HNHacker News
TopNewBestAskShowJobs

jsizzle

71 karma · joined March 11, 2016

submissionscomments
jsizzle··on Supreme Court rules ex-presidents have immunity for official acts
Not even political rivals. What’s stopping Biden from ordering cumbersome investigations on each of the Supreme Court justices? Especially the ones that are ducking ethics issues?
jsizzle··on Fortnite's new season is delayed due to tech issues
All the kids in our neighborhood are about to riot. It’s been a test of patience!
jsizzle··on Apple Reneged on OCSP Privacy
It’s obviously not the same but you can run Charles on IOS and look at the traffic coming off your iPhone and analyze it.
jsizzle··on Possible BGP hijack
It’s VERY likely a false positive. It’s the same ISP
jsizzle··on Akamai to Acquire Linode
Yes, Akamai let’s you deploy changes within minutes if not quicker, that changes several years ago.
jsizzle··on Walmart router, others on Amazon, eBay have hidden backdoors to control devices
True but they won’t have lateral access to your local network nor would you be entering credentials to online services.
jsizzle··on Jeff Bezos can’t promise Amazon employees don’t access independent seller data
This is not atypical though, and it happens in non high tech industries. Why is this an issue?
jsizzle··on Why Does DARPA Work?
Principal Investigator, basically the lead researcher
jsizzle··on Samsung TVs May Upload Screenshots for Automatic Content Recognition
Doesn’t GDPR apply to EU citizens, regardless of geography? I know that at my place of work, I have to get consent from EU citizens to email them, even if we are talking in the US
jsizzle··on Stop using low DNS TTLs
Yeah definitely. A poorly crafted SQL query can wreak havoc on performance, especially at scale!
jsizzle··on Stop using low DNS TTLs
I would maintain that if you are experiencing poor performance for a web site, there are MUCH more fruitful places to look than DNS latency. Third party objects, excessive page sizes, lack of overall optimization based on device are just the tip of the iceberg.
jsizzle··on Cache Poisoned DoS Attack: Shutdown any CDN Website with One HTTP Request
Ya in fact the CDN would either not cache error code pages or cache them separately from HTTP 200 responses
jsizzle··on Huawei Seeks Independence from the US with RISC-V and Ascend Chips
It also shows how short sighted USA is with this. They’ve given China incentive to reduce their reliance on the US and give the US less leverage overall. China may set a damaging precedent here with regard to US power
jsizzle··on Apple contractors listened to 1k Siri recordings per shift: former employee
Can you elaborate on how turning off Siri deletes the recordings? Could someone use Siri, then right after turn it off to prevent Apple from storing the recording?
jsizzle··on iPhone apps share data with trackers, ad companies and research firms
In the US it would give at least the city/metro area.
jsizzle··on Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.1.1)
Why doesn’t archive.is return a valid alternate IP for DNS queries that don’t have the EDNS0 information? They can host an apology page on that IP that tells the user why they aren’t getting the content they are looking for and suggest solutions for using a different open DNS service if the user is willing to use one that provides their client subnet.
jsizzle··on Fastly S-1
This is dated. Akamai pushes configs out in minutes now
jsizzle··on Facebook Applied for Patent to Predict Who’s in House Based on Family Photos
Is there a real advantage for them to patent this as opposed to keeping it a trade secret? Why would they patent this and make their intentions known publicly?
jsizzle··on GrayKey iPhone unlocker poses serious security concerns
Is it just me or does the price point seem extremely low? They have a device that should be in high demand globally, and maybe one competitor. And they are charging 15-30k, for basically unlimited usage?? You can't tell me federal law enforcement wouldn't pay at minimum ten times that amount for metered usage...
jsizzle··on Physicists Still Don’t Know What Puts the Curl in Curling
Science has failed us. If it can't figure out how curling works, there's no way it actually put a man in the moon.
jsizzle··on S3 was down
This is not true. Purges on akamai take less than ten minutes for entire cp codes or specific objects. Deploying new cache rules is less than an hour in many cases
jsizzle··on Another Ransomware Outbreak Is Going Global
This is minutiae at this point, but it scans the "local" /24. My assumption is that it scans the /24 for any interface available, so if a machine is infected with a public IP, it will start scanning machines on the public Internet. Not to mention other variations may decide to scan more aggressively.
jsizzle··on Another Ransomware Outbreak Is Going Global
Actually, I believe phishing / malicious attachment was debunked as the infection vector. Subsequent research found that WC starts scanning hosts and IP's on port 445 to try to find other machines to infect.

Source:https://www.us-cert.gov/ncas/alerts/TA17-132A

"Once the malware starts as a service named mssecsvc2.0, the dropper attempts to create and scan a list of IP ranges on the local network and attempts to connect using UDP ports 137, 138 and TCP ports 139, 445. If a connection to port 445 is successful, it creates an additional thread to propagate by exploiting the SMBv1 vulnerability documented by Microsoft Security bulliten MS17-010."