News for hackers. Stuff that matters.

kryten

Yes: no software, no ports, all media is tangible, no storage, hard to fingerprint (compared to say inkjets).

However there is one problem with typewriters people generally forget: you can extract everything that has been typed from used typewriter ribbons...

Re:PC World, 1983-2013 on Saturday July 13, 2013 @11:32AM (#6037737)
As per all magazines, it declined to 10% content and 90% advertising that you had to pay a large chunk of cash for. Good riddance to them all.
Re:_NSAKEY (1999) on Saturday July 13, 2013 @05:07AM (#6037086)
there are no facts in your comment. Please cite your sources. Not only that, my hypothesis hasn't been debunked or disproved.
Re:Switching to DuckDuckGo and Firefox on Friday July 12, 2013 @05:52PM (#6035452)
My point is that it will show up in a diff of the binaries.
Re:Switching to DuckDuckGo and Firefox on Friday July 12, 2013 @05:36PM (#6035355)
Actually that's a really bad comparison.

The binary size may be similar but that doesn't mean the content is. Consider the two cases below to back up my assertion:

   000000WE_COME_IN_PEACE000000000000000000
   000000WE_COME_IN_PEACE_SHOOT_TO_KILL0000
Re:_NSAKEY (1999) on Friday July 12, 2013 @04:51PM (#6035102)
You underestimate the problem.

Look at just chrome for example, which I've posted my rationale for here:

https://news.ycombinator.com/item?id=6035091

Not a chance in hell.

Re:Switching to DuckDuckGo and Firefox on Friday July 12, 2013 @04:49PM (#6035091)
That assumption relies on two uncertainties:

1. The probability of discovering something in all that binary code, especially with the intricate and non-orthogonal nature of x86/x64 assembly and odd compiler optimisations. This isn't some 80's game.

A comparison:

    28500000 = Chrome binary size [1]
   750000000 = Human Genome size (converted to bytes - 1BP = 2bits so 4BP per byte) [2]
So we're only 26x more complicated than Chrome and we have absolutely no fucking idea what is going on with us most of the time.

2. The probability of a vulnerability being published to Google versus selling it on the private market.

[1] http://neugierig.org/software/chromium/bloat/

[2] http://www.biostars.org/p/5514/

Re:Switching to DuckDuckGo and Firefox on Friday July 12, 2013 @02:30PM (#6034231)
Well you hope it is.

All sorts can happen between source and binary.

Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @12:20PM (#6033439)
Yes but some things rarely work perfectly.

It scales fine. In fact it scaled for hundreds of years before electronic calendars appeared. They mobilized two world wars with pens, paper and typewriters.

Synchronisation is not an issue if you have one single source of truth.

Re:DARPA and Boston Dynamics unveil a new humanoid robot on Friday July 12, 2013 @11:54AM (#6033231)
Congratulations on making me snort tea up my nose :)
Re:_NSAKEY (1999) on Friday July 12, 2013 @11:50AM (#6033216)
And before someone else says this is bollocks, I've worked at a company with shared source access to Windows and there are still bits you can't get at like the CSP implementations so there may still be stuff like that in there.

No open review for any crypto functions in Windows is possible.

That's basically a fucking massive red flag.

Well considering targeted advertising is fundamentally based on surveillance, it's pretty much the same thing.
Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @05:50AM (#6031792)
I can't really be bothered with all that after basically writing that entire solution for a private company. Another metalanguage to learn...

Plus I have to have a network connection and log into a UNIX box for it which I can't do whilst I'm on the phone as it's stuck to my head at the time.

Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @04:02AM (#6031465)
This is where Microsoft was 6 years ago. Before that, IBM/Lotus.

Times will change again.

Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @04:00AM (#6031463)
Evil is boolean if you ask me.

Corporations don't deserve a second chance either.

Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @03:59AM (#6031457)
You don't always hear reminders and invitations don't always work properly.

I'd rather have neither than any that aren't trustworthy.

Re:Don't be evil: Moving everything off of Google on Friday July 12, 2013 @03:58AM (#6031452)
I spent several years using outlook, apple ical and windows live calendar. I then ended up having to write a backend for icalendar protocol and saw what a shit crock everything is. It's a miracle any of it works.

Last year I moved back to a paper diary and a mechanical pencil. It is considerably more flexible, readable and editable. I hit several brick walls with computer based calendars particularly with having to add complex events like "every third Friday but not the 25th because I'm on holiday then".

Free form is sometimes better than structure.

Its like going from a relational database to a document store.

Re:LINQ Ruined My Favorite Interview Question on Thursday July 11, 2013 @10:50AM (#6026349)
LINQ is not a magic bullet. It has some serious pitfalls.

I'd like to aee people using the right tools for the job.

Re:Shuttle - A simple SSH shortcut menu for OS X on Thursday July 11, 2013 @10:44AM (#6026309)
True. I only connect to two hosts and ssh on from there so non issue for me.
Re:LINQ Ruined My Favorite Interview Question on Thursday July 11, 2013 @10:40AM (#6026280)
It's also really easy to shoot yourself with unless you understand everything and think each problem through.

Four killer issues I've seen so far:

We had a major production performance issue which turned out to be a stray ToList which was causing a massive memory ballooning. Didn't get noticed in test as the test cases passed but it hit prod and 2000 users bashed it and tried to allocate 20Mb each causing our cluster to shit a brick.

Null reference exceptions! There are so many dereferencing operations in an average LINQ expression that you really have no idea which one is blowing if it goes pop in production in release config.

People using .Single(...) and getting more or less than one result back. So frustrating.

If you push an IEnumerable<T> over an interface boundary the performance and memory semantics are not preserved and you end up with a leaky abstraction. These are shits to resolve. Example: queries executing inside the view which is outside the transaction scope.

We've had to ban it in some circumstances.

Re:Shuttle - A simple SSH shortcut menu for OS X on Thursday July 11, 2013 @10:30AM (#6026206)
Or even better, right click putty on your taskbar in windows 7 and all your profiles are listed.
To be honest I think exposure was the software as you could reliably underexpose it and get the result you wanted.

Colours, probably dynamic range as you state. Looking at the curves for a pure white photo suggests range of blue was a little tight which is what made it look like out of date Kodak ektachrome on a good day. That may be software again bit I'm suspicious as the sensor on my D3100 doesn't exhibit that problem. Perhaps its better quality control.

Re:How to permanently delete a Facebook account on Thursday July 11, 2013 @10:00AM (#6026023)
Yes. They are cycled out after a week. Our data is useless after then as most of it is real time. Audit logs are kept offline in gzipped daily text files per client and these are handed over to the company and deleted.
I know the details and understand pixel oversampling etc. In the real world they produce acceptable photos for the type of device but it is nothing special and definitely over-marketed.

I used an 808 for a week when they came out. Wishy washy colours, constant over exposure and distortion due to the pissy little lens. Not what they were promoting.

Whilst I compare this to a DSLR, a cheaper compact can do a better job of being a camera.

Personally I drag a DSLR around everywhere with me but that's because I started doing that sort of stuff before we had mobile phones and have developed an appreciation of quality prints.

megapixels are pretty meaningless.

A decent bottom end DSLR (Nikon D3100 for example) will run rings around it simply because of the sensor size and optics.

Re:Ask HN: Can we trust our CPUs? on Thursday July 11, 2013 @07:03AM (#6025370)
Any system of significant complexity be it hardware or software cannot be trusted unless it is 100% open source both from the hardware level to the software level and all systems that are used to manufacture it are open source as well and the whole process has open oversight.

Even if you tape out a CPU and ship it to the fab, they could still add stuff before it is packaged.

In conclusion, no you can't trust anything we use today. Even Stallman's open-everything laptop is open to compromise.

Pen, paper, box of dice, OTP or accept these facts.

Re:HP admits to backdoors in storage products on Thursday July 11, 2013 @06:29AM (#6025286)
HP are lying. The article title is correct. You can use many well known kernel vulnerabilities to get root on the box after logging in as hpsupport. At that point you can do block reads off anything you want.
Re:HP admits to backdoors in storage products on Thursday July 11, 2013 @06:15AM (#6025257)
1. SSH to the box

2. Username: hpsupport

3. Password (from SHA1 lookup): badg3r5

Yes that shit.

We have some of this kit in and I've tested it and it works absolutely spot on. Fortunately it's all firewalled off but it's not the sort of crap you want on your doorstep.

Nothing to do with the NSA this - just a crappy decision somewhere which is designed to make HP support's life easier. As someone else said: this bug is as old as time.

Re:How to permanently delete a Facebook account on Thursday July 11, 2013 @05:51AM (#6025214)
It's perfectly possible and reasonable to delete all of your data.

It's just hard.

We have to do this with our clients if they shift off our platform and believe me, it's not much fun deleting 20-100Gb datasets from a shared database with over 2000 tables in it on production kit.

But we do it, because we are honest.

Facebook are dishonest. Simple as.

Older ยป