HNHacker News
TopNewBestAskShowJobs

packet_nerd

616 karma · joined March 24, 2018

submissionscomments
packet_nerd··on Simulating identification by zip code, sex, and birthdate
No me, because that would be identifying myself as a relatively privacy conscious nerdy type. Combine that info with one or two other datapoints, and I'm sure it could be used to identify someone.
packet_nerd··on The Bare Minimum You Should Do to Protect Your Family's Data
True, but there's still a few you have to memorize. Your PC's password and your password manager's password at least.
packet_nerd··on Researchers “see” through walls using ambient Wi-Fi signals and a smartphone
No, my understanding is that the MAC address is always visible, even on wifi networks in WPA/WPA2 personal or enterprise mode.

Also, I believe modern phones randomize their MACs when they scan for networks, but use their real MAC when they connect, and that's visible to anyone within listening range.

Btw, most "guest" wifi networks rely on MAC-based access control, using these same publicly visible MAC addresses.. it's an inherent weakness of the wifi standards and I think the main reason why devices can't randomize their MACs when actually connecting.

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
I'm responsible for managing 30+ firewalls at my bank. If any one of them is incorrectly configured an attacker could get into our network and all that would take is a tiny incorrect detail on one line. And I'm keenly aware that I'm a mortal human being and very possibly could make such a mistake.

Or the network could be compromised through any of hundreds of other ways: email, USB stick, insider attack, etc. etc. etc...

And that's just my bank. Any given transaction will go through several all with similar weak points, and some of them with firewall admins even less competent than myself.

To me there's just no comparison. The scale of failure modes or attack points for a bank is way way bigger than any cryptocurrency. The reason it works at all is banks have well-paid guys like myself pouring over every detail and keeping things working.

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
The next word was literally "example"... :-)

Of course you're right, real life gets complicated and messy, and things are never as simple as it seems they should be. Nevertheless, I do believe we, as the technologists designing and building the systems that the world runs on, should put more careful thought into making them fundamentally secure and easy to use.

Nothing wrong with letting notaries use PGP. I think that's great.

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
> Compare that to cryptocurrencies with volatile value

I was comparing the network, protocols, and interfaces that make the transaction happen, not the currency itself. Please don't take this as a endorsement of cryptocurrencies, because they do have problems.

Even with improvements you mentioned, there is just no comparison between the technical and mathematical simplicity of the cryptocurrency transaction as opposed to a bank transaction.

The blockchain was a truly genius innovation. It's that kind of out-of-the-box thinking that I believe we need more of and applied to more varied problems (and obviously not blockchain again, because that would be thinking in the blockchain box).

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
The guy in the cubical next to me made a comment along the lines of "security is always inconvenient and hard" earlier today. And he's just expressing a widespread attitude, but I think it's not (or at least doesn't need to be) always true. If we do it right, we can make simple systems built from the ground up on fundamentally secure principals.

Example: Think of the simplicity and security of a cryptocurrency transaction as compared to a traditional bank. The crypto transaction is so much simpler, easier, and much much more secure.

I work in a bank, and there are so so many moving parts all with a myriad security weaknesses all chained together to make a transaction happen. First there's the web portal where the customer initiates the transaction. This is HTTPS which has well known flaws and so many things that could go wrong. Then his transaction goes into a SQL DB in the bank intranet, could be attacked hundreds of ways, then scripts process it into an ACH file, encrypt it with PGP, and SFTP it to the Fed. Those PGP keys were exchanged through unencrypted email, and the SFTP password was exchanged over the phone. Then the Fed uses a similar process to send it on to the destination bank, each step adding additional weak points.

The cryptocurrency transaction, on the other hand, is a well defined mathematical problem with no ambiguity, few variables, and a few easy concepts to understand. Yes, there are a handful of things that could go wrong, but they are well define and well understood. In comparison to the bank transaction, the whole thing is just so simple, beautiful, and easy.

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
> GnuPG is considered obsolete

Not in banking anyway. It is widely used to protect ACH files and many other exchanges between banks (at least in the US).

packet_nerd··on GnuPG can now be used to perform notarial acts in the State of Washington
This is the exact attitude that has gotten us where we are today (as in, pervasive bad security). "Do what you've always done, you'll get what you always got."
packet_nerd··on The European Union versus the Internet
You're still tracked, analyzed, and targeted both on and off the web by thousands of companies. Not to mention government snooping and surveillance. Even the social media giants which you deliberately never signed up for are still collecting and monetizing data on you.
packet_nerd··on Wharton professor says America should shorten the work day by 2 hours
I'm just about exactly opposite. I can get a ton done in the morning, but then just loose focus around 2:30 and after. I tend to schedule meetings in the afternoon.

If I know I have a lot to do I'll sometimes come in early like 6:30 or 7:00 or something..

Interesting how different people work differently. I'm a big believer in flexible work scheduling that allows each person to optimize for themselves.

packet_nerd··on Aviation’s Largest Piston Engine (2016)
It's an arbitrary distinction a lot of the time, really. But you have to draw the line somewhere. I just wish we could draw the line at eliminating all war and violence, instead of playing semantic games.

It's super bad if some bad guy destroys innocent lives with chemical weapons, but totally fine if we drone strike them. Doesn't make much sense, although in this crazy world things aren't as black and white as we'd like.

packet_nerd··on Why Technology Favors Tyranny
> Also humanity in the past was far more violent and gruesome.

Looks like an interesting book.

I know that percentage wise, violence has been decreasing. But is it simply that modern governments are bigger, more powerful, and can better contain and direct violence? Or are modern people actually less violent as far as their culture and psychology? I wonder because even in modern times we've seen incredibly developed and cultured societies turn violent and gruesome very quickly.

packet_nerd··on A collection of sysadmin test questions and answers for interviews/exams
Type in what? A text editor? Bash? A browser? An app?

I could see myself getting started on a big tangent, and the Interviewer listening politely, then responding with "you're over thinking it; a new line is inserted and the cursor moves to the next line."

packet_nerd··on National prison strike launches over underpaid labor and prison conditions
Are prisoners forced to work? What happens if they physically refuse? End up having to serve more time?
packet_nerd··on Introduction to Augur, an open-source, decentralized betting marketplace
It doesn't though, because people are often short term emotional thinkers. Hype/FUD driven decisions cause short term volatility.
packet_nerd··on Introduction to Augur, an open-source, decentralized betting marketplace
> discover all possible information

Plenty of market participants are not actually doing this. Day traders, high speed traders, even index funds come to mind. And even "real" investors are influenced by psychology that has little to do with an impartial analysis of all possible information. (It's not what you know, but what "everybody knows that everybody knows" [1])

[1] http://www.epsilontheory.com/the-fundamentals-are-sound/

packet_nerd··on Introduction to Augur, an open-source, decentralized betting marketplace
The stock markets are basically prediction markets. Over the short term they are wildly inaccurate and are determined mostly by fear, greed, and crowd psychology. But averaged over the long term they are very accurate.
packet_nerd··on Australians who won't unlock their phones could face ten years in jail
> Right to privacy affects my ability to cover my own ass.

Actually this isn't the most important reason for privacy.

Privacy and other basic rights do very little for me as an random law-abiding dude. I don't break laws, so don't have any reason to cover my ass. I don't have much to say, so not being allowed to express my opinion doesn't seem like that big of a deal. Even in the doomsday scenario where evil totalitarian dictator takes over the country and mass-surveils everyone and otherwise stomps on our rights, it probably won't be that big a deal to lowly me.

The most important reason for protecting individual privacy is to protect the future of society and civilization itself. The average dude in Nazi Germany and Pol Pot era Cambodia probably barely noticed his loss of individual rights as far as daily life was concerned. Mass surveillance enables mass control, and the worst atrocities in history have all happened in environments where individual rights - including privacy - were disregarded. It's bigger than just me. It's about protecting society itself and giving my children a decent world to live in.

packet_nerd··on Would You Let the I.R.S. Prepare Your Taxes? (2015)
Just my observation, in my state the highway speed limit is 80 and people drive at right around 80, and drop down to 75 at night. Then, on a Texas road where it was 85, I was surprised to see most people still going about 80. And in a neighboring state where the speed limit is 70 for similar roads, people still drive right around 80. And once I drove through Chicago at night through a stretch where the speed limit was 45, and people were still going 75 - 80... not sure what the deal with 80 is, but it seems to be the sweet spot a lot of the time.
packet_nerd··on Solitude appears to have an image problem in Japan
There's more than one kind of solitude, for me at least.

There's the kind when I'm absorbed in a book. Far from feeling alone, I feel get caught up in the story and sort of feel like a participant in an imaginary world. It doesn't feel like solitude at all.

Then there's the kind when I'm "in the zone" working on something. I loose track of time, people, and surroundings and when I finally figure it out I feel really good.

The rest of the time I'm just alone and lonely, and that's a bad thing.

packet_nerd··on Advocates say paper ballots are safest
It seems obvious to me how to fix this: give everyone a federal ID (Estonia style maybe?) and require everyone to vote (maybe a nominal fine if they don't).

I understand changes like that would favor the Democrats more than Republicans. Maybe it could be phased in slowly enough to lessen the pain? Anyway, once it was in place I'm sure the balance of power would readjust and then they could solve some real problems instead of shady politicking.

packet_nerd··on The Secret API of Banks
Concerning, but still much better than giving a third party your username and password which could be used to initiate a transfer or something.
packet_nerd··on Removing Bad Actors on Facebook
I'm sure different countries are different. Myanmar is the one I'm familiar with and FB is definitely a monopoly there.

This site gives FB 88.11% currently. Interesting that its trending down slightly:

http://gs.statcounter.com/social-media-stats/all/myanmar

packet_nerd··on Removing Bad Actors on Facebook
There are developing countries where FB is so much a monopoly that huge percentages of people don't even know that anything else exists on the Internet. To them, FB is the Internet.

But anyway, that's an argument for encouraging competition and computer literacy, not for or against free speech.

packet_nerd··on New Yorkers Trying to Flee High State Taxes Find Moving Isn’t So Easy
For being a state with a lot of cold and snow, Montana's roads seem pretty good.
packet_nerd··on Google: Security Keys Neutralized Employee Phishing
I needed a new bank and thought surely there will be one that offers U2F.. days of searching later, and I still have yet to find one that does. It seems like the vast majority of online banks don't even support any kind of 2FA except email/text. Really really sad.

For regular guys like me, I can't think of any online service more important to protect than my bank account.

packet_nerd··on How a Hacker Proved Cops Used a Stingray to Find Him
I really wish I could do this 100%.

I leave it off most of the time, but I have to be on-call for my day job every few weeks and can't really not have a phone then and still keep my job.

It's a shame that phones are so closed and proprietary. I looked into changing a phone's IMEI number, and turns out that's illegal in most places and a serious no-no. How can there even be a law like that??

packet_nerd··on After harsh criticism, Facebook quietly pulls services from developing countries
Actually, more often than not, it is exactly the people who are reading the anti-muslim posts (and other forms of media, online and off) and then going out fueling the violence. When I was in the country there were riots and anti Muslim mobs accross the country, and they were both fueled by and contributed to the widespread atmosphere of hatred and revenge. And in Rakhine state the violence started with riots and mobs, not primarily the military.

The Rohingya uprising was just a response to what must be a feeling of helplessness and desperation. They want to be treated fairly, but with the current political and social climate that's not going to happen.

packet_nerd··on After harsh criticism, Facebook quietly pulls services from developing countries
> Widespread hatred for Muslims existed long before widespread usage of Facebook in Myanmar.

This is true, unfortanatly. I lived in the Ayeyarwady Delta from 2010 - 2014, and saw a level of hatred that was very hard for me to understand. Facebook didn't really start to take off (at least in the rural area I was in) until the end of that period.

I was at a community event were a DVD of mostly raw footage from the violence in Rakine, South Thailand, and I think a few other places, was shown. It was set to a pounding rock soundtrack, and intersperse with fiery Bhuddist monks preaching against Muslims. It had the most horrific shocking footage I'd ever seen or immagined and left me with nightmares for years afterwards. I'll spare you the details.

The room was full of regular village people, elders, and children, cheering it on as if it was a football match. They told me that while the army was still in power, they would have cracked down on these DVDs, but when I was there you could freely buy them on any street corner.

Anyway, my country (the US) and other places have been through this kind of hatred (more or less) in the past too, and we overcame it. I hope that the people of Myanmar can too.

← PreviousPage 7 of 8Next →