HNHacker News
TopNewBestAskShowJobs

kirab

324 karma · joined August 6, 2013

Kira Backes https://nrwsoft.de
submissionscomments
kirab··on Journalists want to re-create Twitter on Mastodon. Mastodon is not into it
Same as every online service. There's always admins (even on Twitter of course) who can read the DMs (unless you have proper end-to-end encryption).

FYI: especially now that Elon Musk owns Twitter.. And fired everyone who is not loyal.. The idea of reading DMs of employees at competing companies is not far fetched at all.

kirab··on Pessimism is a barrier to progress
Yes of course! What I'm saying is that neither is better in all contexts. There's a lot of nuance.
kirab··on Pessimism is a barrier to progress
Optimism and Pessimism are viewed very differently in different Countries (Germany vs USA) and even Regions (Silicon Valley vs idk Utah).

Apart from that I think the article is mostly wrong. To make progress you need agency and self-confidence. The effects of Optimism and Pessimism are very context-dependent.

Just one example: A very driven and confident pessimist might be much more motivated to find a solution for Climate Change, because he knows for sure otherwise Earth is Doomed.

While a very driven and confident optimist in Politics might reduce Carbon Tax, because he knows for sure that Technology Companies will find solutions for Climate Change and they'll find it faster if they have more money.

kirab··on Slack Security Incident in Invite Links
To recap the important part: Whenever you created or redacted an invite link your password hash was sent to *everyone* online in your slack
kirab··on Ask HN: Am I being too ambitious?
As a warning to my fellow HNers, my spider senses tingled when I clicked one of the links, so I researched a bit and found this:

https://rationalwiki.org/wiki/Leo_Gura

and

https://www.inputmag.com/culture/leo-gura-actualized-org-you...

kirab··on In defense of simple architectures
SQLite does really well for locking writes as well as soon as you activate the WAL.
kirab··on List of websites and whether or not they support 2FA
This is a useful site for me. Though not (only) because of the intended usage, but because of having a list of websites and services by topic curated by the developer community (who else adds a website by pull request?)
kirab··on Attacking Merkle Trees with a second preimage attack
On a side note: I really love that a hash TREE coding is named Sakura—this is super cute and very punny!
kirab··on Cost Effectiveness of Mindfulness Based Stress Reduction
I want to reply here as well:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3964149/

The study you mentioned shows that mindfulness is overall as effective as the (best?) known other treatment options. If you take this literally you are right, there is no "benefit" in choosing mindfulness based therapy over the other options. It is "only" on par with the other known treatment options.

It is therefore a fully valid and effective choice for treatment.

kirab··on Cost Effectiveness of Mindfulness Based Stress Reduction
But that literally is mindfulness. It is not a magic technique... Simply reflecting on your thoughts (and/or feelings) is basically the definition of mindfulness.

PS: It is sad that this marketing/self-help-book/guru/training etc. hype around "mindfulness" distorted the original simple meaning of the word mindfulness.

kirab··on Cost Effectiveness of Mindfulness Based Stress Reduction
I just looked up the study with positive control you mentioned. Are you deliberately portraying the study in a false light?

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3964149/

The study literally says: "MBCT provided significant protection against relapse for participants with increased vulnerability due to history of childhood trauma, but showed no significant advantage in comparison to an active control treatment and usual care over the whole group of patients with recurrent depression."

Which means: in some cases MBCT is SIGNIFICANTLY BETTER than the compared treatments and overall it is AS GOOD AS the compared treatments (i.e. cognitive psychological education (CPE) and treatment as usual (TAU)).

Now, looking back at your post, you said "failed to show a therapeutic benefit" which is strange, because the mentioned study shows that the therapeutic benefit is about the same and sometimes it is even better compared to CPE and TAU. So why would you say that MBCT does not show therapeutic benefit if it has the same results as the other (best?) known treatment methods?

PS: I would really like to turn your biased question around: Do you know of any treatment method which is better than MBCT?

kirab··on CIA Targeting Linux Users With OutlawCountry Network Traffic Re-Routing Tool
I looked into the source code, it uses /proc/net/ip_tables_names to find the tables

And that tbh doesn't seem very reliable, see what happened on a laptop which does not use iptables:

  $ cat /proc/net/ip_tables_names
  cat: /proc/net/ip_tables_names: No such file or directory
  $ iptables -L
  [...]
  $ cat /proc/net/ip_tables_names
  filter
  $ iptables -t nat -L
  [...]
  $ cat /proc/net/ip_tables_names
  nat
  filter
This seems to only show loaded/active iptables tables. Which means that a table may exist but unless it is loaded you will not see it. But of course in our scenario the CIA would have activated some rules, so this table should appear there. Unless the CIA was also able to hide the table from that file, which may well be possible, since the table was added via a root kernel module...
kirab··on CIA Targeting Linux Users With OutlawCountry Network Traffic Re-Routing Tool
Are you sure you are creating additional tables and not chains? See for example: https://askubuntu.com/a/316993

The post further down there says that additional tables can only be created via the kernel, so if you're really creating additional tables could you please share your commands for doing so?

kirab··on CIA Targeting Linux Users With OutlawCountry Network Traffic Re-Routing Tool
I have never seen a command to retrieve all iptables tables or all iptables rules over all tables. What you usually find in documentation is the following:

    iptables contains five tables:
    raw is used only for configuring packets so that they are exempt from connection tracking.
    filter is the default table, and is where all the actions typically associated with a firewall take place.
    nat is used for network address translation (e.g. port forwarding).
    mangle is used for specialized packet alterations.
    security is used for Mandatory Access Control networking rules (e.g. SELinux -- see this article for more details).

My opinion: this is simple but pretty smart at the same time, therefore the perfect hacker tool. I can't even imagine a single sysadmin who searched for additional iptables tables before this leak.

To the dismissive people here: as a hacker you don't want complex attacking tools, they can be found much easier, because all the tools look for complex attacks (e.g. modified system files).

Hiding this well in plain sight in a place where no one and no tool ever looks is genius.

kirab··on Does Transparency Lead to Pay Compression? (2016) [pdf]
Allow me to ask the question why "Pay Compression" is considered a bad thing?

Does it make the world more just?

Are you really working a hundred times harder than the people who pick up your trash?

kirab··on Efficient music players remain elusive
Doing it like that is sadly the most compatible (and easiest) way to open a privileged port (below 1024)
kirab··on GCC 7 Release Series – Changes, New Features, and Fixes
Starting with C++17 evaluation order in this case (and most other cases) is finally specified and standardized!

This is the accepted proposal:

http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2016/p014...

kirab··on 0.30000000000000004
But which advantage would this have over using IEEE 754-2008 decimal floating point numbers?
kirab··on 0.30000000000000004
You are right, that example doesn't work. I thought the rounding and normalization described in the standard may fix all these cases by itself but there I was wrong.

But at least all problems that could happen on a financial application are solved with decimal floating points (where you will only want to use rationals in finite decimal form like 0.01)

And even your example can be made working pretty easily:

  #include <decimal/decimal>

  int main(int /*argc*/, char **/*argv*/)
  {
    using namespace std;

    using namespace decimal;
    decimal128 d1 = 1;
    decimal128 d2 = 2;
    decimal128 d7 = 7;
    uint64_t conversionFactor = 10000000000000000000ull;
    cout << decimal128_to_long_long(d1/d7 * conversionFactor) << endl;
    cout << decimal128_to_long_long(d2/d7 * conversionFactor) << endl;
    cout << (decimal128_to_long_long((d1/d7+d1/d7) * conversionFactor) ==
      decimal128_to_long_long((d2/d7) * conversionFactor) ? "yes" : "no") << endl;
  }

  1428571428571428571
  2857142857142857142
  yes

That was done using the gcc included decimal types. And if you look e.g. into the intel dfp library readme, you see lots of functions which will allow you to do the comparison you wanted to do: https://software.intel.com/sites/default/files/article/14463...
kirab··on 0.30000000000000004
But in decimal floating point this is also solved: 1/7 + 2/7 = 3/7

Please research decimal floating point first..

kirab··on 0.30000000000000004
Imagine a contract which says the contract partner receives e.g. 0.001% of the total revenue for the fiscal year (which could be 10bn Euros)

Or you do have a gram price and are selling literally thousands of tons to a big business

kirab··on 0.30000000000000004
I absolutely disagree with your disagreement. Please try writing an ERP system where you have a quantity of a billionth of an item price of a billion euros (or an item price of a billionth Euro and a quantity of billions) and tell me which integer type you deem sufficient for this.

Additionally please research decimal floating points before disagreeing.

kirab··on 0.30000000000000004
For people using C or C++ I can recommend using decimal floating point (which may be added to C++20 in the standard).

Contrary to the "default" floating point, which are base 2 and do not support precise presentations of certain numbers, you can use a decimal floating point system which uses base 10 and therefore allows exact and precise presentation and solves the problem mentioned on the page.

Also important: since 2008 this is standardized in IEEE 754-2008 which added support for decimals.

Explanation of decimal floating points: https://en.m.wikipedia.org/wiki/Decimal_floating_point

Libraries:

https://software.intel.com/en-us/articles/intel-decimal-floa...

http://www.bytereef.org/mpdecimal/

http://speleotrove.com/decimal/

C++ Standard Proposals:

http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2012/n340...

http://open-std.org/JTC1/SC22/WG21/docs/papers/2014/n3871.ht...

kirab··on U.S. regulators accuse Palantir of bias against Asians
Well..

  C and C++ offer a wide variety of arithmetic types.
  Double precision is not required by the standards
  (except by the optional annex F of C99, covering
  IEEE 754 arithmetic), but on most systems, the
  double type corresponds to double precision.
  However, on 32-bit x86 with extended precision
  by default, some compilers may not conform to
  the C standard and/or the arithmetic may suffer
  from double-rounding issues.
kirab··on U.S. regulators accuse Palantir of bias against Asians
Should every node's value be printed out exactly once and if so, are there nodes which have two parents?

If so, I would keep the pointers in a set to mark nodes as processed but is there a more elegant solution?

kirab··on OpenMW 0.40.0 Released
Yes but in the long-term this screwed you hard. If you ever stole e.g. a diamond from one trader you could no longer sell that trader diamonds. Even after years and dozens of looted diamonds you still couldn't sell diamonds there.
kirab··on Confessions of a Necromancer
Every time I see a new post from hintjens I think: "oh, he's still alive!" and I feel a strange mix of happiness (about him being still alive) and sadness (about his very probable demise) at the same time.
kirab··on GTD sucks for creative work. Here’s an alternative system
You could try IQTell, it does have an amazing amount of customizability and filtering options with which you can easily create those current todo lists by context or area for example. It was created for GTD but due to the customizability I can still recommend a look
kirab··on C++ concepts support merged into GCC trunk
I'm really glad that concepts are finally making their way in after such a long time. Concepts make using and developing templates so much more straight-forward and easier to read!
kirab··on Ask HN: Who wants to be hired? (August 2015)
Location: Solingen (Germany, NRW)

Remote: Yes (current job is also remote)

Willing to relocate: no

Email: kira.backes@nrwsoft.de

Technologies: Software Architecture, IT security, C, C++14, Java EE (6 years ago), Java Android, PHP (Magento EE, Zend Framework, TYPO3 Flow), JavaScript and of course a whole lot of other technologies and tools

Resume: Good and deep backend skills and also quite versed in low-level programming and performance optimizing (even PHP)

← PreviousPage 2 of 4Next →