HNHacker News
TopNewBestAskShowJobs

abritishguy

1,581 karma · joined April 9, 2013

Daniel Chatfield

Security Engineer at Monzo Bank

submissionscomments
abritishguy··on EBay to Spin Off PayPal
Put your money where your mouth is, I will bet £100 that this won't happen.
abritishguy··on Can We Trust Uber?
I'm not sure about NYC, but it is cheaper in London to get an Uber than a taxi.
abritishguy··on Airlines crack down on ‘mileage runs’
I agree it doesn't work but with infinite money you can win any finite amount of money. Your assertion assumes that you don't stop after a win.
abritishguy··on Airlines crack down on ‘mileage runs’
It is pretty basic maths that will demonstrate that this system doesn't work (as in it doesn't "beat" the casino).

You say you won $10k, but how much money did you have? You said at one point you had $60k on the table so let's assume you had just that - if you put the entire 60k on something which has 7:6 odds then the odds of you winning are high but exactly what you would expect given the winnings compared with the bet.

When you play with the martingale strategy your odds of winning aren't any better, you just think they are because you don't realise your entire pot of money is actually at stake.

abritishguy··on Standard ML Family GitHub Project
Do people still use ML? It has some historic significance as a programming language but seems completely irrelevant now (although still taught as part of the University of Cambridge CS course).
abritishguy··on Official Go support
youtube.com

Most of the places it is used are not public facing stuff they are low level network systems which is what it was designed to be good at.

abritishguy··on Official Go support
>Meanwhile system software will continues to be built in C and C++ since Go addressed some real problems with system programming but created new ones.

Many new system projects at Google are using Go over C and the trend is such that more and more new projects are using it.

abritishguy··on Official Go support
your entire comment is crap but the following bit definitely is:

>Go isn't very successful at Google

Go is used heavily for networking and server stuff at Google. The entirety of dl.google.com runs on go (ported from C).

abritishguy··on Gcloud – Google Cloud Client Library for Node.js
Hmm, it's got a few bugs but I guess that can be expected in a first release.
abritishguy··on Apple – Privacy – Government Information Requests
The baseband processor has no access to the parts of memory it is not meant to, possibly some of the early iPhones did but currently they are properly isolated.
abritishguy··on Apple – Privacy – Government Information Requests
Well it certainly doesn't work like that on an iPhone.
abritishguy··on Whited00r: iOS Community Custom Firmware
Not that definition of hacking! I mean seriously given the title of this website I didn't expect that.
abritishguy··on Whited00r: iOS Community Custom Firmware
I have 2 android phones and a windows phone, I might consider switching to android when android L comes out but currently I just don't get on with it (used it as primary phone for 2 months and couldn't wait to go back to my iPhone).
abritishguy··on Apple – Privacy – Government Information Requests
But the laws that makes them legal are not secret.
abritishguy··on Apple – Privacy – Government Information Requests
Ahh yes, I assumed we were talking about messages.
abritishguy··on Apple – Privacy – Government Information Requests
That sort of order is out of scope of anything a US court can order, and I believe that an Apple employee would leak it before they complied with such an order.
abritishguy··on Apple – Privacy – Government Information Requests
>the government can install spyware themselves

It would have to be an OS update since applications don't have access to that stuff, even if signed with an apple key.

abritishguy··on Apple – Privacy – Government Information Requests
It is only protected with just the passcode when on the physical device - Apple cannot bruteforce it because they don't have the capability to access it remotely (they can only wipe it).
abritishguy··on Apple – Privacy – Government Information Requests
>keylogging code on the SIM card or baseband processor

That won't work.

>Has Apple publicly claimed that they will also refuse to push individualized compromising code updates to devices on demand by gov't authorities?

No, and even though I strongly doubt the government would even try to do this and even more strongly doubt Apple would comply, their new tech (apple pay and touch ID use hardware support to even protect against this sort of breach which shows that they are certainly thinking about it). I'm pretty sure Apple won't even have the ability to silently push an OS update (if they did then someone could find out because it would be in the OS and then all hell would break loose) - it would have to be accepted by the target which means there is a reasonably large chance of detection.

abritishguy··on Why I changed my mind about Node.js
I think the author is in the "honeymoon" period.
abritishguy··on Whited00r: iOS Community Custom Firmware
I have an iPhone 5 and I'm not going to upgrade until I absolutely have to or a new phone with at least two of:

- same size screen as iphone 5 & 5s

- really good battery life (STOP MAKING IT THINNER AND MAKE IT LAST LONGER!)

- some killer feature that justifies the ludicrous amount of money I will spend on a phone.

abritishguy··on Whited00r: iOS Community Custom Firmware
Do you see Apple doing something about it? Because I don't.
abritishguy··on Tim Cook on iMessage Security: It’s Encrypted, and We Don’t Have a Key
>And since it's proprietary software, they can trigger a resend of your recent messages to Bob.

Apple control iOS so they could just release an update that disables crypto and leaks all the messages - your point is irrelevant since they can't trigger a resend without an update to iOS.

abritishguy··on Where is Thunderbolt Headed?
[citation needed]

The GPU enclosures have been held up by Intel refusing to license them but not because of osx drivers, there are licensed thunderbolt peripherals that do not have osx drivers.

abritishguy··on Walmart and Best Buy Opt Out of Apple Pay – Required Point-of-Sale Upgrades
The card details were stored on the secure element but the pin was not and because the authentication is not done using the secure element it is trivial to bypass: http://cybersecurity.mit.edu/2012/10/google-wallet-overview-...

The current implementation of Google wallet stores your card details in a google server which protects against these attacks but is not a viable business model (google are making a loss on every transaction since they pay it and then bill the customer themselves).

abritishguy··on Walmart and Best Buy Opt Out of Apple Pay – Required Point-of-Sale Upgrades
If the technology that Walmart is backing only requires a software update to existing phones then it is not nearly as secure as apple pay.

A lot of people are comparing Google wallet and apple pay like they are the same thing - they are not. A phone with compromised firmware could leak sensitive data with Google wallet but not with Apple pay.

abritishguy··on Google Launches Cloud Platform for Startups
Any that use the CryptoNight algorithm
abritishguy··on Google Launches Cloud Platform for Startups
Depends on the cryptocurrency, he used bitcoin in his follow up to my comment. CPU mining of bitcoin is horrendous (you can get a cheap USB stick that can mine as much as an expensive i7 processor) but other cryptocurrencies were specifically designed to make the gap between GPU and CPU mining much smaller and make ASICs not economically viable.
abritishguy··on Google Launches Cloud Platform for Startups
Bitcoin isn't the only cryptocurrency.
abritishguy··on Google Launches Cloud Platform for Startups
Your calculations are horrifically wrong.
← PreviousPage 5 of 12Next →