HNHacker News
TopNewBestAskShowJobs

hurin

769 karma · joined December 15, 2014

submissionscomments
hurin··on PayPal penalised for 'deceptive' practices
> How were you determining the accounts were stolen?

About 3-5 days after each payment was confirmed Paypal would reverse it due to it being unauthorized. More so the payment would show up as confirmed/valid initially, at no point during the process did Paypal make you aware of the possibility of the payment being reversed nor to help you confirm/validate that it was in fact authorized by the account holder.

> Also, as much as we would love to say companies are responsible for the security of our accounts, losing credentials is also a user issue.

Of course it's a user issue at a certain scale, but when it's that prevalent I am inclined to say that company is primarily at fault.

It was just a WoW account, so not a big deal for me, but I'd really hate to be a merchant or someone otherwise relying on Paypal day-to-day, that sounds absolutely horrible.

hurin··on PayPal penalised for 'deceptive' practices
PayPal isn't a merchant platform -- it's a payment service so yes you can accept personal payments, it might not be covered by seller protection if that's what you mean. That's no excuse for terrible security policies though. I mean literally every buyer had a stolen account!
hurin··on PayPal penalised for 'deceptive' practices
Many years ago I tried to sell a World of Warcraft account via. Paypal. I got lots of buyers -- all of whom tried to pay with stolen paypal accounts.

After they made a payment I would ask for a photo-copy of their ID, or to wait 3-days to make sure the payment went through properly (Paypal's normalized way of handling this was to mark the Payment as confirmed leaving the seller thinking everything was okay only to reverse it say 3 days later, screwing the seller). If I recall one of the buyers even offered to try a different account when I told them the payment got flagged.

In about a week's time I had received $5000 or so worth of transfers (all of them from stolen accounts!) Subsequently Paypal froze my account. I never was able to sell that World of Warcraft account either.

hurin··on Apache Drill 1.0 – Schema-Free SQL Query Engine for Hadoop and NoSQL
How hard is it to translate syntaxes?

p.s. Will translate syntaxes, $250 per.

hurin··on Who Wants to Be a Thousandaire?
> the situation would be exactly like those math nerds winning at Las Vegas Casino's.

The math nerd's winning at Las Vegas casinos probably brings more profit in terms of suckers that read "bringing down the house" and an introductory black-jack counting book then they could cost ever them. The Casino's hard-line against this is some kind of deep-seated and antagonistic mob-mentality more than any actual losses.

hurin··on Who Wants to Be a Thousandaire?
I don't understand why the producers thought it was such a horrible thing (according to the article) -- surely they are making several magnitudes of the cost per episode, this kind of thing should provide promotional value more than anything else.
hurin··on Chef Grills Steak, Volcano-Style, with Molten Lava
> It's going to be a major feat of engineering to design a pump for molten lava.

I thought you could at least have some kind of primitive rotating water-wheel-like mechanism and a circular flow with the pot integrated along the way.

hurin··on Chef Grills Steak, Volcano-Style, with Molten Lava
I feel like for efficiency the lava should be recirculated rather than just flowing by to turn rock at the bottom - that's a lot of wasted energy.
hurin··on Fish shell
You can add/write your own completions for fish http://fishshell.com/docs/current/index.html#completion
hurin··on Fish shell
> Only problem is it's not POSIX so there is some weirdness in command substitution, logical operators and stuff. So you still script in sh.

Yeah some wild-card matching stuff doesn't work, also for example expanding `pkg-config --cflags gobject-2.0` as one would in bash requires calling eval gcc.

On the other-hand it's not like Bash doesn't have weird gotcha's -- for example does anyone remember which of these is a valid conditional?

  string='Foo Bar';
  if [[ *"Foo"* == $string ]]
  if [[ $string == *"Foo"* ]]
hurin··on Fish shell
> Goes without saying, but bash-completion. Fish's completion is mostly history-based, which is great for repeatedly running the same command, but terrible for discoverability

Fish has both kinds of completion. You can hit tab to get a list of possible completions (command-list based) if there is more than one, if there is only one possible command it will tab-complete. You can also customize this list.

hurin··on How I do my computing
> John Oliver understands this. Stallman doesn't. That's why Oliver did in a week what the second guy couldn't do in thirty years. So you can keep arguing and keep sneering.

Yes, Stallman really hasn't done anything. GNU, GCC, GPL and Free-software are really worthless contributions compared to comedy routines, we should all quit working on things that we care about just because you and Joe say we aren't ever going to be popular or important.

hurin··on How I do my computing
People that are arguing to treat popularity as the primary metric by which to gauge quality and importance of content are doing two things:

a) being dishonest

b) performing an active disservice for the human-race.

To address point a: Take Gawker - it's popular, ok, maybe Gawker is just as good as a well-written article, I'm sure there are at least a few people that would argue that; but eventually that argument reaches a dead-end - you might never want to read an academic paper, but you're probably damn glad someone wrote it if only for the scientific advances which provide for your material comfort. You might prefer to watch a sitcom, to reading about economic policy, but you probably would prefer the president should do the later.

That is no matter how people may argue (e.g. Why is a Video Game any less a work of art than Shakespeare play) the kind of absolutist-populist position, they will eventually back-pedal on that argument when you run it out to its furthest point, I mean hell Hitler was resoundingly popular, and so was slavery in the South.

Since it's on topic consider RMS - he's rather a secular nut now -- and that's after NSA/Snowden revelations -- 20 years ago he must have appeared as a complete crackhead (the new printer at MIT was closed-source and I decided I could no longer participate in that [not-verbatim]) to 99.9% people and significantly less-popular than idk: Tele-Evangelists, who probably have much more compelling presentation and better websites and public image.

The active disservice part is where people that don't want to be educated, and don't want to read, and would rather watch a sitcom (there is nothing wrong with these in an of themselves) argue and promote their intellectual laziness and ignorance as important values, and accuse those who disagree of being out-dated, elitist, or whatever other such bullshit.

hurin··on How I do my computing
Compare: http://en.wikipedia.org/wiki/Lincoln%E2%80%93Douglas_debates http://en.wikipedia.org/wiki/United_States_presidential_elec...

So - it as a matter of fact has changed and that you think that this is okay (as I'm sure many people do) is obviously telling of something.

But hey, maybe you'd prefer the 2020 election-debate winner be decided by who can keep a reddit-pun thread going longer.

hurin··on 4096 RSA key in the strongset factored?
I too can post a public key I have the private key for and a factor? Or intentionally create a weak key?
hurin··on 4096 RSA key in the strongset factored?
Can anyone confirm this is true?
hurin··on How I do my computing
> We need to get out of our own heads and understand other people, dammit. It's the only way we can really do good.

What you call understanding people is what I call pandering to the least common-denominator.

Most of those web-pages aren't better, they are objectively less informative, and harder to access useful information on - maybe the problem isn't that plain white on black isn't exciting enough but that people are so accustomed to being served low quality content packaged with frivolous design, explosions or 10 second sound-bites.

Here is a good discussion of the topic at large: http://en.wikipedia.org/wiki/Amusing_Ourselves_to_Death

hurin··on The Untold Story of Silk Road, Part 2: The Fall
> but how much better could anybody here do?

Well, Kim Dotcom is still kicking it.

As for Ross, the evidence might have been circumstantial at best if his un-encrypted notebook wasn't grabbed.

hurin··on There's Plenty of Room at the Bottom (1959)
Because writing is just black atoms on top of white atoms or whatever
hurin··on Telegram Hits 2B Messages Sent Daily
Yes, to clarify I assumed OP was asking about end-to-end encryption not SSL.
hurin··on Telegram Hits 2B Messages Sent Daily
As far as I understand, not encrypted by default, and not very secure even when encrypted:

http://www.alexrad.me/discourse/a-264-attack-on-telegram-and...

hurin··on The End of the Open Road: How Hitchhiking Died
> hitchhikers are thus more likely to be dangerous people.

Do you have any reference to support this? Or is it just personal fantasy? If you look at the fbi.gov article mentioned (I linked it in a lower comment as well), you may notice that the hitchhikers were most often the victims: The victims in these cases are primarily women who are living high-risk, transient lifestyles

That you nevertheless think this statement to be true - I think rather supports my point about it being a question of culturally conditioned fear and stereotypes.

hurin··on Class action lawsuit filed against Lenovo over Superfish
> What would the criminal charges be?

Not a lawyer but quoting from the document.

  COMPLAINT FOR:
  1) VIOLATION OF COMPUTER FRAUD AND ABUSE ACT (18 U.S.C. § 1030, et seq.);
  2) VIOLATION OF FEDERAL WIRETAP ACT (18 U.S.C. § 2510, et seq.);
  3) VIOLATION OF THE STORED COMMUNICATIONS ACT (18 U.S.C. § 2701, et seq.);
  4) VIOLATION OF CALIFORNIA INVASION OF PRIVACY ACT, PENAL CODE §§ 631, 637.2;
  5) VIOLATION OF CALIFORNIA BUS. & PROF. CODE § 17200, et seq.;
  6) TRESPASS TO CHATTELS;
  7) COMMON LAW FRAUD; and
  8) NEGLIGENT MISREPRESENTATION
hurin··on The End of the Open Road: How Hitchhiking Died
Did you actually read the article they are using as a reference for the 0.04 figure? http://www.fbi.gov/news/stories/2009/april/highwayserial_040...
hurin··on The End of the Open Road: How Hitchhiking Died
I've never had that experience, I hitch-hiked after college in a few countries (outside the US), and I found that often people on long hauls are happy to have someone to talk to and stay engaged during the trip.

Am I saying dangerous crack-addicts don't exist? Sure they do, but the idea that you are more likely to be hurt picking up a hitch-hiker than in a convenience store, or by another driver is completely without evidence.

hurin··on The End of the Open Road: How Hitchhiking Died
It's just a ridiculous culture of fear and distrust of others.
hurin··on Show HN: Deck of Cards – A playing card API

  numbers = ['2','3','4','5','6','7','8','9','10','J','K','Q','A']
  suits = ['CLUBS', 'SPADES', 'HEARTS', 'DIAMONDS']
  deck = [(num,suit) for num in numbers for suit in suits]
  random.shuffle(deck)
  draw_card = lambda deck: deck.pop()
hurin··on Show HN: Deck of Cards – A playing card API
Seriously, why wouldn't you just use a local RNG? Do you realize it's actually less work than reading API documentation?
hurin··on Show HN: Turn GNU command line tools into SaaS – Stupid Hackathon Project
You can verify donations to the FSF Bitcoin address via. user signed message from the sending address! Also are there nags? There have to be nags.
hurin··on Ask HN: Why are Silicon Valley interviews such a drag now?
I'm genuinely curious why engineers would prefer to work on a project for an interview? To be tasked by multiple companies (presumably by as many as you are applying to) to spend 4-8 hours doing unpaid work on a project which is probably inane and most off all - completely useless for everyone involved.

If I've got 8 hours to spend I'd much rather contribute it to something that someone else will actually benefit from.

← PreviousPage 2 of 11Next →