HNHacker News
TopNewBestAskShowJobs

sigkill

1,203 karma · joined May 11, 2012

NodeJS React Shopify dev

meet.hn/city/ca-Old-Toronto

Interests:

Web Development, Technology

---

submissionscomments
sigkill··on Excess Automobile Deaths as a Result of 9/11
>It will certainly result in many more people avoiding the TSA.

There is another interesting way of thinking about this. They might be more inclined to use air travel than road because the 'element of control' is lost from them in both modes of travel. So they would then compare the time it takes to reach the destination and since air travel is faster, they might even end up sucking up the TSA pat-downs.

sigkill··on How a Car Engine Works
> with a sound system, air conditioning and creature comforts

Reminds me of that episode with May saying something on the lines of "We're going at 400kmph... and we've got air-conditioning and radio". Now, that is serious engineering.

sigkill··on Our Newfound Fear of Risk
>Play date or playdate is an expression primarily used in the US for an arranged appointment for children to get together for a few hours to play.

This is from wikipedia. Pardon my language, but what the actual fuck. An arranged appointment for playing? I really feel sad for kids now in America.

sigkill··on How not to check the validity of an email address
Guilty as charged. Although it's practically the same, I prefer the TRUE part. Same with the !aBoolean and FALSE.
sigkill··on How not to check the validity of an email address
Something like the underhanded C contest then?
sigkill··on Yahoo tops Google in US traffic
What I meant is, not the first result on the list, but the first result that you click, and then press back and then click on the second result.
sigkill··on German Government Warns Key Entities Not To Use Windows 8 – Links The NSA
In all seriousness how feasible is it to run a hot air gun over the TPM chip and remove it before even you first boot the computer? Would the computer boot? And if it does, would it just go with "Oh, I thought I came equipped with a TPM chip. I don't seem to have one. Oh well, let's carry on anyway"?
sigkill··on Yahoo tops Google in US traffic
There are some of us who don't use 'how', 'why', 'where', 'when' as a carry over from the older days when such terms used to just be ignored. So your example would be searched as "initialize 2d array objective-c".
sigkill··on Yahoo tops Google in US traffic
Maybe they should have another metric that if you click on a second result after the first result, then the first result should get penalized a little. Repeat steps for 'n' clicked results.
sigkill··on Yahoo tops Google in US traffic
Good lord, this is perfect. I had no idea about the verbatim setting. All I'd do was use the hl=en and q=%s. This new parameter is practically god-sent.

Thanks.

sigkill··on The NSA Is Commandeering the Internet
Consider me the devils advocate, but wouldn't foreign spy-ing be better than local spying if they can't make use of that data to incriminate you in your daily life?
sigkill··on City of London calls halt to smartphone tracking bins
I JUST finished watching (for the nth time) episode 6 of SAC, and this is where the laughing man case takes form. I feel that if you're on Hacker News, it's a must watch because it blends philosophy and technology with a bit of ethics and possibility very very well.

Heck, I won't be surprised if someone's startup is inspired by that. I can already see usage of some tech that vaguely resembles the Oculus Rift (and yes, the Virtual boy of the past), ah you know what, just go watch it. You will not be disappointed.

sigkill··on BlackBerry puts itself up for sale
I got a chuckle because your answer is technically correct although it doesn't help anyone who doesn't know what ECC already is. Nerd!
sigkill··on BlackBerry puts itself up for sale
Totally agree with you on that one. Especially with strategic alternatives in quotes.
sigkill··on The algorithm for a perfectly balanced photo gallery
It's almost but not quite entirely like the philips ambilight concept. I like it.
sigkill··on Ask HN: Advice on secure email system
Thank you. I'll do that today evening, although I do have a rough idea now which direction I'm heading.
sigkill··on This Is What Happens When Publishers Invest In Long Stories
Google Analytics can track pages and average time spent on page. It can even track visitors flow.

Everyone should get an analytics account and see the insane amount of things that Google can track for YOU, for FREE with just three lines of extra code on your page.

sigkill··on Ask HN: Advice on secure email system
In that case I don't see any way without a central or multiple central announce servers.
sigkill··on Ask HN: Advice on secure email system
I read the bitmessage's whitepaper and he has a section on scalability. He proposes child nodes, but I don't know how well that would scale.

Your concept sounds interesting. Could you, by chance fill your about page on HN (a bitmessage address will do too) so if I want I could PM you.

sigkill··on Lavabit's founder: 'If You Knew What I Know About Email, You Might Not Use It'
This is something which I did not think. It's basically like sending truecrypted packets between people. But this doesn't solve one problem - metadata. I still know you sent an email at time X to person P2. Tor's method of onion routing looks quite nice though.
sigkill··on Lavabit's founder: 'If You Knew What I Know About Email, You Might Not Use It'
The whole problem with email is the asynchronous thing.

You want to be secure, then it needs to be in such a way that there's minimum reliance on a central server. But in that case, what happens if your local machine (which is both your mailserver and an end client) is offline? Should the email bounce around in the network (like bitmessage does)? Or should you notify the sender with the standard "Mail Subsystem Delivery failure" that we all know and love.

Actually after reading this, I want to seriously sit down and write a spec but if I include the assumption that there is a chance for the end-server/recipient to be offline, it throws everything into chaos.

sigkill··on Lavabit abruptly shuts down
Yeah, I thank my stars that I had the sense to do this almost 2 years ago. It really is much better. Another neat hack of using your custom domain is when people ask for your email address you can make one up without you appearing in their chat list. So for instance on Google Talk you're registered as iam@firstlastname.com, you could simply give them i@firstlastname.com so they can still converse with you (catch-alls ftw) yet they don't annoyingly appear on your Talk list.

And yeah, changing providers is just a matter of altering a field or two in the host records page.

sigkill··on Lavabit abruptly shuts down
Assuming you're using (and lavabit supported) custom domains, all you'd need to do is sign up for a dummy email address for now and go to your domain settings and reenter the MX records. But if it was an username@lavabit.com or something like that, then I'm afraid you're out of luck.
sigkill··on MIT Researchers: Printable Keys Make Mechanical Locks Insecure
This mostly never happens. I've used fingerprint locks where the battery lasts easily for a year (that's with 5-6 accesses per day).

Without getting into the discussion of the security factor of biometrics, the working mechanism of the lock itself is such that when it detects a success, a small servo engages some sort of a gear which enables you to complete the mechanical circuit (so to say) when you push the door lever down and move the physical lock with human effort.

This means that the battery is never constantly used, only when the actual sensor is active. Even if it were dead, there exists a manual key override. Also, (I've tested this personally), the factor of safety is quite good in that, the lock starts beeping "LOW BAT" a good 3-4 weeks before the battery is completely drained. Also, (Another one) it doesn't leak information about low battery until there's a successful entry, so an evil attacker can sit near your house activating the sensor all day and he won't know his progress in draining the locks' battery.

sigkill··on Ask PG: Why is everybody hellbanned?
Holy cow! Just saw it. It looks like a minefield. I speculate it's probably a bug or something because I've never seen so many dead links together. Either that, or today being a Sunday, has got everyone trying to promote their stuff.
sigkill··on A Cheap Spying Tool With a High Creepy Factor
Nah man, doesn't always work. Whe I tried that, they said "Nothing to hide from the government, not everyone."
sigkill··on A Cheap Spying Tool With a High Creepy Factor
Maybe I'm an ass for pointing this out, but it's trilateration, not triangulation. I set out to learn the mathematical concept, and not knowing the right term had me waste an entire evening looking at something more closely related to tessellation, than spatial position locating.
sigkill··on Scientist banned from revealing codes used to start luxury cars
Which is why I added the "marginal cost of duplication" part. I understand that security via obscurity has been practically the only thing that's been happening. Hell, a simple talk to our own parents (mine're 50+, somewhat tech inclined but nothing deeper than the basic word editing, and web browsing) in relation to this reveals that they think "you shouldn't tell your secret to the whole internet", little realizing that publishing it will actually help you plug the holes.

The problem is, as long as it was a physical object it was all fine, sort of atleast. You could put anti tamper mechanism (like safes with relockers) that would destroy the core technology/secret if someone tries to pry it apart. But with computer code and mathematics, it's guaranteed that the attacker/pryer is able to make millions of duplicates at zero extra cost. So if approach #564 doesn't work, all he has to do is cp ../downloads/file ../project/reverseengineer/ and boom he has another copy to work with.

The only thing holding an intruder out of a system is the solidity of the mathematical concept that system is based on. And now that the intruder knows that there's a break, and that he potentially will gain a lot by discovering it, he can continue unhindered.

Obviously I'm preaching to the choir, but if you've encountered such people you should give this analogy. In the real world, the guy needs to buy your widget each time he fails to reverse-engineer the anti-intrusion mechanism, but if he were able to make a 100% replica copy of the widget and work on that copy he could try everything. So if he fails once, he'll just make another copy and try a new approach at opening your widget. He knows it's broken, and there's no real extra "cost" associated with duplicating the widget to try again, there's literally no stopping him until he gives up.

Another thing that crossed my mind was this. The manufacturers would want to keep this knowledge (i.e. that the exploit exists) secret, but ~~if~~ when he discovers the backdoor, do you want to be considered responsible for your car being stolen instead of the manufacturer for the manufacturer's mistake? Would you not prefer that the manufacturer calls you and recalls your car to the garage and replace it with a better part? It's a shame because Bentleys, Porsches, and Audis are NOT cheap. You're paying for the name, and at times like this, when the name comes under fire they should do something and stand by their customers instead of against them.

sigkill··on Scientist banned from revealing codes used to start luxury cars
When will people, especially the tech illiterate ever learn that security via obscurity doesn't really work when you've got marginal cost of duplication. [Of course, it's a bad idea for even tangibles but in the electronic world it's a totally broken concept]
sigkill··on Intel's first 'open-source PC' on sale for $199
Ah got it. Thanks. I didn't think power would play a significant role, but if it does then I can see why.
← PreviousPage 4 of 16Next →