HNHacker News
TopNewBestAskShowJobs

kbaker

1,412 karma · joined February 9, 2012

Embedded systems engineer + software developer... My 'full stack' means PCB design and layout, RF + RFID, components + sourcing + product design (even some mechanical), kernel dev + bare metal embedded OS distros, add more layers of C, Python, Java, or .NET to tie it all together, then a nice-looking web frontend to top it off. Lots of fun to be had at every level!

send me email! username at gmail. [ my public key: https://keybase.io/kbaker; my proof: https://keybase.io/kbaker/sigs/sGOx8W59UuZWbo2z0B_5fbOKqvu0qyn42orx8wi2x_I ]

submissionscomments
kbaker··on Visualising Electromagnetic Fields
Similar to this project:

https://hackaday.io/project/4329-wifi-power-mapping

Also see this video which goes over the concept:

https://www.youtube.com/watch?v=aqqEYz38ens

kbaker··on Software Updates for IoT Devices and the Hidden Costs of Homegrown Updaters [pdf]
This page on the Yocto wiki https://wiki.yoctoproject.org/wiki/System_Update provides an overview of many of the current offerings for software update systems.
kbaker··on Start Your Own ISP
This is exactly the market for 5G cellular, btw. You will have your pick of carriers in a couple years that can provide you with this service...
kbaker··on Ask HN: What’s your favorite talk from 2017?
Highly recommended talk - About the convergence of Li-ion batteries, electric vehicles, self-driving cars, and solar energy over the next decade; and the impact it will have on the future of the electric grid, big oil, and the car industry and related industries (auto insurance, gas stations, parking lots, etc.)

Maybe a bit on the optimistic side? But exciting to consider the possibilities!

kbaker··on Gerrymandering with geographically compact districts
The Thirty Thousand project aims to fix the problem gradually by scaling the number of representatives to the population:

> As shown above, in 1804 each Representative represented approximately 40 thousand people. Today, the average population of congressional districts is nearly 700 thousand and growing.

> In order to restore the House to the citizenry, our total number of federal Representatives will have to be increased substantially. Achieving this goal is essential to extending the ground of public confidence in our government and ensuring the beneficent ends of its institution.

http://www.thirty-thousand.org/

kbaker··on Electronic Lottery Tickets as Micropayments (‎1997)
This is a pretty cool idea. Reminds me of the fapiao system in China for preventing tax evasion - convert the tax receipts into lottery tickets.

https://www.beijing-kids.com/blog/2012/01/09/scratch-that-fa...

kbaker··on Why we switched from Python to Go
Curious, where do you see that youtube is running Django? Python, maybe, but I don't think they run Django?
kbaker··on A Little Story About the `yes` Unix Command
Geez man, at least mine some cryptocurrency.

Then your hot lunch will buy you another hot lunch down the road!

kbaker··on The Bitcoin Apocalypse Is Coming in Mid-November
That is technically true, but the Core group has been stewarding Satoshi's original client since the genesis block. So a switch to another code base (even if it is a semi-recent code fork) is still a major event in Bitcoin's history.
kbaker··on The Bitcoin Apocalypse Is Coming in Mid-November
https://medium.com/@bitcoinroundtable/bitcoin-roundtable-con...
kbaker··on The Bitcoin Apocalypse Is Coming in Mid-November
Just for some balance, the Hong Kong Agreement (which is absent from the article) is really important in this timeline - in Feb 2016, an agreement was reached with miners and signed by a few Core devs (however, possibly under duress?) to work on Segwit _and_ a safe hard fork.

The NYA happening with a few CEOs "behind closed doors", was pretty much a result of the year and a half of no progress on the safe hard fork part. Also remember the miners aren't really a fan of cheap transactions, which eats into their profits, and does fundamentally alter their ROI.

Segwit2X was originally sold as a compromise. Activate SegWit for the future since it requires software updates as you noted for the additional transaction formats, and schedule a 2X HF to help the network grow immediately.

> The big-blocker anti-segwit movement stalled work for years, politicized the Bitcoin space, and contributed to making many of the core devs be the target of harassment

I agree sadly, but unfortunately it was the same story on the reverse side. Look at the ridicule and scorn Mike Hearn and Gavin got for their big block proposals in 2015.

kbaker··on The Bitcoin Apocalypse Is Coming in Mid-November
SegWit was an upgrade though, this is more like a coup.

SegWit2x is basically the mining faction stealing the network away from the Core development group, forcing everyone in Bitcoin to switch software if they still want their transactions confirmed.

Not that I really disagree with them - as _something_ needed to happen, as demand (whether real or manufactured) has led to 100% full blocks for months, resulting in long transaction delays and high fees, and the rise of competing currencies, fracturing the market.

We will see if one side backs down before the HF, but due to both incredibly entrenched positions I think we are going over the edge.

I think that 2X will destroy a lot of confidence in Bitcoin, as it proves that the network can be stolen away to change the rules, and would be managed by a much smaller dev group.

Though, the Bitcoin network can survive as a zombie forever with just a couple miners and zero devs. So it may not 'fail' in that sense, just become very stable.

kbaker··on The Bitcoin Apocalypse Is Coming in Mid-November
The other question is, if LTC ever becomes as relevant as BTC is in the marketplace (BTC has 30x marketcap), could Charlie still retain enough power to continue to be the guiding hand?

Gavin Andresen was that force in Bitcoin for years, as lead developer and chief evangelist, but now he plays a minor role; recently with big $$ in play and the big community split, not to mention the insane personal attacks, it is much harder to maintain influence.

kbaker··on After the check is gone: The underground economy of rural America
(Offtopic) If you click on the comment, there is a [vouch] link to bring certain comments back from the dead.

I find that this is a good balance to keep the well-written comments that add to the discussion and deserve a second chance.

kbaker··on Strategies for offline PGP key storage
Yeah, I don't think those are really HSMs. Just a very secure USB stick.

The whole idea behind an actual HSM is that you never trust any computer it is plugged into, it is designed to be impossible to retrieve the key stored in the device via any means. All signing operations are done internally in the device itself - you simply can't mess up and accidentally leak key information.

kbaker··on 6$ cross country IOT device for parcel tracking [pdf]
That's true, and I agree that the openness and controlling your own data is important in a general case.

Though I can pretty much guarantee these devices are not directly posting transactions on a blockchain, the cost in CPU power and battery consumption is too high and the devices would cost way more than $6 in that case.

If there is still a server in between making the transactions, does it still make sense to invoke the "blockchain" terminology? To me that is where the hype part comes from.

kbaker··on 6$ cross country IOT device for parcel tracking [pdf]
They didn't do some basic error-checking in their PDF. Should redirect to: www.thebitpost.com not bitpost.com.

Maybe using NB-IoT and a GPS, it could be plausible? Not at $6 now, but maybe $20, and assuming NB-IoT networks exist where your package is going.

No details, so it might be complete hand-wavy vaporware.

Also, rant, I am frustrated with the use of 'blockchain' for things that should be in a database. Makes me think the company is only hype and buzzword-driven.

kbaker··on Chrony: Comparison of NTP implementations
Also note that openntpd just ignores that leap seconds exist, and just assumes the local time is 1 second wrong when it happens.
kbaker··on New in PostgreSQL 10
See this discussion also: https://news.ycombinator.com/item?id=15258166
kbaker··on An Analysis of CVE-2017-5638 – how Equifax was hacked
Ah, I probably should have used a TL;DR tag - my original comment is just a really condensed summary of the awesome but super detailed article, which even shows and explains the Struts code in question, example requests and responses, stack traces from the exception, and the exception logs. Even in the comments are some logs that look like evidence of an actual in-the-wild RCE attempt!

So maybe check there for more explanation... all credit for the research and investigation goes to the article's author. It was really a good 'deep dive' into the internals of Struts to see how such a subtle bug could be turned into RCE.

kbaker··on An Analysis of CVE-2017-5638 – how Equifax was hacked
Wow, article is from March 2017.

Summary: Attacker sends a malformed Content-Type header on file upload, which throws an exception due to the Content-Type being unknown. But, in the exception text is the direct, unsanitized user input from the header.

There is not a specific text localization handler for struts.messages.upload.error.InvalidContentTypeException, so a generic exception handler ends up being used to process the exception. This generic handler turns out to parse the unsanitized user input as OGNL markup, running the attacker code when processing the exception text.

Some effort is made to blacklist loading other Java libraries in the text rendering context, however it was easily defeated by emptying the blacklist in the attacking code before calling the blacklisted modules.

kbaker··on Why We Terminated Daily Stormer
Wow, yeah, this article should be higher up. Choice quotes, from the same guy, regarding taking down ISIS sites:

Speaking with IBTimes UK, co-founder and CEO of CloudFlare, Matthew Prince, said that his company would not be blocking its service to websites listed, as it would mean submitting to "mob rule".

"Individuals have decided that there is content they disagree with but the right way to deal with this is to follow the established law enforcement procedures. There is no society on Earth that tolerates mob rule because the mob is fickle," Prince said.

...

"We're the plumbers of the internet," Prince said. "We make the pipes work but it's not right for us to inspect what is or isn't going through the pipes. If companies like ours or ISPs (internet service providers) start censoring there would be an uproar. It would lead us down a path of internet censors and controls akin to a country like China."

Must have been in a pretty bad mood.

kbaker··on Amazon recalls eclipse glasses
As a comparison to the counterfeits, I took some pictures of my 'real' Soluna glasses, which I ordered a couple weeks ago from Amazon (and didn't get an email.) Also they pass the manufacturer's tests for verifying real glasses. 100 W equivalent CFL is very dimly visible.

http://imgur.com/a/5hMfu

kbaker··on Intel Introduces “Ruler” Server SSD Form-Factor
I've seen these before! This is what they use in the HAL 9000.

https://i.ytimg.com/vi/c8N72t7aScY/maxresdefault.jpg

https://www.youtube.com/watch?v=c8N72t7aScY

kbaker··on Ask HN: You have $100/mo to invest in cryptocurrency, BTC, BTC Cash or Ether?
But if you go 100% ETH, make sure you watch Rootstock very closely http://www.rsk.co/.

Executing the Ethereum VM and smart contracts on the Bitcoin blockchain...

kbaker··on Ask HN: You have $100/mo to invest in cryptocurrency, BTC, BTC Cash or Ether?
There are scrypt ASICs for Litecoin as well. Anything that can be computed, will be centralized and moved to the place with the cheapest power and the loosest regulations...
kbaker··on How Do I Protect DIY Electronics from the Environment?
http://www.americansealantsinc.com/388-electronic-grade-sili...
kbaker··on Bitcoin: Evidence of spoofing, wash trading, and a scheme known as ‘Tether’
I mean, you already can. I have purchased things from Newegg and Steam, used it with Expedia to book hotels and flights...

You can treat Bitcoin the same way you treat USD, there are a lot of places that accept BTC directly. Phone apps make transactions easy.

kbaker··on Ask HN: Who is hiring? (August 2017)
Venture Research Inc. | Software Engineer | Plano, TX (Dallas, TX, DFW) | Onsite Only | http://www.ventureresearch.com

Interested in RFID? In improving inventory and replenishment processes in hospitals, labs, and clinics? In automatically tracking pallets, containers, and other assets around a facility? Come join us!

Venture Research is a leader in the RFID industry and is consistently pushing the leading edge of what is possible using RFID. We have a variety of opportunities available for both fast-paced new product design and development as well as for development on some of our long-term stable products. 17 year old small but growing company, privately held, with excellent benefits, 401K matching, paid health insurance and highly competitive salary and bonus structure.

We are hiring for the following positions:

* Embedded platforms engineer: C, Linux? Android NDK? Experience with hardware co-design, Python, QT, Django, React a plus.

* Embedded firmware engineer: microcontroller development using primarily NXP Kinetis parts.

* Senior .NET / Backend developer: C#, VB.Net, ASP.NET, MSSQL, Oracle, JavaScript and JQuery. .NET MVC a plus.

Please email resumes to hr@ventureresearch.com, or use the email in my profile. Thanks!

kbaker··on Cryptocurrency miners are renting Boeing 747s to ship graphics cards
I don't know... demand can drop instantly, maybe permanently, if the price crashes. Not the best long-term strategy...
← PreviousPage 6 of 13Next →