HNHacker News
TopNewBestAskShowJobs

jermier

233 karma · joined June 29, 2020

submissionscomments
jermier··on On the Twitter Hack
> especially given their dominance in both search and advertising

Google's Search mechanism is merely a trojan horse where their real cash-cow is the advertising business. They use Search to assuage people into thinking they are an ethical company, when we all know by now, they rely on surveillance capitalism and creating large elaborate dossiers on the whole population.

jermier··on Show HN: UUIDs that are Shakespearean, grammatically correct sentences
A little trick to remember long things like a diceware passphrase for example is to develop the muscle memory for it starting with the first three words. When those three words have been ingrained/burned into memory, you add another two words, and over time increase the amount of words until the whole phrase is memorized. It seems obvious, but you would be surprised about how many people try to remember the whole phrase on the spot without developing it in small parts, over time.
jermier··on On the Twitter Hack
Maybe not world leaders trading nuclear launch codes, but I imagine a fair bit of drug dealing goes down in Twitter's DM'osphere
jermier··on The German Problem with Tor
> To point a finger at Germany while recommending Switzerland or Russia of all places as alternatives is just beyond retarded.

Reminds me of the old joke:

   Use Signal, over Tor, over Switzerland
jermier··on Any claim without a URI should be treated as suspicious
Very soon everything will exist cryptographically on some uncensorable blockchain, and websites & files will exist on the Interplanetary Filesystem[0] and will be impossible to take down. And 'things' will all be categorized and have their own QR code which when scanned, will reveal the context (or even price!) of the item.

[0] https://en.wikipedia.org/wiki/InterPlanetary_File_System

jermier··on Police called to IKEA after thousands sign up for hide and seek (2019)
That's it. That's the tweet.
jermier··on The Truth about Disroot
I like their free Nextcloud feature, but wouldn't upload anything in plaintext. It's now the fashion to encrypt everything before uploading it to cloud services. I use a combination of 7zip, Veracrypt, and if I can mount a cloud drive as a filesystem, then I use Cryptomator. The same goes for their email: PGP with friends who know how to use it too and if I need to contact grandma, then Whatsapp (which you can get on featurephones/dumbphones now)
jermier··on U.S. FBI is leading an inquiry into the Twitter hack
One starting point is the domain the 'hackers' used in those tweets. It's inaccessible now, but a great starting point for further investigation. You would need pretty strong OPSEC to register a domain anonymously these days, even with so called 'privacy aware' registrars like Njalla et al.
jermier··on Manager Can’t Code? They Shouldn’t Be Your Manager
> A good manager has empathy for those who report to them. If the boss doesn’t code or hasn’t written code in a long time, they won’t understand the daily problems that their team is faced with

It's as if coding is painted in this herculean way, as if it works /against/ you when you're doing it and it's some monumental task. Aim for /flow/ where the task is hard but not too hard that you can't do it fast enough or efficiently enough, and you enjoy the challenge.

jermier··on I Know What You Download on BitTorrent
Luckily my router only supports IPV4 and I'm assigned a vague IPv4 CGNAT IP every time I switch it on. I used this site to do some OSINT on my IP and you guessed it: It looks like I'm sharing my IP with 1000s of other subscribers so doing attribution to 'me' would be hard and also wouldn't hold up in court. Also see:

https://www.eff.org/de/deeplinks/2011/08/why-ip-addresses-al...

https://www.securityweek.com/eff-warns-police-courts-about-u...

jermier··on Soup.io Will Be Discontinued
This is why we need to scrape services like this and keep copies for posterity. For every site like this that can't sustain itself well into the future, a part of the Internet and its culture dies. RIP Soup.io
jermier··on Tell HN: 6.3% of HN top submissions in plain HTTP, more than half upgradable
> For example; there are certain versions of IE that will throw an insecure content warning if you load https scripts within a http page.

Does IE support 'schemeless URIs'? like:

    //example.com/resource.js
jermier··on Tell HN: 6.3% of HN top submissions in plain HTTP, more than half upgradable
I noticed in Cloudflare you are given the option of allowing the site to have both http and https, and the visitor to the site gets to decide what version they want. But what use case does this have other than allowing requests to be downgraded by determined actors?
jermier··on Pinboard Turns Eleven
If I have the time, I like to open up /recent[0] to see what's in there. /popular[1] is good too, but with /recent you usually find some obscure less popular (but still good) link that always surprises me. I am glad the Internet still has little rabbit-holes like this that you can get lost in.

[0] https://pinboard.in/recent/

[1] https://pinboard.in/popular/

jermier··on Blog Anonymously
Is it even possible to create a Protonmail account with Tor? I thought it asks for your phone number if you do that? (And we all know hopefully by now, handing over your phone number is a big no-no if you want to be anonymous)
jermier··on Tell HN: Google drops blogspot.in, breaking hundreds of thousands of permalinks
I'm surprised no-one mentioned Mark Monitor[0] (no affiliation). A lot of big brand corporations use it to protect their intellectual property. Can you imagine, for example, someone getting their hands on `apple.com` or `icloud.com`. They could wreak havoc since a lot of iDevices use those two domains in order to function and you could pwn many devices if you were determined enough. I imagine MM solves the 10-year time window problem by ensuring the domain lives well on into the future. It's what they do.

[0] https://www.markmonitor.com

jermier··on The largest unknown Bitcoin wallet moved nearly $1B for $0.48 in fees
> he’s not a fortune teller

Many have speculated he may be a time traveler, although they don't give any reason. The only thing I can think of is he possibly traveled back in time after witnessing a massive economic downturn that had people eating rats off the street and an even further (much more serious) dichotomy of rich and poor. Bitcoin could level the playing field stopping banks from having nearly full monopoly of your money.

jermier··on What can I learn from an IP address?
> However, it should be taken into account that if you look up the latitude/longitude, you won't find the exact location where I was

Which is why GPS is pushed so hard in phone/tablet apps. Developers know about the IPV4 lat/long problem and are aggressively asking for GPS coordinates at every instance.

jermier··on The Web Is Getting Old
The URL structure of my blog has changed so much over the years and I have subjected my subscribers to so many 404s that it made me put everything in a self-hosted pastebin for peace of mind. All I have to do is keep that pastebin alive and the domain renewed and my content will be preserved well into the future.

I've still yet to find a registrar that promises to keep a domain renewed past the 10-year limit though. The closest service I found is Mark Monitor but that seems to cater for large companies / corporations who need to protect their intellectual property (and it's expensive!). Can't have someone registering apple.com when it expires!

← PreviousPage 2 of 2