HNHacker News
TopNewBestAskShowJobs

daeken

17,548 karma · joined March 21, 2008

Founder of DaeStar Emulation, previously of DigitalOcean, HackerOne, Optiv, Mozilla, Matasano Security, and a couple startups. My primary background is reverse-engineering, but my work is all over the board. My work has been featured in Forbes, H+ Magazine, Hacker Monthly (issue #10), EDN, and my mother's fridge. I've spoken at Defcon (2019), 44con (2019), and BlackHat (2012).

Nothing I say here is in any way representative of the views of my employer nor anyone else with whom I am affiliated.

My email is sera.brocious@gmail.com; feel free to contact me about anything, just include 'HN' in the subject, please.

I'm on HN Office Hours: http://hnofficehours.com/profile/daeken/

[ my public key: https://keybase.io/daeken; my proof: https://keybase.io/daeken/sigs/ci5oPW51-MaGySslf5iDROl1JIBimpAG596tsLH0Qi4 ]

submissionscomments
daeken··on 1-on-1 meeting questions
It's Markdown, not just "a README file". It's designed to be easy to edit by hand and easy to parse; there's literally nothing at all gained by using the JSON file that they have. At all.
daeken··on Hedy Lamarr
Gender is not relevant, unless it is. People need to see folks like themselves represented, and downplaying gender as "not relevant" dismisses the very real effect this can have. Are her achievements awesome because she's a woman? No, of course not -- they're awesome for their own merits. But if one woman sees this and gets inspired by it, that's awesome.
daeken··on Pentagon Requests $15B for Space Force
> I mean, when Mars gets colonised, what's to stop Mars from becoming a superpower in the Sol system within a very short period of time? Pretty much nothing.

Aside from the enormous cost of moving the (many, many) needed resources from the Earth to Mars. I'm super bullish on a Mars colony (I will be going within 5 years of it becoming an option) but the idea that it will be even 100% self-sustaining in the next 100 years -- let alone a superpower -- is absolutely bananas.

daeken··on Hoag's Object
Yes! Blows my mind every time I see him comment. It's amazing folks like him who keep me coming back here.
daeken··on Boston Dynamics Spot SDK Repo
If there isn't one called cspotrun, I'm going to be seriously disappointed with their development team.
daeken··on Reverse engineering course
SoftICE still holds a super special place in my heart, but WinDbg is infinitely more powerful these days than SI ever was, especially if you're using it from another box (or from your host with a Windows guest VM).
daeken··on Lyft’s algorithm is trying to block people with names like ‘Dick’ and ‘Cummings’
Tom Scott did a video on exactly that problem: https://www.youtube.com/watch?v=CcZdwX4noCE
daeken··on U.S. Supreme Court keeps ruling barring prosecution for sleeping in public
This line of reasoning doesn't defend their practices nearly as well as you think it does. For instance, paying homeless people to fight each other will certainly make sure they have money for food, and it might provide them some much-needed organized activity!

If the reason you help someone is because you want to sell them something or use them, you're doing help wrong.

daeken··on Show HN: Hacking on a VR desktop inside of a VR desktop [video]
Ever-increasing improvements aren't required; the eye has a (more or less) fixed resolution. In fact, HMDs with extremely high resolutions already exist, e.g. the Varjo VR-2 Pro and the XR-1, they just cost an arm and a leg. In a few years we'll get them at consumer-level prices instead of having to drop $6-12k.
daeken··on Fixing Impostor Syndrome in Coding Interviews
> We throw around these terms like "imposter syndrome" and "introvert" because they make us feel better, even though they describe most people, in which case they're really not that useful.

You say they're not useful, but in the very same sentence you say they make us feel better. I can't find a way to reconcile these two seemingly contradictory statements; can you help me understand this?

daeken··on Show HN: Hacking on a VR desktop inside of a VR desktop [video]
I've been working on the Oculus Quest (which has the same resolution as the Index) and it's the lowest resolution I find functional. In my case, it's just barely good enough to use for long periods of time, without absolutely killing my eyes. Pretty excited to see what the next generation looks like.
daeken··on Show HN: Hacking on a VR desktop inside of a VR desktop [video]
So, I've been working much of the time (30-50%) through the Quest, using ImmersedVR to have 3 screens from my Mac in VR. The headset is super comfortable, even for long periods of time; the only downside comfort-wise is that if I'm breathing out of my nose, it'll end up blowing upwards into my eyes, drying them out (but I'm going to be making a little buffer piece to fix that).

The fidelity is at the low end of what's usable for productivity without causing discomfort, but it's just going to get better from here. To me, $400 for the Quest is a total no-brainer; the Magic Leap .... not so much. I'd rather stick entirely to VR, but I have a kid to watch much of the time, so AR it is!

daeken··on Show HN: Hacking on a VR desktop inside of a VR desktop [video]
This is awesome to see. I've been working on something similar: a remote Wayland compositor for the Oculus Quest, Magic Leap, and other AR/VR devices. Last night I hit a milestone, getting a terminal running on another machine to render inside Unity, then on the Magic Leap itself. https://twitter.com/daeken/status/1205762441285685248

I really believe that 2020 is going to be the year of VR/AR productivity, and I'm committing myself to working full-time from within the environment.

daeken··on State found $117k in double payments through data analytics
Jesus, so this is all of 0.000173% of the budget. Significantly less interesting in that context.
daeken··on How William Gibson Keeps His Science Fiction Real
I've been replaying Mass Effect 3 recently and there's a little story someone tells, which starts with "Sky was color of vid-cam turned to a dead vorcha." That gave me a great chuckle.
daeken··on How William Gibson Keeps His Science Fiction Real
> Cyberpunk, although influential, was a short flash in the pan.

Which is why The Matrix and its sequels were a huge box-office flop, why the most anticipated game of 2020 isn't cyberpunk (and definitely doesn't have 'cyberpunk' in the title), and why there haven't been half a dozen extremely successful adaptations of (mostly recent) cyberpunk works over the last few years. /sarcasm

Seriously though, cyberpunk never died, it just became the default for most sci-fi works due to the fact that we now live in that world.

daeken··on Dented Reality: Magic Leap Sees Slow Sales, Steep Losses
How was the comfort level on the HL2? That and the low FOV were what killed the original for me, as my use case is replacing my screens. I'm actually getting ready to commit to working 100% through VR -- Quest -- and AR -- currently ML1, but seriously considering the HL2...

If I didn't have a toddler to watch while I work much of the time, I'd probably just go all-in on VR (I'm currently working 30-50% through the Quest), but being able to see the world is kind of essential for those times haha.

daeken··on Dented Reality: Magic Leap Sees Slow Sales, Steep Losses
It's 45% bigger in area, rather than to a side (~4x overall area) like most people think when they see "double FOV". It's an improvement, yes, but not one that actually substantially changes its utility. If I could trade my Magic Leap for my old Hololens, I'd do it in a heartbeat.
daeken··on Dented Reality: Magic Leap Sees Slow Sales, Steep Losses
The original Hololens was underwhelming in some regards, but they got a few things very right: text was crisp in most circumstances, the contrast was great, and the software mostly Just Worked (TM). All of these things are absent on the Magic Leap. The only advantages it really has are the controller (which is ... okay, I guess) and comfort.
daeken··on Dented Reality: Magic Leap Sees Slow Sales, Steep Losses
I bought one second-hand a couple months ago. It's neat and all, but between the poor software and the severe extent to which it darkens the rest of the world, it's a pretty resounding 'meh'. I still have hopes for using it for productivity, but it honestly doesn't hold a candle to the original Hololens. (Can't speak to the Hololens 2 yet; going to get one in a little while though, hopefully!)
daeken··on Ex-FDA Advisor Says of Lasik Eye Surgery: ‘It Should Have Never Been Approved’
Holy observation bias, Batman! The only thing even resembling actual negative statistics in this article is the ballpark estimates by the ex-FDA advisor, and those are just guesses.

You can find negative experiences, sure, but what is the actual incidence of that? Without that data, this is utterly meaningless. It certainly isn't damning.

daeken··on Google’s GDPR Workaround
Why the hell does that article not include a photo or diagram of a mask properly worn? Even despite knowing that it goes over your mouth and nose, the design of the mask makes it difficult to understand how one would actually do that. Seems like a huge, huge omission.
daeken··on Chemists discover water microdroplets spontaneously produce hydrogen peroxide
I've always heard it as:

    Billy was a chemist's son
    But Billy is no more
    For what he thought was H2O
    Was H2SO4.
daeken··on Researcher banned on Valve's bug bounty program publishes second Steam 0-day
There is definitely politics involved, but not H1 internal. The issue is that every program handles disclosure itself, so H1 itself doesn't really have the power. That could be changed at a policy level, but I'm not sure that'll happen (or should happen, honestly; I don't really know where I land on it).
daeken··on Researcher banned on Valve's bug bounty program publishes second Steam 0-day
H1 itself has no WONTFIX status, FYI. A bug that's not considered to be a bug by the program will either be closed N/A or informative. Ultimately, disclosures are handled and controlled by the program, not by H1; this is both a good and bad thing (and I say that as both a HackerOne employee and a hacker on the platform -- it's a complicated issue from both sides).
daeken··on Researcher banned on Valve's bug bounty program publishes second Steam 0-day
> If HackerOne isn't going to help you they have no right to hinder you. If they want to strongarm everyone into effectively the same agreement as an NDA then there literally is no point in turning vulnerabilities into HackerOne.

The article gets this part wrong: the hacker isn't banned from H1, which he says in his blog post -- "Eventually things escalated with Valve and I got banned by them on HackerOne — I can no longer participate in their vulnerability rejection program (the rest of H1 is still available though)." HackerOne is in no way punishing the hacker for his reports and/or public disclosures, for what it's worth.

(Disclosure: I am on the community team at H1, though I've had effectively zero involvement with this.)

daeken··on Juul, Philip Morris Sued Under Racketeer Act for Targeting Kids
> Is there some reason we shouldn't outlaw vaping? People who want to quit nicotine, or who consciously choose to become addicted to it, already have the gum and patches.

There are a ton of assumptions packed into these two sentences. I'm a nicotine addict, and I hate smoking (which I've done for many years), but I love nicotine; I did even before I was an addict. Vaping provides me with all the benefits of nicotine with very few of the side effects that smoking brings; nicotine patches and gums, even the lowest dosage, are way too high for me and lead to extreme anxiety (among other side effects).

I don't want to quit nicotine, I just want a better delivery system. For me, the Juul is perfect.

daeken··on OpenDrop: An Open Source AirDrop Implementation
> What language do you recommend for this type of application and why?

This is the #1 reason why .NET Core gets so much of my mindshare these days. If I write something and put it out there, it will Just Work (TM) 99.99999% of the time. As soon as the user runs `dotnet build` or `dotnet run`, it'll automatically go grab the exact right versions of packages from NuGet and set everything up locally. The only time anything tricky ever happens is if some third-party library doesn't ship a native library dep for each platform; that's rare, but does occasionally happen.

daeken··on Microsoft Has First Major Impact on Chrome
The state of bits in RAM has zero effect on energy usage. Caching things in memory allows for lower power consumption, though, by preventing duplication of effort by the CPU.

Edit: Originally said "zero effect on memory usage", which makes very little sense!

daeken··on Facebook Transcription Opt-In Says Nothing About Human Listeners
This is a surprise to ~no one here, but this is absolutely a surprise to at least a large portion of the general population. Why? Because they don't know how these things are developed, even at a high level. To most people, systems like these are a black box; they talk to it, it outputs text. They don't think -- or need to think -- about what the system is actually doing. There's nothing wrong with that.
← PreviousPage 5 of 34Next →