HNHacker News
TopNewBestAskShowJobs

_o_

578 karma · joined January 10, 2018

submissionscomments
_o_··on JavaScript is Good, Actually
I agree. DOM will come, thinking that GC can not be developed in language the browser (and javascript) is built in is a bit naive (not to mention GC is a complex solution for simple non-problem, I would rather use malloc/new and free/delete + destructors than relying on Terminator Skynet ripped AI doing this really simple task - tribute to java and inability to free memory when needed! Anyway with each tab running in separate process, system will take care about memory leaks ;) ) while the runtime - the last time I checked, the CDNs were serving javascript libraries over mb in size and I really see no problem for them serving python runtime, while for c++, the runtime can be the browser itself and even if you pull in libc or proxy to the existing browser functions, this can be really, really small. Believing that code, that was designed to be human readable (as js), can be shorter than the opcodes doesn't really fit here.

I have heard this runtime considerations before but they are taking into account that someone will run webassembly compiled JRE in browser (and I am sure that right now, there are some freaks trying to achieve that). But there is still good old C++ (or Rust) not as productive as scripting languages but this is just due to much less open source "technological stack" (or some might argue, tribute to low quality of software today, "technological garbage") rather of not beeing capable of beeing competitive.

I think that the coolest trick that web based technologies pulled out was to convince the world, that the whole GUI needs to be primitive, simplistic, as they were unable to create something that desktop applications were doing for decade (speed/size considerations) and it might just happen that we will return back to owner drawn controls, where you wont be able to make distinction if app is running locally or in browser (no, I don't mean Electron, pun intended). There js will be unable to compete.

Anyway, push for webassembly is not here as corporations want to do something good. They want to push all computer users into old mainframe scenario, where you would have to rent space and cpu in a cloud and have just dumb terminal and javascript has hit its limits to replace desktop environment as it is, even with Windows Metro look (another simplification of GUI, done for mainframe scenario, Windows 365 are not far away)

Javascript was usefull in era of simplistic web pages as a small hack into html, but for next step we need something more and here there are other languages that can offer much more but are now limited to running in backend as they don't have browser support. But this will change with webassembly.

_o_··on Breaking US law by not extending GDPR rights to US citizens
“The Civil Rights Act of 1964 prohibits national origin discrimination. Often that means banning polices that have a disproportionate advantage for people from certain countries. If the courts accept this line of reasoning here, that means companies are underestimating compliance obligations by orders of magnitude,”

US, you might thank Europe later :)

_o_··on Australian regulator investigates Google data harvesting from Android phones
I can tell you a bit more:

- after stopped using Google Play services/framework and replaced it with microg, battery life improved for 30% with same programs beeing run and same settings without losing any functionality, this is the most obvious part that something is going on and it is hard to deny. I never used (while on google play) any syncing, gps fix and so on. Meaning exactly same settings, same programs, no google applicatios (maps,...) same AOSP rom, not even factory resetted in between, just no Google Play presence on same phone. I switched to microg as I have figured out that whatever I do can't stop the Google Play services/framework communicating with google (firewall, xprivacy,...)

- there are hidden sync in Google Play that can't be disabled and are syncing regardless of your settings (https://www.reddit.com/r/Nexus5/comments/270axz/enabled_reve...), like Location reporting (not the one visible, there is second one, you will need root to see it, you can disable it but it will automatically turn back on after a while).

- DNS is defaulting to google dns 8.8.8.8, it is overriden in most cases by router settings but still.

It is up to each person to decide what this means but I would seriously suggest looking at https://lineage.microg.org/

_o_··on GDPR will pop the adtech bubble
Don't worry, I am sure it wont be abused. The whole fearfull effect was created by adtech companies trying to create public outrage and paranoia to pretect their money source. Be sure that there are going to be some nasty penalties for greatest violaters (like online dating sites) I have noticed a lot of them is packaging GDPR into terms and conditions and privacy policy changes and those will have to get a fine, but I am sure warning will come first. But as one of ICO said (UK?), "We will always try to use carrot instead of stick, but some companies are carnivores, they don't eat carrots."

Also I am sure, half of world will have similar laws in next few years. Private data invasion just went to far, this has to be stopped.

_o_··on Germany adopts first ethics standards for autonomous driving systems
Yes this is a real problem. With the human driver this is based on his reflexes (or self preservation). The self driving system changes that, someone needs to program (or learn) software to behave one way or the other, either killing the driver or killing people. But the question is if customers will buy car that might harm them deliberately or if country will allow selling of cars who deliberately harm people to protect the driver. This one is not easy to solve, currently the self driving industry is ignoring it, but it will have to be resolved.
_o_··on Tesla’s giant battery in Australia reduced grid service cost by 90%
If I understood correctly, they are using batteries in same manner as pumped storage:

https://www.energy.gov/eere/water/pumped-storage-hydropower

We have a few of those for decades, it is actually quite simple, when there is surplus of el. energy it is used to pump water on a hill and acumulate it there. When you need it, the water is than used to generate el. energy. This is the traditional way of flattening the spikes in el. grid.

Now I wonder why the batteries were choosen instead of water, are they cheaper? Does it acumulate more energy on less space than water, it is due to efficiency (there is some loss when you pump water up) or for Austrialia, the water based storage is just not an option (not enough water / hills)?

_o_··on Tesla’s giant battery in Australia reduced grid service cost by 90%
Hm, I wonder where they will get enough lithium, or they are using some other technology?
_o_··on Never Write Your Own Database (2017)
It was actually simpler, I have packed from and to range into uint64, added data offset, ordered at generation of db file and searched using bisection. Used the fact that ip is just a uint32 and range can fit into one register on 64 bit machine. Fixed size range (+data) enabled me to calculate position in file so bisection was simple.
_o_··on Never Write Your Own Database (2017)
"A database is an organized collection of data."

By definition. First sentence in wiki. I don't know what are your definitions.

_o_··on Never Write Your Own Database (2017)
Well depends on the case, I needed a fast ip to country resolving, really fast one. I did my database in C for it and it was 120 times (yes!) faster than fully optimized postgres table, not to mention memory, disk and cpu footprint.

Custom made database for just a specific problem can be a lot faster than generic one. But depends on your knowlidge.

_o_··on De-Googling my phone
Well, as long you are using only xprivacylua, it shouldn't be a problem. I have reviewed the code for it and netguard (doesnt need root) and it is clean (for netguard there are some callhome functionalities, but it doesn't submit anything relevant back or doing something fishy - I am talking only for paid version). Also Bokhorst is donationwaring it, so there is a money trail to physical person.

Regarding softbricking, TWRP should solve that.

_o_··on De-Googling my phone
Try it. Once you have TWRP on your phone, you can backup your whole phone (including ROM) to SD card and later revert it back if it doesn't work.

I can't tell without installing and I have strict policy of no google / facebook (actually anything related with social media) apps on my phone. Or try to find OSS alternative

_o_··on De-Googling my phone
Maybe I can help, I have written this in google context, but it is general privacy enabled configuration.

This is what I am using: https://lineage.microg.org/ (get rid of google play (and save 1/3 of battery)) apps have a dependancies to google framework and just not having it breaks lots of stuff (this is google true vendor lock-in). Microg is opensource reimplementation of it, but it needs patches into android to fake its file signatures. And lineage microg takes care about it)

First thing, get rid of your gmail/android account, register new account with 3rd party email provider. If you are buying phone, check xda-developers which has most support from ROM builders as you don't want, for instance, Samsung ROM. Only than go for hw specifications. Root phone (don't be afraid, it is nothing special, companies are scaremongering here), flash recovery TWRP (imagine it as "bootloader" for android), flash lineage microg.

From here, you start playing with OS.

- Replace dns server (root required) 8.8.8.8 with other (I use my own but there are plenty privacy oriented like ccc.de)

- Install yalp store (replaces play store, buy things using browser, if developer drm doesnt support verifying that you have bought its app, break it using lucky patcher or demand money back)

- Install xposed framework, install netguard, install xprivacylua (one of rare developers I trust for this, due to his privacy work), pay him donations to get pro versions (I have my own versions of those two built and a tad modified)

- use netguard logging to block all the fishy urls that system is calling (gps service, block complete network access,...)

- take special care about firefox, block all privacy details using xprivacylua, install webapi manager add-in, learn to use it.

- You have set up base os now start using it and block everything that is trying to be contacted using microg. Lineage is by no means clean but you can silence it. Dont trust system apps, broadcom drivers are, for instance, contacting their servers. Dont start installing apps until you have done it, later you will get huge noise from apps. Take a day or two and just use phone normal features blocking everything that seems faul (google ntp servers,...)

- For those who havent noticed it yet (or reversed a few of apps), most of android applications are demanding crazy lot of permissions. The reason is that in they have ~1/3 of developer code any 2/3 of spying code, from ad providers to trackinb and analytics and simply code that "just" needs to access your contacts =/. So... for every application you install, start it with everything blocked (netguard + xprivacylua) and work your way trough allowances. Don't give any app allow for internet if it doesn't need it, fake all the details to app that doesnt need them (South Pole is a nice place to be for gps coordinates)...

To really unhook yourself from google, you will need a server, I came to the point where all google domains are blocked (I mean ALL, not just google.*), all my comunication from all my computers/devices is passing server (i have two ways of doing it, either vpn or ssh tunnel) where communication is cleaned, http (+https mitm) over squid with huge blocklist, caching cdns forever,... and having squid in separate routing table (ok, its freebsd fib but close enough) with openvpn client, so also my ip is gone. I am completely self hosted (own "cloud" for webdav,webcal, files; mailserver; searx;...) and...

.. I am not missing anything that google has to offer, I am using android apps, but without google.

I would really recomend doing it, if you aren't familiar with networks, OS,... it will take a year, two, five, but you will learn a lot.

I have probably forgot about lots of details but please ask it, if you are interested.

Just for a taste, my google data export is 28kb (bought apps,...) after few years. What about yours? :)

Some links you might use:

https://lineage.microg.org/

http://repo.xposed.info/

https://www.xda-developers.com/

https://www.netguard.me/

https://github.com/M66B/XPrivacyLua

_o_··on Drive-by Rowhammer attack uses GPU to compromise an Android phone
Well webgl, canvas and audio functionality of javacript are anyway nice to be disabled due to browser fingerprinting, now there is just another good case to disable webgl. But this is getting crazy, I think that todays CPUs, need a serious step back and rethinking.
_o_··on I've spent the last two years building a new email client
Oh its electron :( Sorry not for me, please rather make a roundcube replacement out of it.
_o_··on Firefox will show sponsored content
Looks like I will need to do some code reading and debugging to do - starring sharply at mozilla. For now I am stopping any donations and I will resume them if you are clean, I would really like you to get unhooked from google and I am prepared to tolerate this untill my browsing habits leave my computer. And adding google as "safebrowsing" provider wasn't the nicest thing to do.
_o_··on Introducing .app, a more secure home for apps on the web
But not only to take care of internet security, but also to protect our children from terrorist and pedophiles, right? I wonder where I have heard similar use of wording that introduced a bunch of new laws harmfull for anything related with freedom...
_o_··on Introducing .app, a more secure home for apps on the web
I really like the .app idea, it will save me some time.

echo ".app" >> lists/google/domains

/usr/local/xxxxxxxxx/ufdbConvertDB.sh

service ufdbguardd reload

Problem solved. It is just a matter of fashion, black or white dress? Last few years, black fits better.

_o_··on Use a Mikrotik as Your Home Router (2017)
I am running mikrotik as home router for... I think 2 years and am perfectly happy with it. It is extremly stable and you can configure it into every detail (to the LEDs and beeper... and I am not joking). Microtik is also very fast with updating vulnerabilities. But I wouldn't recomend it to everyone, for configuring it beyond basic configuration (like QoS), you need to understand networking, it is not a consumer grade product.

Bottom line, great routers, packed with features, not simple to configure.

_o_··on StreetLend.com shuts down, citing GDPR regulations
Just for the sake of not relying on google to do their work and not having to rely on someone who has huge conflict of interest with anything regarding user privacy. But regardless of that I would offer a consent pop up, for this site it is trivial, you are surprisingly clean :) Excuse me, I will refrain from further commenting about GDPR, I am sick of downvoting and quite frankly, people will figure it out on their own.
_o_··on IBM is not doing "cognitive computing" with Watson (2016)
I noticed this in the news... I can't believe someone actually tryed this.

Tesla owner faces 18-month ban for leaving the driver's seat https://www.engadget.com/2018/04/29/tesla-owner-faces-road-b...

_o_··on StreetLend.com shuts down, citing GDPR regulations
Legitimate interest is one of the hardest parts to actually go for (I wouldn't use it for anything that is not seen by naked eye from the Moon) and you can argue that analytics improves the "user expierience" while on the other side the user will argue, that it is not necessary for the site functionality to work. And it isn't. And this is the fundamental condition for legitimate interest. So the "expensive" lawyers are wrong but I think they are just trying to push the limits to see how far they will be able to go.

Something about legitimate interest: https://youtu.be/-stjktAu-7k?t=4563

Let me just point to one sentence: "Processing conducted due to "faulty" balance test (your interest vs. person fundamental human rights) may expose the controller (you) to highest level of fines". I wouldn't gamble here and go for local analytics (again piwik is simple to install and use) or require consent from the user.

ePrivacy is not here yet, GDPR is and I doubt the analytics will be excluded as it is tracking in its purest form and you can set up your own software, no need for 3rd party processor here. It would literally destroy the GDPR principles which I doubt ICOs will allow.

For my (user) perspective: I don't have problems giving consent to particular site if they don't give the data to any 3d party processor, from google, fb, amazon to various ad networks. Bottom line, the problem is not for various sites to have my PII, but I have huge problem with agregating those data by single entity and I will never give consent for that (read as: google analytics).

_o_··on StreetLend.com shuts down, citing GDPR regulations
Congratulations (btw, I really like the guy explaining it)! Now you should probably understand the need for it and why multiple clones are going to start to pop out around the world, not to mention that you know more about GDPR than 99% of people beeing negative about it.

Guilty... is really not something special, IRS anyone? ;) Did you catch something else? Something useful maybe? About borrowing a car for instance? :)

The GDPR is actually late, I have a few IoT devices and I verify them by isolating them on network and sniff out communication (mitm on wifi and old school 10 port hub (yeah, the one screaming everything to all ports) for wired. It is a sad sight, even if they have absolutely no need to contact outside servers (I would never have a device like Siri in my home) they still do, another case would be broadcom drivers on android calling home. Someone has to stop this madness.

I know a lot of people are pissed off due to GDPR, but I will gladly ask them again in 10 years. I think they will change their mind.

_o_··on StreetLend.com shuts down, citing GDPR regulations
One thing is completely curious to me. All around the thread there are some people saying that they will block EU users.

I wonder how people from other parts of the world are understanding this and how do they look to the site like that? I mean, this legislation that is designed to protect people and their data is making them such a problem to rather block roughly 500 milion people. I personally would have a huge trust issue, but this is not about me, what do non EU, who don't run any site (conflict of interest) guys think?

I would for instance rather put a huge mark on all pages "GDPR compliant, protecting data even for non EU visitors" or something like that and try to get some money out of that. But that is just me.

_o_··on StreetLend.com shuts down, citing GDPR regulations
Please sit down for an hour and watch this: https://www.youtube.com/watch?v=-stjktAu-7k

It is by far best GDPR presentation and explanation of lots of misconceptions. Please report back what you think about GDPR when you finish, I am curious it you will still feel threatened.

_o_··on StreetLend.com shuts down, citing GDPR regulations
Yes people do think, that selling/collecting their personal data to other companies into their disadvantage should be illegal.
_o_··on StreetLend.com shuts down, citing GDPR regulations
True, they are not. The opt-out analytics is not allowed and they are sending the data to 3rd party (google) without user consent. I could also argue about some minor things, but allowing google to track users without consent is a major breach (but they can also simply fix it by using for instance piwik).

https://techblog.bozho.net/tracking-cookies-gdpr/

_o_··on StreetLend.com shuts down, citing GDPR regulations
Unfortunately there is no more site to prove it, but I would imagine something like this. GDPR on its own shouldn't be a problem for Streetlend, there was something more, users data releated and how to make money off them.
_o_··on StreetLend.com shuts down, citing GDPR regulations
Don't use people personal data and dont allow others to spy on your users (ads, analytics,..) and you wont need to do anything.

Work in best interest of your users and you will be compliant. I don't think that this is harder than food safety regulations.

By the way, the technology is changing fast and a strictly defined law with "do" and "don't"s would be downplayed in weeks. that's why GDPR is conceptual (and thats why everyone is pissed off, as they can't downplay it - how many sites have you seen that are giving you a fair cookie choice?)

_o_··on StreetLend.com shuts down, citing GDPR regulations
I can shutdown my site at any given moment, citing attack from Mars. And? I think that GDPR was just an excuse, if this would be a booming bussiness, he wouldn't have problem adjusting to GDPR.
← PreviousPage 2 of 6Next →