HNHacker News
TopNewBestAskShowJobs

stackghost

2,807 karma · joined August 14, 2024

New account who dis?

ghost at stackgho dot st

submissionscomments
stackghost··on Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
So, not OpenBSD, then. I think we're on the same page.
stackghost··on Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Sure, I don't disagree in principle with the idea that a smaller attack surface is better than a larger one, nor with the idea that explicitly enabling things is better than having to locate and disable services you didn't even know were running.

But saying "only two remote holes" gives the impression that all of OpenBSD is secure and that it's the most heavily scrutinized codebase in the world, it's bulletproof, etc.

It's not.

My toaster hasn't had a remote hole in a heck of a long time either, but then again it doesn't do anything other than make toast.

The default install of OpenBSD doesn't do anything, so the fact that it hasn't had a remote hole in forever isn't saying much.

stackghost··on Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
You're not being intellectually honest. Most of those things are disabled by default, so if the httpd had a remote hole, but was disabled by default, then that's not "pArT oF tHe DeFaUlT iNsTaLl" and thus not technically covered by their vaunted claims, and you know it.
stackghost··on Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
>in one of the most heavily audited codebases

The idea of "OpenBSD is super duper secure" is mostly a fiction. Their prime claim to fame, "only two remote holes in the default install in a squillion years", is pretty meaningless because the default install doesn't really do anything, so as soon as you install packages to make the system useful you're beyond their security claims.

Classified workstations in National Security contexts? They run Windows.

Red network routers? They're Cisco, Juniper, PAN, etc. It's all COTS stuff. OpenBSD is mostly a LARP.

stackghost··on Things to know when you get cancer
>It's worse everywhere else. There are no specialists in all of the government-run systems I've dealt with and at some point, you really have no options left.

>Canada introduced MAID for this reason.

What is it with Americans being so confidently ignorant about everything?

Canada introduced MAID because someone who wanted MAID sued the government and asserted that banning MAID violated their constitutional rights. It went all the way to the supreme court, and the (federal) government fought tooth and nail AGAINST allowing MAID.

It should be noted that the Provinces are responsible for healthcare, but it was the federal government who banned MAID prior to the 2015 supreme court case via the criminal code.

So, in short, stay in your lane. You have no idea what you're talking about.

stackghost··on Tiny Little Office
There’s also https://github.com/nathanvy/singlebook which looks like the same philosophy but for documents.
stackghost··on OpenAI engineer arrested in bugging of executive conference room
Oh, I thought we were talking about being able to distinguish which key was pressed using wifi-radar, like one can do with deanonymizing someone via wifi gait analysis.
stackghost··on Suicide rates highest ever among middle-aged men
That study you linked does not establish a causal relationship. It may simply be that the sort of person who is able to extract well-being from church is the sort of person more likely to actually attend church with any regularity. It likewise does not address the possibility that depression itself might make one want to stop attending church.

>Millenial cynicism is so boring

Yeah, it's always Millennials who are in the wrong. Fuck us, right? It's all good, we're used to being the scapegoats for society's problems.

stackghost··on Thunderbird for iOS
It's quite cluttered UI for sure but it actually works and you actually get notifications when new mails come in, which is more than could be said about k9 the last two times I tried it.
stackghost··on Thunderbird for iOS
I recently switched from android back to iOS and tried to use mail.app for everything, as I rather like it.

Unfortunately it doesn’t sync properly with Gmail. I am in the process of de-googling my life so that’s okay with me. I use mail.app with my fastmail account and it’s perfect.

stackghost··on Thunderbird for iOS
https://email.faircode.eu/
stackghost··on Thunderbird for iOS
I bounced off of k9 several times. I could never get it to actually work reliably. I would get an email and never get a notification unless I opened the app to manually check. It was like the bad old days of pop3.

Awful, awful app. Fairemail was much better for a power user.

stackghost··on OpenAI engineer arrested in bugging of executive conference room
Wow, keypresses?

I would love a source if you have one.

stackghost··on OpenAI engineer arrested in bugging of executive conference room
I bet this was an attempt to get insider info for trading, rather than espionage.
stackghost··on Hackers activate automatic defrosting in supermarket fridges across Europe
Not even that, it's Bluetooth so what it lets you do is turn on/off the fume hood from the other room, if you download Samsung's surveillance capitalism app.
stackghost··on A Visual Intro to Complex Numbers
I’m not sure why you feel the need to keep arguing about this. I’m not going to go back to my Alma Mater and tell the prof that some nobody on hacker news doesn’t like an analogy he used 12 years ago.

Whatever point you’re trying to make is not working.

Go away.

stackghost··on A Visual Intro to Complex Numbers
I mean the guy has a PhD in mathematics so I'm sure he understands his tools deeply. Certainly more deeply than I did when I was an undergraduate in his class. Sometimes the right analogy, even if imperfect, is more helpful to build intuition than pages of rigorous proofs. Chill out.
stackghost··on Hackers activate automatic defrosting in supermarket fridges across Europe
They aren’t in NATO in large part because of the clause preventing participants in active conflict from joining, and because a few key politicians in NATO states are unduly influenced by Russia.
stackghost··on A Visual Intro to Complex Numbers
I had a calculus prof who described it thus:

Calculus is a mathematical model of the world, and it is wrong in the sense of the famous quote about "all models [being] wrong, but some are useful", so mathematicians used the imaginary unit almost like a hotfix for their model.

Whether that's an accurate/rigorous statement or not, it helped me as a learner.

You can, of course, express things like oscillation without i, using vectors and matrices. But the ability to use Euler's formula to express complicated sinusoids as compact exponentials with base e simply makes the analysis much easier. In the words of my prof, it's merely a mathematical structure to express things more easily that "regular calculus" isn't good at expressing.

To me, that made the apparent paradoxes of expressing e.g. phase angles and reactive power and stuff using i a lot easier to stomach.

stackghost··on I turned my unused Kindle into a photo frame with GPT-6 Astra
Mod chips may help there, or UART debugging. You can’t OTA update the PCB inside.
stackghost··on Hackers activate automatic defrosting accross European supermarket fridges
Exactly!
stackghost··on Hackers activate automatic defrosting in supermarket fridges across Europe
It was there when we moved in.
stackghost··on Hackers activate automatic defrosting in supermarket fridges across Europe
Please, let this be the stone that starts the avalanche of consumers rejecting smart apppliances.

My fucking fume hood on my stove has Bluetooth, because Samsung just can’t help themselves apparently.

stackghost··on Yandex bot traffic down 99% after data center attack
That’s on me. I’ve been commenting less.
stackghost··on Ask HN: Do you want a router that has DD-WRT pre-installed?
Thinkpenguin used to sell Rosewill routers that came with a particular Linux installed, but their value add was no proprietary blobs, everything open source and FSF certified IIRC.
stackghost··on I guess I'm using WebP now?
No, this is not what’s happening. Or at least not the phenomenon I am discussing.
stackghost··on Playgrnd – tiny tools for making weird, beautiful things
Pretty neat. I see the page considers there to be 5 different kinds of tools but the only ones I can find all make 2D textures/images. Are there others I just am failing to locate?
stackghost··on I guess I'm using WebP now?
That seems more likely. I still hate webp.
stackghost··on I guess I'm using WebP now?
Firefox actually silently and automatically converts images to webp in some cases when you Save As them, with no option to revert to the format you see in the DOM. It’s fucking infuriating. I hate webp because the support is so spotty.
stackghost··on IRCv3
Discord was originally for gamers so most communities I was part of had their own voip servers.

In the 90s it was in game chat, forums, VoIP, possibly an IRC channel. That was a lot of infra to juggle and usually it wasn’t all hosted by the same person. So if xXxDarkNinja69xXx got his feelings hurt he might take down the teamspeak and then your community is up shit creek without a paddle until you can find someone else to host it.

Discord does a merely-okay job of all of that, and possibly Reddit has supplanted the forum bits that discord can’t, but it’s less overhead for the administrators of each community.

I don’t really do any gaming these days so I too don’t use the VoIP, but that was a big part of the allure when discord launched.

← PreviousPage 2 of 34Next →