HN user

maerek

305 karma

Cybersecurity. Maryland, USA.

Posts25
Comments57
View on HN
store.steampowered.com 2y ago

Steam Families

maerek
2pts1
en.wikipedia.org 3y ago

Muzak

maerek
1pts0
pcem-emulator.co.uk 3y ago

Older PC Emulator

maerek
1pts0
medium.com 3y ago

A Theoretically Devastating Cyber Attack on America’s Gas Stations

maerek
20pts2
arrl.org 4y ago

National Association for Amateur Radio: Amateur TV Handbook [pdf]

maerek
12pts0
www.thedrive.com 5y ago

New Details Emerge on the “Highly Modified Drone” That Outran Police Helicopters

maerek
127pts125
twitter.com 6y ago

CVE-2020-0796 – a “wormable” SMBv3 vulnerability

maerek
5pts0
weis2019.econinfosec.org 7y ago

Improving Vulnerability Remediation Through Better Exploit Prediction [pdf]

maerek
1pts0
www.bleepingcomputer.com 7y ago

New Zero-Day Exploit for Bug in Windows 10 Task Scheduler

maerek
3pts0
cyber.dhs.gov 7y ago

Vulnerability Remediation Requirements for Internet-Accessible Systems

maerek
2pts0
www.washingtonpost.com 10y ago

Maryland court is the first to require a warrant for covert cellphone tracking

maerek
5pts0
www.bloomberg.com 11y ago

Comcast Plans to Drop Time Warner Cable Deal

maerek
2pts0
blogs.cisco.com 12y ago

Spam hits three year high-water mark

maerek
2pts0
arstechnica.com 12y ago

Stanford proposes new password policy

maerek
2pts0
news.ycombinator.com 12y ago

Ask HN: How can I run an effective code review?

maerek
4pts2
techcrunch.com 13y ago

FreedomPop Will Take On Carriers By Offering Smartphones And Freemium Phone Plan

maerek
27pts18
www.dvice.com 13y ago

Mars Rover Draws Graffiti

maerek
2pts0
ntia.doc.gov 14y ago

RFP for IANA Functions Contract (Internet DNS Management)

maerek
1pts1
arstechnica.com 14y ago

Apple announces iBooks 2, iBooks Author to "reinvent textbooks"

maerek
2pts0
www.howtogomo.com 14y ago

Google Releases GoMo

maerek
1pts0
globalpublicsquare.blogs.cnn.com 14y ago

ICANN's Founding Chairman Speaks Out on TLD Expansion

maerek
2pts1
www.washingtonpost.com 14y ago

ICANN Chairman to join For-Profit gTLD Reseller

maerek
1pts0
research.microsoft.com 14y ago

Nonlinear Revision Control for Images

maerek
2pts0
www.proactiveinvestors.co.uk 15y ago

Chairman of ICANN leaves, hired by Top Level Domain selling company

maerek
1pts0
mobile.reuters.com 15y ago

Special Report: Gov't in Cyberfight but can't keep up

maerek
2pts0

Adding on, the AirPlay 2 implementation by Shairport-sync works very well. I have approximately 6 different Rpis/thin clients around the house I use as AirPlay 2 receivers and can vouch for how well the system works. NQPTP is built by the same team.

Or Dell thin clients. Despite some oddities with the Cherry Trail (?) boards used on the Wyse 3040 series, they are x86 and have similar processing power to the Rpi4. They come with a quad core processor, 2GB of RAM and (usually) 8GB of storage, which I assume is EMMC. Multiple USB ports, gigabit Ethernet, dual DisplayPort out.

You can usually find them for around $35-40.

As a related tangent, Vogel (and Spiderweb Software) were responsible for many enjoyable hours in my youth playing through Exile III and Blades of Exile. I appreciate the world building and storytelling that he's done throughout the years, even if the newer game interfaces and graphics feel clunkier.

Apparently (from my colleagues) even the CIS Level 1 benchmark for Windows Server doesn’t actually recommend disabling the print spooler service by default, but that seems to be the common sense approach going forward. If you don’t need a software component, either uninstall it or disable it.

A couple uses, but the primary purpose is as a VM host and file server. Hyper-V for the VMs, and Storage Spaces with ReFS for the storage.

My current build uses a core i5-4570s, but I'd love to have more cores & threads for running additional VMs. My use cases don't require _real_ server hardware (IPMI is overkill), just the ability to run a good amount of test and lab environments.

This is fantastic. I'm most interested in the eventual arrival of Zen 2-based APUs for upgrading my tiny home server. Getting a (hopefully) 8 core, 16 thread part with integrated graphics at the end of 2020 would be a fantastic value if prices stay similar to the current announcement (sub $200). Seeing AMD continue to make incredible progress on their chips makes me very excited!

Not sure what I'm missing here, but I see Signal using 37.5MB of memory. That doesn't seem egregious, but I'm also not familiar with what other Electron apps use.

That's not progressive enhancement, it's lazy loading.

Progressive enhancement would be making all of the content visible and accessible, then adding functionality on top after the base page load is complete. If JS is required to simply view the text on a page, you're doing it wrong.

I picked one up on eBay [0] that is currently in transit to my apartment. Manual focus, somewhat garish looking and with probably crummy resolution, but I'm willing to try it for $4.

There are a large number of similar cameras on the market that ship from China/Hong Kong on eBay. YMMV, but if you've got a few bucks and are willing to wait, it may be worthwhile (depending on your use).

[0] http://www.ebay.com/itm/USB-50M-6-LED-Night-Vision-Webcam-Ca...

From an update to the article:

[Update: On the conference call, Costolo said he initiated internal conversations about leaving at the end of last year, and that following discussions in Feburary and his decision to step down, Twitter decided to begin the CEO search. Costolo said he chose to leave now because he thought staying on through the CEO search would cause scrutiny to intensify. During the Q&A, Twitter execs said that since Costolo voluntarily stepped down, there will be no severance package.]

The line about 'no severance package' seems highly unusual and would lead me to assume that this was a forceful 'push' to step down.

Having used three generations of ThinkPads at work over the past five years (T60, T410, T440), I've been pleasantly surprised (with the notable exception of the trackpad on the T440 - dear god, what a terrible experience) with the build quality and reliability of each of them.

I recently snagged a used T420 on eBay for ~ $180. After selling the memory and screen that came with it and adding _more_ memory, a higher resolution screen and a SSD I had lying around, I've now got a fairly beefy box that runs Hyper-V like a champ and can chew through video encodes for ~$250. Oh, did I mention it runs for 5 hours on the 6-cell battery it came with?

Certainly doesn't hurt that you can't go more than 100 yards in my town (near Washington, DC) without running in to a closet stuffed full of them.

For a reliable workhorse, hard to go wrong with a used T410-430.

Can you share any more details on how the image diffing is done? BBC has a github repo called Wraith that uses ImageMagick and PhantomJS to accomplish a similar task (without the awesomeness of on-demand testing environments). Always curious to learn more about how people are solving the GUI testing problem on the web.

This is awesome. I'm still waiting for some of the larger CDNs to provide this as an option, but realistically don't expect it to happen until the working group gets closer to having a ratified and finalized spec.

Paul - any tips for avoiding stylesheet bloat? A project I'm currently working on has a rapidly expanding style sheet, and I'd like to invest in some ways to cut down on the cruft.

Very interesting article. I never really understood the nuances of the different WebKit ports (and once naively assumed that WebKit === WebKit). I also didn't have an appreciation for the amount of work going in behind the scenes. The link referenced in the article (http://trac.webkit.org/browser/trunk/LayoutTests) is a fascinating line of sight into the testing that goes on for the core.

Better question here - who are you to judge this? A prospective employee is by no means forced to accept employment with a start-up where they're receiving a smaller share of equity than the founders. There is no grounds for any sort of argument of what is "fair" when you are on the receiving end of a job offer. If it's not fair, don't sign on. If you don't like the terms of the deal, renegotiate or find another one. The founders / current employees can offer whatever they would like - you have the ability to decide whether or not you want to accept those terms.

I do agree that typesetting in CSS is a bit lacking. We haven't really had any significant changes in this area since CSS 1.0 came out (with word-spacing and text-spacing). @font-face is great, but it's more about specifying the font to use instead of specifying the type layout.

It's also nice to see some constructive issues already being raised on the project. Whether or not the current implementation is perfect, it'd be really neat to have this type of functionality implemented in a CSS spec.

I started to telecommute three days each week (office is ~ 2hrs from where I live) right after Thanksgiving in 2012 and am still adjusting to the lifestyle.

The biggest takeaway - so far - is that successful telecommuting is determined just as much by the given task as the person. I serve as a mixture of business analyst/developer/test coordinator/project lead/cat herder for my project team. Some tasks are easy to coordinate via e-mail/IM, screen sharing and conference calls (like scheduling, status updates, walkthroughs of protoypes). Being able to power through functional and technical specifications is a tremendous bonus of working from home. When it comes to gathering requirements, acquiring feedback and dealing with politics, however, it's really much better (for me) to be in the office.

That's not the correct way to analyze P/E. Looking at that number in a vacuum is nigh on meaningless. P/E is best analyzed as a relative measure within a given market (in this case, online retailers w/ no brick and mortar presence).

That said, there are exceptions to every rule. I'm not aware of any other companies that currently exhibit such a high P/E.

What is BB's real business value proposition?

I'm got sincere concern for the well-being of Blackberry. I doubt that having a physical keyboard is enough of a game changer to have people switch back to a BB from an Android/iPhone device. They've stagnated for several years while their competitors have moved ahead, in terms of both OS polish and device functionality. A lackluster interview performance where not a single tangible improvement was given seems more indicative of the company as a whole than just an inept executive.

Any speak about "business friendliness" and "security" is complete hogwash. Apple's and Androids MDM solutions may not be perfect, but app-level encryption is readily available on both. Data secured at rest + data secured in transit.