HNHacker News
TopNewBestAskShowJobs

eyeareque

1,508 karma · joined October 19, 2010

for email use my hn username@yahoo.com
submissionscomments
eyeareque··on Tesla’s big battery in South Australia may prove the viability of renewables
You're forgetting about the cost on the environment that coal burning power plants create. No one ever takes the damage of our environment into consideration of how much something really costs us.

Of course there is renewable power environment cost as well, batteries aren't very green to produce or dispose of. But over all, we are better off by not burning coal even if there are more upfront costs.

eyeareque··on Don’t Let Facebook Make You Miserable
I don't let it make me miserable. I deleted it years ago.
eyeareque··on The XSS Game by Google
You can try turning off JavaScript Xss filtering in Firefox, via about:config --> browser.urlbar.filter.javascript
eyeareque··on Google May Be Stealing Mobile Traffic
Would a robots file block google from caching your site? I guess that would block google entirely though..
eyeareque··on Peter Thiel to Donate $1.25M in Support of Donald Trump
Maybe he just needed another write off?
eyeareque··on Facebook Messenger begins testing end-to-end encryption using Signal Protocol
PGP while a decent technology is very cumbersome. Worse, it's easy to shoot yourself in the foot if you aren't an advanced level user. I've used it for years on a regular basis with various implementations. It's just never been user friendly or easy to use. If it was more user friendly it might have had better adoption rates. As moxie has pointed out, we need something better for the masses, it looks like we are finally seeing progress towards that goal now.
eyeareque··on Facebook Messenger begins testing end-to-end encryption using Signal Protocol
Moxie and team, bravo. You've made the snoopers jobs a whole lot harder.

Your goal of making encryption easy to use by the masses is coming come true. It looks as if PGP's days are numbered.

eyeareque··on Google Fonts Redesigned
Yeah, I assumed this too. They have a reason for every service they offer.
eyeareque··on Google Fonts Redesigned
That makes perfect sense. Thanks.
eyeareque··on Google Fonts Redesigned
What is in it for google to give these fonts away? Does it help them track people or learn about sites that use them?
eyeareque··on The Perks Are Great, Just Don’t Ask What We Do
I had never heard about the (3) link and what Google was caught doing. Wow.
eyeareque··on Introducing the 2nd Generation Boosted Board
It might sound like a lot of money but once you try one you're going to see how much fun they are. They really are well built too. I think the same loaded longboard without a motor or batteries is over 300 dollars. Boosted didn't go cheap any aspects of the board, it very well built and designed.

I have used a longboard and I also grew up skateboarding/surfing/snowboarding/etc. I also have a carver board. I love all types of skateboards, but this one is something else. I would say it most reminds me of snowboarding, especially when carving at high speeds.

eyeareque··on Introducing the 2nd Generation Boosted Board
You should always wear a helmet when riding one, 22 mph + falling or other cars is no joke! I've had to jump off at full speed before to avoid hitting things that would have made the board stop. Like riding a bike there is a risk, so you just have to be aware, try not to ride close to cars, and know how to fall safely. I think you can rent them at a few places--might want to look into that. Be warned though, once you try one you will want to buy it.
eyeareque··on Introducing the 2nd Generation Boosted Board
I have over 200 miles on my Dual+, and I have to say it is still so much fun to ride. As far as quality and design goes, they really do great work. I took the controller apart once to see how it worked. You can see they really put a lot of thought and durability into the feel and use. Also, when the belt loosened up a little on me I assumed I would need to take it apart and retighten everything. Nope, you just loosen one allen screw, and a spring pushes the belt to the proper tightness, and then you re-tighten the screw, so easy and well engineered throughout. My only gripe was that you could only go 5 miles (in the fastest mode) riding the way I do. But I see they've addressed that.

I just pre-ordered the new one and I can't wait to ride longer distances.

eyeareque··on OS X app in plain C
I'm not a developer, but does it count when they use objc header files?

#include <objc/objc.h> #include <objc/runtime.h> #include <objc/message.h> #include <objc/NSObjCRuntime.h>

eyeareque··on Facebook rewarded a 10-year-old for finding Instagram security flaw
what about cisco, oracle, juniper, fireeye, palo alto, etc.? There are more companies who don't than do, hopefully it changes in the near future though.
eyeareque··on Intel to Cut 12,000 Jobs, Forecast Misses Amid PC Blight
Really, not because they are cheaper and wear handcuffs to their desk so-to-say since they'd have to go back home if they lose their job?
eyeareque··on Why does yelp redirect HTTPS to HTTP?
I was hoping this would get more attention so that Yelp would see it. Oh well :)

I agree.

eyeareque··on The Next Front in the New Crypto Wars: WhatsApp
The only reason the government "gave up" in the previous crypto war was because they decided to find ways to break or weaken crypto to their needs. I don't think this time will be any different, one way or another they will get access to our data.
eyeareque··on Google is banning Flash from its display ads
I use firefox at the moment and do not have flash installed. In the rare occasion that I cannot view a video because I need flash I will fire up chrome to watch it.

Also, I use adblockers.. so I haven't seen a flash ad in ages.

eyeareque··on United Airlines Bug Bounty: An experience in reporting a serious vulnerability
You could, but they have lawyers.
eyeareque··on United Airlines Bug Bounty: An experience in reporting a serious vulnerability
They are not explicit in what domains or ip addresses are in scope. This makes it difficult. You'd expect them to have a list of approved sites for testing.. But they don't (or didn't when I tested.)
eyeareque··on United Airlines Bug Bounty: An experience in reporting a serious vulnerability
If you've participated in their program, you'll probably find that they have their fair share of issues. This is probably where their delay is coming from (but not a valid excuse). I found two serious problems in less than a hour. I reported the issues to them and was subsequently told that both submissions were out of scope and a firm warning to follow the rules. You're welcome for the free findings.
eyeareque··on Chronos Will Turn Any Watch into a Smartwatch
That's the main buying point for me, a small screen on my wrist that can give visual notifications so I don't have to pull my phone out.
eyeareque··on Chronos Will Turn Any Watch into a Smartwatch
Since it doesn't have a screen I don't think you can call it a smart watch.

It does seem like it could appeal to some people who don't need the convenience of reading a text or app notification from a regular smart watch.

eyeareque··on Million Dollar iOS9 Bug Bounty
A million bucks for a iOS 9 vulnerability sounds nice. But is that worth having the death, imprisonment, or torture of possibly innocent people on your conscience? If a government is buying these vulns, there is no telling what they will do with them.
eyeareque··on Cisco routers in at least 4 countries infected by highly stealthy backdoor
First, I don't think this is the NSA. It is far to sloppy for something like this. You probably wouldn't be able to detect them so easily. It is possible to be from another nation state though, or smart attacker. Also, we know that the NSA tries to cover their tracks: http://arstechnica.com/tech-policy/2014/08/snowden-the-nsa-n... "Instead, the TAO’s hackers “bricked” the router, Snowden said. He described the event as an “oh shit” moment, as the TAO operations center team tried to repair the router and cover their tracks, to no avail."

What I am confused about is that I assumed IOS images were signed. How are people creating backdoored IOS images without failing signature checking? Maybe they patched rommon?

eyeareque··on “Why are you releasing a full exploit just minutes after the patch is released?”
They do it for personal marketing reasons. Someone else could have posted a PoC soon after and stole some of their spotlight.

I agree, it would be nice to wait a little while for people to get their patches installed. But also, people like to have a way to verify that the patch worked.

eyeareque··on GPG is awesome; GPG is terrible
I've seen a lot of how-to use PGP writeups, but I haven't found a single good one that helps both windows and mac users (or linux). And by good, I mean something that walks the user through the process of securely creating a key, protecting their private key, explaining the difference between a public key and a private key, explaining how to PGP sign an email, PGP encrypt an email properly, encrypt files, decrypt files, upload public keys to a key server (or why you shouldn't), how to decrypt an email... and anything else you need to know to not make any mistakes that would compromise yourself. PGP is great but there are a lot of ways you can make a mistake.

I dream of a day when secure communications is simple and usable by all.

eyeareque··on Toyota ad hijacks Siri to switch off iPhones while driving
This makes me wonder, does the "hey Siri" recognition happen on the phone or on their servers? If it happens on the server does that mean that it's secretly uploading a recording of everything I say?
← PreviousPage 5 of 16Next →