HNHacker News
TopNewBestAskShowJobs

DanBlake

4,129 karma · joined November 26, 2009

harknesslabs.com
submissionscomments
DanBlake··on Tor Project Accuses CloudFlare of Mass Surveillance, Sabotaging Tor Traffic
At my last company, we blocked Tor wholesale. In my experience, Tor users are 1% privacy nazis and 99% nefarious actors. I have zero qualms about blocking tor. They wont see ads, they wont buy anything and chances are they are there to do something you dont want.
DanBlake··on Acceptable Ads explained: monetization
My guess as to what will take down ABP will be their 'antiadblock' filter list.

Essentially they are writing and maintaining a anti-anti-circumvention tool. I know it might sound crazy, but think about this example-

Bob writes a computer game. He wants it to be free for registered users, but guests can either pay a monthly subscription or be ad supported to use it as well.

Joe writes a crack for said game, so everyone gets the paid experience.

I think anyone would agree the above scenario is a prime case for a DMCA lawsuit as it is the definition of a circumvention of access control.

I do not see how it would be different for doing the same thing on a website. In the eyes of the law, they are both software getting circumvented. Adblock plus is developing and maintaining ways to circumvent access controls developed by other companies.

Personally I dont have a issue with adblock and the generic filters. I have a issue with the site specific filters as I think they are likely illegal depending on each sites tos

DanBlake··on Asus lawsuit puts entire industry on notice over shoddy router security
I think the most egregious issue that the asus routers had (even up to the RT-N66U) was that when you used the interface to check for a firmware update, it would report you were on the latest update, even if you were multiple patches behind.
DanBlake··on The Ad Blocking Wars
Thats incorrect. Wikipedia sometimes shows ads asking for donations. Just because its a 'internal' ad means nothing.
DanBlake··on Switzerland will vote on having a national wage of £1,700 a month
Isnt the tax rate 40% ish? That would push 3570 francs a month ( 42840 a year ) to 60k francs/year. Still not 80k, but pretty crazy.
DanBlake··on Switzerland will vote on having a national wage of £1,700 a month
Somewhat off topic, but switzerland is ludicrously expensive. I recently visited for a week in Zurich/Bern and the best way to describe the prices is like you are permanently stuck in a theme park or airport. Starbuck Coffee? $7. Can of soda at a convenience store? $3. Any fine dining for two? $300-400

I asked one of the taxi drivers what a cashier makes and he said $80k. With prices that high, It almost feels like a house of cards. I dont understand why exchange rates dont drastically bring these prices into alignment. Seems like importing goods from other countries would completely destroy this ecosystem.

DanBlake··on U.S. Will Track Secret Buyers of Luxury Real Estate
Not sure this will accomplish much. The people sheltering this wealth have attorneys and 'henchmen' who are more than willing to put the assets in their name. Its a massive thing here in Miami Beach (I think half the sales here are all cash and of those, half are from foreign investors)
DanBlake··on Doomsday planning for less crazy folk
I run a site that deals with alot of these people. I look at it like a risk vs reward. I think for the vast amount of calamity's that could happen, you only need to 'survive' for about 6 months before things would stabilize. If after 6 months you are still in trouble, chances are you are not going to particularly enjoy life moving forward anyways.

So with those thoughts, it almost seems prudent to just buy 1k in freeze dried food ( http://www.ebay.com/itm/1-YEAR-MOUNTAIN-HOUSE-FOOD-ENTREES-R...? ) which can last you a year if needed. The only other things you really need is water (tons of purification options out there).

The next steps are protection and information. You can get a firearm for about 500$ with ample ammo and a world radio with a solar charger for 100$.

DanBlake··on Are Flat-Earthers Being Serious?
my reply has to do with the unexpected time difference, not the GPS. When a flight (according to the flat earth) should take 24 hours and only takes 12.
DanBlake··on Are Flat-Earthers Being Serious?
Is this not easy to prove its false? Just take a flight from the southern tip of Chile to South Australia. If the earth is indeed flat, the flight would take 24+ hours. But since they would fly over Antarctica, it only takes ~10.

I suppose one explanation could be that the 747 flight they are in somehow gained the ability to go faster than a F16 at maximum thrust.

DanBlake··on Mitigating DoS Attacks with Nginx
For all but the most basic attack, you really want a script putting these IP's into iptables. Using the application itself to block them still requires the connection setup/teardown resources to be used, as well as the application itself.
DanBlake··on Firefox 43 released with 64-bit version for Windows, better Private Browsing
Then head on over to the options and turn them off?
DanBlake··on How to stop a DDoS attack
A article I wrote on attempting to do this yourself (without cloudflare/other services) is here: http://harknesslabs.com/post/38104429912/fighting-spoofed-sy...

Its much easier to use cloudflare, but sometimes it just not possible to use them (it wasnt for us, due to needing hardcoded IPs in our DC)

DanBlake··on Are Adblock companies breaking the law?
wrong. you interact with a website. you need to request its files, html, images. You request nothing of a billboard.
DanBlake··on Are Adblock companies breaking the law?
If you write a huge javascript library and started selling it, then someone stole it and released it for free- you would issue a DMCA because you own that code. Just because its HTML doesnt make it 'not free'
DanBlake··on Are Adblock companies breaking the law?
You have no idea how cheating in games works. They dont touch the exe, they touch the memory. You can not stop game hacks with any first strike system, Its 100% reaction based, like anti virus software.
DanBlake··on Are Adblock companies breaking the law?
It was a local app, not remote. Even if I concende that it was remote, what about a wallhack for counterstrike? Should that be legal since it has zero server effect?
DanBlake··on Are Adblock companies breaking the law?
Adblockers have specific rules for specific websites. In fact, adblock plus even has a special rule set to bypass blocks set up by websites to stop adblock users.
DanBlake··on Goodbye privacy, hello Alexa: Amazon Echo, the home robot who hears it all
The device does not communicate with amazon.com until you say "alexa" and the code/hardware for that is all done on the device itself. So its not listening and streaming everything, all the time. It is listening all the time, yes- But only for the word 'alexa' - If it hears that word, then it starts talking to amazon.com and starts doing voice recognition. This is very easy to verify yourself with a network monitor.

Do you ask people with iphones or androids to turn them off when you are close because its listening for "hey siri" or "ok google" ?

If you asked me to turn mine off when visiting, I would happily oblige you- And then label you as a nutcase who has lined their walls with tinfoil.

DanBlake··on ARRIS Cable Modem Has a Backdoor in the Backdoor
Doesnt look like it. Likely part of the reasoning is that the 6580 has a full router built in and the 6141 is just a cable modem. I believe they both run different firmwares as well. Also, that 600k number would be in the millions if it effected the 6141- Its standard issue for many ISP's with the higher bandwidth packages now if you dont buy voip.

Also, the URL http://192.168.100.1/cgi-bin/tech_support_cgi is not present on the 6141's

DanBlake··on Show HN: Our spinoff startup, WAYWT.com
Been working on this for a bit over 6 months. Its a spinoff of our main site, http://everydaycarry.com which is a place where you can find what different people carry with them every day. We figured the format would work just as well for mens fashion.
DanBlake··on In-N-Out sues startup DoorDash, says burger delivery is a trademark violation
Interesting question.

I would think the answer as of currently, is no. That is less because forcing that restriction would be legal or illegal, and moreso because when you buy food at in-n-out you are not waving any rights or signing any document. If for instance, before every sale of a burger they made you tap a screen saying "I agree this purchase is not for delivery" then yes, the delivery person/service could be sued for tortuous interference. Unless that happens, there is broad restrictions on what companys can do to restrict secondary sales.

The only caveat could be that restaurants are regulated for quality and health. If a lawsuit could prove that the delivery services are actually re-selling the food instead of merely delivering them, there might be a case there. Especially because I highly doubt these services have the relevant licenses to prepare and sell food. Its possible though.

DanBlake··on Leading 'anti adblock' provider gets hacked- pushed malware to end users
This is a service publishers use to show ads when a user has a adblocker enabled. It works on the most popular adblocker, adblock plus (firefox/chrome). Not sure if it works on ublock origin or ghostery/others, but those are still a small proportion of all adblock users.

Noscript would have protected you though, which has a pretty large install base.

DanBlake··on The Devastating Effect of Ad-Blockers for Guru3D.com
The main reason this has not happened is that it requires the ad networks to trust the publisher on things like visits/impressions/clicks.

If your server has the ability to say "Hey, Jane doe saw your ad just now" when she didnt, thats a recipe for massive fraud.

You might say CPC would work and then just send to unique urls the ad network can track- This too wont work, as it allows the publisher to do things like auto-pop the link, hide it in 1x1 iframes, etc.. Overall its a security and fraud nightmare that involves huge cat-and-mouse games.

Not to mention the fact that the ad networks have no incentive to change. As more inventory drys up, the spends go up with them (competition increases) - Supply and demand, mostly.

DanBlake··on AngelList Announces $400M Early-Stage Fund
Naval is such a genuinely nice and caring guy. So many investors say they are entrepreneur friendly, but hardly any of them live up to that when things get hairy. Naval is a guy who absolutely lives the mantra of putting entrepreneurs first and goes above and beyond to help them out in so many ways. There is a long story about the stuff he went through to get where he is (when he was at epinions), google for it- its worth a read.

I wont get into it too much, but I owe alot to Naval for where I am today. The help, advice and just conversations he gives to entrepreneurs is completely 'no bullshit, no fluff'. All in all, its very refreshing to see that AngelList has risen to the top and has helped disrupt the 'old boys / sand hill road' way of doing things.

DanBlake··on I am Sam Altman, President of Y Combinator – AMA
Is there any intention of adding a new type of incubator that isnt so location specific?

For instance, I would love to be in YC- But just like many older (30+) folks, I have a family and simply cannot move to SF. The 'move to SF' restriction is the one thing I hate about YC- Its also why I think some competing incubators are picking up steam, who focus on global teams.

This may be disagreed upon- But I truly feel the 'move to SF' restriction is almost prejudicial against older folks. I get there is immense value in being in the valley (I just moved from SF), but I just dont think thats a reason not to find a way the system couldn't work either remotely or satellite based.

DanBlake··on Mercury Spill
wow. I remember as a kid ~20 years ago playing with mercury (my grandfather was a dentist and had a 1lb bottle of the stuff for some reason)

I think if I found mercury in my house I would literally just scoop it up and bring it to the fire department without thinking about any health hazards of it. Is mercury truely that bad that short exposure is that dangerous? I mean, I wouldnt eat the stuff (or breath it in for extended periods) but I used to roll it around in my hands and whatnot as a kid without any effects.

Considering how some people work with mercury ( see this : http://www.vice.com/video/el-dorado ) , I feel like you need quite a bit of exposure to be up shits creek.

Then again, I'm not a doctor so dont listen to me.

DanBlake··on Edward Snowden interview: 'Smartphones can be taken over'
"Nosey Smurf is the 'hot mic' tool. For example if it's in your pocket, [GCHQ] can turn the microphone on and listen to everything that's going on around you - even if your phone is switched off because they've got the other tools for turning it on."

Are they implying that all/most smartphones still communicate with cell towers when turned off? (obviously this isnt happening) - Or do they pwn the device before hand to have it fake that its turning off while remaining on?

DanBlake··on JustFab: The Billion Dollar Startup with a Dark Past
Cant is the wrong word, my fault. 'much, much more difficult' would be appropriate.
DanBlake··on JustFab: The Billion Dollar Startup with a Dark Past
The way that these business's get past those regulations is pretty easy actually. They have multiple (and when I say multiple, i mean hundreds if not thousands) of payment 'accounts' (I think they are called pids) so if one of them gets killed it does not effect the entire business.

The other sneaky thing I heard some were starting to do was to determine if a card is a credit or debit card- You cant chargeback on a debit card so they treat those users worse.

The one thing I dont understand is the making it difficult for people to cancel via phone. Chargebacks cost money, so almost all of these guys give 100% refunds to anyone who calls. Not doing that seems stupid.

Its similar to back in the ringtone days how the providers would have hundreds of short codes, so that when some of them blew up, it wouldnt effect the entirety of the business.

← PreviousPage 3 of 20Next →