HNHacker News
TopNewBestAskShowJobs

RaleyField

216 karma · joined November 21, 2014

submissionscomments
RaleyField··on 7-Zip: From Uninitialized Memory to Remote Code Execution
> Why is that asking too much?

Dunno, just as with FB/CA, users have agreed to what befell them. Relevant extract from LGPL 2.1: "THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU."

EDIT: /s, ...

RaleyField··on 7-Zip: From Uninitialized Memory to Remote Code Execution
Why am I getting downvoted? I sincerely wonder what is so objectionable in my comment. Most uses of 7-zip are one-off events that last around a minute long. Most users aren't decompressing terabyte-range files. It makes no fracking difference to users if they have to wait 5 minutes or 1 minute. But it makes a difference if they receive 7z archive and get their bank account cleaned because the author prematurely optimized his program on a 20 year old compiler. If there was ever a reasonable situation where security flags could be disable then client-side decompression utilities aren't one. Anyone who needs that 5% performance improvement can compile the library themselves. This is what is wrong with this industry.
RaleyField··on 7-Zip: From Uninitialized Memory to Remote Code Execution
> no one

Plenty of people recommend Firefox despite it sharing processes between tabs. More than 10 years after MS sandboxed IE.

RaleyField··on 7-Zip: From Uninitialized Memory to Remote Code Execution
For virtually everybody even 500% slower would be acceptable. 1% is 10 second, one-time cost, which is objectively a fool's bargain.
RaleyField··on Void Linux project leader has disappeared
This all seems incredible.

> They also wanted to erase me from the history of the project. I was wiped out of the AUTHORS file.

If your characterizations are accurate they defrauded your users as well and in a major way. Many of your users wouldn't wish to continue using your software if its leadership got changed in a deceitful manner. If I'm reading this correctly they were pushed essentially a fork they haven't agreed to. Care to name names in case some users on HN fell pray to this fraud and possibly provide proof that what you allege did occur?

> I was wiped out of the AUTHORS file.

INAL. If they wiped your name from license text then you may also have a strong case for copyright infringement as many licenses require attribution.

RaleyField··on Microsoft Convinces Judges to Jail Man for Copying Software It Gives Out Free
>MS didn't really lose any money from this but they claimed that they did.

Users potentially have. End users were deprived of genuine restore cds.

RaleyField··on A Lengthy, Pedantic Review of Ubuntu 18.04 LTS (Bionic Beaver)
> People seem to forget that Ubuntu is just the front door. You can totally turn all their crap off

The issue is trust. I don't like my companies trying dark patterns on me, even if it's in ToS.

RaleyField··on A Lengthy, Pedantic Review of Ubuntu 18.04 LTS (Bionic Beaver)
> Since then, I'm a happy Linux Mint user.

Mint defaulted DNS server to OpenDNS.

RaleyField··on A Lengthy, Pedantic Review of Ubuntu 18.04 LTS (Bionic Beaver)
Hold me back. The installer is over http.
RaleyField··on A Lengthy, Pedantic Review of Ubuntu 18.04 LTS (Bionic Beaver)
> which gets Wayland somewhat right

Wayland has been in development for 10 year, let's hope they fix it in the next 10.

RaleyField··on Used PHP in a Hackathon was made fun of and it made me feel really shitty
This passes for closures in PHP:

    function ($arg) use ($capturedVariable) {
        return 1;
    }
I rest my case.
RaleyField··on Facebook has auto-enrolled users into a facial recognition test in Europe
Can I apply to YC if I turn this text into a template? Fortune 500 company right here.
RaleyField··on Facebook has auto-enrolled users into a facial recognition test in Europe
Nothing happened last 100 megabreaches, why would now be any different? The public doesn't care. Only media cares and only because Trump benefited.
RaleyField··on I built a progressive web app and published it in three app stores
> slightly

Dude what are you on about? VirtualBox is 1GB minimum, better 2 and has to virtualize gfx card, meanwhile electron is talking to gfx drivers directly and takes 100-200 MB if used correctly.

RaleyField··on Over 65,000 Home Routers Are Proxying Bad Traffic for Botnets, APTs
Your post prompted me to check my own Even Viewer. After some frenzied searching for the meaning of "Remote Desktop Services" entries in my own logs I figured that alarm seems to stem only from unfortunate naming of events that LocalSessionManager drops. As this document describes[0] and after confirming with another account the events are generated when one account wishes to run a processes under another account ("Run as administrator/different user" functionality). It might be that Windows Update triggered this on your computer, consider also that Windows Update sometimes updates third party drivers and one wouldn't expect they follow all best practices.

[0] https://docs.microsoft.com/en-us/windows-hardware/customize/...

RaleyField··on Google Workers Urge C.E.O. To Pull Out of Pentagon A.I. Project
> lawless society

Things aren't black and white. Every country is lawless to a certain degree. Otherwise there wouldn't be any robberies in countries that aren't "lawless" (whatever that means). One difference between EU and US is that a robber has a decent chance of being shot in US and not in EU meaning you become a sitting duck the moment you stop living the socialist life that state deems appropriate.

RaleyField··on My Sony "smart" TV has updated itself and tried to force me to use a new app
Buy Nokia if you need Android, you get only first-party shite that Google provides. And it receives updates.
RaleyField··on My Sony "smart" TV has updated itself and tried to force me to use a new app
Why do you think most Android phones stop receiving months after release and flag carrying ones one or two years after release? And what firmware in a HDMI decoder is supposed to be fallible? And why can't updates be supplied via USB stick.
RaleyField··on My Sony "smart" TV has updated itself and tried to force me to use a new app
> will ever include something as ridiculous as samba.tv

Pleasant surprise:

Microsoft Store -> "..." button -> My Library.

RaleyField··on ThinkPad X1 Carbon 2018 review: The only laptop in a professional’s paradise
Might be against terms but it pisses me the fuck off that Superfish[0] incident has been forgotten, by people that should know better. No, Ars Technica, it's not professionals' paradise as long as it's being produced by the same gangsters.

[0] https://en.wikipedia.org/wiki/Superfish#Lenovo_security_inci...

RaleyField··on Mozilla’s Servo Team Joining Mixed Reality
> They are deeper into the matter than both us

Or execs are driving a bus into the wall. It wouldn't be the first time that happened for sure.

> I'm also not aware of Chrome being less explodable.

It used to be. It only took them 10 years to enable sandboxing.

> with its malware-filled extension store

And no rational person installs extensions from it for that reason without first checking who stands behind the extension.

> then it has access to 1/4 of your tabs and therefore might potentially be able to steal sensitive data

So essentially not equivalent.

RaleyField··on Mozilla’s Servo Team Joining Mixed Reality
It's helluva more completable then any VR project Mozilla is going to try. It will be another Firefox phone project.

And you don't have to repeat 20 years of Firefox to complete Firefox, a lot of it were dead-ends like XUL (themed GTK would do), a lot of it were non-essential features like Pocket and a lot of it were rewrites and mistakes that they won't have to repeat and like you said being written in Rust should speed things along. Lastly, I don't care if Servo is released standalone or if Firefox gets replaced by Servo like the ship of Theseus, all I care about is browser that is less explodable, otherwise I'll continue on Chrome.

RaleyField··on Mozilla’s Servo Team Joining Mixed Reality
Military has had their HUD which is a form of it. I predict you could sell AR/VR only to niche consumers and military and it will remain a gimmick for consumers like 3D television was. So it's a great move for Mozilla if their thought was joining MIC..
RaleyField··on Mozilla’s Servo Team Joining Mixed Reality
Am I the only one thinking VR for consumers won't happen for the same reason 3D television didn't happen 5(?) years ago?

It's too clumsy. If you aren't gonna walk with it then it's 360 display that makes you vomit, and if you are gonna walk with it not every consumer has huge empty room where that's feasible. Most of us have couch or desk at home where we consume media, not empty warehouse. I predict whatever Mozilla thinks they are doing it will fail for the same reasons Google Glass failed spectacularly or why after years already spent on VR I don't see anybody outside koolaid-drinking techies owning one set.

Mozilla has one good consumer project that can realistically be completed (browser in type-safe language) and getting the team behind it bogged down with tech that's immature and doomed to failure is unfortunate.

RaleyField··on Hands-On with the Nokia 8 Sirocco: Reviving Nokia's 'Dream Phone' Concept
That's the new 3310. And also, why go to the moon when you can climb Mount Everest?
RaleyField··on Electron 2.0.0 beta
They can afford it. They can also afford to put a man on the moon, but it isn't necessarily financially reasonable for them to do so. Think of Microsoft as a collection of teams, each team can't afford to spend "Microsoft" money on its project unless its strategically important. The fact that we don't have native app probably indicates that Microsoft thinks Skype is past its peak of popularity. Thinking of many competing products I understand why.
RaleyField··on Best practices for user account, authorization and password management
> USED

FOR YOU

RaleyField··on Wine 3.0 Released
Decent considering the magnitude of the needed effort. I use it to occasionally play Age of Empires 2 on Steam running over Wine. It is playable, but has still some bugs. For example embedded browser doesn't work with Steam and there's this years old bug, for which there is a patch that is ignored by mainline, that makes your view scroll sideways.
RaleyField··on Inventor Claims to Have Solved Floating Point Error Problem
Ideal scenario are inventions that _require_ billion dollar investments to be discovered (aka big pharma). Anything that can be reinvented by chance independently without much effort if there is demand for it shouldn't be patentable. Probably everything concerning representation of floating point numbers should fall in this category.
RaleyField··on In Germany, online hate speech has real world consequences
To people downvoting - you are all a bunch of morons. And e.g. this is an insult that is sanctionable under section 185 of german criminal code as it is mentioned in the new NetzDG act which would make ycombinator liable to 5m€ fine should they fail to remove it under certain circumstances. This is why the law is unjust. Now even though I don't reside in or don't use services from companies residing in Germany I'm strongly encouraged to refrain from pointing out morons amongst you because state actors are strong-arming companies they shouldn't have jurisdiction over.
← PreviousPage 4 of 13Next →