Jenda_

14 ms·

31.
by Jenda_ 3y ago
It's not about "other peoples computers" (there is no evidence of the system itself to be backdoored). If you are running on your own hardware in your own house, you still need an ISP that can do exactly this time of MITM.
32.
by Jenda_ 3y ago
The provider having access to system memory can copy the private key and use your original key+cert for MITM, unless you are using some fancy HSM.
33.
by Jenda_ 3y ago
I think the observed TTL 64 means the interceptor is on the same segment? (of course unless they have set it to e.g. 66 at the interceptor that is 2 hops away, but I guess if they were to mangle TTL, they would set it to the original value
34.
by Jenda_ 3y ago
> Ultimately however crt.sh is hosted somewhere So is it possible to run my own copy of crt.sh? How demanding it is (e.g. data size)?
35.
by Jenda_ 3y ago
> then Huawei can issue a Let's Encrypt certificate for Google, right? Google has CAA records set ( https://www.entrust.com/resources/certificate-solutions/tool... ) and I guess CAs will have denylists of &q
36.
by Jenda_ 3y ago
> Telegram offers marginally better security than XMPP over TLS. I think you should compare apples to apples, that is, end-to-end encrypted XMPP using OTR/OMEMO/PGP. However, I agree that many XMPP clients were UX disaster when
37.
by Jenda_ 3y ago
The thread above ( https://news.ycombinator.com/item?id=37958831 ) elaborates on how to force DNS validation and/or how to tie your private key with Let's Encrypt via DNS.
38.
by Jenda_ 3y ago
I personally like this (at least when displaying the calendar) -- on Sunday, I can have a look what is happening "this week" :)
39.
by Jenda_ 3y ago
Same here, > However, I still want units in meters, Celsius, dates written sensibly, time in 24h format etc. but also sensible sorting. I'm currently mixing en_DK, en_IE, en_US, C and cs_CZ (my native language) locales for various L
40.
by Jenda_ 3y ago
There is almost none here (around Prague, .cz) too. I ride on the roads. Yeah, unfortunately, for me, even after some training, it's still hard for me to average over 22 km/h (entire travel including stops; the moving average is a
41.
by Jenda_ 3y ago
> Posts like Jenda's are depressingly unimaginative. I wish HNers, and people in general, would learn some biology, and use some critical thinking to imagine that when something doesn't fit their very basic mental model, that&#
42.
by Jenda_ 3y ago
I have a slightly related problem: infinite scrolling as the only way to access the archive. Like, imagine I want to know what some blog/media site posted during some important historical event, and there is no pagination or calendar t
43.
by Jenda_ 3y ago
No: 1) unfortunately ambiguous with also widely used MM/DD/YYYY, 2) cannot be naturally sorted, the order does not go from the most significant to the least significant, especially when appended with HH:MM:SS.
44.
by Jenda_ 3y ago
Yeah, 25km/h requires less than 150W [1], so it's 600Wh total, the efficiency of human metabolism is about 20% [2], so it's 3kWh of total energy input = 10.8MJ = 2600 kcal. (I have been using generous estimates, so this shoul
45.
by Jenda_ 3y ago
I also did a 65km and then 135km ride with similar "training" (2x7km four times a week to school), but it was way slower than 25km/h. They took 4.5 and 10 hours, respectively. I think riding 100km without training is possible
46.
by Jenda_ 3y ago
I don't understand where does the excess basal energy expenditure go. Do persons like the OP when <25 y.o. produce significantly more heat (e.g. wearing only t-shirt and shorts even in winter, and "dying" in the summer)? D
47.
by Jenda_ 3y ago
Additionally, I would expect indexing to extract text contents from non-plain-text formats. (such as Recoll does)
48.
by Jenda_ 3y ago
I also rarely click the scrollbar (except when "jumping to approximate absolute position" in a long document), however, I always look at it to get the current position/document length. Therefore, my usual problem is terrible
49.
by Jenda_ 3y ago
> struggling to find the right spot on a window corner/border to grab in order to resize it I suggest mapping <modifier>+click (e.g. Meta/Win key + left or right click) to trigger resize/move anywhere in the window.
50.
by Jenda_ 3y ago
Locate is for file names, not file contents.
51.
by Jenda_ 3y ago
Fortunately, many airports have taps with drinking water available. I don't understand why not all (e.g. no drinking tap & warm water only is available on the toilets), it feels like a conspiracy by the 5-Euros-water sellers.
52.
by Jenda_ 3y ago
Or the other way around: imagine you are the "owl" type (I'm not sure it is called this way in English; let's say https://en.wikipedia.org/wiki/Delayed_sleep_phase_disorder ) and you are forced to li
53.
by Jenda_ 3y ago
But the article is about doing a LD_PRELOAD to front run system calls in order to support IPv4.
54.
by Jenda_ 3y ago
> If all of the 2 billion computers in the world produced a new uuidv4 every millisecond, we still wouldn't expect a collision for the next 5 quintillion years. This would generate 2^127.8 UUIDs. First, no, the collision would be ex
55.
by Jenda_ 3y ago
> For example with a esp32-s3 and a custom pcb at one of the low priced fab houses in China. Sure you have to do it yourself. Interestingly, even after years of professional hardware engineering, I still feel some hesitation when interfa
56.
by Jenda_ 3y ago
> I think it's deeper than that; I think the problem is mobile devices. I think it's deeper than that; I think the problem is app ecosystem. More and more apps that you need to use (e.g. the only way to perform 2FA with your ba
57.
by Jenda_ 3y ago
- wide HW support. 10 years ago it was not guaranteed that suspend will work on a random machine, 15 years ago we were struggling with ndiswrapper to get wifi working. - professional domain-specific software now available, both free (such a
58.
by Jenda_ 3y ago
I have HP ProBook 430 G6 and I have not noticed any problems (I don't know how Windows run on this, though - never tried). I have never tested the fingerprint reader, all other features work.
59.
by Jenda_ 3y ago
There was another hole if the target command was executed using /bin/bash in a certain way: https://en.wikipedia.org/wiki/Shellshock_(software_bug) It's probably not the case when the command is the user
60.
by Jenda_ 3y ago
And more importantly: with "normal" computers and OSes, you can just upgrade the operating system to the next version. So even though a computer with Debian from 2008 did not get "15 years of updates", it still runs a cu

More ›