HNHacker News
TopNewBestAskShowJobs

mbq

601 karma · joined October 19, 2011

https://mbq.me
submissionscomments
mbq··on Pollen: the book is a program
Well, you can make dvi and convert it into svg with dvisvgm; taking the inconsistent, usually terrible browser rendering and absolute lack of a proper typesetting in HTML into account this is probably the only way to achieve a nice web-published text (;
mbq··on Systemd has 6 service startup notification types, and they're all wrong
Also you can, in principle, write a robust, automatic converter of systemd units into init scripts.
mbq··on HTTP/2.0 – Please admit defeat
Except we have to deal with a lack of IPv4 addresses, DDoS attacks, load balancing, NATs, firewalls...
mbq··on Quantum Random Number Generator Created Using A Smartphone Camera
The niche for fast HWRNGs actually exists in the stochastic simulation business (physics, statistics, machine learning, finance, to some extent CG); "real" randomness helps in scaling over tons of cores and specialised hardware must be in principle faster than general hardware executing software PRNG.

The bar is set high, though; the dream is about 1GB/s, RDRAND achieves 500-700MB/s.

mbq··on Mail-in-a-box: easy to set up modern SMTP/SMTPS server stack
Well sure, but DKIM can sign the sender so it can do the SPF work connected with an envelope spoofing filter. Still, my idea was that a spammer who can put a valid DKIM signature won't likely have any problems with SPF.
mbq··on Mail-in-a-box: easy to set up modern SMTP/SMTPS server stack
From my experience, Gmail will send to spam everything from a small server that has no SPF (even when DKIM is on and OK -- which is strange because it basically has SPF built-in) and when the sender is not in the address book -- this is pretty enough for massive issues.
mbq··on Quantum Entanglement Drives the Arrow of Time
Assuming that we can breaks nothing; particles will concentrate, but without the barrier they will spread again and this would be a disturbance that simply averages out.
mbq··on Quantum Entanglement Drives the Arrow of Time
This is nonsense; entropy and the arrow of time are essentially a many-body effects and require no quantum effects to occur. A simplest way to see it is to make small simulation of a, say, 1000 gas particles with only classical bouncing in a one side of a box partitioned in half with a barrier, obviously with a time-reversible numerical method -- after the removal of the barrier the gas will evenly spread over the box without any entanglement.
mbq··on Heartbleed and the misconceptions about Open Source
I just think that invisible hand of the market is an equally virtual limit effect as the many eyes ensemble. The stream of closed-source vulnerabilities is also substantial and a time-to-fix is much larger there, what effectively pays for the additional effort required to identify a flaw.

No free lunch in security rather hides in the trade-off with convenience.

mbq··on Heartbleed and the misconceptions about Open Source
Note that while open source can be used blindly, closed source have to be used blindly.
mbq··on Tarsnap: No heartbleed here
The worse problem is that once you get the private key you can MITM the traffic or, if forward security was not used, decrypt a sniffed one -- this will limit the casual attacker to a directed attacks, though.
mbq··on Why not to use infinite scroll on your website
But please don't paginate a 500 word text into 10 pages either...
mbq··on Python 3.5 to Ship with Matrix Multiplication Operator
It is just that "scripting" is now called "managed" because it hurts ego to be a scripting programmer.
mbq··on OpenSSL Security Advisory: TLS heartbeat read overrun
Most likely no since SSH is a different protocol than TLS.
mbq··on Sony Digital Paper e-ink PDF tablet for notes and forms
Onyx made something like that already; the software is terrible (although hackable) and there is no place to attach stylus to the reader, but it is only ~300USD

http://www.amazon.com/Onyx-M92-Black-Pearl-Edition/dp/B00BBD...

mbq··on ASCII Delimited Text – Not CSV or TAB delimited text
Still, most *SV parsers can use arbitrary char or even regexp for a separator.
mbq··on Openssl: uses only 32 bytes (256 bit) for key generation
Randomness is not any physical entity and thus "entropy" here is just a word for data that cannot be derived from a system state. When it is not available, the attacker still has to know the seed of kernel's PRNG to be able to re-create the keys you generated in this state. To this end, she/he has to either sniff some impractically large amount of the PRNG output (and if this is possible your machine is likely already compromised), be able to set it to a given value (see above), or to know it from some prior knowledge, for instance has an image of the VM you use or knows the default value set on boot when no entropy is available whatsoever.

In other words, if the seed hasn't leaked it is easier to brute-force the key than to fit the CPRNG output that generated it.

mbq··on Obnam 1.7 (backup software) released
True, although you have the code (;
mbq··on Obnam 1.7 (backup software) released
Attic implements the same idea but seems more stable; https://attic-backup.org/
mbq··on Visualizing the cross product between two vectors
Maths people always complain about the fact that cross product is reasonable only in 3D, but from a physical point of view this may be an argument why the universe has 3 spatial dims (;
mbq··on Does Causation Imply Correlation?
Note that I am criticising the idea of "general" or "intuitive" correlation; actually useful correlation measures (like Pearson or Spearman) will be just always tied to some model of dependence. This way it cannot be directly tied to the obviously absolute dependence.
mbq··on The SAS vs. R Debate
Questions on StackOverflow: 49 878 R, 2 191 SAS; on Stats StackExchange: 5 524 R, 260 SAS.
mbq··on Does Causation Imply Correlation?
Two problems: first is that casual association may be invisible to even hand-waving criteria; think good crypto PRNG output which is fully determined by seed and is serial number, but the parameters are practically unfittable from the data because the function is so chaotic. Second thing is that the more hand-waving you allow the more totally incidental relations will look "true". With a modern amounts of hypotheses, even Pearson correlation often becomes useless in this manner.
mbq··on Where do we stand on benchmarking the D-Wave 2?
In the good old times quantum computer used to be just a circuitry that processes qbits with gates that perform quantum operations (this is what can run Shor's RSA breaking magic); D-Wave machines have nothing to do with this.

As far as I understand the whole thing, they are just "solving" the minimization of some tunable potential function by just being pushed into such potential and allowed to relax to the lowest energy state -- it is like finding a lowest point of a hole by throwing a ball into it and looking where it stops (and being happy that it runs faster than a numeric code simulating the physics of such ball). The quantum part here is only the fact that quantum effects should help the search to escape local minima, but the speed-up mostly comes from the fact it is basically an analog device.

mbq··on New forms of 'racism' arise in science research
In fact, it can actually help killing nationalism as it shows that most cultural nations have a very diverse ancestry and thus are purely cultural phenomena.
mbq··on Sony sells its waterproof mp3 player inside a bottle of water
I guess EU would require Sony to certify the player for food contact and that would be expensive enough to be not worth the trouble. Or require to wipe any suggestions that the water is drinkable.
mbq··on Things Microsoft Still Does Well
0) Keyboards.
mbq··on Execute SQL against structured text like CSV or TSV
One can also import csv to R and use sqldf package.
mbq··on Nightwatch.js
...which was called such because the painting got dirty and buried under tons of varnish; the actual title is "The Company of captain Frans Banning Cocq and lieutenant Willem van Ruytenburch preparing to march out."
mbq··on The Sad State of Mobile XMPP in 2014
For me the worst thing was the way it handles multiple devices -- AFAIK when there are few clients with the same priority connected, the server delivers messages completely arbitrarily, usually only to a one of them and based on some crazy criterion like the last connection time; not to mention that the context is always lost. I ended up using SSH client and irssi :(
← PreviousPage 4 of 14Next →