HNHacker News
TopNewBestAskShowJobs

pixdamix

926 karma · joined November 13, 2010

Ex founder (not for long), Netsec addict

camille@homadeus.com camille@moncelier.fr

[ my public key: https://keybase.io/pixdamix; my proof: https://keybase.io/pixdamix/sigs/iIH3gEblNOoaqLVKTihe5EdlKexIOXeFhIu-hy7mn0o ]

submissionscomments
pixdamix··on America, 1926: A forgotten 100-year-old report
> Freedom to say (almost) anything, publicly, including criticism of the elite and powerful.

Most European nations strongly protect free speech, allowing open public critique and satire of politicians, the wealthy, and the powerful.

> Freedom to do, to create a business with far fewer roadblocks than in, say, Europe.

Several European countries actually lead global easy business rankings, some offering fully digital, single-day company registration, very little bureaucracy (not mine, sadly)

> Freedom to go, to travel anywhere in a really large country, with no borders or restrictions.

The schengen zone grants passport-free travel across 29 nations, spanning thousands of miles without a single border checkpoint.

pixdamix··on Ask HN: Secure wrapper for coding agents?
If you're on a mac, lookup https://bromure.io/en/agentic-coding

(Lookup the browser too: https://bromure.io/en/secure-web)

Everything you see is made by Claude (and Renaud Deraison :-)) and working quite well jugding from the demos)

See here for more details (in french but English subs available (and more)): https://www.sstic.org/2026/presentation/cloture_2026/

pixdamix··on Bitoduc: A French dictionnary for CS related words
This website is likely targeted at the French administrations like the ANSSI (National Cybersecurity Agency of France) which is often mocked because of a somewhat strict `French Only Policy` in internal documents.

Here they are using `Biscuit de pile` for `Stack Cookies`: https://www.cert.ssi.gouv.fr/actualite/CERTFR-2015-ACT-047/

It may be the other way around, eg: someone inside ANSSI choosed to use `Biscuit de pile` to make people react:

- https://twitter.com/newsoft/status/671213007301648384

- https://twitter.com/x0rz/status/738272442771202048

pixdamix··on Source for theguardian.com
I can attest, this man surely knows his Galette-Saucisse stuff !

I'm sorry for your loss, take care!

pixdamix··on Ask HN: How to enumerate all subdomains of a main domain like foo.com?
I suggest you to take a look at this: http://10degres.net/subdomain-enumeration/ :-)
pixdamix··on ZFSin: A Windows kernel-mode ZFS driver
If done right, the cost can be close to zero. See :

- https://github.com/GoSecure/malboxes - https://github.com/joefitzgerald/packer-windows - https://www.packer.io/intro/why.html

pixdamix··on Saying Goodbye to Firebug
Totally overkill yes, but without internet, you use whatever you're able to put your hands on ;-)

Ironically, the first software I cracked, well tried to, was an IRC client named Klient if I recall correctly. I bypassed the license check, but, this software included a functionality which, when it detected this, broadcasted to everyone (except me) that I was using a pirated version and that I was accepting the CTCP reboot command :-)

pixdamix··on Saying Goodbye to Firebug
Yeah, SoftICE, I remember buying Hackerzvoice (a French newspaper-like hacking magazine) which included SoftICE tutorials on how to crack WinRAR license verification. (for educational purposes of course)

I was amazed that I could breakpoint and debug any running app. I miss SoftICE.

I read this a while back from someone who work for the company which owns SoftICE copyright : https://reverseengineering.stackexchange.com/questions/1445/...

pixdamix··on Interesting commands for the Linux shell
The only forbidden characters in a Unix filenames are '/' and '\0'

Want to mess with such a script?

$ touch "$(echo -e -n 'lol\nposix')"

pixdamix··on GitHub's post-CSP journey
CSP mitigates the risks of XSS attacks.

If you look at : https://cspvalidator.org/#url=https://github.com you'll see that the CSP policy directive defines the origins from which images can be loaded

    'self' data: assets-cdn.github.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com *.githubusercontent.com ;
Previously, images could have been loaded from additional domains (gravatar) and could have been used to leak CSRF tokens.
pixdamix··on AdNauseam Banned from the Google Web Store
> Who uses Chrome anyway?

Anyone who's (or should be) a little bit concerned about security ?

Firefox has been absent from 2016's Pwn2Own contest because of insuffisant "security improvements in the last year".

This may change with the Electrolysis project[1]

[1]: https://wiki.mozilla.org/Electrolysis

pixdamix··on ES6 Maps are now on by default in Chrome 38
direct link: https://twitter.com/addyosmani/status/497441756708098048
pixdamix··on Help Janela gets her life back | Hitchhiking towards Kamchatka

  What is this about?
  Janela Sagynbaeva is 24, she's a girl from a village in 
  east Kyrgyzstan. She has to pay a family debt wich is way 
  beyond her financial means. Today, nearly all her time and 
  resources are focused on that effort.
  The debt that has accumulated is the result of an 
  unfortunate event.

  Janela's Father has been selling fruits in Kazakhstan.
  The fruits he was selling were not only his but also 
  those of his neighbours. He was supposed to collect and 
  bring back the money to be shared among the villagers. 
  When going back with the money, he was robbed at gunpoint.
  Unfortunately, the neighbours requested their money no 
  matter what, hence a $5000 debt. The event had occurend in 
  1997; since then, through various interest rates and 
  further credits, the debt has risen to $15,000. The 
  current interest rate is 13% which makes it hard for the 
  family to pay the percentage, let alone the initial sum.
Here are the links with more information:

http://www.indiegogo.com/projects/janela-s-life-back https://www.facebook.com/janelastory http://takemeeast.net/blog/janelas-tragedy/ http://www.facebook.com/takemeeast/

Please share and donate if you can! Thank you!

pixdamix··on BitTorrent’s Secure Dropbox Alternative Goes Public
A de facto standard, potential opensource clients, free, server-less, not tied to a specific company, and more.
pixdamix··on Lego Finds Discontinued Set For Boy Who Saved Up For 2 Years
I understand what you mean but there is a lot of cliché in this homepage, pinky stuff, girls, etc.

Don't get me wrong, I'm not saying that friendship is for girl and construction is for boys.

I'm just saying that Lego Friends universe use some stereotype marketing

I would have been much less negative, if they included boys, girls, because, boys likes animals friends, pink as well as girl likes blue.

Lego: Please skip the stereotypes

pixdamix··on Lego Finds Discontinued Set For Boy Who Saved Up For 2 Years
> "Lego Friends" sets don't appear particularly gendered:

> The fundamental difference between Friends and the rest of lego seems to be that Friends is about people, whereas the rest of lego is about building stuff.

You can't say that Lego Friends marketing isn't seriously targeted at girls.

http://friends.lego.com/en-us/Default.aspx

pixdamix··on SSH2 client written in pure JavaScript for node.js
There's several things left to do: https://github.com/mscdex/ssh2/blob/master/TODO

But I wouldn't be so negative, there's plenty of reasons why this might be great / a good idea. (And a lot for it to be a bad one, crypto, security, etc.)

pixdamix··on Nexus: The best of Google, now in three sizes
It may be related to patents:

"Why Android Jelly Bean 4.2′s Multiple User Account Switching Is Tablet-Only? (Hint: Nokia Patented It For Phones)"

http://techcrunch.com/2012/10/29/why-android-jelly-bean-4-2s...

pixdamix··on ShareJS – Live concurrent editing in your app
This would be a great way to enable collaborative email sharing. I always wanted a way to let someone spellcheck, review or edit a mail I was writing (Inside Gmail)

For now it's Google-docs, then copy/paste, but sharing the mail on the go would be so useful.

pixdamix··on Connex.io now syncs all major address books including Android, iOS
@mkuhn: Are you having backend problems, or the first sync is really slow ? (Maybe it's a HN related effect?)

Every services are marked as "Waiting for first sync"

pixdamix··on XBMC 11 is released
You can run queries against XBMC sqlite database or use http://trakt.tv/ to keep all your XBMC in sync.
pixdamix··on Canonical reveals Ubuntu for Android
Maybe because pushing 1080p @ 60fps, while running a dual Android/Ubuntu stack while connected to a 3G or WiFi network might be a burden on the battery.
pixdamix··on Google confirms Nexus S will get Ice Cream Sandwich (Gingerbread devices too)
Are you seriously considering the fact that virtual buttons will be always present regardless of the presence of hardware buttons ?
pixdamix··on What is your favourite C programming trick?
This is great for implementing stackless threads and multithreading on AVR : See protothread for example
pixdamix··on A man died yesterday. He had a huge impact on our lives. Fred Shuttlesworth.
I read this on reddit, I wasn't even aware of his research, what he found. I found it to be also truly inspiring:

"A great man has passed.

Alas, Ralph Steinman is dead. He died three days before he got the Nobel Prize in Physiology and Medicine in 2011. He dropped out of no college, he did not make a billion dollar company. He did not make billions of dollars, nor even hundreds of millions, though after his death his estate would receive slightly more than a million dollars of the prize money. Yet, he had touched millions, possibly hundreds of millions of lives and will likely touch billions of men women and children in future generations by discoverying one of the secrets of how immunity against viruses or bacteria are translated into an immune response by adaptation of immune cells. How allergy or autoimmune diseases develop, and how immune cells transmit signales to one another. It is possible that it was the fruits of his research that might have extended the life, after pancreatic cancer several years ago, of another giant who died recently. It is also certain that his work has resulted into billions of dollars worth of pharmaceutical industry, and will produce many billions of dollars worth of pharmaceutical industry, and will produce many billions in the future, Such is the reach of a humble life in fundamental science."

pixdamix··on Show HN: HN Notify - Email reply notifications for comments and posts.
Would it be possible to add XMPP support ? Then the service could check my XMPP status and postpone notifications if i'm away, busy, offline...

I tend to prefer IM for this kind of things as it doesn't clutter my mailbox.

pixdamix··on Judge Finds Apple in Violation of HTC's Newly Acquired Patents
That sounds a lot like Intellectual Ventures too, not sure if it's intended :)
pixdamix··on This is why your newspaper is dying
What happens when revenues are down? fire the newsroom, get content from AP. So true, It reminds me of:

"Cutting funding for bike lanes because there isn't enough demand is like cutting literacy funding because not enough people are reading. Bike lanes are not built to satisfy demand. They're meant to serve as an incentive to encourage more cycling by increasing safety." -- Dave Meslin

pixdamix··on Monroe or Einstein? Instant eyesight check.
Here's the paper detailing the process: http://cvcl.mit.edu/hybrid/OlivaTorralb_Hybrid_Siggraph06.pd...

[1] http://en.wikipedia.org/wiki/Hybrid_image

pixdamix··on Poll: How much do you make as a programmer?
The pound sign "£" near 15k might give you an hint....
Page 1 of 3Next →