HN user

aborsy

3,169 karma
Posts23
Comments1,724
View on HN
www.bleepingcomputer.com 9mo ago

Synology hurries out patches for zero-days exploited at Pwn2Own

aborsy
7pts2
old.reddit.com 1y ago

Someone just randomly joined my Tailnet

aborsy
36pts4
nvd.nist.gov 1y ago

Traefik CVE 9.8, CVE-2024-45410, 09/19/2024

aborsy
2pts1
news.ycombinator.com 1y ago

Ask HN: How to securely expose an internal webserver to the internet

aborsy
3pts4
www.bloomberg.com 2y ago

Apple to Debut Passwords App in Challenge to 1Password, LastPass

aborsy
4pts4
www.microsoft.com 2y ago

Microsoft Entra Private Access Preview

aborsy
2pts1
signalupdateinfo.com 2y ago

Cloud Backups in Signal

aborsy
3pts2
news.ycombinator.com 2y ago

Ask HN: Has software development peaked already?

aborsy
4pts1
www.thecipherbrief.com 2y ago

China Focuses Espionage on U.S. Colleges and Universities

aborsy
28pts9
blog.elcomsoft.com 2y ago

Volume Encryption in Synology DSM 7.2: LUKS with Questionable Key Management

aborsy
17pts6
madaidans-insecurities.github.io 3y ago

Linux Hardening Guide, 2022

aborsy
21pts0
www.wired.com 3y ago

A Shady Chinese Firm’s Encryption Chips Got Inside the US Navy, NATO, and NASA

aborsy
5pts1
ambiso.github.io 3y ago

Bitwarden PINs can be brute-forced

aborsy
441pts276
news.ycombinator.com 3y ago

Ask HN: Resources on the management of small teams, and people

aborsy
1pts1
news.ycombinator.com 3y ago

Ask HN: Resources on the management

aborsy
4pts3
aws.amazon.com 3y ago

Amazon S3 Encrypts New Objects by Default

aborsy
10pts0
blog.chromium.org 3y ago

Introducing passkeys in Chrome

aborsy
120pts206
techcrunch.com 3y ago

Dropbox acquires Boxcryptor assets to bring zero-knowledge encryption to storage

aborsy
108pts73
news.ycombinator.com 3y ago

Ask HN: How do you access your servers and applications remotely?

aborsy
2pts9
news.ycombinator.com 3y ago

Ask HN: ZFS native encryption vs LUKS

aborsy
66pts61
www.schneier.com 4y ago

Storing Encrypted Photos in Google’s Cloud

aborsy
3pts0
www.bleepingcomputer.com 5y ago

Massive Qlocker ransomware attack uses 7zip to encrypt QNAP devices

aborsy
3pts2
news.ycombinator.com 5y ago

The Future of Data Science

aborsy
8pts10

A new breed of academics has appeared whose jobs is to put their names in every paper possible. Literally, their job is to work on frameworks to buy co-authorship.

They do this in various ways, like establishing paper pipelines, collecting rents on labs and committees, focusing on money layer, using their profiles and citation count to help with acceptance of papers of other people , etc. You talk to them and they can’t explain their papers beyond a superficial introduction.

They collect huge citations, travel and give talk on the winner horses, collect credit, which feeds back into this fraudulent scheme. A scientist used to be a scientist not long ago, not a credit collector.

I wonder if Google could invent a new metric to expose them (weak ratio of first authorship, etc).

Docker sandboxes do that. They take quite bit of resources though, almost same as a standard VM.

I need to mount directories or remove after creation easily, like I do with containers.

Gateway would be good too.

Firewall needs more functionality.

Yeah, for non-X86 devices, getting to U-boot with pressing a combination of PINs in particular order and conditions and releasing at right time is a pain.

I think I wasted $100,000 in salary for $100 more in device cost, in setting up an OpenWRT router.

Apart from installation and upgrades, the OS itself is nice, very flexible and capable.

How about OPNSense on open hardware of your choice, and passing messy wireless to separate AP?

OpenWRT is very good, but the installation and upgrades are not easy. There is a zoo of images for different hardware, installation options and tools. It has to run on small devices, so there are limitations. The documentation on Wiki is scattered and could be improved.

I had to search forums for weeks for a custom package installation for my router. Right now I have been trying to upgrade to the latest version via LUCI for a while, and it stucks. Probably have to wait for few weeks, go through CLI and maybe search forums again.

I just thought I am paying a hefty time price for a bit more expensive x86 mini pc and AP.

Companies such SpaceX are not built primarily by CEOs, rather by thousands of engineers, staff members, and state and private funders. Many of them are top graduates of best universities in the world. CEOs play important role too, of course, but they work as hard as engineers.

It’s a scam: people like Musk take credit for the work of thousands of people and even states. It’s ridiculous that a few people capture the value commonly generated.

We can go back to decades of public funding of research and development through taxes at universities and other public institutions, that’s a separate post.

For many conditions such as this one, we need a process to free these people pain free medically. Having seen a stroke patient, these patients need a team of people, just so that they move eyes or a finger. They are in some kind of minimally conscious or vegetative state. Enormous costs to those around them, bigger issue is they suffer greatly before they finally go which could have been a while ago. Doesn’t worth it.

If you apply for immigration status and are rejected, sure you can apply for immigration again if you gain much better qualifications. I haven’t seen many successful examples though.

People are deemed to have immigration intent for small things like they don’t have enough ties to their country of residence. An application for immigration is definite proof you had intent to immigrate. You can wait like ten years, but time doesn’t work in your favor (immigration gets harder every year, people get older and handcuffed elsewhere…).

One issue (apparently a feature) that may arise is that, if application is rejected in consular proceeding, the applicant is locked out from usa. AFAIK, if someone applies for an immigration visa in usa, they will not be able to obtain non-immigration visas in the future. A refused green card application might be the end of being ever in usa. The person may have to truely exit USA since there may be no way back (close bank account, sell property and assets, etc).

If the person adjusts status in usa, there are more possibilities for appeal etc.

It’s interesting that a French company can compete at international level to some extent, given the regulations, labor laws and generally the business unfriendly environment. I suspect they capitalize on the preference of European governments to use EU products, but might be wrong.

Inkscape 1.4.4 3 months ago

Is there a reason to consider Inkscape instead of Tikz?

It seems to me Tikz does the same but programmatically.

I don’t know why the author likes AES 128 so badly. AES 256 adds little additional cost, and protects against store now decrypt later attacks (and situations like: “my opinion suddenly changed in few months”). The industry standard and general recommendation for quantum resistant symmetric encryption is using 256 bit keys, so just follow that. Every time he comes up with all sorts of arguments that AES 128 is good.

Age should be using 256 bit file keys, and default to PC keys in asymmetric mode.

What is the best way to sandbox LLMs and packages in general, while being able to work on data from outside sandbox (get data in and out easily)?

There is also the need for data sanitation, because the attacker could distribute compromised files through user’s data which will later be run and compromise the host.