HNHacker News
TopNewBestAskShowJobs

s14ve

37 karma · joined August 3, 2017

[ my public key: https://keybase.io/sl4ve; my proof: https://keybase.io/sl4ve/sigs/PFZZyTJLSMsjPIPZ2d7dQ5pfpsQ8X_YM-GGZ2HbULME ]
submissionscomments
s14ve··on No Cookie for You
This wording should be required by GDPR. :)

If that would be the case, maybe more sites would follow GitHub here.

s14ve··on An exploratory statistical analysis of the 2014 World Cup Final
Not sure if you can influence this, but I have two platform suggestions that crossed my mind while reading it:

1. I would make the "Run this article as a notebook" more visible. On a first read, I've completely skipped that part as it's very similar to pop-ups on medium. Having an option to directly run/modify this blog would be pretty amazing.

2. The chosen color scheme of code formatting is a bit odd, but that might be just my subjective preference :-)

s14ve··on An exploratory statistical analysis of the 2014 World Cup Final
Pretty interesting read! I can also recommend the author's medium account[1] full of similar articles (even though in a bit less hands-on format)

[1] https://medium.com/football-crunching

s14ve··on AWS Control Tower
Have you managed to get it working in the end? I've encountered the same issue.
s14ve··on Alpine Linux Docker images have NULL for root password
I believe it's public on their GitHub since 5 Aug 2018. https://github.com/gliderlabs/docker-alpine/issues/430

> 2019-03-01 - It was discovered that this issue was also reported and made public in their Github prior to our report, but was not flagged as a security issue and thus remained unresolved until it was rediscovered and reported by Cisco.

https://talosintelligence.com/vulnerability_reports/TALOS-20...

s14ve··on Ask HN: What are the best resources for learning security and pen testing?
Wow, thanks for sharing and for your hard work on your channel!

I recommend it to everyone who is even remotely interested in security as your videos provide really valuable knowledge which is very easy to digest in the same time.

Thank you and keep it up please!:)

s14ve··on Ask HN: What are the best resources for learning security and pen testing?
CTFs: https://github.com/apsdehal/awesome-ctf especially https://www.hackthebox.eu/

In case you want cert: skip CEH, get some basic knowledge and go OSCP

Daily resources:

* https://www.reddit.com/r/netsec/

* https://www.hackerone.com/zerodaily

* https://hackerone.com/hacktivity

For lightweight learning by watching after work, check out LiveOverflow: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w

s14ve··on Ask HN: Which YouTube channels do you watch regularly?
LiveOverflow is pretty awesome. Very easy to follow after working day.

https://youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w

s14ve··on [dead]
First off, I really like your idea, however 2/3 of your main marketing points sounds a bit scary:

1. Is your "Instant search out of the box" open-source? If so, could you point me to it without the need of setting up account?

2. How do you technically handle "Keep using plugins" on BE?

Are there any bigger clients which you could mention? Could you tell us some reason why should someone trust you with some "enterprise" WP since you are quite new hosting provider?

s14ve··on Charles Proxy now available on iOS
It certainly was possible https://arstechnica.com/information-technology/2017/10/bewar...

Not sure about the current state though.

s14ve··on Charles Proxy now available on iOS
But is really common user reading these warnings?

I know that without it we wouldn't have amazing apps like https://itunes.apple.com/us/app/adblock/id691121579 , but i'm really not sure if its worth that risk for a common user that apple mostly targets with iOS.

s14ve··on The Tripartite Identity Pattern (2008)
Yes, its also the second link mentioned in article
s14ve··on Apple's Middle Age
With the "features" of new macbooks, it doesn't really seem like they would like to settle down, even though it would probably make sense there...
s14ve··on Cryptocurrencies are collapsing
> There is only one coin in existence that a train the size of a planet can ride on, and it's XRP. Hodl. There, I said it.

2 sentences later

> Also, please don't ask for financial advice or price predictions short or long term. You have to make your own decisions.

This contradiction undermined the point of whole article for me.

s14ve··on XMR mining app, built with Vue.js, D3 and CoinHive
http://xmr.cpufan.club/

It should take only 1% of profit instead of CoinHives 30%.

s14ve··on Estonia blocks electronic ID cards over identity-theft risk
Slovakia invalidated them 3 days ago and is moving to 3072bit keys.

However, our minister of the interior "Robert Kalinak" announced that they should hack his if its real threat. The only thing which he didn't mention is that his public key isn't publicly available...

s14ve··on Estonia blocks electronic ID cards over identity-theft risk
Full paper is out: https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs...

Anyone with good programming skill can make the exploit in matter of hours => it surely is somewhere on black market.

s14ve··on Practical Public Key Cryptography
I think there should be keybase mentioned.

Its probably the only pgp with potential to become used by mainstream users.