HNHacker News
TopNewBestAskShowJobs

bga

14 karma · joined September 5, 2017

submissionscomments
bga··on Equifax’s Maddening Unaccountability
Yet Equifax continues to evade giving details on the attack. That itself is damning evidence they weren't doing everything they should have been to protect their servers and data.
bga··on The Equifax Breach Exposes America's Identity Crisis
Exactly. You can't have perfect trust in every citizen to keep track of these things. And if it's a government issued ID in the first place, I see no trouble with them having your private key as well. Just don't reuse that key.

This would take a lot of solid investment politically, and technically, to make it even slightly feasible to work for the average Joe.

bga··on The Equifax Breach Exposes America's Identity Crisis
or a digital signature, or a MAC. Something where we could verify against a publicly-known value safely, and without giving that secret part away to anyone else. The secret would be between the Federal Government and the citizen.
bga··on Equifax security freeze PINs are the timestamp of when you request the freeze
This isn't okay. Don't dox this guy.

Besides, lots of "hacker" hackers are self-taught.

bga··on Equifax security freeze PINs are the timestamp of when you request the freeze
No, blockchains are magic technology that makes money appear out of nowhere and hides all activity from evildoers.
bga··on Equifax security freeze PINs are the timestamp of when you request the freeze
Or Equifax became unresponsive while they investigated, but didn't reveal what was happening. Related, but not via inside info about the hacks.
bga··on Identity Theft, Credit Reports, and You
I suppose the information is hidden to prevent gaming the system. As someone mentioned in another thread, they took out a loan for $1000, sat on it and just paid it off. Credit score goes up with zero risk for just the cost of interest. If the algorithm were exposed, it would be easier to game.
bga··on Hackers who broke into Equifax exploited a flaw in open-source server software
If you're just hashing with SHA2 and a salt, an attacker with a run-of-the-mill GPU could crack any given hashing quite quickly. It might still take quite a bit of time to get all 143 million, but that's fine. Sell off the score in blocks of 10,000 and let the customer know they have to reverse the hashes themselves.

BCrypt with lots of rounds would be best.

bga··on JavaScript: The Curious Case of null >= 0
Right, which is where I think the actual return value ought to be "undefined" or something. Or an error. But I'm clearly in the minority on my thoughts of the js type system.

But then again, you can avoid having to make intertype comparisons in the first place by following reasonable guidelines. As funny as this case is, I can't imagine how I'd run into it in practice.

bga··on Equifax Faces Multibillion-Dollar Lawsuit Over Hack
Bankruptcy is the strange other side of the US debt system. In this case, it would be an unfair get out of jail free card, a shirking of responsibility.
bga··on Identity Theft, Credit Reports, and You
Okay, so never buy food again and tell me how that goes.
bga··on JavaScript: The Curious Case of null >= 0
Did he seriously claim at the end that that made sense "mathematically"?
bga··on Burying your dead code
Care to elaborate?
bga··on Burying your dead code
And so in Ruby, we use test frameworks with advanced mocking, as well as runtime-reflection coverage measurement.

Metaprogramming: the cause of, and solution to, all of life's problems.

bga··on The Cryptocurrency Singularity
Bitcoin seems like an investment in proving the ideas that may eventually come to form a truly practical cryptocurrency.
bga··on Hardware Architectures for Deep Neural Networks [pdf]
Keep in mind the energy costs of the supporting hardware for that brain, though.