HNHacker News
TopNewBestAskShowJobs

archivator

954 karma · joined April 26, 2010

Email: hn@delyan.me
submissionscomments
archivator··on Code Search API
To me, Github search is kinda useless. When I search for anything Android related (i.e. usage search for some framework type), I get a billion copies of the main Android source. The signal to noise ratio is almost 0..
archivator··on Android saves wifi passwords in plaintext to the cloud
If someone has the resources to obtain your Wi-Fi password from Google and is determined enough to get within range of your network, you're being targeted by a very dedicated adversary. Things like physical security, TEMPEST and listening devices become valid concerns. This is a highly unlikely adversary for the majority of internet users.

Note that non-targeted attacks (the type that leak password lists) are not a serious threat here.

archivator··on Android saves wifi passwords in plaintext to the cloud
You could in theory salt the primary account password with a new salt, derive a key from it and use that to encrypt the password list (sending the salt alongside it). This of course implies that the plaintext password never hits Google's servers, which it probably does.

In general, I'm not sure this is a valid threat model. If you're not trusting Bob with your Wi-Fi passwords, why are you trusting him with everything else? If anyone compromises Google, there's far more valuable data on your account than the Wi-Fi list. Even if that's all they gain access to, it's pretty hard to exploit remotely. If someone is targeting you at this scale, you have bigger problems to worry about.

archivator··on SculptGL - A WebGL sculpting app
If you're interested in the Geometric Modelling part of sculpting, Freestyle is a good starting paper - http://liris.cnrs.fr/Documents/Liris-5391.pdf
archivator··on The 7-bit Internet
Relevant talk: Meredith Patterson on Turing-complete protocols and weird machines - https://www.youtube.com/watch?v=3kEfedtQVOY
archivator··on Chrome 28 arrives with Blink, rich notifications for apps
Android has its own webkit-based browser. The Nexus-branded devices (Nexus 4,7,10, possibly the Galaxy Nexus) come with Chrome and not the Android browser.
archivator··on Just-released Fedora 19 adds native support for 3D printers
I've been using the KDE spin for ages and couldn't be happier with it! It's reasonably fast, highly customizable and gets out of my way.
archivator··on Uncovering Android Master Key That Makes 99% of Devices Vulnerable
The thing that makes this dangerous is the "system" certificate for core apps. If you hijack traffic to any update to such an app (and OEMs have a ton of such apps), you you can inject code before it's installed under "system" abs that's that.

No, you can't actually go poking into other apps' apks but how many people would press "update" if they see the package manager's "Installing Gallery update, no permissions required" dialog?

archivator··on Ostel: Encrypted Phone Calls
One of the screenshots shows ZRTP and AES-256/DH3k
archivator··on Video on Instagram
Anything from light trails, fading shadows, cross-frame colour effects to stuff I can't even imagine! The possibilities are greatly expanded, if you stop thinking of video as lots-of-images-one-after-another.
archivator··on Video on Instagram
The update hasn't reached the server around me, so I can't verify - are the filters really just the photo filters but on video? If so, I'm massively disappointed - they have a whole new dimension of data and they're doing nothing with it!

Yes, video filters are hard. That makes them worth doing.

archivator··on Reddit co-founder on NSA snooping [video]
I love how appropriate this is, given the title (and I assume content) of the book! :D
archivator··on Returning to Free Software: A Guide
Indeed! Which is why I said "software full disk encryption" in my OP. :)
archivator··on Returning to Free Software: A Guide
Right. The thing is, when you wear out an SSD, you get these enormous (multiple seconds) pauses that, if you're doing anything I/O bound slow you down to a crawl. Even opening a heavy web page can trigger them. Buy a fast HDD if you want consistent long term behaviour with FDE.

The reason FDE breaks SSDs is that the implementation in LVM works at the block level. To send TRIM, the filesystem says "this block is empty, tell the controller" but depending on a thousand things, among which are cipher mode, cipher block size and other minutiae, LVM will invalidate the TRIM command. Without TRIM, SSDs deteriorate rather quickly.

Personally, I understand why FDE is needed but I'm of the opinion that selective encryption (with possible plausible deniability measures) is a much neater, if more difficult, approach.

archivator··on Algorithms from the “Book”
Making a mathematical book in mobi/epub is a difficult problem but I'm surprised the publishers weren't aware of the difficulties.

Simple statements can be expressed in pure Unicode (though the Kindle fonts have incomplete Unicode support for the relevant blocks). Anything more than that has to be an image, which is the bane of digital publishing, since it won't scale with the base font size. epub 3 might be able to cope with it but apart from iBooks I don't know anyone else using it.

archivator··on Reddit co-founder on NSA snooping [video]
Ah, not available on Amazon UK, that's why I couldn't find it :(
archivator··on Returning to Free Software: A Guide
I'm surprised no one has mentioned that using software full disk encryption on an SSD is a really bad idea. It increases wear dramatically, completely invalidates TRIM and works against the controller every step of the way. LVM has an option that supposedly passes TRIM through but in my case I'm pretty sure it didn't do anything.
archivator··on Reddit co-founder on NSA snooping [video]
Will there be an eBook version outside Apple's walled garden (DRM-free, preferably)? I dislike dead-tree books, with their fixed typography and whatnot!
archivator··on Show HN: Invoice-o-matic – a free online invoice tool
For future reference, you can insert Excel tables (the type that do math) into your Word document. The magic of COM!
archivator··on The BBC's hi-tech failure: Don't Mention It
IIRC, their CMS was supposed to be the Holy Grail of video management. Centralized and decentralized storage, processing farms, search-by-image, advanced tagging, etc. Sounded quite impressive but from what I understand, there are now commercial solutions that have some of those feature sets. The way they explain it, when they started no one had these features.
archivator··on What is Microsoft smoking?
Slightly offtopic but can you point me to a description of said font issues? My Android Studio (IDEA) fonts seem fine (on latest Kubuntu and Fedora w/ KDE).
archivator··on Wuala: Secure Cloud Storage
From this perspective, tarsnap is even better - http://www.tarsnap.com/bugbounty.html
archivator··on Sound Sensor Failure
As someone with occasional Eustachian problems, I can relate to your troubles.

I assume you've tried all the air-moving exercises to equalise the pressure? Tongue pressing against the ridge behind your upper teeth, repeatedly try to swallow (this is the thing that works the best for me, though I've never had a complete blockage; it's called the Frenzel maneuver [1])

Looking at wikipedia [2], there are quite a few variations you might try.

If these don't do anything for you, go see a doctor. This is serious, if it's lasting for a week.

[1]: https://en.wikipedia.org/wiki/Frenzel_maneuver

[2]: https://en.wikipedia.org/wiki/Ear_clearing#Methods

archivator··on Google Abandons Open Standards for Instant Messaging
The option is still there on a chat-per-chat basis but they removed the "Turn history off by default" setting.

Edit: Actually, I don't know that "turn history off" does the same thing as that option, they just seem the same.

archivator··on Our XMPP services at DuckDuckGo
Not as simple as that. I actually took a look at the XMPP extensions list to see if I could replicate Hangouts on top of them. You'd need a new audio/video layer with support for centralised DSP, MUC and carbon copies at the very minimum. Not to mention typing notifications (do they work with MUC?), cross-client notification dismissal, automatic client priority assignment (if I'm using a client atm, don't ring all devices, just the one I'm using) and I'm sure a lot more.

Half of these things (e.g. carbon copies) are spec'd out but barely supported.

archivator··on If you love automation, why is your development environment manual?
There's the Mosh project (http://mosh.mit.edu) which seems fit for your use case. I don't have personal experience with it but it looks promising.
archivator··on French President announces pro-business measures
Huh, I've heard only good things about the startup scene in Berlin. What are some of the main issues from your perspective, if you don't mind elaborating?
archivator··on Why learning Haskell/Python makes you a worse programmer (2006)
The argument to Where() is a Func<TSource, Boolean>, and that "x => x .. " business is C#'s lambda syntax. x is just a variable name, no magic there.
archivator··on Very Short Reply Expected
That's my default signature in all my email clients. If the email is actually really long and comprehensive, I just remove the signature. So far, I've gotten away with it.
archivator··on Transcript of meeting between Julian Assange and Google CEO Eric Schmidt
When fighting the institutions that write these charges, you are implicitly a target. Wouldn't be the first time someone was put in jail for the wrong crime. (I'm not convinced he's innocent but I have no problem believing the charges are made up)
← PreviousPage 3 of 7Next →