Hacker News Reader

phonethrowawayon Show HN: A VNC viewer for eInk devices capable of 30 FPS when writing text

I'm so excited for this: https://www.kickstarter.com/projects/bigme/bigme-worlds-firs...

Basic color support for syntax highlighting is what I've been waiting for...

phonethrowawayon Skip: A programming language to skip the things you have already computed

it doesn't say meta, duh

phonethrowawayon Bittersweet Symfony: Devs accidentally turn off CSRF protection in PHP framework

flask-security is a trivial addon.

phonethrowawayon Is your Python code vulnerable to log injection? – Arie Bovenberg

they don't even address shell escape injection which is definitely possible...

phonethrowawayon A Survey of Programmers' Cannabis Usage, Perception, and Motivation

The farm bill made all hemp derived products legal federally at long as they contain only trace amounts of Delta 9 THC. Delta 8 and THC-O/acetate are legal. Not as strong, slightly different, but it gets the job done... kinda. Check it out... if you can. Check your state laws.

phonethrowawayon What’s the jankiest piece of tech you’ve seen a company depend on?

Old isn't janky... hmm... to me janky means duct tape and bubble gum.

phonethrowawayon Show HN: Play Zork with your friends via SSH

shell escapes are real attack vector too...

phonethrowawayon Log4j RCE Found

the point is it's a feature, not an exploit. control and escape codes are a thing for a reason.

it's worse with web stuff though... and it's a real vector.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=terminal+es...

https://packetstormsecurity.com/files/162518/AWS-CloudShell-...

https://nvd.nist.gov/vuln/detail/CVE-2017-0899

https://github.com/InfosecMatter/terminal-escape-injections

phonethrowawayon FBI's ability to legally access secure messaging app content and metadata [pdf]

The NSA doesn't need to illegally spy on Americans when an ally can do it for them and then share the data legally.

https://www.nationalarchives.gov.uk/ukusa/

https://en.wikipedia.org/wiki/Five_Eyes

phonethrowawayon Missouri website that leaked SSN

ASSESSEE NAME AND ADDRESS ARE NOT AVAILABLE ONLINE PER CA GOV CODE §6254.21

phonethrowawayon Create and share images of your source code

name it carbon lol

phonethrowawayon The pitfalls of using SSH-agent, or how to use an agent safely

I've seen PAM modules for otp/totp, but that really only adds security if authenticating against a remote machine, if you validate the second factor locally doesn't that still open you to mitm or other exploits? Can you trust your own environment?

phonethrowawayon RNA breakthrough creates crops that can grow 50 percent more potatoes, rice

humanure is a thing

phonethrowawayon Ask HN: Tinder is full of fake profiles, posted by Tinder. How to prove?

most companies have perverse incentives not to clean up fake profiles... just like SoundCloud.

phonethrowawayon Reclaim Windows10

this is still a problem (irq conflicts) especially with thunderbolt enclosures...

phonethrowawayon Unexpected 'Black Swan' defect discovered in soft matter for first time

> At either side of the twin juncture, the molecular networks abruptly transformed their handedness.

this seems rather intuitive to me, and unsurprising.

for every action there is an opposite and equal reaction.

a spinning cue ball changes directions when it bounces off a rail.

it's the same reason circular polarizers let you see through reflections in glass.

phonethrowawayon Ask HN: Data Diodes?

Only if you can guarantee delivery without an ack.

phonethrowawayon What makes registers and L1 cache so much more expensive than L2/L3/RAM?

Bigger size means more latency. L1 needs to be fast due to frequent access. Is that what you mean by expensive?

phonethrowawayon What makes registers and L1 cache so much more expensive than L2/L3/RAM?

L1 cache is optimized for speed. You can't make a large L1 cache... the access is too frequent meaning more bandwidth is needed. L1 has many parallel pipelines vs L2 or 3 which are larger caches, respectively, with less pipelining, respectively.

phonethrowawayon What makes registers and L1 cache so much more expensive than L2/L3/RAM?

SRAM?

What do you mean by expensive?

Size vs speed?

phonethrowawayon 4chan founder Chris Poole has left Google

human capital management

phonethrowawayon M1 dev setup with a virtual Linux box

High end Chromebooks have i7 and 16 gb RAM fwiw, and run Linux VMs just fine.

phonethrowawayon Show HN: Mosh Mallet: Single packet UDP port knocking for Mosh without SSH

Selfless plug: https://gist.github.com/gordol/d3f66e5fa0a53a9ccef30b7788504...

UDP hole punching is pretty straight forward.

This does it securely using SSH.

phonethrowawayon Show HN: Half Lemons – recipes with the ingredients you have on hand

hasn't this been done to death over and over?

phonethrowawayon Ultrasound has potential to damage coronaviruses

radio frequencies, too, work with the same principle... or lasers.

this stuff isn't new, either, by any means.

https://en.m.wikipedia.org/wiki/Royal_Rife

good luck getting past the quackery though.

https://www.livescience.com/7472-kill-viruses-shake-death.ht...

phonethrowawayon NASA's Perseverance rover sends stunning images

speculation, but it's probably compressed before transmission to earth... for obvious reasons.

phonethrowawayon Open Source Mission Control Software from NASA

Nope.

https://software.nasa.gov/software/GSC-17915-1

phonethrowawayon Vim Creep (2011)

endorphin tickles

phonethrowawayon Experts are sounding the alarm about the hidden dangers of gas stoves

Adcraft IND-WOK208V

You need 208v from three phase per or a 240v buck transformer though...

I use a 208v Adcraft induction cooktop for beer brewing and it's strong. Boils 6 gallons of liquid easily. Just using a 240 to 208v transformer.

phonethrowawayon U.S. Hits Record Daily Death Toll, with Worse Likely to Come

Maybe because you need to learn basic statistics... You need to compare the number of tests to results, not the total population where nobody is getting tested. C'mon man...

I don't disagree with the spirit of self directed data exploration, but you need to be careful.