HNHacker News
TopNewBestAskShowJobs

puddintane

183 karma · joined February 23, 2016

[ my public key: https://keybase.io/zc ; my proof: https://keybase.io/zc/sigs/CUu54LVTP5kAjHD9siBuy5Ys2UgWlx2HWA1pWIWqx5E ]
submissionscomments
puddintane··on Show HN: “OK Google” – Explore Google Now voice commands
Yes he does mention it was on an iOS device in his post. It was a bit confusing at first but I'm absolutely sure he is talking about iOS with the scheduling reminders.
puddintane··on NSA tracking cellphone locations worldwide, Snowden documents show (2013)
I wonder if Putin looked up to Stalin
puddintane··on Defending Our Brand
Never I'm pretty sure - we run a ticket reselling website thru an exchange and tried to use the service to get developer certs for our testing site.

The web site had a black banner with white text on the top that stated in high contrast that it was the developer site and no actual transactions would run and tickets could not be purchased if a transaction was attempted here. (even was using a test domain while clearly the live site's domain was in the header)

They still required us to purchase some package to use the certificates on that site. When LE came up we were more then thrilled that we didn't have to fork out extra cash for developing on sites that don't get traffic at all and clearly stated this fact.

I will never go back to StartCom considering how they treated us that day.

It seems more like to that the approval process is strictly to whomever is approving requests at the time because I've also seen several friends get certificates for e-commerce sites that were clearly labeled as the production server and have yet to be revoked after several years of running and becoming successful.

I don't know how StartCom run's the actual process and I could have just been caught on a bad person that day but honestly when you have one bad experience humans tend to avoid going through that again since we are programmed since birth to do this. Of course Let's Encrypt has been more then what we expected and will continue to use them until such time we are required to stop using them!

Go Let's Encrypt - You got this companies support and I'm sure that of many others so don't ever stop fighting!

puddintane··on PayPal Restores Seafile's Account after File-Monitoring Row
Yeah that site has odd SEO - I believe this is why Google uses multiple methods to parse an article title - as such I'm pretty sure they parsed the title from the <title> tag on that page

If you search the link on most search engine's it shows that the title is "PayPal Restores Account of Dropbox Rival Seafile After Monitoring Row"

"<title>PayPal Restores Account of Dropbox Rival Seafile After Monitoring Row - Fortune</title>"

Of course the article title in-line doesn't have that but it was probably a bad move on the developer's part to not create as much duplicated content on the page would be my guess as to why that occurred.

Either way it is very confusing I agree!

Just thought users would like a non-translated form as not everyone can spend extra time re-reading sentences to understand the exact context of the article!

puddintane··on PayPal Restores Seafile's Account after File-Monitoring Row
If not a duplicate at least here's a non translated form for English users.

https://news.ycombinator.com/item?id=11960092

puddintane··on Passwords for 32M Twitter accounts may have been hacked and leaked
With over 270 million accounts (the largest number I could find) at only roughly 12% of the accounts leaked I'm wondering where the leak occurred? Or possibly the hackers were interrupted mid-download stream?

edit That number is actually active users and I do apologize the number of registered accounts is estimated to be over 645 million! edit2 Actually 4.9% of the estimated accounts were "leaked" (if this is an actual twitter leak since still no official word)

puddintane··on TeamViewer users are being hacked in bulk, and we still don’t know how
Of course but if I've learned anything from camping is to always prepare for the worst weather possible. Very smart to treat this as TV getting hacked versus simple password re-use due to the nature of money being taken from victims.

This is also why I'm glad I've never used the accounts for TV and have always resorted to the number generating system (if of course the breach is related directly to the accounts)

puddintane··on TeamViewer users are being hacked in bulk, and we still don’t know how
Reading more into this I really do wonder if this is related to other companies being hacked. If you look at this Reddit thread https://www.reddit.com/r/teamviewer/comments/4m6omd/teamview...

search "Do you have a TV Account" I have yet to find an answer from someone that said No (meaning they use the numbering system- only yes, used to and "free" which still is a login). A lot of answers to include that they use the same password for the same email for various accounts. A few that don't but those numbers are very small and more than likely that user was compromised another way.

edit Of course this is speculation and as mentioned in the original post of this article we should assume this was TV being hacked versus just a simple re-used password

puddintane··on TeamViewer users are being hacked in bulk, and we still don’t know how
Did you friend use the login system or the auto-number login generator?
puddintane··on TeamViewer users are being hacked in bulk, and we still don’t know how
If you read the article they tell you the most likely situation is the fact that millions of passwords are leaked everyday attached to emails in various data breaches.

This breach could also be data leaked from TeamViewer but as of right now there has been no official word as far as I can see. Considering users like to use the same username and password a bot could easily run through a leaked list and report any successful logins back to an attacker (an older exploit).

As far as I can tell the random numbers being generated are not affected but users who have actual accounts are being affected. There has been no official word but the number generating system being exploited over the accounts being exploited seems far less likely. Only time will tell thought so hopefully we will get an official word soon!

edit Seeing a lot of different theories in the comments and honestly I'm not sure which one makes the best sense. I really do hope TV makes a comment soon about how it's happening but we probably won't see that announcement until they release the fixes which are supposedly later this year.

puddintane··on 31 years later, we found the flight recorders
I am excited to see what the tape holds, hopefully it will give a bit of closure to the families of those lost.
puddintane··on Uber Launches UberBike for Cyclists in Amsterdam
OP: https://news.ycombinator.com/item?id=11830353
puddintane··on Googling yourself now leads to personal privacy controls
My guess would be to get users to be more open to sharing this type of information, but of course we may never know why they made that decision.
puddintane··on MitM Attack against KeePass 2’s Update Check
Roboform has been my go to, but honestly I don't know how well the security is on it but by the track record it looks as though they have not had any issues by what short searching I have done.

I've seen several open source systems that share on GitHub such as PadLock but have yet to be able to test these to compare to Roboform. Considering how cheap I was able to pick up Roboform to (as a college student I got 4 years for 1) I really haven't seen the urge to switch considering on how universal Siber System's Roboform does on multiple systems.

Even though this can also be a downfall if the developer's slack on one system, I have been satisfied with these guys since I started using them so many years ago and really haven't found many complaints.

edit My entire reasoning for posting was that while I'm very familiar with Roboform my experience with KeePass was always lacking compared to others.

puddintane··on Blocklist of all Facebook domains
Very interesting after looking up the AS number [1] you provided it includes domains that are not on that GitHub list - as you mentioned. I would have to agree with this being the better method to blocking facebook.

[1] http://www.tcpiputils.com/browse/as/32934 * note there are more than average ads on this site and it's a bit plain but this was the only one I could find that, with my brief searching, showed ip prefixes associated to the AS number.

If anyone has a better lookup tool that'd be great!

edit: Should also note that since other users are mentioning they might be under multiple AS number's maybe the ticket would be to setup a GitHub that collected these AS numbers for FB.

edit 2: found a less ad filled site! http://ipduh.com Search AS32934 click "prefixes" at top

puddintane··on Wristband that measures alcohol levels wins US competition
More than likely another gimmick I would have to say
puddintane··on Google moves to replace Flash with HTML5
which is a bit surprising considering how quick a company the size of Google could whip up a more modern approach to this!
puddintane··on Nintendo Videogame Characters Set to Hit the Big Screen
Non paywall: http://www.metelevision.com/nintendo-videogame-characters-se...

edit I had to copy and paste the link to a new browser - apparently knowing the referrer the page will redirect to a blank page.

puddintane··on Introducing unlimited private repositories
Great to know, thank you! However our requirements were offsite and must be why I never knew about the free EE hosted on GitLab!
puddintane··on Introducing unlimited private repositories
I've only ever seen the trial but I could be wrong!
puddintane··on Introducing unlimited private repositories
GitLab CE (Community Edition is Free) and is truly great we use it in our own internal software development process.

However for a bigger enterprise they require more functionality here is a comparison of the differences between the Community and Enterprise Editions.

https://about.gitlab.com/features/#compare

Several pricing options for EE but essentially the base cost is $39 /year per user.

https://about.gitlab.com/pricing/

puddintane··on “We're considering banning domains that require users to disable ad blockers”
Tracking still happens with "safe" ads. Generally "image pixels" as they call em are actually server side scripts that then pretend to be an image that way they can still track the users IP and what they were doing at that point in time.
puddintane··on Nestlé Wants to Sell You Both Sugary Snacks and Diabetes Pills
> If you read a few books on nutrition, you will learn that refined sugar is unhealthy. This is not hard for anybody with half a brain to figure out.

Totally true, I myself went thru an over use of refined sugar and non-healthy fast food choices. It was a truly terrible experience that thankfully I caught at a young age before it progressed to thousands to possibly hundreds of thousands in medical care.

Essentially I ended up having tears in my throat and ulcers at the same time causing and obscene amount of blood to, well for sake of the conversation, come back out of the body reverse style. It was due to the amount of sugar intake and "fast food" that caused me to experience this horrible scenario. I feel as though a lot of people who experience this just go, "oh I'll take some pills and I can get right back into it" which in it self will cause the problem to worsen but the general populous has for some reason come to believe that the magic pill solves all and we can rely on future technology to keep us "safe from tipping the edge"..."until it all collapses into a mess".

I honestly believe it's the fact that our culture is now bred to have things handed to them so easily. As an application/web designer I often have to create "dumbed" down interfaces that to me seem illogical and a waste of precious coding time.

While yes it sucks they don't put it in bright high contrast words on the labels, but at the same time they are putting it on the label and if we just took the time we could curb this silly notion of the big corporation is evil - even creating a core class required for students to take at various stages of school would make a phenomenal difference (in theory).

Essentially while a company may be evil, they are only evil because it's making a profit. We the people of the world need to make the change for big industry to make change because at the root of it they only do it because we keep paying!

puddintane··on Facebook sued for storing biometric data mined from photographs
Facebooks servers. Phones could not be capable of doing that much facial recognition that quick. Plus that bandwidth to grab all your friends images to compare to would be a metric ton of images given some selfie-addicts.
puddintane··on No one wants yearly Android releases
In reality I feel as though users are more concerned about a stable, well-refined, secure product versus having the latest trends.

This is becoming more and more important to me as I have ranged from the updating on nightly builds to only updating when I see real performance benefit - and even then I wait till I see more users from my model and service provider commenting on how much the change benefits them.

*edit - of course application updating is an entirely different process and I allow this to update ASAP due to unlimited data plans but updating core os features has become more and more towards the above versus the application update idea.

puddintane··on GitLab Major Security Update for CVE-2016-4340
Thank you mam/sir!* I should jump on that mailing list ASAP
puddintane··on GitLab Major Security Update for CVE-2016-4340
It would be nice to know what versions are affected now but I can understand that they may not want to reveal that until it's patched to prevent any unauthorized access of private repositories.
puddintane··on Inside One of the World’s Most Secretive iPhone Factories
https://news.ycombinator.com/item?id=11562294
puddintane··on Inside One of the World’s Most Secretive iPhone Factories
https://news.ycombinator.com/item?id=11562294
puddintane··on The Al-Qaeda Leader Who Wasn’t: The Shameful Ordeal of Abu Zubaydah
On my phone it is a scrolling advertisement. To get past it don't click on it just scroll using the page around the ad and once you get past it you can scroll again! Desktop I'm not sure about however
← PreviousPage 4 of 5Next →