HN user

gtklocker

567 karma
Posts20
Comments39
View on HN
www.facebook.com 12y ago

Messenger

gtklocker
1pts0
discrete.gr 14y ago

A Gentle Introduction to Algorithm Complexity Analysis

gtklocker
132pts23
fabiensanglard.net 14y ago

Quake 3 source code review by Fabien Sanglard

gtklocker
2pts0
blackmesasource.com 14y ago

Black Mesa (Valve's Half-Life remake) asks for Facebook likes in a geeky fashion

gtklocker
1pts0
stackoverflow.com 14y ago

Plain English explanation of the Big O notation

gtklocker
1pts0
plus.google.com 14y ago

Guess what it will print (non-defensive programming)

gtklocker
1pts0
www.facebook.com 14y ago

3... 2... 1... Go Poland, go.

gtklocker
1pts0
www.keepthewebopen.com 14y ago

You thought SOPA and PIPA were dead? Think again.

gtklocker
1pts0
apple.slashdot.org 14y ago

Leaked Memo Says Apple Provides Backdoor To Governments

gtklocker
10pts1
www.youtube.com 14y ago

Vi Hart and Khan Academy join forces

gtklocker
4pts0
iwantmyname.com 14y ago

The best domain registar I've ever used

gtklocker
2pts0
www.scribd.com 14y ago

John Carmack's .plan file

gtklocker
113pts32
github.com 14y ago

The last PHP wrapper for MySQL you'll ever need

gtklocker
2pts4
www.youtube.com 14y ago

Revolution OS -- the documentary every hacker must watch

gtklocker
6pts0
www.gmanews.tv 14y ago

Windows 8 Beta expected in January

gtklocker
2pts0
news.ycombinator.com 14y ago

Ask HN: Tell me something that's spread around on a couple of (cocky) websites

gtklocker
1pts1
news.ycombinator.com 14y ago

Ask HN: How may I learn HTML5 canvas in less than 3 days?

gtklocker
3pts3
www.xsteer.com 14y ago

Xsteer: Use your smartphone as a controller for HTML5 games

gtklocker
10pts1
streamjs.org 14y ago

Introducing a new data structure, streams, in Javascript

gtklocker
273pts82
news.ycombinator.com 14y ago

This looks more like a good "like" button

gtklocker
1pts0

This is making me really curious because while Chrome is buttery smooth on my Macbook Pro, Firefox 57 is really sluggish, especially when creating/closing tabs. You can literally see the animation stuttering. Other times when a page loads it won't paint for some seconds even if it appears that it has completed loading. Is anyone else having these issues?

Free Your Android 12 years ago

* I'm not talking about F-Droid. I'm talking about CM as a whole and the recovery someone may use.

* There is a way, however it's common practice to leave it unlocked and I'm not sure you mention that in your article.

Free Your Android 12 years ago

The idea of freeing your phone is cute, however, there are some considerable dangers.

* The software that you give access to your phone (be it drivers or the recovery images themselves) isn't signed by anyone. Some of the software isn't even available via HTTPS. I think it's a bad idea to trust some HTTP and unsigned executable more than Google, who are making all they can to ensure the integrity of anything that runs on your phone.

* Unlocking your bootloader is a bad idea. Google erases all your data whenever you unlock your phone[1]. They don't hate you, they've just realized the security issues that come from having an unlocked phone. Take this for example: You're at the airport and ready to leave. However, TSA stops you for a "random" check. They have your phone for about 5 minutes and there's nothing you can do about it. Now, they could ask you for your passcode but then you'd know something's wrong. Now, your bootloader is unlocked, which means they can see your device at firmware level and alter it to their liking it. Nothing can stop them from plating a backdoor in there or just making a copy of all your files and you wouldn't know. That's why Google does [1].

[1] http://wiki.cyanogenmod.org/w/Install_CM_for_maguro#Unlockin...

F.lux updated 12 years ago

Good to see the HTTPS site/download working. Now if only we had GPG signatures for this.

OpenSSL.org hacked? 13 years ago

Point is, I should not be able to access a plaintext version of a website hosting such cryptographically crucial software/information.

It's obvious why it can be a grand target for Man in the Middle, defacement and worst of all integrity attacks. Apart from preventing many of the latter, implementing HSTS could have really mitigated the problem. Anyone who had already visited the site wouldn't see the defaced page. Furthermore, they could get added to an STS preloaded list[1], making the attack invisible to anyone using a modern browser.

If you are interested, the Wikipedia page[2] does a fair job at explaining more about why HSTS is needed.

[1] https://src.chromium.org/viewvc/chrome/trunk/src/net/http/tr...

[2] https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security...

3.4.2-x86_64-linode25 doesn't seem to suffer from this.

    gunther> gcc -O2 semtex.c
    gunther> ./a.out
    a.out: semtex.c:63: main: Assertion `(map = mmap((void*)0x380000000, 0x010000000, 3, 0x32, 0,0)) == (void*)0x380000000' failed.
    Aborted
    gunther> uname -r
    3.4.2-x86_64-linode25

I'd prefer the Air or even the Pro (there's really not much difference in portability terms) and still work remotely. It's liberating to host everything on the cloud. You don't have to worry about your local setup failing, the VMs hogging resources and making your machine unusable (or destroying your battery).

Right now I'm using a Macbook Pro 2012 w/o the Retina. I do all my development on Linode servers, remotely. I get 6 hours of battery life and the machine is a pleasure to work on. I wouldn't go back to my old Windows laptop, where I used PuTTY to work.

Some services, like Facebook, normalize the mail address (turn all letters to lower case). Can you make sure that mails to the normalized email also reach my inbox? (They don't now!)

As long as data is concerned, http://google.com/dashboard will tell you about everything tied with you account.

I'm currently trying to do this as well and the only viable solution sounds self-hosted email. I tried a bit with hushmail and Tor (also look at hushmail's Diceware for password encryption) but it has a tight limit of 25MB for free accounts.

Good luck.