HNHacker News
TopNewBestAskShowJobs

Phlarp

2,206 karma · joined April 4, 2012

I'm a web developer with a passion for building things and solving problems.

Minneapolis, MN.

submissionscomments
Phlarp··on Coinbase is reportedly selling geolocation data to ICE
How can you possibly claim to separate ethics from politics in a work context? The two are hopelessly intertwined.
Phlarp··on Whatever hit the Moon in March, it left a double crater
Static build-up is a big problem in space. Finding a path to ground gets more complex when you're in orbit
Phlarp··on SpaceX said to fire employees involved in letter rebuking Elon Musk
Does that boot taste good?
Phlarp··on “Crypto drainer” template facilitates theft
Apple Pay doesn't run as a browser extension with a nasty habit of granting bad actors full access to drain your funds in a totally irreversible way.

Does any of that fall under "user experience" for you?

Phlarp··on Hertzbleed Attack
The attack isn't nicely asking the computer "hey how fast are you running right now?" and then deriving the private key from that data. If that was the case the fix would be as simple as you laid out here.

This attack works by measuring the absolute (wall) time that elapses during many crypto operations and deriving the speed / private keys based on statistical methods applied to that timing data.

Side-channel attacks are by definition, attacks against unintentional information leakage by a machine. The laws of thermodynamics virtually ensure that side channel attacks will be a persistent issue as long as computers are made of matter and consume electricity, multi-tenant computing exacerbates the issue.

Phlarp··on Hertzbleed Attack
>Are we going to have to design our crypto algorithms entirely on SIMD instructions to combat this sort of thing?

There is likely still potential for side channel attacks. From a 'first principles' approach a computer is always going to leak information about it's current state (power, noise, emi, etc) and the methods / tools / techniques for analyzing that leaking information are only getting better.

The multi-tenant nature of modern infrastructure is the bigger issue in play here.

Phlarp··on Hertzbleed Attack
People in this thread: Just run the CPU at max boost frequency all the time!

Other people in this thread: Just disable turbo boost!

cloud providers: quivering over the cost implications of either.

Phlarp··on Hertzbleed Attack
As one example, SSL uses constant-time crypto operations, so the answer to this question is an almost universal "yes"
Phlarp··on Hertzbleed Attack
That is my reading of the text on the linked page.

>We have demonstrated how a clever attacker can use a novel chosen-ciphertext attack against SIKE to perform full key extraction via remote timing, despite SIKE being implemented as “constant time”.

Phlarp··on Ask HN: Co-Founder pivoting, what are my options?
Based on the OP it seems like one founder had shares and the other 'founder' had options still waiting to vest.

That's a pretty clear cut power dynamic no matter what the VCs recommend.

Phlarp··on Ask HN: Co-Founder pivoting, what are my options?
>My co-founder has written all of the code

>he holds a majority of shares

>My co-founder has decided he wants to pivot

>My co-founder has said he would be fine with me pursuing the initial idea

>asked my co-founder for rights to use the existing code in my new venture, he refused

Are you sure you are a co-founder? It sounds like you are an employee

Phlarp··on How we fixed the ozone layer (2021)
On the other hand, this is Dick Cheney we're talking about; an empathetic human response isn't something he's otherwise demonstrated in his business or political dealings.
Phlarp··on Elon Musk texts Larry Page about investing in Tesla (2018)
Consigliere maybe? When Larry wants something done he sends David.
Phlarp··on Twitter takeover battle: Elon Musk and Jack Dorsey turn up pressure on board
>it is not something you can do.

Says who? What's the penalty? Some silly fine?

Elon loves to do exactly that, he does it now just to style on the SEC with how rich he is.

Phlarp··on Elon Musk to join Twitter’s board of directors
You mean the lawyer that had previously deposed him for the SEC? My pet theory is it had nothing to do with this particular individual and all about setting a precedent to other government line attorneys (play nicely now, or I'll ice you out of BigLaw later)
Phlarp··on End the Streaming Struggle with Plex
Get Infuse for Apple TV, it's just a front-end app / media player, but it works much better and leverages your existing Plex server installation.
Phlarp··on Higher-income people are worried about the economy
Russia can't refuel trucks 30 miles across their own border, but I'm supposed to believe that their nuclear arsenal / command and control infrastructure is still oh so dangerous?
Phlarp··on Hackers claim to have breached Okta systems
Another possibility could be they didn't know about it in January and instead only figured it out sometime last week; at which point Todd Mckinnon sold 7600 shares of stock.
Phlarp··on Twitter shakes up its security team
It really feels like the CISO role has become less about the security posture of an organization and more about being a corporate whipping boy-- Predesignated as the go-to sacrificial lamb for when a public leak or government investigation comes knocking.

Hard to find longevity or stability in a role that exists to fail

Phlarp··on Zillow has listed 93% of the hundreds of Phoenix homes it owns at a loss
Raise the rent
Phlarp··on Nvidia cripples cryptocurrency mining on RTX 3080 and 3070 cards
Unless the miners are cutting off the supply at the silicon production level. What's to stop Antminer (or any other mining asic company) from paying 10x as much for a majority of TSMC capacity, RTX and Ryzen supply be damned.
Phlarp··on $365B wiped off cryptocurrency market after Tesla stops accepting Bitcoin
That has never stopped Elon before! "funding secured"
Phlarp··on Request for comments regarding topics to be discussed at Dark Patterns workshop
American debit cards generally don't have these protections, but American credit cards absolutely do have robust consumer protection mechanisms.

It's also a pretty big negative mark for merchants that get charge-backs issued against them, if just a small percentage of people used charge backs to cancel these "subscriptions" it would make their processing fees skyrocket or even get them dropped by the major processors

Phlarp··on Thoughts on a “HDD shortage” from an industry insider
Antminer S19 uses a 7nm process, so yes.
Phlarp··on Female Founder Secrets: Men Clamming Up
IANAL, but I suspect it's still going to cost lawyer amounts of money to defend yourself against the other party saying you broke NDA.

I always assumed that was the point of the document to begin with.

Phlarp··on Google Stadia shuts down internal studios, changing business focus
Seems like Google is really streamlining the process between optimistic launch of a new product and it's eventual demise.

Is anyone collecting objective data on the average lifespan of google products that aren't search, ads or maps?

Phlarp··on Class Action Lawsuit Filed Against Robinhood
Let's save these "as bad as the capitol riots!" hot takes until WSB organizes a protest that takes over Citadel HQ.

Trading securities and/or advocating for a free & fair market in which to trade those securities =/= literal violent insurrection.

Phlarp··on Class Action Lawsuit Filed Against Robinhood
Where are all the HFTs looking to take a rake for "creating market liquidity"

Sure looks like a rigged game to me.

Phlarp··on Robinhood is limiting purchases of stocks: AMC, Blackberry, Nokia, and GameStop
I don't have a position related to the question at hand, but I've certainly been observing closely over the last few days and for me personally it's pretty hard to shake the perception that a subreddit mostly specializing in financial market memes beat "the man" at his own game and now "the man" is changing the rules.

Meanwhile you're jumping on internet message boards to try and explain how "the man" is actually totally right in this situation and everyone should really go back to dutifully enriching him without questions.

Phlarp··on FAA issuing new rules to allow drones to fly over people and at night
Selfie sticks on subway trains present a far bigger privacy risk than fish-eye lensed sport-cams strapped to a flying lawnmower.
← PreviousPage 5 of 27Next →