HNHacker News
TopNewBestAskShowJobs

jackjeff

1,136 karma · joined June 15, 2012

submissionscomments
jackjeff··on Initial details about why CrowdStrike's CSAgent.sys crashed
If you get have privileged escalation vulnerability there are worse things you can do. Just making the system unbootable by destroying the boot sector/EFI partition and overwriting system files. No more rebooting in safe mode and no more deleting a single file to fix the boot.

This would probably be classified as a terrorist attack and frankly it’s just a matter of time until we get one some day. A small dedicated team could pull it off. It’s just so happens that the people with the skills currently either opt for cyber criminality (crypto lockers and such), work for a state actor (think Stuxnet) or play defense in a cyber security firm.

jackjeff··on US EPA Enforcement and Compliance on Apple Fabrication
I don’t know. As a shareholder it sounds like the dumbest move ever. In what universe would it make sense to have a fab so close to an appartment building and vent toxic gas. It’s a PR disaster waiting to happen. Whatever savings you make by avoiding regulation you pay back in fines and reputation damages.

What is it they saved here? Could they not fab this in a less populated area and just follow a few more regulations. We’re not talking about a company with razor thin margins. They spent outrageous amounts of money building the spaceship HQ.

I genuinely want to understand if this is stupidity or if there’s really a profit incentive that makes “fiduciary” sense.

jackjeff··on Aphantasia: I can not picture things in my mind
I don’t dream.

When I was a child I remember dreams occurred but they did not contain any vivid representations of anything. Just abstract images. Nothing you could classify as vivid, let alone a representation of reality in any sense.

The whole concept that you can actually “see” something that is not real and happening in the moment is non sensical to me.

Vivid dreams are just mysterious to me as the minds eye.

jackjeff··on Aphantasia: I can not picture things in my mind
Not OP. I don’t recall any dreams since childhood. If I had not experienced a few myself, I would have a hard time understanding what a dream even is. And my 10 or so dreams only had abstract images. Defo not like a movie or reality where you can “see” things, people, objects. I don’t recall much about them anyway except being slightly mildly freaked out at the time for experiencing something which was not “real”.
jackjeff··on Aphantasia: I can not picture things in my mind
Not the GP either I can’t do any of that.

Sound is like images for me. An abstract concept you can reason about later but only experience in the moment.

jackjeff··on Aphantasia: I can not picture things in my mind
My answer would have been. Hang on a second you never asked me to imagine a triangle WITH a color?

What else has this triangle got? A flavor? A smell? A name? It would have never occurred to me it had a color in the first place before you asked.

jackjeff··on Aphantasia: I can not picture things in my mind
> For a true aphantasiac, this question is meaningless

I confirm.

I would have probably picked up a color at random to play along with the whole “mind’s eye metaphor” before I realized people can actually “see” for real and it’s not a metaphor.

jackjeff··on Aphantasia: I can not picture things in my mind
Do people without aphantasia actually visualize for loops, class hierarchies, design patterns, etc…?

If not it would be easy to explain the result of the “visualize an apple” test. It’s just like visualizing a “for loop”. You’ve got a good idea of what’s it like and yet visualize absolutely nothing.

jackjeff··on Swift's native Clocks are inefficient
Absolutely agree.

On Windows the equivalent would be MSVCRT which is sometimes shipped with the OS and sometimes not (depending on the versions involved). Sometimes you even need to worry about the CRT dependency with higher level languages because their “standard librairies” depend on the CRT.

So if you see that being installed with Java or C# or Unity, now you know why.

jackjeff··on C isn't a hangover and Rust isn't a cure
I guess C++ will be new COBOL.
jackjeff··on Israel shuts down local Al Jazeera offices
The ICJ is currently investigating a genocide case against Israel. So I guess we’ll find out… eventually.

https://www.chathamhouse.org/2024/01/south-africas-genocide-...

jackjeff··on C-Macs – a pure C macOS application
That’s essentially what this project does. It creates the C code that the ObjC compiler would generate to “implement methods” or “send messages”.

It’s somewhat doable by hand because Objc is a thin lawyer.

Over 15 years ago I did stuff similar to this project to call some Objc code from a C++ app. Most of it was exposed to normal C APIs but one feature only available in AppKit. It was much simpler to do it this way than figure out how to make GCC or Objc like our C++ or any mess with bridging headers.

I think the move to Swift has made that harder in some ways.

But then again I don’t want to write C or C++ these days if I can avoid it.

jackjeff··on Dracula's Biggest Mistake
It’s really Dracula vs Modernity. There’s nothing in the blog post that justifies the usage of the “Catholic” epithet. London is the seat of Anglican faith after all and using type writers and records are secular endeavors.
jackjeff··on The Windows Ubuntu Operating System
I mean. They really want their Streisand moment. Imagine all the clickbait articles if they get sued
jackjeff··on The Windows Ubuntu Operating System
Yes pretty much. Custom theme that you have to pay for eventually (free for 30 days) plus wine integration and some pre installed apps.
jackjeff··on A beginner's guide to constant-time cryptography (2017)
What people always forget when they make statements about hashing being one way is that these algorithms are designed to be incredibly fast.

So if what you’re hashing has low entropy/randomness (say a password) then you can totally brute force it.

In fact if there’s not a salt you can look it up in a rainbow table, saving yourself some compute. Googling a hash also works sometimes. If you want to brute force look at hashcat.

Something like SHA256 protects about 128 bits of entropy. If you go much lower than that, you’ll be brute forced. You can look at hashcat benchmarks online to estimate the time and money necessary to perform the attack. Anyone can crack an average simple password using a single round of SHA256 in no time.

jackjeff··on A beginner's guide to constant-time cryptography (2017)
Basically you can figure out the hash using the aforementioned timing attack.

You can now perform an offline attack against the password that produced the hash.

It’s like you hacked into the database and got the password hashes.

Then, you fall back to something like hashcat.

If with a bit of luck you just hashed your password with a single round of SHA and did not use something cool like Argon2id then you’re toast. If your password is simple you’re toast too.

On the other hand, if you hashed a totally random key, the safety will rely on whether the hashing algorithm itself is constant time or not. You just moved the needle.

jackjeff··on Apple, Microsoft win exemptions for iMessage, Bing from EU rules
Nobody uses iMessage over here. WhatsApp dominates.

It’s always amusing to hear Americans complain about the lock-in of blue bubbles.

jackjeff··on BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico
I never liked the design of Bitlocker

- I always set a PIN. Wish it was a proper passphrase instead. The whole magic thing of decrypting things automatically seems like a total design flaw.

- I often disable the hardware encryption support. Some of these are total jokes. AES-NI is decent but it’ll reduce performance on faster SSD drives.

An unbooted FileVault Apple device just does not know the decryption key. Until you’ve entered the passphrase there’s no flaw in the OS or hardware that can give it to you. Such a cleaner design. So much safer no magic TPM BS. Same goes for my Linux/LUKS servers. No passphrase not boot.

jackjeff··on Kagi search reached 20k paying members
I don’t know. Might have been worth it just for the exposure on Hacker News.
jackjeff··on If you're in the EU, you can now decide how much data to share with Google
That’s the thing. No tracking occurs. And no personal data is collected or sent anywhere. It stays in your browser. In a way it’s like your browser history. The browser knows your interests and runs auctions for advertisers. And as per GDPR you can review it, correct it and opt out at any time. It’s basically the same horrible adware thing but without tracking and fully compliant with all EU laws.

At some point Google will turn off 3rd party cookies (a decade after Safari) and adtech will have no choice but to adopt their stuff. By end of 2024 if all goes according to plan.

jackjeff··on If you're in the EU, you can now decide how much data to share with Google
In the long run Google probably does not care that much. They’ve been busy moving the tracking into the browser itself with the Protected Audience API.

Technically they don’t track you personally and nobody has a database of your preferences. The browser does and just runs auctions to serve you ads.

This kind of tech renders the DMA, GDPR and cookie banners moot, while keeping the money printing machine that is Google Ad business running.

jackjeff··on Spotube: Open-source Spotify-Youtube client
I see.

What I really want is a converter from Spotify abomination to standard podcasts which I can read from any podcast client.

Last I checked the podcasts are DRM encumbered. So you’d have to spin up a client pretending to be chrome and use the Wivedine extension to decrypt every mp3 frame. No hacking required. But Life is too short. So instead I refuse to listen to fake podcasts on Spotify.

jackjeff··on Woman with rectifier and electric car (1912)
Considered how expensive EVs are and since they can’t do simple things like airport return trips, I predict that gas guzzlers still have a long life ahead of them.

I know EVs will get cheaper. But there’s no chance they’ll ever be as inexpensive as the cheap gasoline cars that some people can barely afford today. It’s unavoidable for car ownership to go down on the long run.

It may not be such a bad thing to have more public transport or car sharing schemes though… but in the mean time expect disenfranchised people to vote for populists candidates that go against EV policies, hence slowing down adoption.

The tail end of EV adoption will be a lot longer than people think in opinion.

My guess is 20 years for 2/3 cars to be EVs. 10 years for new cars and another 10 for the second hand market.

It took about 10 years for SUVs to become the de facto car form factor. So I see a similar adoption here.

jackjeff··on How Africans are changing French, one joke, rap and book at a time
I’d be curious to know where she is from.

I’m from Southern France but I have lived in Paris for a few years. I didn’t have a strong accent that would require subtitles on French TV like some people do, but I did have an accent. Nobody would mistake me for a local.

I think people over there are generally condescending and don’t care about you. I don’t think the accent is the issue. If not that they would find something else to complain about.

I was occasionally mocked for my accent but nothing that a stare and raising of my voice would not fix. Maybe staff is more likely to mess with a woman?

Anyway. Almost nobody is a local in Paris. People from all over France come there. They erase their accent and all pretend to be Parisians after a few years. Then they age and go back home to retire or raise a family in an affordable place.

These days I travel with my wife and switch from perfect English to perfect French and I get a bit of shock from the staff when this occurs. Nobody complains about my accent anymore, relieved they won’t have to deal with English for once. I must have a fairly weird and impossible to geographically locate accent nowadays after years of living abroad and speaking to expats. I’m no longer sounding like the caricature of the peasant from Southern France. Also my wife is a lot more friendly than me and generally would befriend staff members that can speak good English (foreigners or students) so I guess that helps.

jackjeff··on How Africans are changing French, one joke, rap and book at a time
I agree French could do this as well as English.

In fact, many Creole language derived from French have this kind of simplified French structure as a core feature

jackjeff··on Mixtral of experts
Mistral is funded in part by Lightspeed Venture Partners a US VP. But there are a lot of local French and European VPs involved.

The most famous one is Xavier Niel, who started Free/Iliad a French ISP/cloud provider and later cellphone provider that literally decimated the pricing structure of the incumbent some 20 years ago in France and still managed to make money. He’s a bit of a tech folk hero, kind of like Elon Musk was before Twitter. His company Iliad is also involved in providing access to NVIDIA compute clusters to local AI startups, playing the role Microsoft Azure plays for OpenAI.

France and the EU at large has missed the boat on tech, but they have a card to play here since they have for once both the expertise and the money rolled up. My main worry is that the EU legislation that’s in the works will be so dumb that only big US corporations will be able to work it out, and basically the legislation will scare investment away from the EU. But since the French government is involved and the guy who is writing the awful AI law is a French nominee, there’s a bit of hope.

jackjeff··on Report: YouTube adding user-traceable ID tag to links shared off-platform
Newpipe and Yattee are awesome. I don’t regret the couples of evening I spent setting up a local sever.

I used to see ads occasionally on YouTube before they tried to crack down. The irony lol.

jackjeff··on Show HN: Beeper Mini – iMessage client for Android
But EU interoperability laws are cancelled out by DMCA (aka EUCD). That’s why reading a DVD with VLC has always been “technically” illegal.

If Apple is able to update the protocol in such a way that it requires some kind of signed attestation from the secure enclave (basically a DRM) they’ll get legal protection.

Also. Nobody uses iMessage in the EU. It’s all WhatsApp here. Blue bubbles are an American obsession.

jackjeff··on A case for moving away from the cloud and embracing local storage solutions
I have a cron job running snapraid scrub. And smart demon with email alert. Once I had to quickly buy a HDD (next day Amazon) because it was dying.

Big appeal of cloud storage is that the data won’t go up in smoke if there’s a fire. But everything else you can do if you’re patient enough.

← PreviousPage 3 of 10Next →