HNHacker News
TopNewBestAskShowJobs

byteshock

155 karma · joined August 15, 2019

submissionscomments
byteshock··on Mozilla VPN exits beta, launches on Android and Windows for $5 a month
As far as I can see, the only thing they've "added" was their own client applications. The connection limits and server locations are the same as Mullvad.

One thing that Mozilla does not offer yet, but Mullvad does, are Wireguard proxies. These are socks5 proxies run internally on every Wireguard server. Using these you can connect to another server, for example EU --> US, and achieve "multihopping".

Mozilla also seems to only offer the Wireguard protocol, but this doesn't seem like a big deal to me.

byteshock··on Mozilla VPN exits beta, launches on Android and Windows for $5 a month
They’re using Mullvad’s network. Basically reselling it. But it seems to be around 70 cents (US dollar) cheaper since Mullvad charges in Euros and Mozilla uses US dollar.

I’ve been using Mullvad for several years now and they’ve been reliable. They have independent security audits done and are known for their privacy.

byteshock··on Hackers take over prominent Twitter accounts in simultaneous attack
Ah alright, really impossible to tell with everything going on!
byteshock··on Hackers take over prominent Twitter accounts in simultaneous attack
I edited my comment, but basically I saw tweets that showed a screenshot of the scam tweet from the twitter support account. Not sure if it’s real since they delete the scam tweets.
byteshock··on Live BTC transactions in Twitter hack
Somebody is getting fired today...

Edit: I was only making a joke, relax. Most likely it’s not a single person’s mistake. It’s just something you say when shit hits the fan.

byteshock··on Hackers take over prominent Twitter accounts in simultaneous attack
If they had full access to Twitter’s backend, they probably would be tweeting from accounts like @POTUS or @jack. But this seems like they have access to limited accounts. Most likely gained access to a third party service that allows you to manage your tweets?

Edit: they tweeted from the twitter support account. Just wow. They might have actually gotten into Twitter’s systems.

Edit 2: To expand on my edit above, I saw multiple tweets from other accounts that showed a screenshot of the scam tweet originating from the twitter support account. I’m not sure if it’s real or not, since they keep deleting the tweets. If it is real that would definitely open doors to more theories.

Edit 3: Seems like the twitter support account was a joke. Impossible to tell with everything going on!

byteshock··on Live BTC transactions in Twitter hack
They reposted it on the cash app account but with a different address. The exchanges are going to have a field day monitoring twitter.

New address: bc1qwr30ddc04zqp878c0evdrqfx564mmf0dy2w39l

Tweet: https://mobile.twitter.com/CashApp/status/128352200769559757...

byteshock··on Hackers take over prominent Twitter accounts in simultaneous attack
Seems like they reposted it on the cash app account. This time it’s a different address.

New Address: bc1qwr30ddc04zqp878c0evdrqfx564mmf0dy2w9l https://mobile.twitter.com/CashApp/status/128352200769559757....

byteshock··on Ubuntu Will No Longer Track Which Packages Users Install
Why would a collective like Debian or Ubuntu need to know what packages are the most installed? I know Ubuntu has their own App Store, is it perhaps to show which apps are the most popular?

If it’s for caching, can they not see which packages are most frequently accessed over http and implement caching that way? Or is that against their privacy policy? I’m not very knowledgeable on this subject but would love to know more!

byteshock··on Barclays Bank Using Internet Archive as CDN for JavaScript Files?
I don't think the author was implying that Barlcay Bank was intentionally using Internet Archive by using the term "CDN".

But, per your suggestion, if the title was something like "Barclays Bank using Internet Archive's bandwidth to load their JS assets" then it's essentially the same thing as saying they're using Internet Archive as a CDN.

A CDN is there to deliver asset files to websites, which is exactly what Internet Archive was doing for Barclay Bank in this case. The author used the term "CDN" to describe the situation or position Internet Archive was in relation to Barclay Bank.

Also using the term "CDN" would make it easier for people to understand what was happening just by reading the title.

byteshock··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
I’m very disappointed in how you guys responded to this. As a privacy focused company I would not have expected an answer that sounds like it came from a data collecting company like Google.

I just switched to DDG browser a week ago and will now be looking for a new browser now. I hope you know this is not an appropriate response to the situation. Especially because all you guys do is preach about how much you protect your users’ privacy. Now you’re here asking us to trust you not to abuse our data and just linking us your privacy policy. I’m sad to say that my faith in the DuckDuckGo company and team is now lost.

byteshock··on Show HN: Grid.js – Advanced table library that works everywhere
Looks awesome. We just tested vue-tables-2 yesterday but the lack of customization is making it hard to implement. This looks very promising, I’ll be taking a look again tomorrow!

Do you plan on releasing special themes or options for css frameworks like bootstrap 4? I had a quick look on my phone so I apologize if this is already available.

byteshock··on Goodbye Foursquare, Hello OpenStreetMap
These days they sell location data to other companies. Map names, location based user advertising, and everything in between. Check out their website, it’s insane the amount of data they collect and have.
byteshock··on Close Look at CSRF Tokens
The article below seems to suggest that as long as your api is on a subdomain and is using CORS headers, you should be fine.

However I’m not so sure about this, as I still implement CSRF tokens in my SPAs. (Bit of a habit from my php days) I store the tokens in local storage and pass them through the request headers.

A lot of people have different ideas and methods when it comes to CSRF protection on SPAs. I’d love to hear other people’s opinion and tactics!

Feel free to correct me on anything.

Article: https://medium.com/tresorit-engineering/modern-csrf-mitigati...

byteshock··on Google bans Zoom from employees' computers
Just because Google has a lot of money doesn’t mean they’ll go wasting it on software licenses. 24 million might not even come close to what they make per year, but they still have to be considerate on what they spend their money on.
byteshock··on In praise of S3
If you want an S3 service with lower pricing than AWS there are providers like Wasabi. They only charge for space used and not traffic.

I believe Wasabi currently charges $5.99 per tb a month which is pretty reasonable imo.

byteshock··on Launch HN: Fly.io (YC W20) – Deploy app servers close to your users
Thank you for your reply. Your deployment seems to be a lot more streamlined and simpler than Stackpath at the moment. That just might be the deciding factor for me and other developers!

I wish you and your team the best of luck!

byteshock··on Launch HN: Fly.io (YC W20) – Deploy app servers close to your users
Adding onto my last comment, is Stackpath container pricing cheaper than yours at the moment?

I understand this might be due to Stackpath being a larger company and owning hardware instead of renting it. But the price for traffic and compute seem to be cheaper. There is also no mention of how much you charge for storage on the pricing page.

I’m looking to deploy my next app onto one of these platforms and would like to know the price differences!

byteshock··on Launch HN: Fly.io (YC W20) – Deploy app servers close to your users
Fascinating product! I was wondering if there are any other products that are similar to yours? Other than serverless platforms such as Cloudlfare Workers or AWS Lambda.

I know Stackpath has been offering this kind of thing for a while. So how would your product compare to theirs? Since Stackpath has a well established cdn network already.

byteshock··on One man lost his life savings in a SIM hack, you can try to protect yourself
Could you explain how your company defends against these attacks?

From a quick look at your website, it looks like you are offering prepaid services through different providers similar to H20 Wireless. You claim to offer protection but give no detail on it except that you use "military grade protection".

byteshock··on Let's Encrypt: an automated certificate authority to encrypt the entire web
Pretty sure he meant the dns provider. If he was talking about the domain registrar he would have said domain registrar.
byteshock··on Odd Job: This teen bought a bunch of vending machines. Now he makes six figures
Another horrible misleading clickbait title by Vox. The title for the post should be changed...
byteshock··on API responses should be signed
Sounds like an invasion of privacy. Your personal pictures and videos shouldn’t have a unique digital signature so the police or a bad actor can identify which device it was taken on.

This seems like a good idea at first but what about whistleblowers or informants?

byteshock··on Images Created from Prime Numbers
Cause engineers are bad at math because you don’t really need to be good at math to write good code.
byteshock··on Maybe You Don't Need Kubernetes (2019)
You can’t really compare you deploying kubernetes to a bunch of raspberry pis to people normally deploying them to cloud hosting services or using managed services.....

Totally different use case

byteshock··on Ukrainian plane was 'unintentionally' shot down, Iran state TV says
It’s not okay at all. They were furiously denying all claims that it was shot down by them. Saying it was scientifically impossible and that it was a sneer campaign by the states. ONLY AFTER the video of it being shot down appeared did they admit to it. But only after several countries publicly said that Iran shot down the plane.

So no they didn’t do a good job. Stop giving them props for shooting down a plane and lying about it until they were exposed by the media.

byteshock··on From 15,000 database connections to under 100: DigitalOcean's tech debt tale
The tutorials on Digital Ocean got me started as a system administrator. I started around the same time Digital Ocean started. It was easily one of the most reliable sources around with up to date and easy to follow tutorials!

Big shoutout to Digital Ocean for being a reliable source for tutorials and hosting!

byteshock··on NitroPad: Secure Laptop with Tamper Detection
Basically yubikey with storage?
byteshock··on Show HN: Implementing Kernel-Based Approaches for Sequence Modeling
Interesting but code needs a bit of work.

For example file “kernel.py” lines 33-38

byteshock··on Twitter account deletions on 'pause' after outcry
Do you really think people will draw their concussions about you based on a Twitter account they found with the same username?
← PreviousPage 2 of 3Next →