HNHacker News
TopNewBestAskShowJobs

asherkin

138 karma · joined March 2, 2015

https://limetech.io/

[ my public key: https://keybase.io/asherkin; my proof: https://keybase.io/asherkin/sigs/5Px0ip5cgqYCleGfMTH3V4wzcgvc0gOoEnaepChA7CQ ]

submissionscomments
asherkin··on FaceTime on the web requires Chrome or Edge, no mention of Firefox
Firefox is/was really lacking in WebRTC support for non-P2P use cases - bandwidth estimation support was sub-standard until recently, there is no support for simulcast (multiple video quality encodings) when using H.264, and no E2E encryption support (which is very new to the spec). There has been a lot of back and forth on the Firefox / Jitsi situation but it does seem that most of the time the ball has been sitting in Firefox's court.
asherkin··on FaceTime on the web requires Chrome or Edge, no mention of Firefox
The originating browser is responsible for encoding all the desired quality levels and sending them to the SFU to decide what to forward to the other participants - that is the difference between a SFU and a MCU, and why SFUs can scale. SVC-capable codecs are coming to WebRTC too, which makes this a lot more efficient for the browser to do.

Encryption keys are distributed out of band of the media, so it's the same as whatever the tradeoffs are for multi-party E2E-encrypted text chat there (I don't know what those are though!)

asherkin··on Encoding data into dubstep drops
Pretty sure they're talking about Cinavia, as the PS3 was one of the most well-known implementors of it.
asherkin··on Ask HN: What is your company's maximum vacation (at one time) policy?
UK, more than 10 working days consecutively requires director approval according to the written policy, but I can't imagine it ever being denied or enforced (I have never had or heard of a holiday request being denied at all). We're not allowed to carry days over though, so people do not generally accrue large holiday allowances.
asherkin··on Reverse Engineering One Line of JavaScript
By that definition, analyzing compiled native code would be "un-obfuscating".

IMO, deobfuscation is a subset of reverse engineering - which at a push I would define as "taking a program from the form it is distributed into a preferred form for modification/understanding".

asherkin··on Reverse Engineering One Line of JavaScript
It is a shorthand method of casting to a boolean value - C didn't have a true bool type until "recently" (but did have the concept of truthiness, where true is `is not 0`), so many projects and libraries use `#define TRUE 1`, and #define FALSE 0` or some similar variant.

So rather than write `foo ? TRUE : FALSE` or being more explicit `(foo != 0) ? 1 : 0`, you can just do `!!foo`.

asherkin··on Opera is Reborn
Opera is licensed as the embedded browser that powers most set-top boxes.
asherkin··on NeverSSL
As the OP said, that is already in iOS - it is just that more and more captive portals are whitelisting the domains it hits to check for a captive portal.
asherkin··on Chrome 55 to start highlighting Not Secure websites
> Scaling that up - if I'm not logged into Wikipedia, and simply searching and reading articles, why does that need to be served under HTTPS either?

Because a malicious MITM could modify the content you are reading (and thus affect your perception of a subject). A bit of misinformation here and there can go a long way.

asherkin··on Windows 7, 8.1 moving to Windows 10’s cumulative update model
Both require running on Windows Server, WSUS is "free", SCCM is "very expensive".
asherkin··on No Man's Sky sued over procedural generation algorithm patent
> Company claims No Man's Sky uses its patented equation without permission

is pretty damn different from

> No Man's Sky sued over procedural generation algorithm patent

asherkin··on EU regulations on algorithmic decision-making and a “right to explanation”
Yes you are, it'll cost you £6 in processing fees to go to all 3 agencies.

http://www.experian.co.uk/consumer/statutory-report.html

https://www.equifax.co.uk/Products/credit/statutory-report.h...

http://www.callcredit.co.uk/consumer-solutions/your-credit-r...

You can alternatively use the free online services:

Noddle use data from Callcredit, and Clearscore use data from Equifax - I don't think there is a free service exposing Experian data.

asherkin··on The Children's Illustrated Guide to Kubernetes
Looks like illustration 12 got replaced with a repeat of 10 at the end, the file is there and matches the text: https://deis.com/images/blog-images/kubernetes-illustrated-g...
asherkin··on An Open Letter to Members of the W3C Advisory Committee
That's already part of the EME standard, implemented in the browser (so as open source as the browser is).

https://w3c.github.io/encrypted-media/#clear-key

asherkin··on Electron 1.0 is here
Not the OP, but in the same situation until I moved: Close-ish to an exchange (so no street cabinet on the line for fibre equipment), no cable coverage (so Virgin is out), out of range of wherever the hell Relish's tower is, and ancient wiring in a block of flats (so can't reach sane ADSL speeds).
asherkin··on Geolocation API removed from unsecured origins in Chrome 50
getUserMedia was killed off for insecure origins quite a while ago in Chrome.
asherkin··on AlphaGo Beats Lee Sedol in Final Game
He's getting $170,000, $150k for playing the 5 matches, and $20k for winning match 4.
asherkin··on Mondo bank taking £1m crowdfunding investment
> The problem with freezing cards is that transfers are not direct: freezing the card on the banks end might work, but some ATMs or other systems might have a sufficient delay to allow (some) abuse while the card was 'frozen' by the user. The question will be who will pay for the delay.

This is part of why their cards are online-only, every* transaction has to be verified with them before it can complete at the reader - so transactions are slower, but there is no grace period after the freeze.

* as I understand it, certain merchants are white-listed on-card for offline transactions - namely TfL.

asherkin··on Show HN: IPalyzer – Analyze any IP for location, RDNS, blacklisting
From hovering over the (?) next to Disabled: > Due to Conficker Sinkholes, the server got listed a few times on blacklists, so I decided to disable the HTTP check
asherkin··on Llvmpipe: The Jitted OpenGL software renderer inside Mesa
The "LLVM" bit is that it is using the IR JIT compiler that is part of the LLVM suite, which makes it relatively easy to build a high-performance native runtime for a custom language.
asherkin··on How to submit an app to Apple’s App Store when it uses encryption
Yes, this is explained in Apple's FAQ on the issue - they have servers that are distributing your app from the US, thus you are exporting crypto from the US.
asherkin··on Postgres features and tips
This could really do with a definition of the several acronyms used.
asherkin··on Walmart Pay
Once you've worn the contacts away you can hardly call them contacts any more (and it's unsurprising they fail regularly). Cashiers will also say that even if they've never seen another card fail to read :P it's to make you feel better.
asherkin··on How to stop a DDoS attack
You need an Enterprise plan for that unfortunately, it's not even included in Business.
asherkin··on Telegram probably isn't as secure as ISIS thinks
They did, which ended in February (https://telegram.org/blog/cryptocontest-ends) - I've also seen mention of a round 3 with even more relaxed rules due for around now, but I can't find it anywhere now.
asherkin··on Chrome kills the HTTP-HTTPS “mixed content” warning
From the (5 paragraph) article: "In the long term, Google eventually plans to reduce Chrome's security states to just two: secure (full HTTPS) and non-secure (everything else)."

And the actual proposal: https://www.chromium.org/Home/chromium-security/marking-http...

asherkin··on Show HN: Baker Street – A simple client-side load balancer for microservices
This looks really handy - thanks! A word of warning though: TfL aggressively protects the roundel trademark.
asherkin··on Chrome is developing a Sidebar API
> Why does the developer console open on the bottom

Actually, the developer console has defaulted to the right side on new profiles for a while now.

asherkin··on [Giveaway] Mac app to help you stay focused and reduce clutter
Thanks, unfortunately I was away/asleep and missed this one as well.

HOWEVER, bought a copy after reading through the comments / MAS reviews - it's pretty neat!

I'm generally working full-screen, but for the few times when not it'll be a life-saver. I lost so much productive time recently getting distracted by IRC in the background :P

asherkin··on [Giveaway] Mac app to help you stay focused and reduce clutter
Looks like these are all gone. Shame, given the lack of both points and comments.
Page 1 of 2Next →