HN user

thirsteh

3,544 karma

I spend a lot of my day hours XORing things together, and I'm particularly interested in PL research/high-assurance software development (Haskell, Agda, Coq, etc., but also how to make software in any language more secure and reliable.)

I'm always happy to continue a discussion in private through email: my username at google's mail.

Posts23
Comments789
View on HN
www.blackhat.com 13y ago

General Keith Alexander, Director of the NSA, to keynote Black Hat USA 2013

thirsteh
2pts0
www.infoq.com 13y ago

Barbara Liskov (MIT CSAIL) - The Power of Abstraction

thirsteh
3pts0
www.nsa.gov 13y ago

Formerly Top Secret NSA Cryptologs From 1974-1997

thirsteh
153pts63
www.youtube.com 13y ago

MINIX 3: a Modular, Self-Healing Posix-compatible Operating System

thirsteh
2pts1
research.microsoft.com 13y ago

Is Everything We Know About Password-Stealing Wrong? [pdf]

thirsteh
64pts27
da-data.blogspot.com 13y ago

Teaching Distributed Systems in Go

thirsteh
66pts19
www.imperialviolet.org 13y ago

Implementing fixes for the Lucky Thirteen attack on TLS CBC

thirsteh
8pts0
scarybeastsecurity.blogspot.se 13y ago

Deconstruction of Pinkie Pie's 64-bit Chrome exploit

thirsteh
122pts33
www.xfront.com 13y ago

Why Functional Programming Matters Summarized [pdf]

thirsteh
1pts0
code.google.com 14y ago

X86 Oddities

thirsteh
97pts39
www.youtube.com 14y ago

The Man Without a Facebook

thirsteh
1pts0
www.theregister.co.uk 15y ago

BET24 warns over data breach – 19 months later

thirsteh
1pts1
www.haveabit.com 15y ago

Have a bit of...

thirsteh
3pts0
throwingfire.com 15y ago

Security Through Obscurity

thirsteh
43pts60
universesandbox.com 15y ago

Play With The Universe

thirsteh
3pts0
throwingfire.com 15y ago

LastPass Disclosure Shows Why We Can't Have Nice Things

thirsteh
559pts82
patrickmylund.com 15y ago

Isaac Asimov's Visions of the Future

thirsteh
2pts0
www.haveabit.com 15y ago

Have a Bit -- Be Inspired by Some of the Greatest People Who Ever Lived

thirsteh
1pts0
www.urlreveal.com 15y ago

UrlReveal - Reveals the final destination of short/redirect URLs (with source)

thirsteh
1pts0
patrickmylund.com 15y ago

Optimus Smart Prime - Cache preloader for websites with XML sitemaps

thirsteh
4pts0
patrickmylund.com 15y ago

R.I.P. Carl Sagan

thirsteh
4pts0
patrickmylund.com 15y ago

We Don't Know Anything

thirsteh
2pts0
patrickmylund.com 15y ago

Why I Love the Khan Academy

thirsteh
163pts42
Windows 96 5 years ago

wow went to package manager, installed Half-Life Uplink, and it's playable..

and a Windows 95 emulator! lol

"Glorified auto mechanic" is exactly how I'd describe how software development is viewed in Europe. There is a much bigger emphasis on "just" buying software from Microsoft and SAP to "solve" problems.

Picking up other hobbies got me back into software side projects but not as an end in themselves as they used to be (and I'm pretty tired of "learning" new tech at this point -- it's just the same things over and over and over again, usually with even more complexity); rather, I feel compelled to write little pieces of software that vastly improve my experience of the new, interesting hobbies.

Avoid competitiveness and "getting ahead" -- pursue mastery the same way a zen gardener does. It's very enjoyable to be good at useless things.

This is for signing a document with a "hand" signature, not cryptographically signing it with a cryptographic signature. Besides, if you don't trust in-browser JS then you shouldn't trust any site on the web, e.g. online banking.

That this is running completely locally without any software to install is pretty useful and cool. Your criticism isn't great (IMO borders on concern-trolling) because the alternative is something where the docs go to some centralized SaaS that store everything including your signature for an unknown period of time.

Yield farming carries a similar or greater risk to investing in stocks and sector ETFs, and that is certainly not what retail banks do with customer funds (that was outlawed by the Volcker Rule in Dodd-Frank), nor is retail banking how investment banks make money. Nevermind that there obviously is no FDIC insurance for these crypto "savings accounts".

You're asking good questions, but be careful not to jump to easy answers -- you might lose your money!

I suppose it makes sense if you're issuing semantically versioned releases of each module and you want the GitHub releases to match, but the trend of turning everything into its own module until there's nothing left can be very frustrating. This seems very common in JavaScript and Rust.

Rust at least compensates for it in its generated docs. PureScript OTOH... Sometimes modules are literally just one type or one function, and the docs don't consolidate them. Whyyyyyyyy.

Generally, there's a good chance that most of these kinds of "Wtf?" logic errors are on the part of the journalist, not the person being interviewed. In the U.S, journalists don't send drafts over for comments, and rarely change published material, so there's little opportunity to get misleading stuff corrected.

Why use Gitmo as an example when there are plenty of other areas where you can bash Obama, like continuing many of the Executive Order programs? At least he genuinely tried to shut down Gitmo and was blocked from doing so.

I think believing a single person/president/whatever can fix all problems is wishful thinking, and indeed a system in which that was possible would likely not be a democracy.

Start by blaming all the representatives who pushed for or voted against ending the programs you don't like, and voting accordingly. Look at the voting histories of candidates rather than what they say. Look at who funds the candidates , not at what the candidates say. Actually, listen to everything other than what candidates say during election season; the game is set up in such a way that you will always be disappointed if you simply believe what is said, no matter the candidate.

It turns out a lot of the processing is offloaded to proprietary drivers on the EdgeRouter board. It's great for running their stock firmware, but not so great running OpenBSD. Ended up going with the new PC Engines apu1d4 board (http://www.pcengines.ch/apu.htm) rather than a Soekris. I believe it's the best of the options for an OpenBSD router.

In fact, Either/Maybe can function like safer versions of both paradigms: Functors allow you to build a program of many functions that will terminate with 'Nothing' or 'Either l' as long as any one of them experiences an error, without thinking about errors, and it still lets you explicitly handle any errors if you want to, this time on the sum type Maybe or Either, meaning that you usually handle both the error and non-error case, or receive a compiler warning.

I agree that, probably universally, the people who fervently argue for either exceptions or explicit Go-style error handling don't know about Maybe/Either/Result. Then again, all this is pretty much impossible to replicate in Go.

That's something that annoys me about bikes in the US vs. Europe: People in Europe are generally taught to obey the same laws as everybody else, whereas US bicyclists, in NYC in particular, just completely wing it. When I first moved here I didn't understand why everybody hated on bicyclists; now, after nearly being hit by a bicycle slamming through a crowded crosswalk at least 10 times, I do.

Yes, red lights apply to you too, bicyclists.

Your last point is exactly right: You can't choose not to use the vast majority of sites on the Internet.

Facebook isn't the only company doing stuff like this by any stretch of the imagination, but claiming that you can just "not use Facebook" if you want to avoid them is complete nonsense, hence my original comment.

Facebook doesn't invade anyone's privacy.

What do you consider the Like, Connect, etc. buttons that are tracking virtually every page you visit, Facebook user or not?