Hacker News Reader

acebarryon Grocery bag comparisons of environmental impact

We have it already. It's called paper or cardboard

acebarryon Things people blamed on bicycles

It's not because of bicycles.

acebarryon Spotify deletes 70 Joe Rogan episodes

Jones is a well documented liar and grifter. This is not a difference of opinion.

acebarryon Spotify deletes 70 Joe Rogan episodes

Yet he is wrong about nearly everything else.

If you want a deep dive on Alex Jones and all his lies and schemes, the podcast Knowledge Fight has been documenting InfoWars for years.

acebarryon FBI subpoenaed Apple for data of Sci-Hub founder

The screenshot is from the person who received the email. It's unlikely an Apple lawyer would screenshot something like this.

acebarryon Wikipedia frequently-encountered sources, color-coded by perceived reliability

https://en.wikipedia.org/wiki/Wikipedia:Wikipedia_is_not_a_r...

acebarryon Show HN: TorProxy, a kernel module which routes all network traffic through Tor

It's a terrible idea to route all your traffic over tor. If you have any expectation of anonymity you'll be disappointed. Since tor does not do any application level filtering, it is easy for exit nodes to track you.

It's a neat idea but has the same problems as network wide tor routers.

acebarryon 'Silk Road Reloaded' Just Launched on a Network More Secret Than Tor

> Nobody uses i2p

Here is an analysis that was done less than a week ago. https://thetinhat.com/articles/2015/i2p-survey.html

TL;DR ~25,000 constant nodes, mostly in Russia and United States. With Russia having a lot of short lived connections.

acebarryon Freemail

A similar project is I2PBote[1]. It uses a similar DHT method for mail, but over I2P[2]. As with Freemail, this is inside of the Bote network only.

If the DHT doesn't suit you, I2P also runs a mail server in their network that can relay out to normal email. Ships with I2P by default.

[1]: http://i2pbote.i2p.us/

[2]: https://geti2p.net/

acebarryon Possible upcoming attempts to disable the Tor network

This is kind of how i2p does it. Currently i2p has like 6 "reseed servers" which bootstrap you into finding some other peers. Once you are connected to the network you then can contact "floodfill" servers, which are essentially a distributed form of the directory authorities. Floodfills are autonomously chosen routers on the network, and distribute other nodes to whoever asks.

acebarryon China collecting Apple iCloud data

> Do current browsers entirely prevent a connection to untrusted certs when HSTS is set? Yes. HSTS would not do much to prevent active MiTM. HSTS just tells the browser that it should only connect to the site over HTTPS. It does not mention which certificates are trusted.

It seems like you are hinting towards certificate pinning (https://en.wikipedia.org/wiki/Transport_Layer_Security#Certi...). Pinning would prevent rouge CA's from signing bad certificates, but pinning is hard to do on the web. It is mainly used with mobile applications from what I have seen.

Edit: Here is a list of pinned sites in Chrome, if you are curious. (https://src.chromium.org/viewvc/chrome/trunk/src/net/http/tr...)

acebarryon The New Yorker Strongbox

If they wanted to make a memorable address, they would have to run something like Shallot [1]. This is essentially brute forcing private keys until you find the public key you want. Depending on the name, that could take a very long time.

[1] https://github.com/katmagic/Shallot

acebarryon Wikileaks release "PlusD": Database of 1.7 million diplomatic cables

Usually when the United States federal government releases anything it defaults into the public domain.

acebarryon Instawallet Hacked

Instawallet always made it clear that no one should keep anything more than spare change there.

acebarryon Instawallet Hacked

Burner bitcoin addresses. When you loaded the site you got a fresh wallet with one address. It would help people stay anonymous.

acebarryon Using Silk Road

https://www.torproject.org/docs/tor-hidden-service.html.en

I set up a hidden service once to bypass a university firewall. It's surprisingly easy.

acebarryon Facebook logging to my account from a local IP address?

I had the same problem today around the same time (http://imgur.com/P7wUmro). Why would a local address be used?

Edit: I also use Pidgin, think that could be it?

acebarryon Wolfram Alpha Needs an Open Source Version

Are you planning on making it modular? If you made it something similar to what DuckDuckGo (http://duckduckhack.com/) does that would be very interesting. I would also contribute if that was the case.