HNHacker News
TopNewBestAskShowJobs

JackRabbitSlim

203 karma · joined September 11, 2019

submissionscomments
JackRabbitSlim··on Two malicious Python libraries caught stealing SSH and GPG keys
MyPy requests permission to write data to the hard drive. MyPy writes malicious payload to a file and then execs it. MyPy never wrote a damn thing to a socket, netcat did through a bash/ash shell. (Windows named pipes may be a little trickier to work with but can yield similar results)

Sandboxing libraries specifically seems like a fools errand.

JackRabbitSlim··on BPF: A New Type of Software
BPF amuses me greatly; Real-Mode/Ring0 are dead! Long live Real-mode/Ring0!

Yes, yes. It's got some access control and security sugar sprinkled in but the idea of 'userland for everything!' is clearly wrong if eBPF moving stuff back into the kernel is "The biggest OS development in my career"

JackRabbitSlim··on The Qt Marketplace
Cool. So what alternatives to the apple store do I have to reach iPhone users?

Choice is why Apple isn't gouging developers with 100 dollar service subscriptions just to sign packages right?

JackRabbitSlim··on Doctors are turning to YouTube to fill in gaps in their training
I'll bet every one of them (tries to) absolve themselves from liability through the use of their posted materials. An unverifiable promise that it's somehow a more reliable source than "DuceDangler73s" youtube video on performing a colonoscopy is no comfort.
JackRabbitSlim··on Spices Have Made, and Unmade, Empires
They made sweet drinks by using lead vessels to store wine/vinegar with acetic acid in it. That created lead acetate; sweet and toxic.

I'm sure it started accidentally but was continued because it magically turned shitty sour wine into sweet wine.

A side note; we still actively use artificial sweeteners from petrochemical sources.

JackRabbitSlim··on How much are your US insurance premiums for self-employed people?
Argentina: You may visit Argentina for up to 90 days on a tourist visa by just showing a valid U.S. passport when you arrive. For a residence visa you must have a passport valid for at least six months longer than your arrival date. You may need a physician's report to ensure you are in good health. You may also need a criminal background check, depending on the consulate where you apply. These documents must be translated into Spanish and notarized. Check with the Argentine consulate where you make your visa application for acceptable translators and notaries.

Brazil: any foreigner looking to work in Brazil must have a work visa or Brazilian residency. In most cases, you should have a job secured before planning to move. The employing company must submit a work permit application to its local Ministry of Labor & Employment – this is the first step to meet the requirements in the work visa application process. After the application is approved, the approval is published in one of the local legal newspapers and sent to the Ministry of Foreign Affairs. After this, the Ministry will contact the Consulate or Embassy, which will then start the visa process.

No. Even South American countries don't have any open-door policies.

JackRabbitSlim··on Young people in U.S. dying at high rates
Your argument fails spectacularly. Mark Twain covers it better than I could:

"In the space of one hundred and seventy-six years the Lower Mississippi has shortened itself two hundred and forty-two miles. That is an average of a trifle over one mile and a third per year. Therefore, any calm person, who is not blind or idiotic, can see that in the Old Oolitic Silurian Period,' just a million years ago next November, the Lower Mississippi River was upwards of one million three hundred thousand miles long, and stuck out over the Gulf of Mexico like a fishing-rod. And by the same token any person can see that seven hundred and forty-two years from now the Lower Mississippi will be only a mile and three-quarters long, and Cairo and New Orleans will have joined their streets together, and be plodding comfortably along under a single mayor and a mutual board of aldermen. There is something fascinating about science. One gets such wholesale returns of conjecture out of such a trifling investment of fact."

The wealth of people like Bazos, Gates, Buffet, Greenspan, etc turn the suffering of entire generations into rounding errors.

JackRabbitSlim··on The Ripe NCC Has Run Out of IPv4 Addresses
Technical arguments aside; IPv6 is just "advanced" enough to allow corporations to fuck over the last bastions of free internet and turn it into nothing but tightly controlled broadcast TV 2.0.

The road to hell is paved with good intentions so I guess I will see you all in hell.

JackRabbitSlim··on Google Kills Cloud Print
Fix what? What's broken? The fact that they don't give a fuck what customers want? Doesn't seem to be a problem given their market position.

If something is deeply broken, it's what allows them to thrive in spite of themselves.

JackRabbitSlim··on Systemd Brand
I had some time and for some reason it made me want to go see how boot images were actually done in the build system so...

https://pastebin.com/Ewe3UurF

not tested or proofed, must provide own logo_mark_beast.ppm of the logo

JackRabbitSlim··on Systemd Brand
Let me ask the other end. What context do you have to compare it to what it replaced for any given use case? Can you tell me why its good? Can you tell me why its better? What problems it "fixes"?

Reasons to dislike systemd as a professional sys admin?

https://github.com/systemd/systemd/issues/2402 - brick EFI based systems!

https://twitter.com/bitfield/status/736868148348063744?lang=... -- Systemd broke your very mature stable application like screen and tmux?

https://nvd.nist.gov/vuln/detail/CVE-2018-15688 - Root a box on bootup with poison DHCP offers

I can keep going, but how are you doing on my questions?

JackRabbitSlim··on “correcthorsebatterystaple” is guessed in less than 0.01 seconds
As one of the tweets pointed out all those words are in OSX's build in wordlist. If you KNOW its 4 concatenated dictionary words than the speed at which you can crack it is basically just like brute forcing a 4 digit luggage lock.

It's not wrong to use. Its wrong to codify it or enact it as policy because what a corporate security goons published "password requirements" is really just "search space reducers" For example; not wasting my time on guesses below the 8 char minimum. Thanks security guy, that saved a BUNCH of time!

JackRabbitSlim··on Microsoft's “Love” of Linux
An anti-MS article full of FUD, Delicious.

If anyone is embracing, extending and extinguishing its Redhat's giant lovecraftian eldrich horror starting at Pid 1 as it's tentacles spread across the (user)land to incite madness and crush the life out of system administrators.

JackRabbitSlim··on Don’t Rush Quantum-Proof Encryption, Warns NSA Research Director
I realize this is just the broken clock being right twice a day but the fact that we give the NSA any credibility of any kind is truly mind boggling.

Would you use YubiKey ever again after they got caught putting keyloggers into one model? That's what the entire security community does every time they so much as entertain anything the NSA says.

JackRabbitSlim··on Can low-code IoT development tools yield secure systems?
Probably Not. But it can easily yield tons of new insecure, undocumented, unsupervised systems. So it's got that going for it, which is nice.
JackRabbitSlim··on Pokemon Sword and Shield Are Crashing Roku Devices
Why? All that assumes a home network is setup correctly, which is almost never the case. One huge use case would be all the shitty SOHO routers that don't/can't bridge wired and wireless networks so broadcast and high level discovery/advertising are completely useless between wired and wireless segments. In some cases useless between cells in a mesh, even with 'enterprise' gear this is not as reliable as it should be.

Nintendo made an informed decision and their hardware is welcome on my networks.

JackRabbitSlim··on Pokemon Sword and Shield Are Crashing Roku Devices
It probably happens all the time. We just realize its astronomically low and assume the easier to understand, safer explanation in our own incompetence instead and go back to saying we never see that sort of thing.
JackRabbitSlim··on Exploiting Intel’s Management Engine
>you could run software on your Intel-chipset motherboard without a “real” CPU!"

I suspect this popped up in meetings and is at least partly the reason for the design now.

JackRabbitSlim··on PayPal stops payouts to models on Pornhub
Citation needed. Like not saying I don't believe it, just want details.
JackRabbitSlim··on Debian reconsiders init-system diversity
Debian is going to draft an ABI because of the init system written by Redhat, in no small part to support an online bookstore and microsoft's cloud computing efforts. What a time to be alive.

I kid but the ABI seems like where the whole things ultimately headed. The non systemd segment is larger than you initially suspect. Google alone has enough of a stake between android, chromeOS et al.

JackRabbitSlim··on OpenIndiana Hipster 2019.10 is here – openindiana
potato potato. They are using (some of) the ZFS on Linux code at this point anyway.
JackRabbitSlim··on Snopes Under Legal Attack from Salon.com
By the same token; on average, more intelligent and less sheltered people tend to be more gullible.

https://www.sciencedaily.com/releases/2006/05/060523072353.h...

Careful with that word "gullible" - I do not think it means what you think it means.

JackRabbitSlim··on Flint’s Children Suffer in Class After Years of Drinking the Lead-Poisoned Water
https://www.ncbi.nlm.nih.gov/pubmed/15305761

https://www.ncbi.nlm.nih.gov/pubmed/17451672

https://www.ncbi.nlm.nih.gov/pubmed/20390814

This is why specifically lead is highlighted.

Just more of the extremely high cost of being poor.

JackRabbitSlim··on The Windows Update Marathon in a VM: From Windows 1.01 to XP
Given the relative lack of sophistication of Access databases migrating to literally any other RDBMS isn't very hard. MS offers an Access(and mysql,postgres,oracle) to MSSql converter for free. You may have to manually port stored procedures but it's not like MS doesn't give a fuck.

https://www.microsoft.com/en-us/download/details.aspx?id=542...

Cheap bullshit, not technical limitation, is at the heart of this level of "compatibility" issues.

JackRabbitSlim··on I Got Access to My Secret Consumer Score
The issuer and arbitrator are, if not the same entity outright, are so far in bed together they should be common-law spouses. Let me explain one of 2 possible outcomes based on socioeconomic factors.

A) you have money to keep a lawyer on it; No problem.

B) you don't have money for a lawyer; Tough shit.

Nothing beyond real unilateral enforcement of the system already in place is required.

JackRabbitSlim··on Dependency injection is dynamic scoping in disguise
The value of the unit test is only as good as the (mock) data you feed it. Your mocked object is great and all your units pass; A user asks for the bathroom and the bar burns down because the bathroom was never mocked. What value was added by that passing unit test?
JackRabbitSlim··on The most successful people are just the luckiest, a new computer model confirms
No. Most IQ tests top out around 130/160. IQ score isn't linear, its closer to logarithmic. It's designed specifically to keep 100 as the mean average so that <80 is retarded and >130 is genius.
JackRabbitSlim··on “We have no reason to believe 5G is safe”
We have already solved all the worlds problems, unified quantum mechanics with classical physics, cured cancer and figured out how to factor primes. None of these works will ever see the light of day or be taken seriously because of the sources.

That may sound like hyperbole but somehow I doubt it's far from the mark. Tons of modern advances were from novices or unaccredited. Flight, Relativity, Baysian and Boolean logic; Two hicks, a patent clerk, a preacher, and a self-taught math nerd.

JackRabbitSlim··on TurboTax’s 20-Year Fight to Stop Americans from Filing Taxes for Free
I would sure as fuck would blame TurboTax, assuming you filed with them. Why else would you (be forced to) pay them if they can't perform their primary function of navigating overly complex tax law correctly?
JackRabbitSlim··on Depressed People See the World More Realistically (2017)
Yep. Our cognitive deficits and delusions are just normalized in society EG; "Meritocracy" and the American Dream. Theirs are sensationalized and mocked not because it's wrong but because it's not normalized.
← PreviousPage 4 of 5Next →