HNHacker News
TopNewBestAskShowJobs

DarronWyke

185 karma · joined September 26, 2017

Parse error: parse error, unexpected spanish inquisition in /var/www/index.php on line 51
submissionscomments
DarronWyke··on What Happens When Bitcoin Miners Take Over Your Town
Bought direct from EVGA. Check their websites, many of them offer them direct for sale. They may be out of stock so you'll have to do a notify.
DarronWyke··on What Happens When Bitcoin Miners Take Over Your Town
I had to buy mine direct from the manufacturer for MSRP for a new build.

Still cheaper than Newegg/Amazon/etc.

DarronWyke··on Hardcoded Password Found in Cisco Software
Correct, I'm too damn used to dealing with Apple stuff. It's also like another form of cancer, but a lot less pervasive and far more noticeable.
DarronWyke··on Hardcoded Password Found in Cisco Software
"Cisco" and "security issue" go together like peanut butter and chocolate. Knowing this, and with the knowledge that IOS is some form of arcane torture, leads me to wonder: why hasn't Cisco been completely obsoleted by Juniper or other providers?
DarronWyke··on Amateur Radio on the International Space Station
>Looks like quite a feat to qualify a spacecraft power supply!

It's actually a hell of a feat to get any kind of electronics certified for outer space use.

The atmosphere we have blocks a HUGE portion of ionizing radiation, including x-rays and gamma rays. Those forms of energy will play merry hell with any kind of sensitive electronics, so they have to be suitably ruggedized -- far more so than even most military specs which mostly call for shock, impact, and exposure to elements. Since they can be supplying power to sensitive electronics, where half a volt can be the difference between containing and letting out the magic smoke, that sort of regulation is absolutely key.

DarronWyke··on Meltdown-Spectre: Malware is already being tested by attackers
Fingerprints are not passwords or usernames. They're another form of authentication.

Remember: MFA is a two-or-more combination of: something you know (password, pin, etc.), something you have (keycard, token, fob, etc.), something you are (fingerprint, iris scan, voice recognition, etc.), and potentially even somewhere you are (geolocation).

DarronWyke··on Meltdown-Spectre: Malware is already being tested by attackers
As I sardonically stated on Twitter, it's not a real vulnerability until it has a catchy name and logo. It's the newest node.js hipster pentesting tech.
DarronWyke··on Filtering stream water or fresh water is medically unnecessary
Most portable filters will, actually. They've got fine enough filters to catch protocysts; they'll easily catch any metal contamination. What they don't get are smaller bacteria and virii, which is where secondary purification in the form of boiling or purification tablets is necessary.
DarronWyke··on Firefox 59 to strip path information from referrer values for 3rd parties
I disable referers for all browsers. Firefox has them off completely, with Referer Control using a random one for Chrome. I only enable them for sites that absolutely need them (and that I need to use).

It's simply good data hygiene and privacy.

DarronWyke··on Filtering stream water or fresh water is medically unnecessary
Boiling is what did it. Boiling is the most sure-fire way to disinfect water.
DarronWyke··on Filtering stream water or fresh water is medically unnecessary
UV will kill most microbes, which is why things like the UV pens are good for purification. However you need to at least run it through a filter first to remove large particulate matter, as the UV won't penetrate into those and kill the microbes inside. Most filters also won't catch viruses and bacteria, just protocysts and dirt.
DarronWyke··on Senator asks FBI director to name the cryptographers who support backdoors
Pretty much this. Law enforcement is trying to get their monetary share from crime (or "crime" depending upon how you look at it), and anything they can do to make that easier they want.
DarronWyke··on An Amazon Order Might Lock You Out of Trusted Traveler Programs
Surprisingly, the CPU+mobo combo I just bought for a new build was cheaper from a local Microcenter than Amazon. Plus, I could get it the same day (ordering it on Saturday night, I'd get the mobo Sunday and CPU Tuesday if I did Amazon -- went next day and got both from Microcenter for about $50-60 less).
DarronWyke··on Your recruiter is not your friend
Good for you, you're an exception far removed from the rule.
DarronWyke··on The hidden costs of serverless
Of course, if a S3 region gets nuked, it can have repercussions in other zones too. Remember the S3 outage?
DarronWyke··on Your recruiter is not your friend
>salary negotiations

This is an obvious one. I've dealt with a ton of recruiters over the years. If they're not willing to discuss a range upfront with you (amongst other things), they're lying to you. THERE IS NO JOB. They're just building their virtual rolodex for future sales.

If they want to grill you about what you do, who you know, references, etc. before revealing the name and location of the client... THERE IS NO JOB. (Hint for my younger colleagues: never reveal your references until you get an offer. They're just hitting you up for warm bodies that they can then probe.)

Recruiters do this to play some weird game of Glengarry Glen Ross, and I have no idea why. They swing in the extreme direction of sales and remove the technical aspects of it. We're treated like fodder for the job position sacrifice. And worse yet, a lot of them seem to think we're too stupid to know better.

I never expect a recruiter to be technical; they're a form of HR, not engineering. I wouldn't expect one to know how to read a TCP dump, or analyze a Nessus report for false positives. However a base understanding of what you're pushing for is to be expected. I had one recruiter almost shy away from me because he only saw a keyword listed once or twice on my resume...even though it's a core technology used in every single role I've done that's industry-wide.

DarronWyke··on Meltdown Update Kernel doesnt boot
You clearly haven't been paying attention or reading about how this works.

Heartbleed was touted as being bad by those that didn't read too far into it. You could scrape memory, sure. But it was always random fragments. This lets you make targeted address attacks. Force a process to use that memory space through a NOOP and now you can start scraping at will. Or you can just do an entire memory dump and pull things out in plaintext (like scraping Firefox passwords, which we've seen done already).

The only reason this isn't worse is it requires the ability to execute code on the machine. It has high (near absolute) impact, but low-to-moderate on the ease of execution.

DarronWyke··on Meltdown Update Kernel doesnt boot
What are you talking about? We've seen working POCs since last week. This isn't "largely theoretical", this is an actively exploitable hole.
DarronWyke··on Microsoft disables Windows Update when Meltdown/Spectre registry key isn't set
Symbiont. The word you're looking for is symbiont, not parasite. A symbiont lives in harmony with the host, exchanging something in exchange for the resource it consumes (in this case protection). A parasite just takes, and gives nothing back to the host.

(Of course, let's ignore the obvious joke about some AV solutions like Symantec.)

DarronWyke··on The day I accidentally killed a little boy
I'd disagree. I've been to both. Rural California has a very different mindset than say the rural parts of the Appalachians. Out there, there's a fierce push for independence and self-sufficiency. A lot of that comes from just regional outlooks on life, government, rights, and more. Having been from California, the whole "Southern Hospitality" thing surprised me and just the general way people treat random strangers, as a very simple example.
DarronWyke··on The day I accidentally killed a little boy
Not the OP, but my take on it would be that every State is different from each other, and even within the State there's differences. Take a look at where I live, Texas. Dallas will be different than Austin which will be different than Houston. Any metropolitan area, even within the same borders, will have different culture and mindset than another. Compare that to another State and the divide only widens.

Most countries are fairly homogenous, which lends itself to a singular-ish mindset and culture. The US is not really one country, it's a melting pot (remember that word from social studies?) of many different cultures and ideas. That's one of the big reasons why we can't really be compared to any other country on many topics. Every locale is different, in many cases fundamentally, and that's part of the point of the Federal-State system we have.

DarronWyke··on GoPro quits the drone business
Possibly. Given the number of competitors in the "adventure camera" business like Contour and a variety of Chinese manufacturers, they're going to end up taking hits on it. Their cameras are already very pricey -- part of the reason why I went with a Contour.
DarronWyke··on Mailgun Security Incident and Important Customer Information
No, that's just correlation. Email can be spam, but not all email is spam.
DarronWyke··on Mailgun Security Incident and Important Customer Information
This is because Mailgun is in the practice of spam. The number of spam campaigns I've seen with Mailgun as the conduit is high, second only to Mailchimp.
DarronWyke··on Bitcoin Visa debit cards are cancelled
Welcome to the world of cryptocurrency in general. It's the new dot-com boom. How did that turn out last time?
DarronWyke··on Reading privileged memory with a side-channel
Thanks to incidents like these, I'm very happily employed. One of the perks of working in infosec.

I hereby nominate 2018's song to be Billy Joel's We Didn't Start the Fire.

DarronWyke··on Taking a break from Adblock Plus development
A self-citing piece is not a credible source in the slightest.
DarronWyke··on Romanian Hackers Infiltrated 65% of DC Outdoor Surveillance Cameras
I'd like to take this time to remind everyone of the Internet of Shit project:

https://twitter.com/internetofshit

Welcome to the IoT age. It's not going to get better, only get worse.

DarronWyke··on Bitcoin Is a Terrible Currency, and Not for the Reason You May Think
>Paying "$10 equivalent in bitcoin cash" (or bitcoin, or litecoin, or whatever) is using those cryptocurrencies as a payment gateway; the currency in those transactions is $.

Precisely. We're entering some real fiat currency inception here. Bitcoin is worth whatever people value it at, similar to most forms of currency (backed by the faith of the issuing government). Now we're going to faith upon faith.

DarronWyke··on Taking a break from Adblock Plus development
What facts are there that they sold out? They added an optional 'show some ads' feature, only allowing those ads that followed a very strict and well-defined list of parameters. It's very much optional, and not hidden at all to turn it off.
Page 1 of 4Next →