News for hackers. Stuff that matters.

rjacksonm1

Re:VanMoof encryption key exporter on Friday July 14, 2023 @05:40AM (#36721634)
The keys in this case are used for bluetooth comms locally between somebody's device and their bike.

These are ordinarily used by the VanMoof app to unlock the bike and control the bike's settings.

There are already some third-party apps (Moofer, Mooovy) to allow alternate access to those settings – including some hidden ones.

With a few tweaks those third-party apps should be able to support direct key upload, rather than having to log in and proxy authentication through to VanMoof's API.

Re:A Message to Our Users on Thursday April 02, 2020 @11:39AM (#22760191)
>With Zoom's LinkedIn Sales Navigator integration, you’ll build connections and instantly gain insights about your meeting participants.

Sounds pretty creepy. I assume participants have to opt into this?

Re:Monoliths Are the Future on Thursday January 30, 2020 @03:50PM (#22195416)
This reminds me of something I find myself constantly explaining to colleagues again and again: You can scale a monolith in its entirety to handle elevated traffic in one of its "subsystems"; having code paths that aren't receiving traffic doesn't cost anything (at least in the architecture of the systems I look after).

I don't see the value in separating a monolith to allow independent scaling, unless there are wildly different performance demands across its components which makes reliably autoscaling difficult.

Pardon my ignorance, but isn't that just a "service"?

The "micro" part just seems to cause confusion in every conversation I have about service based architectures.

Re:Show HN: Ghuser.io – Complete GitHub profiles on Monday September 10, 2018 @11:37AM (#17952543)
Looks like they're hitting a GitHub rate limit, rather than bottlenecking on CPU.
Looks like a great tool! A lot of the organisations I've worked for have their own home-built ways of doing exactly this: Internal Wikis, paper checklists, cloning JIRA issues, Confluence templates, ...

If I were in a position to bring this into my organisation I'd be concerned about its longevity, seeing as its a completely free product.

How're the costs of this project being covered?

Re:Kanban for E-Mail on Friday July 20, 2018 @12:10PM (#17576262)
What a fantastic idea! I know many folks, especially in small business, who would get a massive productivity boost from something like this.

I'd recommend explaining how the service integrates with people's emails, before asking them to hand over any details. That's the only thing that would stop me from giving it a go.

It is the best way to do it for the average user.

Modern password management services are incredibly secure, with client-side encryption of your secrets, among other protective mechanisms (to guard against keyloggers, stolen computers, ...)

There is still a risk, because you're trusting third-party software (which in some cases is closed-source – including 1Password), but for most people that is a much lower risk profile than if they were managing passwords themselves.

For specifics on 1password's security, check out https://1password.com/security/

I've found DropBox's zxcvbn system to be ideal. Instead of requiring passwords to fit a set of arcane rules, it requires passwords to meet a threshold of entropy.

Is there a reason this isn't more widespread?

https://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-pass...

Ask HN: How do you setup machines for local development?

We're using Boxen at my company to provision our dev environments, but having huge problems maintaining it: Externalities beyond our control (homebrew, dependencies, system updates) are breaking the provisioning process, and we're only finding out & trying to fix them when onboarding a new employee. Boxen's maintenance cost is too high to continue to be a viable option.We've been exploring...

( Read More... | 1 comment | 2 points | on HN )