HN user

mkup

877 karma
Posts22
Comments316
View on HN
www.schneier.com 10mo ago

Malicious-Looking URL Creation Service

mkup
1pts0
boingboing.net 5y ago

Building computer logic in the oddly addicting “NAND Game”

mkup
2pts0
boingboing.net 6y ago

CDC may ground flights if airlines fail to collect data on Covid-19-prone flyers

mkup
1pts0
www.zdnet.com 6y ago

Chrome 80 update cripples top cybercrime marketplace

mkup
2pts0
twitter.com 6y ago

Microsoft Is Testing Ads in WordPad for Windows 10

mkup
1pts1
news.ycombinator.com 8y ago

Ask HN: Alternatives for low-tier Hetzner VPS

mkup
3pts4
www.wired.com 8y ago

Amazon Key Flaw Could Let Rogue Deliverymen Disable Your Camera

mkup
1pts0
blog.cugu.eu 9y ago

APFS filesystem format

mkup
330pts141
www.popularmechanics.com 9y ago

New Ukrainian Rocket Launcher Appears to Use Raspberry Pi

mkup
6pts0
github.com 12y ago

Show HN: DConvStr: A better way to convert between double and string

mkup
2pts0
news.ycombinator.com 12y ago

Ask HN: Are there any golang libraries for parsing XML like goquery?

mkup
1pts0
www.raspberrypi.org 12y ago

Lance Howarth has joined Raspberry Pi as Foundation CEO

mkup
10pts4
www.raspberrypi.org 13y ago

Rasperry Pi: Bringing computing to rural Cameroon

mkup
2pts0
freebsdfoundation.blogspot.com 13y ago

FreeBSD Foundation Fundraising News: Over 650 New Donations In Three Days

mkup
3pts0
www.raspberrypi.org 13y ago

Raspberry Pi: First samples of the Model A are off the line

mkup
2pts0
gurucoding.com 13y ago

Building software for Raspberry Pi in Windows: Cross-Compiler Howto

mkup
6pts0
news.ycombinator.com 14y ago

Ask HN: Which tools are you using to edit graphics for web?

mkup
5pts11
www.itworld.com 14y ago

GPL, copyleft use declining faster than ever

mkup
61pts108
www.google.com 14y ago

Google considers itself as an intermediary of malware distribution

mkup
1pts0
github.com 14y ago

Golang binding for LevelDB

mkup
1pts0
news.ycombinator.com 14y ago

Ask HN: A service to send highly-voted HN submissions to email

mkup
1pts1
brunogirin.blogspot.com 14y ago

D-Bus Experiments in Vala

mkup
2pts0

Pure hosts file solution won't cut it for several reasons:

1) certain domains (the most offensive privacy infringers) are whitelisted by Microsoft's DNSAPI.DLL to always bypass hosts file lookup (DNSAPI.DLL is a place where hosts file parser lives on Windows, so this parser just ignores hosts file records which don't align well with data vaccuming purpose of modern Windows versions)

2) hosts file can't blacklist domain hierarchies (domain + all subdomains), it can blacklist only apex domains

3) some domains to block are not quite domains, rather domain names regexps (set of domain names to block is not finite)

So, I would say it's rather list of regexps to block than list of domains to block (in our product it's compiled to highly efficient finite state machine in C, plus a user-friendly list of categories to choose blocking preferences from); but in principle you are right: all of it currently boils down to DNS packet interception.

Shameless plug: My products (FlashBoot and Emergency Boot Kit) can filter all types of potentially unwanted traffic from your Windows PC to Microsoft cloud: namely, Telemetry, Windows Updates, OneDrive, builtin advertisements, tracking of your location and many more — making Windows 10/11 completely quiet online — something competitor’s tools (e.g. various GitHub scripts) can’t achieve. https://www.prime-expert.com/

Shameless plug: I've developed and maintain a couple of tools to control Windows 10/11 updates, telemetry and other potentially unwanted network traffic: FlashBoot and Emergency Boot Kit. Using these tools you can make Windows 10/11 completely silent online if you want to (akin to Windows 7 or Windows XP).

https://www.prime-expert.com/flashboot/

https://www.prime-expert.com/embootkit/

You are welcome. One-time purchase, lifetime updates. Not a subscription.

Microsoft has dropped 16-bit application support via builtin emulator (NTVDM) from 64-bit builds of Windows, whether it happens to be Windows 10 or earlier version of Windows, depends on user (in my case, it was Windows Vista). However, you can still run 16-bit apps on 64-bit builds of Windows via third party emulators, such as DOSBox and NTVDMx64.

Could you please provide more info on this topic, e.g. a link? I intended to buy EV code signing certificate as a sole proprietor to fix long-standing problem with my software when Windows Defender pops up every time I release a new version. Is EV code signing certificate no longer a viable solution to this problem? Is there no longer a difference between EV and non-EV code signing certificate?

This remind me of when everybody and his dog was shoehorning blockchain into everything. Blockchain-based pet platforms, pet owners earning tokens for participating in community, pet care services fueled by smart contracts, and the like.

My idea of getting one step ahead of similar backdoors is to wrap sshd traffic into a spiped tunnel. Spiped is compiled from source and linked statically (last stable version from 2021).

Did Mozilla really came from Godzilla? I've always thought it was short form of 'Mosaic killa' (Mosaic killer). Original code of NSCA Mosaic was licensed by Microsoft Corp from Spyglass, Inc. (and so become a part of first version of Internet Explorer); while team which had written this code (Marc Andreessen et al) got venture funding from James Clark et al in 1994 to form Netscape Communications Corp and basically rewrite the browser from scratch. I.e. initial goal of that team was to kill NSCA Mosaic, their previous creation, hence the name.

Does GDI/non-GDI distinction really matter if the only job for GDI is to blit already rendered framebuffer after Skia library (up-to-date part of browser) to the hardware? I.e. when GDI is actually not exposed to the fonts and vector graphics downloaded from the web, just pixels? To me it seems highly unlikely that GDI can be exploited via colors of pixels.

So today we have Google accounts suspended by corporate bots (on the grounds mostly based on output of /dev/urandom), and I wonder (looking at the sales pitch of these ideas in 1997): are we NUI yet? And if yes, can we have our GUI back please?

Frankly, idea of mainframe is much older, and never really appealed to me. I prefer a kind PCs where P is for 'personal'.

An interesting compilation of buzzwords of that time. Ultimately, almost none of them stuck to the walls. I wonder if today's AI hype will look the same in 27 years?

Stop claiming that I'm spreading FUD and show me at least one Linux app which was compiled to the binary code in 1996 and exactly that binary code still runs under modern Linux desktop environment and has similar visual style to the rest of builtin apps.

Got no counterexamples? Then it's not FUD at all, rather a pure truth.

I've switched away from FastSpring in 2021, when they outsourced their payouts to Hyperwallet (for me this change meant double currency exchange USD -> EUR -> USD with associated double exchange fees). It looks like FastSpring rolled further downhill since then. This reminds me of Plimus/Bluesnap collapse: when this kind of company runs of cash, its tends to establish various funny fees before finally flipping up.

Yes, it would allow to create pipes between 16-bit NTVDM processes and native 64-bit processes.

Much of the Windows compatibility is "just" stable API for Windows controls, GUI event handling loops, 3D graphics and sound (DirectX). Linux has stable API for files and sockets (POSIX), but that's all.

There's one thing I can't understand in this story: if that's lawful interception, why Hetzner and Linode bothered to set up MitM interception with different LE certificate and key, rather than extract the TLS private key directly from the RAM and/or storage device of the VPS? Even if this is a physically dedicated server, they can extract the private key from the RAM by dumping the RAM contents after unscheduled reboot. Extraction of the private key isn't visible in CT logs, much more stealthier, practically undetectable.

The difference between modern days and days of DOS isn't in C/C++ compiler, it's in virtual memory and address space isolation and privilege isolation. So it's not a job of a C/C++ compiler to enforce protection from writing to "special" addresses, because interrupt table updates (and memory-mapped hardware I/O in general) still must happen somewhere (i.e. in kernel, hypervisor, drivers etc) and that code is still written in C/C++, same as in the DOS era.

Merging bcachefs 3 years ago

Actually any RAID is beta in btrfs, but configurations with one storage device (e.g. firmware of Turris Omnia) do quite well on prod.

I still use Windows 7 + Firefox + third-party personal firewall (to control network activity on per-process level). Despite FUD from Microsoft trolls, I have not had any malware in the last 10 years.

If the last two versions of their OS are crap, then it makes sense to consider previous versions IMO.