HNHacker News
TopNewBestAskShowJobs

libeclipse

2,115 karma · joined January 25, 2016

Programmer mostly working on security stuff.

:: https://spacetime.dev

submissionscomments
libeclipse··on Ban Pay to View Content on Hacker News?
For the URL you mention: https://sci-hubtw.hkvisa.net/10.1177/00207314211015806
libeclipse··on Syncthing – a continuous file synchronization program
No one is saying you're not allowed to critique the software. You're critiquing the people who create that software for free
libeclipse··on Syncthing – a continuous file synchronization program
Then fork it? No one is stopping you.

I assume you don't care about missing out on updates since that's the free work you're complaining about

libeclipse··on Syncthing – a continuous file synchronization program
It's easy to open a pull request instead of complaining
libeclipse··on Why Firefox has been in decline for 12 years
The new updated Firefox on Android is better than the old one
libeclipse··on US Supreme Court Restricts Scope of Computer Fraud and Abuse Act [pdf]
They charged Swartz under many more things than just the Computer Fraud and Abuse Act. Just check out the list here: https://en.wikipedia.org/wiki/Aaron_Swartz#Arrest_and_prosec...

- two state charges of breaking and entering with intent to commit a felony

- wire fraud, computer fraud, unlawfully obtaining information from a protected computer, and recklessly damaging a protected computer

- breaking and entering with intent, grand larceny, and unauthorized access to a computer network

- federal prosecutors filed a superseding indictment adding nine more felony counts, which increased Swartz's maximum criminal exposure to 50 years of imprisonment and $1 million in fines

libeclipse··on Maxwell’s Demon Continues to Startle Scientists
I agree but for a different reason. It seems obvious that Maxwell's demon would itself use energy, thereby paying for the "decreased entropy" with this energy.

This is essentially the same as:

> The second vital piece of the puzzle was the principle of erasure. In 1961, the German American physicist Rolf Landauer showed that any logically irreversible computation, such as the erasing of information from a memory, would result in a minimal nonzero amount of work converted into heat dumped into the environment, and a corresponding rise in entropy.

libeclipse··on FBI subpoenaed Apple for data of Sci-Hub founder
Apparently Sci-Hub has paused uploading new papers to the site: https://www.reddit.com/r/scihub/comments/lofj0r/announcement...
libeclipse··on FBI subpoenaed Apple for data of Sci-Hub founder
I just learned that Sci-Hub has currently "temporarily" paused uploading new papers to the site.

https://www.reddit.com/r/scihub/comments/lofj0r/announcement...

libeclipse··on The handshake emoji is more complicated than you might think
Agreed. The fallback emoji in particular is very confusing, doesn't look like a handshake, and is only necessary because of this particular solution to a problem that no one had.
libeclipse··on It's your device, you should be able to repair it
They intentionally make it more difficult to repair devices so that users buy new ones instead, all the while doing stunts like removing charging cables to "help the environment". It's pure hypocricy.
libeclipse··on Apple reveals more about AirTag stalking protections
I would not trust police with location data or with getting my device back.
libeclipse··on It's your device, you should be able to repair it
> The European Environmental Bureau (EEB) says extending the life of smartphones and other electronics by just one year would be the equivalent of taking two million cars off the road, in terms of CO2 emissions.

Looking at you, Apple.

https://uk.gofundme.com/f/lets-get-right-to-repair-passed

libeclipse··on Show HN: Diffie-Hellman exchange for the layman
https://borisreitman.com/privacy_bare.html
libeclipse··on Show HN: Diffie-Hellman exchange for the layman
Diffie Hellman Key Exchange is performed over a cyclic group. That's just a large set of elements that wrap back around to each other. So for example the integers mod 7 is {0, 1, 2, 3, 4, 5, 6}. A generator for this group is any element that you can continuously add to generate the whole group, for example: 1.

In the case of DH, g is some such element.

libeclipse··on Show HN: Diffie-Hellman exchange for the layman
Perhaps a simpler way of explaining:

DH relies on the discrete logarithm problem. That means that if I give you g + g + .. + g, where g is added to itself n times, it will be difficult for you to find out what n is.

Both parties share the same prime p, and the same base point g. Then each of them select a random, secret point. Say Alice's secret is a and Bob's is b. Now each of them create their "public key", which is just g + g + g .. a times, and g + ... b times to create A and B, respectively. The (mod p) simply means divide the result by p and take the remainder as the answer.

Now if I am Alice, my secret is a, my public key is A. Bob sends me B = g^b (mod p). I exponentiate this with my own secret key to get shared secret = (B)^a = (g^b)^a = (g^a)^b = g^(ab) (mod p)

(mod can be deferred to the end of the calculation or done at each step, without changing the answer)

So you can see that, since the order of exponentiation doesn't matter, when Bob does the same calculation (multiplying his private b with alice's public key g^a) he gets the same shared secret.

libeclipse··on Show HN: Diffie-Hellman exchange for the layman
tldr: preventing MITM attacks requires setting up an authentication workflow. Without this, you have no guarantees about who you're speaking to.

For example, TLS 1.3 does this by (after performing ephemeral DH key exchange) signing the conversation transcript with the server's long term identity key. After this the client is sure that they are speaking to the correct server, but the server has no authenticity guarantees about the client.

libeclipse··on Show HN: Diffie-Hellman exchange for the layman
Note: P-256 is not considered a safe curve. Use Curve25519 instead. See: https://safecurves.cr.yp.to/
libeclipse··on YouTube CEO receives freedom of expression award sponsored by YouTube itself
https://twitter.com/GordonDimmack/status/1384067464368033800
libeclipse··on YouTube CEO receives freedom of expression award sponsored by YouTube itself
Freedom of expression includes the right to supress the views of others! /s
libeclipse··on Cloudflare Pages is now Generally Available
Netlify is quite good. Allows you to install Cloudflare's 10 year backend certificate on it so you can turn on Strict HTTPS checking.
libeclipse··on Writing tools I learned from The Economist
I really appreciate how The Economist packs articles full of facts and information, allowing you to form your own opinion, while still arguing an opinion of their own.
libeclipse··on Did Schnorr destroy RSA? Show me the factors
Supposing the paper does describe a more efficient factorisation algorithm, that does not imply that factoring a 800 bit prime (like the author of this article suggests) would be cheap.
libeclipse··on Show HN: I made an alternative platform for professional profiles
I just put an avatar that's not my face.
libeclipse··on LibrePhotos: A Self-Hosted Google Photos Alternative
Not necessarily. Is unencrypted data even sent to the server? That's controlled at the application layer.

Of course you could setup TLS and FDE but this doesn't guarantee that your data will be safe.

libeclipse··on LibrePhotos: A Self-Hosted Google Photos Alternative
Are photos encrypted, both in-transit and at rest?
libeclipse··on Show HN: Tuchu – Automatically highlight the important parts of a document
This doesn't work well on any of the 4 documents I tested it on. Highlights barely anything with little reason for the parts that it does.
libeclipse··on How to Think for Yourself
Plus there's the irony of an article telling you how to think for yourself.
libeclipse··on Cover Your Tracks – See how trackers view your browser
Related blog post: [Introducing Cover Your Tracks!](https://www.eff.org/deeplinks/2020/11/introducing-cover-your...)
libeclipse··on China delists all remaining poverty-stricken counties
Hong Kong is currently enjoying China's "rule of law"
← PreviousPage 2 of 20Next →