HNHacker News
TopNewBestAskShowJobs

sgjohnson

2,656 karma · joined August 8, 2018

submissionscomments
sgjohnson··on Colliding with the SHA prefix of Linux's initial Git commit
You're talking about hundreds of millions of dollars to calculate that. "Put your money where your mouth is".

We know it's theoretically possible. And we also know that this theoretical possibility is within the reach of a couple of countries.

sgjohnson··on Colliding with the SHA prefix of Linux's initial Git commit
> If you can give me a second git repo with such a commit containing different contents, I'll happily send you $10k USD, or donate it to a charity of your choice.

Calculating that SHA1 collision is going to be a bit more expensive than $10k, by a couple of orders of magnitude.

Finding it in the wild is improbable, but calculating it is definitely possible, and has been done before. http://shattered.io/

sgjohnson··on Israel built an 'AI factory' for war. It unleashed it in Gaza
But that’s not how it works in the real world.

In the real world, “computer said to” provides just enough plausible deniability for _no_ human to be _ever_ blamed by the action the computer decided on.

sgjohnson··on Show HN: Don't let your billion-dollar ideas die
> 3. After expiry, the ideas goes public. So if you don't work on them, someone else probably will

Heh, “someone else probably will” is such a strange way to say “no-one ever will” :D

sgjohnson··on Perhaps acquiring Pixelmator is about competing with Creative Cloud
If that was the case, perhaps they should have bought Affinity instead?
sgjohnson··on ICC issues warrants for Netanyahu, Gallant, and Hamas officials
Well, obviously. In which case Netanyahu is simply not going to go there.
sgjohnson··on ICC issues warrants for Netanyahu, Gallant, and Hamas officials
Several of the countries listed are not members of the ICC, so they don’t really count here.
sgjohnson··on ICC issues warrants for Netanyahu, Gallant, and Hamas officials
> If I were a senior Israeli or Hamas leader I’d avoid the place for a couple of decades in case of sealed charges.

If the Netherlands granted diplomatic immunity to said leaders before their visit, and then decided to arrest them, that by itself would be an act of war.

And even worse, it would ruin basically the only treaty every country has agreed to - the Vienna Convention on Diplomatic Relations.

sgjohnson··on Nordic neighbours release new advice on surviving war
No such thing as cultural heritage if destroying it would achieve the war goal of significantly lower the enemy's morale, irrespective of what international law says about it.
sgjohnson··on Marine pilot loses command after ejecting from F-35B that kept flying
> No. As long as it has electrical power and the flight controls are working it can remain stable and glide even with a complete engine failure.

I'm not so sure about that. I'm pretty sure that flight controls are directly tied to thrust, because it would be the engine that also drives the hydraulic system.

It's like that even on passenger jets. If you lose both engines, you also lose hydraulics (aside from whatever little hydraulic pressure the ram air turbine provides). I would not expect there to be a ram air turbine on a fighter jet, which would mean complete engine failure = complete loss of hydraulics = complete loss of flight controls.

sgjohnson··on Marine pilot loses command after ejecting from F-35B that kept flying
> In my opinion, the Russians are quite tactically adaptive.

But they aren't. They just added Iranian drones to their arsenal.

sgjohnson··on Apple courier may have stolen 2 MacBooks, ... Apple is not going to help
> there's lots of people happily using Linux without wasting time.

No doubt. But it no doubt required a SIGNIFICANT time investment to get to the point where they can just use their machines “without wasting time”.

sgjohnson··on Apple courier may have stolen 2 MacBooks, ... Apple is not going to help
It’s not just the installation, but all the maintenance that a linux machine needs.
sgjohnson··on Apple courier may have stolen 2 MacBooks, ... Apple is not going to help
If you’re not already running Linux desktop, then Linux desktop is a viable option only if you value your time at exactly zero.
sgjohnson··on I sent an Ethernet packet
Ethernet deals with frames, not packets.

Packets are an IP concept :)

sgjohnson··on Apple acquires Pixelmator
Oh yes
sgjohnson··on Apple acquires Pixelmator
> Code bases in Cocoa were too heavy to switch to Swift

C#, not Cocoa. Cocoa is an API. You can write a Cocoa application in Swift, if you really want to (but you should really use SwiftUI for anything new)

sgjohnson··on Steam games will need to disclose kernel-level anti-cheat on store pages
GPU driver can technically be userland too.

Look at what Apple has done in recent years. kexts (kernel-level drivers) are basically all but unsupported today, and both DriverKit and IOKit are fully userland.

sgjohnson··on iPhone 16 Pro and iPhone 16 Pro Max
> It doesn’t require light

neither does face ID

sgjohnson··on Telegram boss banned from leaving France in criminal probe
It gets worse. What they are saying is quite openly, "We have the data you're after. Force us to disclose it."

> Q: Do you process data requests?

Secret chats use end-to-end encryption, thanks to which we don't have any data to disclose.

To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions. The relevant decryption keys are split into parts and are never kept in the same place as the data they protect. As a result, several court orders from different jurisdictions are required to force us to give up any data.

Thanks to this structure, we can ensure that no single government or block of like-minded countries can intrude on people's privacy and freedom of expression. Telegram can be forced to give up data only if an issue is grave and universal enough to pass the scrutiny of several different legal systems around the world.

To this day, we have disclosed 0 bytes of user data to third parties, including governments.

sgjohnson··on Telegram boss banned from leaving France in criminal probe
There are plenty of WW2/Cold-war era laws on the book regarding cryptography in a lot of countries though.

Even the US.

https://en.m.wikipedia.org/wiki/Export_of_cryptography_from_...

sgjohnson··on Telegram boss banned from leaving France in criminal probe
> I find it difficult to imagine that failing to submit a form that does not involve obtaining any kind of approval, would be something you get criminally charged for.

Try not filing the taxes in the US.

> would be something you get criminally charged for.

They clearly just charged him with everything they could think of.

sgjohnson··on HDMI Forum rejects AMD's HDMI 2.1 open-source driver
> No device output in DP

Yeah, if we exclude basically every half decent GPU and ~70% of laptop USB-C ports in existence.

sgjohnson··on HDMI Forum rejects AMD's HDMI 2.1 open-source driver
I feel like the only thing HDMI has going for itself is ARC.

DisplayPort is superior in every other way imaginable. Except for the fact that almost no TV supports it.

Low-end monitors also don't usually have them, but as far as computer monitors go, I'm not interested in the low-end ones.

As for TVs - just give me a dumb screen with ports. I'm going to attach Apple TV to it anyway.

sgjohnson··on Telegram boss banned from leaving France in criminal probe
I Am Not A Lawyer
sgjohnson··on Telegram boss banned from leaving France in criminal probe
What embassy? He’s a French citizen and a persona non grata in Russia.
sgjohnson··on Telegram boss banned from leaving France in criminal probe
IANAL, but I think that this case mostly has merit. Telegram is not end-to-end encrypted by default. So they have access to the conversations in group chats and non-E2E encrypted DMs.

One of the charges is refusal to provide information when requested by law enforcement. And he is a French citizen, so there might be an explicit obligation to cooperate with law enforcement when requested.

To me it sounds like he’s being done in for not putting E2E encryption on everything.

Whether he should be liable for what others do on his platform is a different matter entirely. But it has merit.

sgjohnson··on Windows TCP/IP Remote Code Execution Vulnerability
Unfortunately, disabling IPv4 is not a viable option, unless you run IPv4 literal address translation layer (464XLAT on the server side and CLAT on the clients). Many sites still do not support IPv6, which is a great shame, but slowly but surely we’re getting there.

I tried 464XLAT on my home network, for the most part it worked flawlessy, aside from some IoT devices that don’t support v6 at all or are not LAT aware. So dual stack it is.

sgjohnson··on Windows TCP/IP Remote Code Execution Vulnerability
> If you're already using IPv4 there's no reason for the extra complications of leaving IPv6 enabled.

That’s just flat out wrong. No pure IPv6 deployments exist on endpoints in practice. Only in internal networks. You either run pure v4, or dual stacked v4+v6.

IPv6 is gaining some pretty solid adoption these days, but it’s not there yet. Disabling it is holding back the deployment of it, and is a problem by itself.

sgjohnson··on CrowdStrike Update: Windows Bluescreen and Boot Loops
Apple created their own filesystem to make this possible.

The system volume is signed by Apple. If the signature on boot doesn't match, it won't boot.

When the system is booted, it's in read-only mode, no way to write anything to it.

If you bork it, you can simply reinstall macOS in place, without any data/application loss at all.

Of course, if you're a tinkerer, you can disable both, the SIP, and the signature validation, but that cannot be done from user-space. You'll need to boot into recovery mode to achieve that.

I don't think there's anything in NTFS or REFS that would allow for this approach. Especially when you account for the wide variety of setups on which an NTFS partition might sit on. With MBR, you're just SOL instantly.

Apple hardware on the other hand has been EFI (GPT) only for at least 15 years.

← PreviousPage 7 of 34Next →