HNHacker News
TopNewBestAskShowJobs

oceanstone

1,791 karma · joined May 3, 2013

submissionscomments
oceanstone··on OneRNG – Open Hardware Random Number Generator
> Building one of these yourself seems to solve both problems.

I'd love to see a 3D printer that specifically built verifiably secure hardware.

oceanstone··on Spidermonkey has passed V8 on Octane performance
Having something like 1Password for bookmarks across browsers would be sweet. Perhaps with client-side encryption too, for increased privacy.
oceanstone··on Spidermonkey has passed V8 on Octane performance
Don't forget about omnibox predictions. By default, all keystrokes in the address bar are being sent, even while you're logged out.

References:

"Get predictions in the address bar" https://support.google.com/chrome/answer/95656?hl=en

"Logging policies for omnibox predictions" https://support.google.com/chrome/answer/180655?hl=en

oceanstone··on Ask HN: Anyone need a landing page photo for free?
Pictures of the ocean, the bay, or from some hiking trails all might be great for a landing page.
oceanstone··on Researcher finds Tor exit node adding malware to binaries
Just supporting HTTPS is great, but you really want to start redirecting HTTP requests as well. For example, this HN post links to the HTTP version of a site that not only supports HTTPS, but purchased the expensive certificate that shows up more prominently.
oceanstone··on Show HN: A midterm test on basic SQL for my journalism class
You're doing great work! The students that graduate with this SQL knowledge will be empowered to find needles in haystacks.
oceanstone··on Making Sense of 3.7M Net Neutrality Comments
> Major websites like Tumblr, Kickstarter, Netflix, Etsy, Namecheap and Vimeo ran prominent warnings of an impending slowdown of Internet speeds if the FCC ends net neutrality.

Major props to those companies for helping the cause. While the issue is complex, it really boils down to something simple. The US government was formed with certain principles, some outlined in the constitution. One of those is free speech. Sometimes, the government has to step in and make sure corporations are respecting those principles. Net neutrality is one of those times.

oceanstone··on 1984 v. Brave New World
> A Brave New World? That's simply distraction taken to the nth degree. Perfectly plausible.

Good point. Technology can help create newer, more engaging distractions. Magic Leap hopes to offer a new "magical" layer on top of reality, when their devices are "on", for instance.

> 1984 felt just too dystopian. It just tasted wrong; like someone would have stood up and said, "No thank you" well before the point the book stepped into.

This is part of why there's such a push towards punishing intelligence community whistleblowers. When the public is made aware of the mass surveillance programs, they do say "No thank you."

Both books examine a different facet of human nature, and they both remain relevant to this day.

oceanstone··on Google Inbox
Agreed, this is really exciting. Please give @cengizkrbck an invite!
oceanstone··on “Did you mean?” Experience in Ruby
> Sometimes I wasted hours and hours just becaue there is one charactor difference. I hate it.

Haha, humans are much more able to parse meaning, despite a character being off here or there. Well, you've taken computers one step closer to humans. And you've made programming with Ruby friendlier. Great job!

oceanstone··on Dropbox.com hacked?
So far, it appears not. Though if you reused your Dropbox password anywhere else, resetting both would be a good idea.
oceanstone··on Core Secrets: NSA Saboteurs in China and Germany
Will check that out, thanks
oceanstone··on Core Secrets: NSA Saboteurs in China and Germany
Thanks for the response. Sorry for editing mine while you were writing yours.

> Oh I agree. Actually if you look back Clinton and first term Bush era they kept proclaiming that there was a cyber intelligence war but it never really caught on.

Interesting point. Now, in the 90s, wasn't the government trying to prevent encryption from being used by the public though?

> When it comes to hacking, the attacker always wins. Just playing defense is a losing game.

Still, there are a lot of defensive measures the public can take from hackers. For instance, using OTR, Tor/VPNs, and moving sites to HTTPS whenever possible.

Bruce Schneier has an interesting metaphor for this period in human evolution. He compares the information revolution to the industrial revolution. At first, people didn't realize how bad pollution could be, amongst other things like food safety. Books like "The Jungle" helped prompt people to stand up for themselves and demand better, and healthier ways of conduct. Overall, humanity evolved to handle the new technologies and their side effects. Snowden's revelations are like "The Jungle" of our time.

oceanstone··on Your friends are lying to you. For $10, I wont.
From 1913 to 2014, $0.02 cents inflated to $0.48 cents. At that rate, wouldn't it be over 100 years before reaching $10? In which case, in 2014 he'd have to share 20.83 opinions per session to justify the cost.
oceanstone··on Core Secrets: NSA Saboteurs in China and Germany
Right, and I hope nobody thinks Russia or China are saints, because they use their technical abilities to suppress dissent in frightening ways.

While there's definitely a cyber war going on, you have to ask, why isn't the NSA actively disseminating knowledge to Americans on how to secure themselves? Why are they instead actively weakening encryption standards? America companies have the most to lose from weak encryption. It just doesn't add up, and the American people have enough confidence to call their government out, unlike countries who have allowed themselves to become pretty enslaved by their government, like China and Russia.

In summary, the NSA should participate in the global cyber intelligence war by educating the American public, instead of weakening them.

oceanstone··on Judge Rejects Defense That FBI Illegally Hacked Silk Road, on a Technicality
> they could have certain got a warrant to do so had they just presented what they knew at that time about the enterprise. So why didn't they?

Perhaps they want to set a legal precedent which would require less checks & balances.

oceanstone··on Satya Nadella Email to Employees: RE: Grace Hopper Conference
For context, here was Satya's first answer:

> "It's not really about asking for the raise, but knowing, and having faith that the system will actually give you the right raises, as you go along. And that, I think, might be one of the additional super powers, that quite frankly, women who don't ask for a raise have. Because that's good karma, it'll come back! Because somebody's going to know, 'That's the kind of person, that I want trust.'"

I hope every woman at Microsoft asks for a raise tomorrow.

oceanstone··on Satya Nadella Email to Employees: RE: Grace Hopper Conference
> what was the controversial statement that Satya made

"It's not really about asking for the raise, but knowing, and having faith that the system will actually give you the right raises, as you go along. And that, I think, might be one of the additional super powers, that quite frankly, women who don't ask for a raise have. Because that's good karma, it'll come back! Because somebody's going to know, 'That's the kind of person, that I want trust.'"

He's assigning good karma to a lack of assertiveness in women.

oceanstone··on The Horror of a 'Secure Golden Key'
This threat tends to be underplayed by our intelligence community.

> Threat #2... Even if you trust the U.S. government to act in your best interest (say, by foiling terrorists), do you trust the Russian government? Do you trust the Chinese? If a door is open to one organization, it is open to all.

oceanstone··on Adobe Spyware Reveals Again the Price of DRM: Your Privacy and Security
Some of Stallman's predictions were spot on.

> In his software class, Dan had learned that each book had a copyright monitor that reported when and where it was read, and by whom, to Central Licensing. (They used this information to catch reading pirates, but also to sell personal interest profiles to retailers.)

oceanstone··on Apple allows hot code push for JS downloaded and run by WebKit
That sounds awesome. Are you using localStorage?
oceanstone··on 'Anti-Facebook' platform Ello attracts thousands
With time, we'll see if the beauty is skin deep.
oceanstone··on 'Anti-Facebook' platform Ello attracts thousands
The beauty resides in the privacy.

>> It has been dubbed the "anti-Facebook" network because of a pledge to carry no adverts or sell user data.

oceanstone··on Tor executive director hints at Firefox integration
Right, the Tor browser bundle was exploited. The context of this thread is browser usage of Tor.
oceanstone··on Tor executive director hints at Firefox integration
Tor has been exploited in the past in ways which only affected those who kept JavaScript enabled [1]. I actually love JavaScript, and the doors it can open for trustworthy developers, but I don't think a deep cover journalist or whistleblower should be browsing with it.

[1] https://blog.torproject.org/blog/tor-security-advisory-old-t...

oceanstone··on Tor executive director hints at Firefox integration
> My main concern is that this will be hidden behind an option or an "extreme private" mode

To add to your point, effectively using Tor means disabling JavaScript.

oceanstone··on With New Ad Platform, Facebook Opens Gates to Its Vault of User Data
> If Facebook scans my chat logs

There's evidence of scanning private updates & comments, going back to 2012 [1]. We could assume chat messages would be fair game in Facebook's eyes, though I haven't seen any confirmation.

[1] http://allthingsd.com/20120112/facebook-gives-politico-deep-...

oceanstone··on Docker is the Heroku Killer
> In practical business terms, you need to be either huge or completely broke before Heroku looks like a bad deal. $1000/month will buy you a lot of dynos, and for most actual business, $1000/month is a rounding error.

Heroku is a great deal. Still, let's not forget about the cost of production tier Heroku addons, such as databases & logging.

oceanstone··on Managing a Nightmare: CIA Reveals How It Watched Over Destruction of Gary Webb
On Reddit, comments are rewarded for appealing to all kinds of human emotions. A quick one liner that doesn't hint at technically savvy might get the most upvotes on Reddit. On Hacker News, comments centering around knowledge and its acquisition tend to be rewarded. While I didn't make your comment any lighter, I'd assume this is why others did.
oceanstone··on Managing a Nightmare: CIA Reveals How It Watched Over Destruction of Gary Webb
There are many compartments within the Central Intelligence Agency, and within the Intelligence Community (IC) [1]. This contributes to the difficulty of applying oversight to the IC.

[1] http://en.wikipedia.org/wiki/Sensitive_Compartmented_Informa...

← PreviousPage 7 of 19Next →