filter will eventually go to zero - after a finite duration. Infinite Impulse Response means that the output of the filter may never go to zero.

It can be proved that FIR and IIR filters have different properties; the article mentions that IIR filters are necessarily stateful, for instance.