HNHacker News
TopNewBestAskShowJobs

puetzk

207 karma · joined March 4, 2013

submissionscomments
puetzk··on Syncthing graduation day
If your nodes have direct network access to each other, no.

But if two nodes that have added each other's keys cannot reach each other directly (e.g. are in separate private networks/behind firewalls/etc) but both can reach an external relay server, it may act as a dumb pipe bouncing encrypted traffic between them.

https://docs.syncthing.net/users/relaying.html

There is a public pool of such relay servers (https://relays.syncthing.net/), and by default syncthing will reach out and connect/announce its itself there so other nodes looking for it could contact it via a relay.

You can host your own relay server and configure your clients to use it exclusively: https://docs.syncthing.net/users/strelaysrv.html#client-conf... or if you only want syncing when your nodes are on the same local network you should be able to just not configure any relays at all.

puetzk··on The Slide Rule
https://www.reddit.com/r/woodworking/comments/5y1r4h/kitchen...
puetzk··on The Slide Rule
> The last slide rule manufactured in the US was produced on July 11, 1976

Actually, ThinkGeek made a production run a couple years back (though I guess I don't know that they were US-made). Doesn't seem to still be on their website, but I have one so it definitely existed. https://www.amazon.com/ThinkGeek-Slide-Rule/dp/B003M5B84C still shows a listing.

puetzk··on Show HN: ekill – Like xkill, but for annoying web page elements
Probably http://www.karmatics.com/aardvark/?
puetzk··on USA Temperature: can I sucker you?
Note: this is only my guess, but it seems quite plausible that inhabited areas have been well-sampled for a long time, but some combination of

1) automated stations and satellite communication making it much easier/cheaper to sample remote locations

2) use of whole-globe numerical weather models which require complete initial conditions, even for regions where nobody much cares about the output

3) increased interest in climate research

would lead to a greatly increased number of Alaskan stations operated by NOAA (and of course corresponding moves by other national agencies)

puetzk··on Qt for WebAssembly
There's also https://qmlweb.github.io/, which renders QML into a DOM tree. Which will probably never be a full-featured an implementation as QML as one painting onto canvas, but is a lot more web-native.
puetzk··on Arrest of WannaCry researcher sends chill through security community
Somewhat. The distinction I would make is not computer crimes vs other crimes, but rather the timeliness of the situation. For an emergency situation, or a case where a wanted individual enters the country anyway, I agree they'd be foolish to let them return home and only then try to have an arrest made. But there's also no reason prosecutors should lie in wait until you visit the US to even bring charges. They should decide you're being charged, issue a warrant, and try have the arrest made, including asking other countries for cooperation.

But the alleged crime here is years old, and I have don't remember anything (or find anything in a google news search-by-date) to suggest there were charges or an arrest warrant before July 2017. That makes it seem like they didn't think the evidence was strong enough to get British cooperation, and waited to even mention it until they'd have have a chance to act alone.

Either that, or they really had nothing linking Hutchins to Kronos until very recently. If it turns this really was based on new information, and the timing really was coincidental, I'll be a lot more comfortable with how it was handled. But that's sure not what it looks like right now...

puetzk··on Arrest of WannaCry researcher sends chill through security community
We don't know whether he did or not. But if they have evidence to support arresting him, the US has an extradition treaty with Britain; they should have shared it and asked British authorities to make the arrest. And there very well may be evidence, especially if the timing is related to something new obtained from the Alpha Bay takedown and it happening when he happened to visit the US for DEFCON was a coincidence.

But running a snatch and grab at a security research conference looks really bad, and is bound to have a much wider chilling effect on people's willingness to attend US conferences.

puetzk··on Announcing the .NET Framework 4.7 General Availability
Presumably because this is the desktop package of .NET runtime? WPF is the GPU-accelerated GUI rendering library, it makes sense that it would have a DirectX dependency. AFAIK it has always had a DirectX dependency, just one that was met by the base install on versions of windows that were supported. I think this is just the first time a .NET upgrade has required/offered upgrading to a newer version of DirectX, instead of just raising the minimum windows version.

Server/embedded/etc headless environments presumably want .NET Core instead, which added most of these updates in version 1.1 a few months back (along with VS 2017).

puetzk··on The end of smartphone innovation
Probably https://download.lineageos.org/athene / http://wiki.lineageos.org/devices/athene/ (LineageOS is the successor to CyanogenMod).

That supports Android 7.1 on lots of devices the manufacturers don't (I have it on a 1st-generation Moto G).

puetzk··on Supercapacitors Batteries charges in seconds without degrading
You could also charge at something higher than 5V, to keep the current manageable. Something like 1.8A/50V would deliver 90W, same as 18A/5V, still be within most of the safety guidelines, and allow a pretty similar connector bulk to microUSBr.

Or looking at what's already popular, USB-C connectors already spec do 3A@5V while handling data, or in PD mode (re-purposing pins) can do 5A@20V (100W).

So the first case of a charge 3000mAh in a minute doesn't seem completely ludicrous, though it's going to be challenging to make everything efficient enough the heat isn't prohibitive.

puetzk··on Bitcoin 0.13.0 Binary Safety Warning
http://ncjolt.org/googles-distrust-of-chinese-digital-certif...

CNNIC was the root of trust for a breach involving false certificates for gmail. They claim it was an accident. It might have been. It might not have been.

puetzk··on Show HN: Noms – A new decentralized database based on ideas from Git
It does? git merge --strategy xyz means git will invoke git-merge-xyz to do the actual conflict resolution. It comes with a variety of built-in ones (see https://git-scm.com/docs/merge-strategies) but you can write more if you have some special-purpose approach you want to use.

Git also has smudge/clean filters if you want to transform your file to a format where line-by-line textual merge is more meaningful

And you can use .gitattributes to make certain extensions/folders/file/whatever default to a certain treatment.

A good example is https://bitbucket.org/sippey/zippey which unpacks zip archives (and hence file formats based on them, like .jar, .docx, etc) to allow the contents within to be tracked in the git repo better. Other custom formats could do something similar...

puetzk··on Multiple Bugs in OpenBSD Kernel
Classic view is better for nested threads: http://thread.gmane.org/gmane.comp.security.oss.general/1994...
puetzk··on A Proposal for a High Resolution Display (2009)
You can't, of course, see the additional colors that would be enabled by looking at his picture of the gamut, because your current monitor can't produce them :-)
puetzk··on Excel: Error when CSV file starts with “I” and “D”
The bug is still there, and my software still has to work around it in my CSV emitter (force redundant quoting so the first byte will be '"' instead). Boo, I say!
puetzk··on Google Shutting Down Wallet Card
USBank Cash+ too. You have to pick categories each quarter. You get to pick though, which makes it more convenient than cards that just assign random categories.
puetzk··on Lyft Carpool: A New Way to Commute
Why is it preferable for the "credits" to be in units other than currency?
puetzk··on Aquaris M10 Ubuntu Tablet – Pre-order
https://guardianproject.info/code/lildebi/
puetzk··on Maps.me goes open source
Then tell them to pay the $6 to support development. I think the osmand model (lite/demo with 10 map downloads, paid version with unlimited, open-source with full features for free but you have to know where to get it and how to install) is fair.
puetzk··on Show HN: A Hand-Drawn QR Code Alternative
Graffiti is recognized by observing the strokes (direction, turns, etc) as it is drawn, with each pen lift/touch marking the characters. This is quite a different problem from doing OCR on it in a photograph, where you can (hopefully) see the shapes, but you do not know where the strokes began and ended.
puetzk··on Rust once, run everywhere
I suspect you can have this already exists if you want it bat enough, given that rust generates llvm bitcode, and there is an llvm-cbe "target" architecture that just generates C.

The results probably won't be well-optimized, though; C isn't actually very portable at this level, there's too much implementation-defined behavior that needs to be taken into account. You'll probably spend as much effort trying to robustly handle the quirks and deficiencies of some obscure platform's compiler than doing an LLVM backend for the processor...

puetzk··on Realtempo – online rehearsal rooms to make music together in real time
Yes, but music is even harder. I doubt most FPS shooters would suffer much at 60ms latency, but that's an 1/8 note at 120bpm. I would guess that for a jam session to feel OK, you'd want to be <15ms.

Musical tracking has to take special measures to keep the latency low enough even when its all local; see the need for ASIO, jackd, etc.

puetzk··on CompCert: A formally verified optimizing C compiler
As long as it's also capable of reproducible builds (and I would think the proofs would be very hard if the output is not even predictable!), you should be able to cross-build it from a certified platform, and bootstrap it from a trusted one (or more than one), and the bootstraps should converge to an identical binary, thus giving you both claims.
puetzk··on Firefox 36.0 released
Yes, but font hinting takes advantage of the specific subpixel layout of your LCD (e.g is the order RGB left-to-right, top-to-bottom, two greens and forming a square, etc). If you take a screenshot and look at it on another monitor, it's quite possible for it to look awful because your RGB subpixel layout and the source differ.
puetzk··on Human Artifacts on the Moon
The problem isn't focus, it's tracking rate. Hubble can take pictures of the moon, but not long exposures; it can't spin fast enough to follow the moon through its field of view, so it has to point where the Moon is going to be, then take the picture at the moment it passes through. https://what-if.xkcd.com/32/
puetzk··on Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark Collection
Re: "Cargo Cult" as a well-enough-known idiom:

It's basically a shibboleth for "Are you a fan of Richard Feynman". I doubt very many people have actually heard of it directly, but his "Cargo Cult Science" commencement address (http://neurotheory.columbia.edu/~ken/cargo_cult.html) is moderately famous.

puetzk··on Fighting Cargo Cult – An Incomplete SSL/TLS Bookmark Collection
It's probably your apache, actually; 2.2 can't do ECDHE, even though the openssl in Debian 7 can.

Sadly, this means IE doesn't get forward secrecy, because it can't do do DHE with RSA keys, only DSS.

puetzk··on Gravity Battery Concept
The problem is the poor density: power stored is just mass * gravity * height. So if we want to store 1kWh, using a hole 500m deep (about the max for elevator cables, which seems analogous) this would need a 750kg weight.

Storing the same amount of energy in a lead-acid battery would only take 21kg, a LiFePO battery only ~10kg. And those don't require digging out a 500m hole, or the supporting equipment to winch a car up and down a skyscraper.

puetzk··on Heirloom Chemistry Set
Yes. You should make the connections in this order: 1) dead battery, positive terminal 2) live battery, positive terminal 3) live battery, negative terminal 4) dead car, unpainted steel on engine block bolt/alternator housing/chassis/etc, as far from battery as practical. This works because the negative terminal of the battery is the chassis ground anyway.

When disconnecting, break the connections in reverse order.

Lead-acid batteries release hydrogen during discharge (and may vent it if the discharge is rapid), or from overcharging (water can electrolyze). So the live battery is likely releasing some, and the dead battery might be if it's actually damaged and not charging properly.

So making the final, sparking connection (or first disconnection) is safest using the negative/ground wire (no potential), on the dead vehicle (avoiding the definitely-discharging live battery), and some distance away from the dead battery (mostly aviding the possibly-outgassing dead battery). This minimizes your chance of the spark igniting a cloud of hydrogen gas and getting a fireball.

And now that you know why the order is what it is, you'll probably be able to remember it :-)

← PreviousPage 2 of 3Next →