HN user

elasticdog

419 karma

[ my public key: https://keybase.io/elasticdog; my proof: https://keybase.io/elasticdog/sigs/QVn6aDXXKOQKFWUB9yfQwuziJw8GagucKpxV7hlYhgA ]

Posts57
Comments47
View on HN
whatchord.earthmanmuons.com 20d ago

Optimizing an algorithm that's quadratic by design

elasticdog
25pts4
whatchord.earthmanmuons.com 2mo ago

Building a Real-Time Chord Recognizer

elasticdog
2pts0
www.cold-takes.com 2y ago

Learning by Writing

elasticdog
9pts1
iliana.fyi 2y ago

Getting my library cards onto my phone the hard way

elasticdog
4pts4
www.aaron-powell.com 6y ago

Approval Workflows with GitHub Actions

elasticdog
2pts0
www.pulumi.com 6y ago

Pulumi 2.0 Roadmap

elasticdog
2pts0
medium.com 7y ago

What makes code unreadable (2018)

elasticdog
1pts0
www.keithschwarz.com 8y ago

Darts, Dice, and Coins: Sampling from a Discrete Distribution (2011)

elasticdog
67pts5
blog.tjll.net 9y ago

Systemd for (Impatient) Sysadmins

elasticdog
3pts0
kev.inburke.com 9y ago

More Comment-Preserving Configuration Parsers

elasticdog
1pts0
sujitpal.blogspot.com 10y ago

Elasticsearch Based Image Search Using RGB Signatures

elasticdog
126pts19
github.com 10y ago

The Friedlander Secrets Pit (FriSP)

elasticdog
2pts0
ttboj.wordpress.com 10y ago

Automatic grouping in mgmt

elasticdog
2pts0
m50d.github.io 10y ago

Infrastructure as code would be easy if we cared – No Fun Allowed

elasticdog
4pts0
corner.squareup.com 10y ago

Parliament: A Threshold Secret Sharing Service

elasticdog
2pts0
blog.cuviper.com 10y ago

How short can Git abbreviate?

elasticdog
3pts0
medium.com 11y ago

Event Driven Slack Bots – aka Serverless Slack Bots

elasticdog
1pts0
aws.amazon.com 11y ago

New – VPC Endpoint for Amazon S3

elasticdog
9pts0
www.freefour.com 11y ago

Randomness Is Pretty Great

elasticdog
2pts0
jawher.me 11y ago

Parsing command line arguments using a finite state machine and backtracking

elasticdog
43pts10
github.com 11y ago

Simulate Protocol Interactions in Go

elasticdog
3pts0
defuse.ca 11y ago

Triangle of Secure Code Delivery

elasticdog
1pts0
zef.me 11y ago

Declaratively Provision Docker Images Using Nix

elasticdog
6pts0
github.com 11y ago

Lol-bash-web-framework: A web framework written in bash

elasticdog
1pts0
tinyssh.org 12y ago

TinySSH is a small SSH server using NaCl, TweetNaCl

elasticdog
129pts61
github.com 12y ago

Show HN: Transcrypt – transparently encrypt files within a Git repository

elasticdog
8pts0
decentralize.it 12y ago

Grand Decentral Station - The operating system for the open web

elasticdog
1pts1
www.cdt.org 12y ago

What the heck is going on with NIST’s cryptographic standard, SHA-3?

elasticdog
3pts0
www.tobtu.com 12y ago

Why No One Should Use LastPass

elasticdog
3pts3
gocircuit.org 12y ago

The Go Circuit Project: Paradigm for developing and sustaining Big Data apps

elasticdog
2pts0

I also don't love the conventional handwritten aesthetic you often see for jazz fonts. For a project I've been working on, I ended up pulling the handful of chord symbol glyphs out of MuseScore's Leland Text font and adjusting them for use in the UI since I couldn't find a suitable option out there.

For just chord analysis, there's "Harte notation", which is meant to be unambiguous representation of the notes (https://ismir2005.ismir.net/proceedings/1080.pdf). That obviously doesn't get you all of the additional information necessary for engraving and full representation of the music, but there are research datasets available using it like https://github.com/smashub/choco. I've also used the https://github.com/MarkGotham/When-in-Rome dataset for some analysis work, but again that's not 100% what you're looking for.

You might like the "iReal Pro" app for the replacement and transposition of jazz standards on your tablet. It's pretty great for that use case versus camera scans.

I had attempted to create a pass for my local library in the past, but never got a working barcode, and this post helped me to understand the issues I was hitting.

I was able to adapt the OP's shell script to generate a working Codabar image (after I figured out that my local library used "A" and "T" as beginning and end markers) that matched the physical card exactly, and there was enough useful metadata for me to piece together a working pass using that barcode as a store card's background image. I ended up using the Pass2U Wallet iOS app directly, rather than hacking around signing keys, but found the documented process helpful.

Nitrokey 6 years ago

That's essentially what https://krypt.co/ is...I've used Yubikeys in the past, but have been on Krypton for maybe the past year or so. No problems with it at all, aside from GitHub recently (within the past couple of weeks) not recognizing the authorization despite it working just fine elsewhere. I haven't had a chance to dive deeper into why.

Zettelkästen? 7 years ago

Tiddlywiki is what I use to manage my own personal Zettelkasten as well; it's pretty well suited for the task. There's a bit of ugliness when renaming Tiddlers, but for a lot of inter-related topics, I add an automatically-generated list of backlinks like this:

  !!!! Backlinks
  <<list-links "[all[current]listed[]!has[draft.of]!is[system]]">>

So, I've skimmed through most of the paper, and it seems like a bit of an apples to oranges comparison. My understanding is that GV2 is an extension to jGit that essentially performs GC on the repo (or more accurately waits to encrypt until post-GC), and then transparently encrypts everything altogether, rather than utilizing clean/smudge filters to encrypt files individually like the tools it's comparing itself to. It's funny that the author dismissed git-remote-gcrypt as being "under development" even though it's a much closer comparison to GV2.

The paper mentions that it's measuring the worst-case scenario for the clean/smudge filter-style tools as it's much more likely that you only need to protect a few files and not the entire repository, but I didn't see how the second section actually reflected this more-realistic scenario. I'm not saying that encrypting the entire repository is bad, but the overhead of using filters to encrypt the entire repository is a documented/known limitation of the other tools...so it seems a little odd to gloss over that.

Side note, stuff like "This process is repeated a total of 10 iterations for an ample sample size to draw statistical conclusions." worries me, but that's another conversation.

Overall though, glad to see more research in this area, and it sounds like GV2 might be a decent solution for people looking to protect their data in certain scenarios.

If you're interested in decentralized mesh networks, take a look at Project Meshnet [1], Hyperboria [2], and the cjdns [3] routing software. It's a small, but growing community of people working in a similar space as the edgenet idea mentioned in the post. Decentralized routing and end-to-end encryption, plus there are already hundreds of dedicated nodes bootstrapping communication over the existing Internet.

[1] http://projectmeshnet.org/ [2] http://hyperboria.net/ [3] https://github.com/cjdelisle/cjdns

There are a lot of alternatives in this space (I wrote transcrypt [1] for just this purpose), but I think the killer features here are that you don't need shared credentials since you can have multiple keys, and that it's generic enough to work with multiple VCS's.

With transcrypt, I do the encryption/decryption transparently once a repository has been configured by utilizing Git's clean/smudge filters, but it uses OpenSSL out of the box rather than GPG. A different workflow, and there are certainly pros and cons to both ways.

[1] https://github.com/elasticdog/transcrypt

Author here...the important thing isn't the abbreviations, but having a standard that you can agree upon and use consistently. The listed items are just an example scheme that tries to keep the length consistent to make scanning though a list visually a little easier.

cjdns will never be a workable solution for the general public, and I wish people would stop recommending it.

I disagree...I believe in its current state it is not catering to the general public, but it's basically alpha software with a small bootstrapped network. Long-term, the idea is to make things more user friendly and appeal to a wider audience, but it's inaccurate to say it will "never be workable". Recommending it to a highly-technical targeted audience like HN seems entirely appropriate.

* I run 4 cjdns nodes

I did add a quick section under "special cases" on making sure to assign usable A records for mail servers and name servers, but you make a good point about ensuring the reverse matches in those scenarios as well (and to pay attention to your certificates).

Author here...I hadn't heard of the CLLI codes before, but that's a nice reference, thanks! I do tend to prefer the UN/LOCODE values just because you can almost always get away with using just three letters to define a location, and they work well internationally. I do agree that they're not always the most intuitive though, so that's certainly a trade-off.

It annoys me too. If you do a git diff against the sha1 of a completely empty tree, you can see all of the whitespace errors that have been checked into a repository:

    $ git diff --check $(git hash-object -t tree /dev/null)
...although many projects frown upon whitespace-only commits since they screw with `git blame`.

I'm curious to see the community's reaction to these observations about LastPass and also hear what alternatives people use (KeePass and variants, 1Password, pass, pwsafe, etc.).

  "hello world" print
...although, more realistically, you're probably interested in something like the gettings started section of the docs [1]. There are also some great short example posts on the planet feed [2] from various blogs.

EDIT: I'll plug my own blog for this too, as I started writing a Beginning Factor series of posts a long time ago [3], but never got beyond a couple entries.

[1] http://docs.factorcode.org/content/article-handbook.html

[2] http://planet.factorcode.org/

[3] http://elasticdog.com/2008/11/beginning-factor-introduction/

Packets of Death 13 years ago

Before actually testing this with the real payload, is there a better way of determining if you have a potentially vulnerable driver than something like this?

  # awk '/eth/ { print $1 }' <(ifconfig -a) | cut -d':' -f1 | uniq | while read interface; do echo -n "$interface "; ethtool -i $interface | grep driver; done
  eth0 driver: e1000e
  eth1 driver: e1000e

What do you do when you have 200+ machines of a handful of different types (database, mail, web, etc.) that you want to have named? Having some sort of organized categorization would be beneficial, but it seems like naming them after 200+ different colors doesn't make life any easier.

Naming after the purpose of the box also gets messy if you're not strict about renaming when the machine is repurposed. And if you group by "theme groups" as the RFC suggests, you're still stuck renaming a machine if it's no longer one of your 7 dwarfs (database servers, or whatever). Should the name convey meaning at all, or just be a random label?

A developer I know doesn't see the problem with just having the full location (state, data center, rack, rack location), which I'm against, but we haven't been able to agree on a good middle ground approach that scales. Is location data in a name universally bad?