j_s

46 ms·

1. 421.▲
   by j_s 9y ago

   I don't understand what option one has to do with any of this, if you can switch keys there's nothing any amount of extra hardware can do. In that case, just use the key you switched to. It is true that hardware tokens without an
2. 422.▲
   by j_s 9y ago

   But they don't have the private key, that's the whole point of the hardware device! They can't MITM the encrypted data without it. plaintext <-> crypto <-> blob <-> *compromised server/anything but
3. 423.▲
   by j_s 9y ago

   They only have to be accessed using a secure computer once to get the public keys for verification, right? Isn't that the whole point of public key crypto? This can be done using some ultra-slow homebrew whatever-level-you're-will
4. 424.▲
   by j_s 9y ago

   > Is 2048 RSA broken? Today(-ish)? HN's anointed crypto expert says no. https://news.ycombinator.com/item?id=14317331 >tptacek(2017May): The point of modern RSA is that we use a modulus that can't be facto
5. 425.▲
   by j_s 9y ago

   > How useful are such measures when Intel has backdoored each and everyone of their CPUs with its "Intel Management Engine" [0] (and AMD has a similar mechanism)? If you trust this YubiHSM but not Intel CPUs, then it is very us
6. 426.▲
   by j_s 9y ago

   Are there any writeups on MITM SSL (installing custom trusted root), ideally showing how to whitelist parts of YouTube?
7. 427.▲
   by j_s 9y ago

   This was not what I expected, but awesome! I was hoping for something more like this "minimum viable hypervisor" or one of the similar projects discussed here: Simplevisor: Intel x64 Windows-specific hypervisor | https:/&#x2
8. 428.▲
   Share your terminal as a web application(github.com)

   2 points by j_s 9y ago|0 comments
9. 429.▲
   by j_s 9y ago

   [edit] > people who implement models from academic articles Is anyone collecting the various HN discussions as these pop up? I would appreciate help finding them again.
10. 430.▲
    by j_s 9y ago

    Show HN: VPS Comparison – Automated tests to compare VPS by yourself | https://news.ycombinator.com/item?id=14245538 (2017May:146comments) This changes the landscape quite a bit!
11. 431.▲
    by j_s 9y ago

    FWIW, it is his Google+ account in the URL. Definitely no longer obvious. Hacker News Transparency: https://hn.0x2237.club/post/15596963
12. 432.▲
    by j_s 9y ago

    Based on progress demonstrated since June 2016, I'd say not any time soon. https://news.ycombinator.com/item?id=11996465
13. 433.▲
    by j_s 9y ago

    What are the pros/cons comparing Wireguard and ZeroTier? Wireguard was recently mentioned as supported by the Mullvad and IVPN VPN providers. https://news.ycombinator.com/item?id=15588040 ZeroTier was part of a discus
14. 434.▲
    by j_s 9y ago

    Smells like in-browser cryptocurrency mining! Maybe you should compare notes. https://news.ycombinator.com/item?id=15528247 https://news.ycombinator.com/item?id=15470244 https://news.ycombinator.
15. 435.▲
    by j_s 9y ago

    I'm assuming this is the standard technique, like the Google Analytics tracking id.
16. 436.▲
    by j_s 9y ago

    > Why is this not an acceptable solution for CSP? If tracking tools start using CSP for this, they'll be added to the filter lists, just like any other tracking script. We're not asking uBlock to block all third-party requests
17. 437.▲
    by j_s 9y ago

    It is 100% clear to me that differences of opinion will result in drawing the line on an ad blocker's default configuration in different places. Would you mind sharing how long your browser was sending CSP reports to 3rd parties before
18. 438.▲
    by j_s 9y ago

    Please upvote all comments disclosing salary range. https://news.ycombinator.com/item?id=15601810 Ctrl/Cmd+F search: 0k
19. 439.▲
    Poll: Should WhoIsHiring recommend disclosure of salary range?

    8 points by j_s 9y ago|2 comments
20. 440.▲
    by j_s 9y ago

    Yes, require disclosure of salary range and encourage downvoting when missing
21. 441.▲
    by j_s 9y ago

    Yes, require disclosure of salary range
22. 442.▲
    by j_s 9y ago

    Yes, recommend disclosure of salary range
23. 443.▲
    by j_s 9y ago

    No, but users should downvote when disclosure of salary range is missing
24. 444.▲
    by j_s 9y ago

    No, manual upvoting is enough
25. 445.▲
    by j_s 9y ago

    No
26. 446.▲
    by j_s 9y ago

    I would like to see YC take over the initial chunk of the hiring process for their companies, and publically document the heck out of how to do it best. Posts like this one demonstrate that free access to the front page of HN for job listin
27. 447.▲
    by j_s 9y ago

    > Isn't culture fit just another word for "people like me"? This is a hot-button topic; I look forward to additional contributions here. [yesterday] We only hire the best means we only hire the trendiest (2016) | https:&#
28. 448.▲
    by j_s 9y ago

    Troy very publicly carrying water for Scott Helme/Report URI looks quite a bit different in hindsight, as the number of Report URI marketers doubles to 2. · https://twitter.com/troyhunt/status/9205905902233313
29. 449.▲
    by j_s 9y ago

    Interesting point mentioned about the Tahoe-LAFS remote there: > Tahoe-LAFS does not support removing data once it is stored in the Tahoe grid
30. 450.▲
    by j_s 9y ago

    Thanks for taking the time to reply. It seems like this would be worth a write-up! Perhaps something like this can be scripted; if it becomes polished enough it could be recommended as a part of every VPN setup.