Hacker News Reader

pomfpomfpomf3on Nuitka: a Python compiler written in Python

I'm using fbs in an open source (GPLv2+) project, is there a way to upgrade or am I stuck with old python?

So they're using AES in CTR mode for encryption. They encrypt both key (website + login) and value (password) using the same key (wallet private key) and counter (1). [1] Which means you can just bruteforce popular domain names, xor encryptedPass ^ encryptedKey ^ domainName, and get first bytes of the password (depending on domain name length), just by going through some recent TXs at [2].

[1] https://github.com/BlockProject/b-lock/blob/8a19e0b404a8afee...

[2] https://explorer.nebulas.io/#/address/n1qmQeLTUU6fPJMs1uwTad...

pomfpomfpomf3on Exploiting Alpine Linux

I was looking forward to reading this article (it's the second part) to see how the author would bypass aslr but they just disable it (running under gdb) so in the wild their method would not work.

pomfpomfpomf3on Show HN: Commento: Lightweight, open source, tracking-free alternative to Disqus

https://staticman.net/

pomfpomfpomf3on Windows 10 0day exploit goes wild, and so do Microsoft marketers

tl;dr: a null deref in windows kernel when you connect to a malicious SMB share

pomfpomfpomf3on A Simple Request: VLC.js

Sharing media: https://support.plex.tv/hc/en-us/articles/201105738-Create-a...

Alternative client/UI: check out PleXBMC, you can use any theme you like. That said, plex media player will provide a superior experience as it's using mpv.

pomfpomfpomf3on IRC v3

irccloud keeps going down every time freenode netsplits. It got so bad lately I actually canceled my subscription and instead set up weechat+glowing bear, which is not as polished, but it works fairly well on both desktop and mobile. (And cheaper)

It's also free software and easy to set up so I encourage everybody to check it out.

pomfpomfpomf3on Vector is now called Riot

Vector (+Matrix) is kinda like self-hosted slack/discord with proper history sync across all your devices, file uploads, nice UI, etc.

It's really good. I recommended it to 7 people and every single one liked it, even got 5 of them to set up their own federated homeservers. We're thinking about moving a ~60-people skype group there as well.

Only issue I had is Synapse hogging the CPU and getting laggy with a large room (#matrix:matrix.org with its 4 thousand members). I'm using scaleway's 3 EUR/month Starter VC1S server for Synapse though. Hopefully it will get even better with time.

pomfpomfpomf3on Yandex.Mail's successful migration from Oracle to Postgres [pdf]

Yandex offers unlimited users (up to 1000, then you have to contact them and I guess they will allow more) and claims unlimited storage, zoho free tier is 25 users and 5 GB storage/user.

pomfpomfpomf3on How to steal a developer's local database

what? I haven't heard of a single jailbreak that worked like that. You got some links?

edit: to people linking me safari CVEs (can't reply to you all) - these are memory corruptions. Not accessing ports on localhost.

pomfpomfpomf3on Swift Reversing [pdf]

Cool, where can I download swift.py?

pomfpomfpomf3on Videogames at the Library of Congress – An Interview with Dave Gibson

What is the point of a library if "plebeians" cannot access its contents?

1.5 years ago, in 2014, they received a copy of an unreleased PSP game, titled Duke Nukem Critical Mass: https://blogs.loc.gov/digitalpreservation/2014/08/dukes-lega...

Reading the blog post, it seems they are not competent enough to actually run it, and the best they could do was to open the main executable (BOOT.BIN, the decrypted version) in a hex editor. Some commenters even tried to help them run it, of course without any reply. 1.5 years later, the files are still not available to download, and that disk is basically rotting away somewhere in the "library".

Please, if you are a game developer, and care about game preservation, don't submit your games to that library. Instead, upload them anonymously to a torrent tracker of your choice. The internet will do the rest.

pomfpomfpomf3on The lack of HTTPS at Amazon: identifying items purchased via information leakage

An attacker can also replace an https:// login URL with an http:// one on a page sent via unencrypted connection. The http:// page can then be manipulated in any way.

pomfpomfpomf3on Towelroot by geohot to root Galaxy S5 with one click

You get to keep all your data since unlocking bootloader will wipe everything.

pomfpomfpomf3on Show HN: Where Adblock+ injects 20K CSS rules, HTTPSB injects one

I don't believe this is true for Google Adsense since it's CPC (cost per click), not per view.

pomfpomfpomf3on The shock of playing the Ouya, one year later

Yes.

pomfpomfpomf3on Regex Golf

It doesn't. The green ✔ indicates that you've completed the task successfully — that is, your regex does not match "crenel".

pomfpomfpomf3on MediaCrush – A website for serving media super fast

Piwik actually does support DNT and also can process server logs.

http://piwik.org/privacy/

http://piwik.org/log-analytics/

pomfpomfpomf3on MediaCrush – A website for serving media super fast

Have you decided to not use it only because it's written in PHP or are there any other reasons?

pomfpomfpomf3on MediaCrush – A website for serving media super fast

Have you considered Piwik?

http://piwik.org/