hendi_

Yes, I was absolutely aware of the irony of that while writing my original comment.

Yes, comments on HN are mostly a time waste or even total garbage, as are comments everywhere else.

BUT, there's the occasional nugget hidden in that pool of filth that makes it worth digging through :-)

Probably not run that on networks you care about: https://twitter.com/hackerfantastic/status/11030878690637045...

I stand corrected. Thank you for the clarification!

I still learned something "new" from the article, I was only aware of the ceremony issue that "everbody knows" of.

Wrong.

"One of the first things anyone learns about Zcash" is that at least one of the ceremony's participants must be trusted to have securely destroyed his toxic waste.

This article is about the fact that there could be a backdoor, whose absence can only be proven by revealing all participants' toxic waste.

You'll note that these two things are at odds with each other.

SEEKING FREELANCER. REMOTE. EU PREFERRED.

We're looking for some help with a smallish ReasonML/ReasonReact app, and later some Python backend stuff.

If you're interested I'd like to talk to you, email info prokapi com, or XMPP hendi prokapi com

I interned at Texas Instruments in Germany. Mostly engineers working there, mostly big expansive cars in the parking lot, so go figure our salary.. On each floor there was a coffee vending machine, a regular cup of coffee was 0,20€. On day, management sent an email to every employee "Free coffee during 1pm and 2pm". Guess what happened?

Everybody left their desks at 12:45 to stand in the queue, waiting for their coffee worth a few seconds of their time. At 2:15 everybody finished their coffee and went back to their chair.

I can't help but think management paid more in wasted salaries in these 1.5h than if they'd just made caffeine freely available all the time.

We are. But look at the very last words you've used:

"within our means"

Don't you think with a bank account some orders of magnitude larger than mine, Bezos' means are larger than mine?

I kind of miss the days where you would turn to the manual, read and understand it, before doing serious work in a language.

I've had a junior dev ask me what kind of strange multiplication thing was going on in our C code base. If you don't even know about pointers, maybe you're not "junior" yet and should learn some more.

Thank you!

Thank you, it looks like you have your moral compass pointed to the right direction :-)

While I applaud the things above I'm concerned about Cludflare's (growing) size. If it handles so many websites' traffic it's an interesting target for NSA, hackers and other malicious actors. I assume that most of your users use the free SSL certs, meaning Cloudflare possesses their private keys.

The more Cloudflare grows, the faster and the more encrypted "the internet" becoems. But the more Cloudflare grows, the bigger the single point to attack gets (I'm even assuming Cloudflare is and always will be a good actor).

What's your stance on this? Could you comment on this?

> And who was it that changed their algorithm for handling TorBrowser traffic so that there's no need to show those CAPTCHAs? Oh. Cloudflare.

Thanks, that'd be great news! I couldn't find any information about that, any chance you could pull out a link like for your other points?

CGA, EGA and VGA and I'm in!! Not sure on your stance about forks, but probably SVGA as well :)

Wow, that is great, thank you for posting this.

Just the other day I've torrented a PDF that I couldn't buy from O'Reilly.

Thank you. You're right of course, juding him by one article alone isn't fair.

^ this.

I discovered Browserling just yesterday looking for a replacement for BrowserStack. I planned to hand over my credit card today but saw this blog post on the commute to the office. Thanks, but no. I'll continue looking and make sure to not make business with this guy.

It's still HTML, just completely unstyled. So there's still support for including tracking images.

Yes.

> The Tor network currently only supports TCP ipv4 traffic

There is Monero (XMR) and ZCash.

AirVPN - https://airvpn.org/

  - claims to be "operated by activists and hacktivists"
  - uses OpenVPN
  - GPLv3 client for many platforms
  - accepts Bitcoin (or PayPal, Credit Cards, ...)
  - has an API

Yes.

Changing common settings might in fact even make you stand out _more_.

Check the EFF's Panopticlick [0] to see how your specific configurations leaks identifying information.

[0] https://panopticlick.eff.org/

Sorry, it seems I misunderstood your intention/question.

The `AudioContext` API exposes several details about the host which may depend on the hardware (sound card, sound chip), software stack (OS, on Linux e.g. PulseAudio vs. ALSA), sound driver and its versions, and connected periphery (speakers? headphones?).

Additionally, the audio API is used to generate a sound (which is muted before being played, but still generated before). Sound is hard, and so the browser vendors don't necessarily generate the "sound bits" themselves but ask the OS to so. Which might in fact ask its sound system to do so. Which might ask its sound driver...

Some of these properties are fairly common or likely to change often. But chances are that combined they give you more bits of information then say the simple user agent string (which is shared by thousands - if not more! - other browsers).

Yes; the things I've mentioned above don't change on page refresh.

If you'd find some things do change too often to be relied upon you could either take that into account, or simply don't use that specific fingerprinting technique.

It does.

> They wouldn't.

They wouldn't.

But the point of fingerprinting is that practically no two "browsers" are the same:

  - browser software and exact version
  - installed plugins
  - size of browser window
  - OS software and exact version (think of patches!)
  - language
  - time zone
  - screen resolution
  - ...
  - (and all the stuff mentioned in the submitted article!)

See the EFF's Panopticlick to see _how_ unique your browser is. Be sure to click the "Show full results for fingerprinting" after the test to see all things it considers.

[0] https://panopticlick.eff.org/

Wow -- the fact that this allows deployment of a "regular" Django application to Lambda is awesome!

Have you checked if Postgres works via the py-postgresql driver? It's implemented in only Python 3, with all C optimisations optional.

I'd like an invite too, please.

Edit: GOT IT, thanks!

Yes, there is: www.piwik.org

There already is: https://www.torservers.net/

Here: http://jsfiddle.net/41s1wqhs/18/

Links are blue, and turn red on hover.