Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
kop316
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
65 ms
·
751.
▲
by
kop316
6y ago
> Niche stuff where you had one or two vendors in the whole arena Seeing that tells me it is not just some sort of public website, and not something you just want any random person to access. Think like PLCs controlling public infrastruc
752.
▲
by
kop316
6y ago
> has not made my life easier nor brought any benefit to my users So I'm curious, is this appliance on a private network or something? That's they only way I see that it doesn't bring any benefit. If it is going out onto
753.
▲
by
kop316
6y ago
That could help, but if someone is MITMing you, DNS is all in the clear too. I do not enough to solve that problem really.
754.
▲
by
kop316
6y ago
Yes they can. They simply decrypt, and reencrypt with their own self signed cert. If you have no way to verify the self-signed cert, you would never know.
755.
▲
by
kop316
6y ago
How do you verify the cert then? If you can't verify the cert, you have no way to know it is not being man in the middled.
756.
▲
by
kop316
6y ago
> self-signed was never trusted The whole problem of a self-signed cert is unless you have a priori knowledge of the cert somehow, it then is trivial to MITM a self-signed cert. That is why it was never trusted. That is the point of a si
757.
▲
by
kop316
6y ago
Plainly put, none of the OSes do the basic features of a phone. Ubuntu Ports is the closest to being daily driver ready, and it cannot do MMS[0] (so group texts and picture texts are out). I cannot comment on the state of other OSes. Even w
758.
▲
by
kop316
6y ago
I'm glad to hear it! If those are mainlined I would be a lot more excited about this. I imagine it uses u-boot already, that doesn't seem as hard to port to a system and upstream (I got vanilla u-boot working on a Novena, but it d
759.
▲
by
kop316
6y ago
Sure! Look at my github: https://github.com/chris4795 I tried to document what I did as much as possible for others to look at it. I recall I was able to update it to Stretch (with linux 4.4, not linux 4.9) and I was able t
760.
▲
by
kop316
6y ago
My main concern with this DIY laptop is if they are mainlining everything for Linux and U-boot. It looks to be entirely open source (due to the use of the NXP/Freescale i.MX8MQ and the work going into that). This unfortunately happened
761.
▲
by
kop316
6y ago
Are you mainlining everything so a vanilla distro can install on this?
762.
▲
by
kop316
6y ago
If you're doing it to an alternative port, why are you reverse proxying in the first place? Another option is to reverse proxy to a cloud provider that can provide a static IP.
763.
▲
by
kop316
6y ago
I have spectrum, and though it is "dynamic", I have never had it change. A couple of thoughts though for Dynamic IP: - I have my DNS on cloudflare, and I make a script that runs ever minute to checkif my ip changed, and if it did,
764.
▲
by
kop316
7y ago
You are describing exactly why I long stopped watching college sports. The ranking system for teams is opaque, and I think it is intentionally so to keep the "top teams" top, and all others down. There are plenty of instances wher
765.
▲
by
kop316
7y ago
There is no way to arbietrarily visit someone else's island, you have to be invited somehow. If you don't have friends with a Switch, you can visit someone's islands with a "Dodo code" (i.e. a unique-ID for that isl
766.
▲
by
kop316
7y ago
There was a hardware boot ROM exploit a while ago that enabled arbitrary code execution, and I am presuming that is allowing the ROM dump.
767.
▲
by
kop316
7y ago
And my argument is if I know the video encoding and compression sequence, I wouldn't depend on AES-ECB. I know the patterns that show up. If I am encrypting something, I only want to depend on the strength of the encryption. I don'
768.
▲
by
kop316
7y ago
Shannon's source coding theorn says that the entropy in a compressed information is at most the entropy of the uncompressed information. If you add entropy to a compressed algorithm, you are by definition adding noise to the SNR of a s
769.
▲
by
kop316
7y ago
> ECB reveals repeating plaintext blocks. That by definition is saying any pattern in plaintext shows up in cipher text
770.
▲
by
kop316
7y ago
....so your argument us to hope an adversary only sees part of your video and not all of it?
771.
▲
by
kop316
7y ago
...what? I think you completely missed the point of th OODA loop.
772.
▲
by
kop316
7y ago
Compression does not introdoce entropy to a stream. Please refer to Shannon's source coding theorm. If anything, it reduces entropy.
773.
▲
by
kop316
7y ago
The point is that any pattern in the plaintxt data shows up in encrypted data if you use AES-ECB. Compression does not introdoce entropy to a stream. So assuming that saying the stream is compressed and calling it good is a very bad idea. P
774.
▲
by
kop316
7y ago
> Using AES in ECB mode is clearly a bad choice, but honestly it's not that horrible for high entropy data like compressed audio/video. I'm sure someone could prove me wrong one day, but it seems hard to extract any useful
775.
▲
by
kop316
7y ago
> Yes exactly so acting isn't axiomatically the thing to do. Although making a great folly seems like a great way to get lionized in military history. :D Usually when battles are studied in military history, they try to look at it b
776.
▲
by
kop316
7y ago
>Isn't the point of getting inside the opponents OODA loop to force them to make decisions faster than they are able to sensibly and ergo force wrong decisions. If you get inside your own loop by hurrying your decision making forci
777.
▲
by
kop316
7y ago
The OODA loop was invented by Col. John Boyd during the Vietnam War and is being adapted here for the business environment. The point is for some hard decisions, you will have to act on imperfect or incomplete information. A good leader wil
778.
▲
by
kop316
7y ago
You do know that Square Enix is not Nintendo right?
779.
▲
by
kop316
7y ago
My apoligies, it looks like it was posted by a temp account, and I wrongly assumed it was you based on the reply.
780.
▲
by
kop316
7y ago
Due to the nature of this forum, many people won't understand that. I clicked on it expecting a serious question and a serious discussion. Frankly, many users in this forum don't come here for "snarky, editorialized" tit
More ›