HNHacker News
TopNewBestAskShowJobs

bahjoite

285 karma · joined March 10, 2016

submissionscomments
bahjoite··on CyberChef – A Cyber Swiss Army Knife
Ah look, it even has snowflakes.
bahjoite··on Clean up your existence
The Terms of Service appear to relate to one of Wilhelm's other ventures and the Privacy Policy is practically devoid of any useful information related to privacy. The idea itself doesn't even seem possible; maybe it's possible to obtain some of the accounts, but all, doubtful.
bahjoite··on The defunct language of nautical flags
> [Patrick O'Brien] was a genre writer.

He is known for much more than his historical novels, including translations and biographies.

https://en.wikipedia.org/wiki/Patrick_O%27Brian#Bibliography

bahjoite··on Manifesto for Responsible Software Development
An example: I have a website and I don't need to know the IP addresses, browser info or referrer urls of visiting User Agents. So allowing Apache to log that information would be "collecting too much data".

Thus, Apache is configured with the following LogFormat[0] which associates an explicit format[1] with a nickname (here, "essential"):-

    LogFormat "%{%FT%T%z}t \"%r\" %>s %B %D %L" essential
and in VirtualHost contexts, a CustomLog[2]:-

    CustomLog ${APACHE_LOG_DIR}/access.log essential

[0]: https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#lo...

[1]: https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#fo...

[2]: https://httpd.apache.org/docs/2.4/mod/mod_log_config.html#cu...

bahjoite··on Britain passed the “most extreme surveillance law ever passed in a democracy”
5) is probably the most depressing thing I've read for some time. We should all make the effort to do exactly the opposite.
bahjoite··on Britain passed the “most extreme surveillance law ever passed in a democracy”
And the only time you might decide to hide the fact is when faced with the knowledge that someone may come, at any time, and force the door open.
bahjoite··on Britain passed the “most extreme surveillance law ever passed in a democracy”
I think this too and am considering running a web crawler full time.

If enough people were willing to do this we could create a massive distributed index to rival google's.

bahjoite··on Dutch prison crisis: A shortage of prisoners
> The least proud people will probably be the families of victims- and they matter the most

Why do the families of victims matter the most? Does not every person matter equally?

bahjoite··on A Formal Security Analysis of the Signal Messaging Protocol
> It's saying "don't use Signal because Signal is less than perfect".

This is mis-categorisation. The article says "I won't recommend the use of Signal" and gives reasons and desired improvements.

bahjoite··on HTTPS Certificates Show Where Their Key Comes From
> If you follow the links, you'll end up here: https://www.usenix.org/conference/usenixsecurity16/technical...

and just to add, the paper itself and a video of the author's presentation are available at this page.

bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
> Similar to how choosing to not abide by the wish that you pay for products.

It is not a "wish" when payment is demanded for a product. You violate a social contract and a legal statute when not paying for a product for which payment is demanded. This is nothing like the situation here where the content is absolutely available for free. This is beyond question.

> I mean ignorant at best. Pretending that there isn't even a discussion to be had about ethics in this area is just shoving your head into the sand.

Perhaps you might advance a rational argument for the viewing of ads as an ethical decision.

bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
> They aren't expressly allowing the content to be consumed for free any more than a store-front that shows off products is allowing them to be taken for free.

False equivalence. Further, they certainly are allowing the content to be consumed for free.

> There is the expectation that you serve the ads along with the content given, and violating that expectation is an ethical issue.

We violate nothing by choosing not to abide by the wish that we view ads. There is no obligation to do so. It has nothing to do with ethics.

> It might not be an issue for you, but to pretend it doesn't exist is ignorant at best.

I think you mean "ignorant at worst". At best, we are ideologically opposed. :)

bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
I disagree that paying for the subscription is the ethical thing to do.

The publisher expressly allows the content to be consumed for free - they don't require payment for the content. Therefore it is not unethical to consume that content for free.

That they desire us to view ads is beside the point: we're not obliged to view them, nor is it unethical to choose not to view them.

bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
Correct. People using ad blockers want to block ads. They don't necessarily want to pay to avoid seeing ads. They may still wish to pay for content they like. The two aren't mutually exclusive.
bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
Leaving aside that some people feel that ads are an imposition: we are not obliged to see ads, nor to execute code delivered by a website.

The web is a public place where the majority of content is free to consume. Those publishers who wish not to provide content for free are free to demand payment for it. They're free to raise revenue by delivering ads too, but we're not obliged to see them.

bahjoite··on Pornhub Bypasses Ad Blockers with WebSockets
Of course not. Using an ad blocker means that ads are blocked at all sites. Paying for content at one site clearly doesn't affect the ads delivered by other sites.
bahjoite··on Show HN: Anonymous messaging with a 1km radius
This isn't anonymous messaging, but pseudonymous messaging.
bahjoite··on Judge confirms what many suspected: Feds hired CMU to break Tor
It seems Tor users cannot expect privacy in any real sense. Using Tor, they can reduce the identifying information they provide to operators of websites they visit, but they cannot expect to benefit from any more security than that.

I find this sad and hope that we can bring about a revolution: actual privacy when using the Internet.

bahjoite··on Cognitive bias cheat sheet
This is excellent. It could be improved by adding a very short summary of each bias. This would help the reader to drill-down to a specific bias of interest.
bahjoite··on Wikileaks: Apple is sending user data to the governments
Which is the misleading claim?
bahjoite··on How Snowden's Disclosures Made All Our Data Safer
Were you already familiar with what was disclosed in the leaked documents and accompanying reporting?

Would you agree that the programs revealed in them go far beyond the programs previous whistle-blowers revealed?

Did you know beforehand that completely innocent citizens of the world may be targeted for surveillance or their systems compromised because of the company they work for or because they use encryption and live in a particular country?

Do you realise that the details of many of your digital interactions are collected and recorded and could at any time be collated into dossier that would inform its readers of many details of your private life?

Maybe you were, wouldn't, did and do; maybe you personally don't have any reason to be thankful for this guy's actions, but many of us didn't have any idea of the extent to which our data is being collected or the ways in which it can be used against us.

Some of us are rightly thankful for being told what our governments should have had the decency to tell us.

bahjoite··on How Snowden's Disclosures Made All Our Data Safer
> Wanting the country you live in to be safer and stronger against outside threats is not patriotism. It's just basic self-interest.

Wanting the country you live in to be safer and stronger is certainly not basic self-interest: that would be wanting oneself to be safer and stronger, without regard for anyone else. It is certainly nationalism, if not quite patriotism.

The parent responded to "made the US safer" and "made the US weaker". The point is that there is a bigger picture than the question of the USA's safety or strength: the effect that the Snowden's revelations have had on all humans when taken together.

> Even the least patriotic people generally prefer not to be murdered by terrorists

You seem to be saying that the desire not to be killed by terrorists is a good reason for the citizens of one nation to be want it to be safer and stronger than another nation. Perhaps the desire not to be murdered by terrorists is a good reason for all nations to be, together, safer and stronger.

bahjoite··on Is Your Site Leaking Password Reset Links?
>Redirect is the cleanest solution.

Exactly. Submitting tokens via GET requests (as is necessary for an emailed token) should be handled in the same way as POST (POST-redirect-GET): the resource which validates the token should not be the one that presents the "password reset" form.

bahjoite··on How to write a bug report that actually gets resolved – and why everyone should
According to the flow chart, one doesn't need to "Look for an existing bug report before reporting the bug" if one doesn't like the software.
bahjoite··on How to begin a text
I'm procrastinating instead of beginning the documentation for some code. I've decided to start (this minute) in medias res. Thanks for the tip.
bahjoite··on macOS Sierra Stores and Syncs SSH Passphrases to iCloud
Agreed - it's what I meant by that third sentence. There are of course reasons to revoke one of a collection of keys, for example natural end-of-life rotation, weak key generation and accidental disclosure.
bahjoite··on macOS Sierra Stores and Syncs SSH Passphrases to iCloud
> I see nothing wrong in using same public key to log in from a particular machine to a number of remote machines.

There is nothing really wrong with it; it's a good way to reduce the burden of managing secrets. The downside though is when multiple remote machines need to be contacted because a private key was revoked. Then again, a common need for revocation is a compromise of the machine on which the private key(s) is stored, which can often mean a number of private keys need to be revoked. I think the ideal is still to have unique key pairs for each client-server combination.

bahjoite··on Grand jury subpoena for Signal user data
At the bottom of the gag order is states that OWS "may disclose the attached subpoena to an attorney for [OWS] for the purpose of receiving legal advice".
bahjoite··on Hacker-Proof Code Confirmed
Would TLA be of any help to you? https://research.microsoft.com/en-us/um/people/lamport/tla/t...
bahjoite··on Deep down the certificate pinning rabbit hole of “Tor Browser Exposed”
Tor Browser 6.0.5, with a fix for this bug, is available.

https://blog.torproject.org/blog/tor-browser-605-released

← PreviousPage 3 of 5Next →