HNHacker News
TopNewBestAskShowJobs

vog

10,115 karma · joined July 24, 2009

https://njh.eu

[ my public key: https://keybase.io/vog; my proof: https://keybase.io/vog/sigs/ozUUuyqnoQrtbFK7EBI5seZKjJ73P9bwrVzhSNDMj4c ]

submissionscomments
vog··on Protecting Security Researchers
The earliest instance I remember was the DeCSS debacle. In 2001 Dmitry Sklyarov published issues he found with the back-then popular so-called "copy protections". When he gave a talk at DEF CON in Las Vegas, he was arrested.

https://en.wikipedia.org/wiki/United_States_v._Elcom_Ltd.

The irony in this story couldn't be bigger:

- He is a Russian who exercised free speech in the US, and got arrested right there. Imagine that happening with the roles of US and Russia reversed!

- He was only dropped from prosecution in exchange for agreeing to testify and to leave the US. Again, imagine that happening with the roles of US and Russia reversed!

- He essentially provided free research, sharing their findings with the public, instead of abusing them in private.

- It was not even a serious security issue. It was just a flaw in a system which nobody expected to work for long anyway. (Really, how could copy protection ever work without exercising full control over all audio and video hardware? And even those could be reverse engineered over time.)

- Plain copyright law was sufficient to cause all that trouble for him. No computer security laws or homeland security laws were needed.

vog··on Firefox Product Roadmap
> Why the downvotes? I want Firefox to be successful, it just seems to have lost its charm from when it was originally called Phoenix

Not sure about the downvotes, either, because I think you have a very good point.

However, I suspect that many people want Firefox to be exactly like Chrome, at least subconsciously. This is of course silly, because what do we win if Firefox becomes a second Chrome? Also, it would mean that Firefox will always lose, because every little difference to Chrome would be considered negative.

On the other hand, it might make tactically sense for Firefox to mimic Chrome for now, to win back the lost users.

In the end, I want Firefox to be clearly different from and better than Chrome.

vog··on Firefox Product Roadmap
See: https://news.ycombinator.com/item?id=16647116

Please record a profile and report this.

vog··on Logging in large mathematical models
That's a great approach to logging/debugging complex models on large datasets.

I'm pretty sure this can be applied outside the math, e.g. on systems with complex business rule over large datasets.

vog··on Users Abandon Facebook After Cambridge Analytica Findings
While I agree in general, I don't buy this argument with regard to Facebook.

People aren't "too busy" to waste a lot of time on Facebook. If anything, tight time constraints would make people not use Facebook in the first place.

vog··on [dead]
> Would be good if the UK government can tell us where the line is.

Sometimes the line is indeed hard to draw. That's what courts are for. But most cases are really straight forward, such as this one.

> Or... you know don't arrest people for bad taste jokes.

If you really think this was just a "bad taste joke" you should probably read the article again. More generally, those people always say this was just a "joke" or meant to be "funny". But that's obviously a lame excuse for being an asshole.

> I don't recall the Monty Python team being arrested for their ridicule of the Nazis

Monty Python did make fun of Nazis, which is entirely different and easily distinguished from what happened here.

vog··on WhatsApp co-founder tells everyone to delete Facebook
No, the word "reveals" is used because the code is revealed. Well, it's more a "log file" than "code", but that's detail. The point is that the "code" (log file) is usually hidden from average people.

Also, the word "reveals" is used to make the headline more sensational, just like any other headline. It doesn't tell you anything about the average person.

vog··on Introducing the LineageSDK for developers
From the article:

> we’re announcing some new APIs that will allow your apps to do more when they’re running on a LineageOS-powered device.

> The ... LineageSDK ... allows us to both keep our features out of the core Android frameworks (for better security and easier bringup processes) and expose some extra functionality to app developers.

This sounds like a bold move. Is LineageOS really that widespread that they can afford to try to beat out the stock Android?

vog··on FTC Probing Facebook for Use of Personal Data, Source Says
> Because even if I didn't like it, I could accept it as an opinion on future human interactions

But why could you accept it, from a person who is not affected by this vision anyway?

Did he provide some intimate look into his sphere of privacy back then?

Or, did he offer any transparency intiative regarding the Facebook company?

vog··on FTC Probing Facebook for Use of Personal Data, Source Says
> Lost any respect I had for the guy in that moment

Um ... why only then? His statement "privacy is the concept from the past" was dishonest even back then - because if you have a lot of money, you can always buy more privacy than everybody else - and are generally much less exposed to the issues of, let's say, "average people".

vog··on Sudan, last male northern white rhino, dies in Kenya
[deleted]
vog··on Frivolous, Empty, and Perfectly Delightful
Not sure why you are downvoted. I fully agree with your complaint.

The site loads slowly even on a decent internet connection - without any good reason.

I'll probably never get why people are constantly struggling to get serving static text (with a few images) right.

vog··on Gallery of programming UIs
*> TUI (Terminal UI) IDEs here (the likes of DBase/Foxbase/Foxpro/etc).

Don't forget the classic DOS IDEs, such as QBasic or Turbo Pascal / Turbo C. The latter were based on a very nice framework named "Turbo Vision".

vog··on Better-sqlite3: A faster Sqlite library for Node.js
On the other hand, for LaTeX (see CTAN) this works astonishingly well. Those also have a much stronger emphasis on backwards compatibility of existing packages. I suspect this is not just a coincidence.
vog··on Linux beats legal threat from one of its own developers
I'm aware that copyright assignments are often seen as an unnecessary burden to potential contributors, but for large projects like the Linux kernel this actually makes sense.

This would have never happed with any GNU project, or OpenLayers, etc.

vog··on The OTCA Metapixel in Conway's Game of Life (2015)
Nice covering of a certain well-known GoL pattern.

If you like GoL, you should check out LifeWiki which is the largest and most up-to-date pattern collection (kind-of encyclopedia for the GoL universe) out there:

http://www.conwaylife.com/wiki/Main_Page

If you are interested in latest research and news about the subject, the following blog aggregate is the best I'm aware of:

http://www.conwaylife.com/

vog··on How to dismantle a compiler bomb
To add to this, a "tl;dr" is only useful if written by people who actually read the whole article. That is, written by people who did not apply "tl;dr" themselves.

In this particular case, the article clearly says:

> The array will contain 4294967295 integers, each with the size of four bytes, taking up 17179869180 bytes in total.

Later, the article again stresses again that you have to multiply by four:

> having the size of 10000 integers, that is, 40000 bytes

It's really hard to imagine how somebody who actually did read the article could have missed that.

vog··on Why I am excited about RocksDB
Not very insightful. Looks more like an ad than anything else.
vog··on Show HN: Graphite – A decentralized and encrypted Google Docs alternative
Not sure why you were downvoted, because I think you have a very good point. I often see us, as web developers, being blind to obvious, simple, local solutions. Perhaps this is because in many areas going from native to web is a win. Or, because too many web developers are exposed to business models around developing web applications mostly as a vehicle to fetch user data. (Fortunately, this is not true for intranet web applications which is a niche where I'm quite happy to work in.)
vog··on To solve problems caused by sitting, learn to squat (2017)
Good point. It's not exactly that pose. I move my centroid more to the front, so the thighs are horizontal.

Unfortunately, I found just one good picture of that kind of squatting position, which is NRSFW (not-really-safe-for-work): https://thumbs.dreamstime.com/z/woman-weight-scales-checking...

vog··on To solve problems caused by sitting, learn to squat (2017)
I wasn't aware that squatting is such a big deal.

I often find myself squatting while working at my laptop. Frankly, it's just for a few minutes, because at some point my feet will hurt.

I wonder whether this is just a matter of exercise, or whether squatting for too long (in that position, with a laptop on the thighs) is unhealthy.

Most often I do this while in public transport, where I don't always find a seat. It happens rarely within the train but more often at the station, where the seats are even more limited.

In the beginning, I often looked for a wall to lean my back against. But I soon discovered that I don't really need it. Walls are cold and, in the end, they are just a help for balancing.

vog··on E-Mail Leaves an Evidence Trail
[deleted]
vog··on 2,800 New Data Breaches with 80M Records Added
I applaud the dedication and effort that the author puts into HIBP.

One small suggestion, though: I wouldn't harm to ask somebody to proofread public statements like this, especially since this is a highly trust-related topic. The density of typos is annoying to me even though I'm not a native speaker.

vog··on Two-Way Communication Is Possible with a Single Quantum Particle
In physics, local violation of conservation of energy due to quantum effects is pretty established by now. Unfortunately, these effects don't scale, that is, in larger scale conservation of energy does hold. So alas, you can't use these effects to make a power generator.
vog··on The Internet Isn’t Forever
Archive.org is a great project that one can't recommend highly enough.

It's not "just" collecting huge amounts of data, it is a living archive. For example, when they publish old Amiga software, they publish it ready to use. And I don't just mean polished disk image files. I mean ready to use right in the browser. Click on a ancient game, and play it immediately in your browser!

That's exactly the kind of attitude towards archiving that we need. Like one of the more modern museums where you are allowed to touch (and interact with!) things.

vog··on The Case Against Google
Nice idea! However, I still struggle to see the advantage over "!g".

The workflow is exactly the same: Search for stuff in DDG, and if you suspect that Google might have returned a better result, prepend "!g " to your query (which might be even faster than clicking on the bookmarklet, depending on how fast you type).

vog··on A Practical Introduction to Container Terminology
> The primary downsides to consider are efficiency of the system, and the complexity of managing it

This shouldn't be underestimated, though!

I agree that efficiency is a no-brainer for almost all purposes, especially compared to other forms of virtualization like KVM.

But: Managing the complexity can be tough, it sometimes feels like creating all low-level firewall rules by hand for a large network. Well, for firewalls you have stuff like firewall generators, in the context of containers these are projects like Docker or LXD. But they share the same downsides: You may have trouble to see what happens behind the scenes.

The largest risk here, however, is not the working time spent to learn and apply that stuff. It is a false sense of security where your complex system might, in the end, to have holes which you assumed should not exist.

For example, not many people are aware that if the user can start docker instances, they are effectively root.

(One might argue that this is more a failure of docker than of containers. But then, why do people use complex monsters like docker in the first place? Because managing plain containers is a pain and other complex building around containers have their downsides, too.)

vog··on The Internet Isn’t Forever
> I doubt IPFS will automatically win this because it was the first to make a glorified BitTorrent client available via HTTP.

This may be true.

On the other hand, I wouldn't be surprised if IPFS would win for exactly that reason.

vog··on Show HN: A CSS Keylogger
But that requires extra work, compared to simple JSX-based React code, doesn't it?
vog··on The Case Against Google
That's strange. I've had the same feeling with Google for a long time: Why are the results so strange, and no improvement in sight for years?

Then I discovered DuckDuckGo and never looked back.

For example, why do Google searches for HTML/JS stuff result in third-party crap sites instead of pointing me directly to the relevant MDN or W3C sites? Why do searches for company names result in tons of marketing crap (where their main web site would have been sufficient), instead of at least showing the Wikipedia article as well?

If you really want to embrace diversity, look beyond the two largest players.

For search engines, it's not Bing versus Google, there are DuckDuckGo, YaCy and so on.

For laptops, it's not Windows versus MacOS, there's MINT, FreeBSD, Ubuntu, etc.

For servers, it's not Windows Server versus RHEL, there's also Debian, FreeBSD, etc.

For smart phones, it's not iOS versus Google-Android, there's also LineageOS, Replicant, etc.

(For nitpickers: Yes, LineageOS is heavily based on Android, which is again heavily based on Linux. Still, a slick LineageOS doesn't even need GApps, which is a huge difference to the e.g. stock Samsung/Asus/... crapware Android.)

← PreviousPage 2 of 34Next →