HNHacker News
TopNewBestAskShowJobs

Father

262 karma · joined October 2, 2011

submissionscomments
Father··on GitHub was experiencing a DDoS
Burying exploitation attempts in the logs with a flood of api requests?
Father··on SSH Brute Force – The 10 Year Old Attack That Still Persists
Additionally you could also use something like fwknop[1]. It opens the ssh port for your ip when you need it and closes it after a preset time has passed.

[1]http://www.cipherdyne.org/fwknop/docs/faq.html#fwknop

Father··on All calls in the Netherlands are stored, indexed and searched for keywords
I think it's dangerous to go on record beforehand claiming something is "bullshit". If I've learned anything over the last view days it's that reports like these should be taken seriously and no stone should be left unturned to find out the truth. We can't just assume intelligence operations can't; we need to know they can't. Let the House of Representatives proof it's nonsense. Also, thanks for adding the bit about CIOT.
Father··on All calls in the Netherlands are stored, indexed and searched for keywords
http://en.wikipedia.org/wiki/Hofstad_Network
Father··on Setting the Record Straight
All the organizations in question have a permanent smut on their record. The angle I'm missing in this discussion is that this is a business opportunity for something new and better. Acquiring new users for a search engine, social network, etc was damn near impossible because you couldn't compete with the resources, quality and brand. Now they have a flaw; privacy. Maybe the homogeneous landscape of the tech industry can get shaken up. Kim Dotcom is creating an anonymous email service and I'm curious to see what other alternatives for common tech pops into existence in the wake of this.

Changing a government will take a lot of time; but a business outside the reach of US legislation could pop up tomorrow.

Father··on Sunsetting Flash
As long as there is fragmentation then flash will not be obsolete. For example the lack of a common supported audio format or shader language in browsers to name two.
Father··on Braintree now accepts online applications for European merchants
> European merchants who want to take advantage of Braintree to accept online and mobile payments can now apply for an account online.

I feel this is a common misconception that accepting credit cards in Europe equals having a good online payment option in Europe. It just means you've half implemented a payment system in Europe since a lot of people here use Debit cards [1]. Besides that there are also other common payments solution like direct bank to bank online Giro systems for example iDeal in the Netherlands or Giropay in Germany.

[1] http://www.ecb.int/press/pr/date/2012/html/pr120910.en.html

Father··on Alleged Google Nexus 5 Image Leaked Online
Nope http://i.imgur.com/JndIYjW.png
Father··on A painful tale of SEO, spam and Google's role in all
Link removal requests can also be malicious. A blackhat seo will check his competitors domain to see if there's a spf record, if they're signing their mail, and if there's a catch-all (simply by checking if random mail is accepted). If there's neither they get a list of backlinks, from public web-crawls or sites like ahref, and request these links be taken down by sending mail with spoofed email addresses.
Father··on Building Twitter Bootstrap
Bootstrap was actually build on code from ZURB http://news.ycombinator.com/item?id=4590315 The competition between the two frameworks just benefits the end user as they compete to out do one another.
Father··on Trello uses an icon font and so can you
If you have the icons as svg you could also try raphaeljs [1][2]. It'll render the svg path as svg on most modern browsers and as vml on older IE browsers (ie6+). The added benefit is that raphael also does animations which enables you to animate your icons on browsers that don't support css3 animation.

[1] http://raphaeljs.com/icons/ [2] http://raphaeljs.com

Father··on Why QR Codes Are Perfect For The Internet of Things
Besides the regular Qrcode there's also Mirco Qrcode[1]. Also the Reed–Solomon error correction in qrcodes take up a lot of datablocks. If a new standardisation for mirco qrcodes would allow for a version without error correction you could store even more.

[1]http://www.qrcode.com/en/microqr.html

Father··on From AS3 to Haxe
Another good feature I didn't see mentioned is haxes' quick memory access. http://haxe.org/api/flash/memory It's basically an api for the opcodes which adobe alchemy used if you compiled c/c++ to flash. More on it here http://ncannasse.fr/blog/virtual_memory_api
Father··on $15 Dedicated servers from OVH
http://digicube.fr/rapidserveurs 1gbps with unlimited traffic start at 25e. I've been hosting an irc server with them now for just under a year; and it's been down once for 2 hours due to a power failure. Downside is everything is in French.
Father··on 9 Gigapixel Image of the Milky Way
Here's a similar thing also made from infrared images of the milky way http://djer.roe.ac.uk/vsa/vvv/iipmooviewer-2.0-beta/vvvgps5....
Father··on Spammers start using short .gov URLs to trick their victims
This was also a much used trick: http://news.ycombinator.com@1249739877 Although most browsers have implemented a warning of some sort it can still hoax spam-filters that use a regexp pattern which doesn't account for this type of behaviour.
Father··on IE10 won't run Flash unless website is whitelisted by Microsoft
Why is that? Flash seems pretty logical to me. If you were giving the choice to either design with a single language that compiles to bytecode and runs in a vm(jit), or an array of interpretive scripts that's heavily submitted to fragmentation, which would you choose? You'd probably go for the first, as would I.

Flash may be a bad implementation of good idea, but alternatives have not exactly wooed me either. To be quite honest; they all seem equally flawed to me. The fact that jQuery, Bootstrap, and others originated out of overcoming fragmentation pretty much proofs that point. Also different JavaScript engines give you different performances and have different bottlenecks. At least with flash you had the guarantee it would crash the same on all platforms.

Father··on Selecting a Programming Environment
HaXe and HaXeNME come pretty close. Especially NME with which you can create GUIs and games compile to c++, compile to html5 using jeash, create native phone apps, and compile SWFs all from the same code. With HaXe itself the code usually needs a bit of modifying depending on the target. They added java recently to it which is not yet available for NME. If anything; it's fun to play with.
Father··on Show HN: HackerNews reimagined without tables or center elements.
In my opinion it's fine the way it is. HN comments are compact and only separated by the bare minimum, which makes for easy and fast reading. Stackoverflow doesn't digest that well for me because it has a lot of unnecessary padding, boxes, user info, etc.
Father··on Twitter May Have 500M+ Users But Only 170M Are Active
In a lawsuit filed against spam tool providers in april; twitter claimed it had 140 million active users. 140 million claim is right on page 1. http://www.scribd.com/doc/88206156/Twitter-lawsuit-to-counte...
Father··on Cisco Pushing 'Cloud Connect' Router Firmware, Allows Web History Tracking
Certainly a bizarre move by Cisco. Besides the data tracking and privacy issues; imagine the damages if they ever had a security breach.

4. Your Responsibilities as a Cisco Connect Cloud User You are responsible for any data that is sent or received by you and/or any other party in connection with your access to and/or use of the Service used in connection with your account. You agree that Cisco will not be liable to you or any others for any loss or damages due to your use of the Service.

Father··on WebGL: 80,000 particles
Actually the 'math' was done using alchemy, the shader was pixelbender http://www.adobe.com/devnet/pixelbender.html However the example was flash then (3 years ago) vs webgl now. This is flash now; a version with 1.4 million particles using the new molehill http://www.simppa.fi/blog/1_point_4_million_particles/
Father··on Don’t Be Evil: How Google Screwed a Startup
"There is a looming realization of Google controlling the majority of online advertising"

If you use another ppc provider on your page, you might get penalties affecting your ranks http://support.google.com/webmasters/bin/answer.py?hl=en&... Similar with affiliate links, http://support.google.com/webmasters/bin/answer.py?hl=en&... Even though that's worst case scenario and might be a bit tendentious; there's no clear way to interpret what you can or can't do, or how google might interpret it.

Father··on Throw Out Everything You Know About Ads
There's a perfectly good explanation for this. Eye tracking tests show that people ignore images and read around them (unless there's a human face in it). That's why text ads work better, in most circumstances anyway. The color of the second ad is lighter, and probably matches the background of the page better, making it less of a block and lowering the barrier to crossover and read the text.
Father··on UK government to monitor email and web use under new laws
Doesn't this violate secrecy of correspondence and their own data protection act of '98? Terrorism seems to be the godwin for privacy debates regarding national security.
Father··on Adobe's 9% Flash tax
You only need to pay the tax if you make use of BOTH ApplicationDomain.domainMemory and Stage3D.request3DContext in the same application. They can be used independently without having to get a licence.

Here's a question in general though, ExternalInterface.call allows you to execute javascript in the browser from flash. So if you'd use ExternalInterface.call to control WebGl you wouldn't need Stage3D.request3DContext for hardware acceleration and thus allows you to use ApplicationDomain.domainMemory at the same time without needing a licence?

Father··on A Pinterest spammer tells all
That might help for sites with a small userbase. However these are large platforms with large clusters of users that can be easily contacted. They'll just invest in a captcha cracking service which runs at about a 1000 solved captchas for $3. If you ban datacenter ips, use dnsbl and scan for proxies, they'll switch to rented dsl lines.

On the other end are the users. If you ban proxies, finger their ports and ask them to solve a captcha every time they hit the submit button; you'll create some serious animosity. Stopping spam means having to invest, come up with complicated algorithms and you still might accidentally ban innocent users who will blog about this or tell their friends [1].

The real question is... does it matter that affiliate links are being posted if it needs a guide to let the everyday users notice it [2]. My niece doesn't even know what a affiliate link is and neither do most users. I mean if there's a 100% method to stop it, implement it. However, should you invest money and dev time into problems that nobody has solved to this date...

[1] http://acme.com/updates/archive/173.html [2] http://www.dailydot.com/news/how-spot-spammer-pinterest/

Father··on A Pinterest spammer tells all
Most of the experienced spammers fake the referrer. They'll have a scrub site setup which will appear as any blog. The spammer will spam links to the blog page (often using a url shortener); however the link will contain a id. If you visit the page with the id it will selectively redirect traffic to their amazon affiliate link, without the id link it will appear as a normal blogpost.

Amazon will think the traffic comes from the blogpost. The person getting spammed won't get any protection if they filter amazon links.

Father··on Google as Benevolent Dictator Yanks Smartphone Apps With Kill Switch
Pleonasm and power terms make it sound like there's something terrible happening. The option is there to purge malicious content; which appears useful to me. If "they" would purge random items/apps the hue and cry of the masses would create damage to the brand and it's continuity; which in turn is a self regulating property that such events should not occur for the sake of the companies involved.
Father··on Sugar Should Be Regulated As Toxin, Researchers Say
There was a better system proposed http://en.wikipedia.org/wiki/Traffic_light_rating_system The food industry lobby went into overdrive http://www.europa-nu.nl/9353000/1/j9vvikqpopjt8zm/vispi8icgj...

Idea was to have a sticker on each and every product, so you wouldn't have to check the back of products for kcal, sugar, fat etc, like so http://i.imgur.com/F8T7P.jpg

Page 1 of 2Next →