HNHacker News
TopNewBestAskShowJobs

libeclipse

2,115 karma · joined January 25, 2016

Programmer mostly working on security stuff.

:: https://spacetime.dev

submissionscomments
libeclipse··on China delists all remaining poverty-stricken counties
You currently have a nationalist authoritarian government that is bent on curbing civil rights and is economically incompetent. It's not hard to imagine why China is doing better economically.
libeclipse··on Testing for Divisibility by 19
There's an interesting vsauce video on some divisibility rules: https://www.youtube.com/watch?v=f6tHqOmIj1E
libeclipse··on Facebook has sent a cease-and-desist letter to researchers
Users have to install a browser extension in order to participate in the study. That's a way higher barrier than the personality quizzes that Cambridge Analytica used.

It also happens at a different layer of abstraction. Cambridge Analytica extracted data through the permissions framework that Facebook itself implemented.

Facebook's interest in its users' data doesn't need further explanation after you see that most of their profits derive from their control over it. The same control that allowed the profitable mass political targeting that these researchers are trying to study.

libeclipse··on U.S. Accuses Google of Illegally Protecting Monopoly
I hope there's a mention of how Google locks out third party browser developers by refusing to let them implement widevine, their DRM solution.
libeclipse··on Firefox usage is down despite Mozilla's top exec pay going up
> And they can't reduce their salary now because it'd be unfair on their families.

That's fucking bullshit. They make millions.

libeclipse··on UtahFS: Encrypted File Storage
Peergos doesn't hide access patterns as far as I can tell.
libeclipse··on DuckDuckGo was down
Can confirm.
libeclipse··on Facebook Novi: Wallet for Libra Digital Currencies
Doesn't work for me with JavaScript enabled.
libeclipse··on Symbolic mathematics finally yields to neural networks
I like this prospect:

> Another unsolved problem where this approach shows promise is one of the most disturbing aspects of neural nets: No one really understands how they work. Training bits enter at one end and prediction bits emerge from the other, but what happens in between — the exact process that makes neural nets into such good guessers — remains a critical open question.

> Symbolic math, on the other hand, is decidedly less mysterious. “We know how math works,” said Charton. “By using specific math problems as a test to see where machines succeed and where they fail, we can learn how neural nets work.”

libeclipse··on Symbolic mathematics finally yields to neural networks
> The Facebook researchers compared their method to only a few of Mathematica’s functions —“integrate” for integrals and “DSolve” for differential equations — but Mathematica users can access hundreds of other solving tools.

> [...] it only included equations with one variable, and only those based on elementary functions. “It was a thin slice of possible expressions,”

> The neural net wasn’t tested on messier functions often used in physics and finance, like error functions or Bessel functions. (The Facebook group said it could be, in future versions, with very simple modifications.)

> Other critics have noted that the Facebook group’s neural net doesn’t really understand the math; it’s more of an exceptional guesser.

> Still, they agree that the new approach will prove useful.

libeclipse··on Entropy and the NetBSD Kernel
Yep, one of the cool things about entropy is that it always increases. If you keep XORing more information into the seed pool, you only ever increase the total entropy.
libeclipse··on BSD vs. Ubuntu motd(5)
Manjaro is a great frontend for Arch.
libeclipse··on Open letter concerning Facebook's proposals to apply end-to-end encryption
Maybe we should get rid of the NHS, and oxygen as well, as those things have the potential to benefit bad people.

Absolute idots. Cryptography benefits _everyone_, and this bullshit is at the expense of everyone.

libeclipse··on Some near-term arm64 hardening patches
With BTI can the attacker not just write a BTI opcode to the start of the jump location? Usually you would jump to a buffer that you control the contents of (i.e. shellcode)
libeclipse··on Codem Ipsum: Lorem Ipsum but for Code
Not a difficult task lol
libeclipse··on One Google Staffer Fired, Two Others Put on Leave Amid Tensions
Some employees literally doxed their colleagues. This has nothing to do with a "bubble" and more to do with being a terrible human being.
libeclipse··on Bitwarden: Free, open-source password manager
Dude if your clipboard is untrusted in your threat model then you have bigger problems. Any program that is reading your clipboard could also be logging your keys, watching your webcam, recording your screen, or exfiltrating your files.

Have a reasonable security model please

libeclipse··on CloudFlare is ruining the internet for me (2016)
In regards to the accidental censorship of content for users behind VPNs and proxies, on my site I have set the security level to essentially off and disabled any and all integrity checking of visitors. I haven't tested the effect on those users but it should allow anyone to retrieve the pages unmolested.
libeclipse··on MemGuard: Secure sensitive information in memory in Go
More recent post about the project: https://spacetime.dev/encrypting-secrets-in-memory
libeclipse··on MemGuard: Secure sensitive information in memory in Go
There is a memory overhead associated with guarded heap allocations. The time overhead is only applicable when creating or destroying them.

For encrypted data there is virtually no memory overhead but a guarded allocated has to be created to hold the decrypted data when it is needed.

The root encryption key is stored within a special container [0, 1] that has some small but constant CPU overhead as it is continuously mutating the memory associated with the structure in the background. This overhead can be tweaked (or even virtually eliminated) by changing the interval between successive cycles.

[0] https://spacetime.dev/encrypting-secrets-in-memory

[1] https://spacetime.dev/memory-retention-attacks

libeclipse··on Gist Is Down
The status page is showing that this affects git operations, api requests, and particular pages: https://www.githubstatus.com/
libeclipse··on Gist Is Down
Repositories are working for me but I can reproduce the issue with profiles.
libeclipse··on A Rust-based TLS library outperformed OpenSSL in almost every category
I wonder if the performance gains are due to BoringSSL being faster than OpenSSL?
libeclipse··on IndieAuth – A federated login protocol using one's own domain name
How about... asking them for it?
libeclipse··on SKS Keyserver Network Under Attack
The new keys.openpgp.org service is a mitigation:

> keys.openpgp.org is a new experimental keyserver which is not part of the keyserver network and has some features which make it resistant to this sort of attack. It is not a drop-in replacement: it has some limitations (for instance, its search functionality is sharply constrained). However, once you make this change you will be able to run gpg --refresh-keys with confidence.

libeclipse··on Reinventing Firefox for Android
Do you have a link to back this up?
libeclipse··on Can Life Exist in 2 and 1 Dimensions?
There are problems that arise in 4 + 1, such as how gravitational orbits aren't really stable and the force between the electrons and the nucleus is too strong to allow chemistry to exist as it does.
libeclipse··on Mozilla will reportedly launch a paid version of Firefox this fall
A centralized VPN solution for all users is a terrible idea, and what is "secure cloud storage" going to offer that Dropbox doesn't?

I understand that developing a browser is expensive work and Mozilla need money to do it. I support them in this effort. But honestly no ones gonna buy this

libeclipse··on China Bans the Word 'Leica' on Social Media
> The dramatic video is set in 1989 during the Tiananmen Square pro-democracy protests that are forbidden to talk about in China.

> the company is now distancing itself from the 5-minute video after Chinese social media users cried foul

> “Do you even deserve to collaborate with our patriotic Huawei?” one Weibo user said about Leica

libeclipse··on Ask HN: What email client do you use?
I use Thunderbird on the desktop and GMail on Android. I would love an alternative to the latter but have not managed to find a suitable one.
← PreviousPage 3 of 20Next →