qb45

10 ms·

61.
by qb45 9y ago
> Who cares if you can impersonate your own lightbulb? For MITM - you think you are connecting to your device, actually it's my proxy (DNS spoof, ARP spoof, TCP hijack, ...), you still get the green bar in your browser saying "
62.
by qb45 9y ago
I was talking about a different scenario: I buy the same kind of light bulb you own, extract its private key and use it to either: 1. impersonate your light bulb, because they both have the same key 2. impersonate my light bulb, because you
63.
by qb45 9y ago
> it would have had different protocols by now than just HTTP with a poor mans JSON API. Sure, but now you can't control the gadget from the browser and the vendor needs to write an application or something for whatever shitty OS yo
64.
by qb45 9y ago
> Just like on any website. Just because something isn't 100% unbreakable, doesn't mean it's a bad idea (you do lock your doors, don't you?) Don't you think it's a completely different thing to extract keys
65.
by qb45 9y ago
> > it's not possible for Philips to add HTTPS support to the hue bridge > I don't see why not. That's not a constructive argument. I don't see how they could make it work? Even if they somehow solve the probl
66.
by qb45 9y ago
I'm under impression that USB 3.1 DMA is a semi-fake news viral meme. https://news.ycombinator.com/item?id=14669377 > Is that running on the chipset or the CPU? USB 3.x controllers are more complex than predecessors
67.
by qb45 9y ago
> Except people can be generally shitty to you for most of your life regardless of your race or gender or any other label There is even more to it: people can be just randomly shitty to you and use your gender to carry out the shittiness
68.
by qb45 9y ago
What makes you think that x86 MacBooks or Chromebooks could work without ME? Also, according to libreboot FAQ, even Google was unable to get source for Intel firmware blobs. https://libreboot.org/faq.html#intel-is-uncooperat
69.
by qb45 9y ago
> My method of testing is rather simple - for 64G card generate a file of 63864569856 bytes of random data, dd it onto a card dd result off the card, fingerprint both. If they match the card is probably good. One optimization: dd bs=
70.
by qb45 9y ago
In fact, I'm quite surprised that it worked at all without direct. Even if sync writes the cached data to disk, it isn't exactly guaranteed that the following read will read them back instead of just returning a copy from the cach
71.
by qb45 9y ago
> Gentoo still uses sysvinit by default > OpenRC is default > we have to ignore the (unixy) distinction between OpenRC and sysvinit Nice try :)
72.
by qb45 9y ago
You must be new to this planet. It surely is. Caring about language (caring about anything, really) is an honest signal of status, whether you like it or not. Inevitably, some people will try to slave-moralize it away. If some social/e
73.
by qb45 9y ago
OpenRC is a collection of init scripts, not the PID 1 /sbin/init binary AFAIK.
74.
by qb45 9y ago
> for some of us it's articles like this on HN which give an opportunity to talk about systemd without being off topic. I would argue it is off topic because it's barely relevant to the submitted link. Just post "Tell HN:
75.
by qb45 9y ago
Dunno, when you make egregious errors like that we can't help understanding not only what you meant but also some things you likely didn't mean.
76.
by qb45 9y ago
it's
77.
by qb45 9y ago
Just wanted to say that the issue is about automatically copying rlimits from the init processes to all processes executing setuid binaries - apparently Linus thinks that init could possibly apply some rlimits to itself for its own purposes
78.
by qb45 9y ago
Somebody said Chrome takes 30 minutes to build on one workstation and I don't seriously think you would build Windows 10 that fast.
79.
by qb45 9y ago
That's at least excusable, unlike GUI freeze caused by termination of a number of processes which don't even use the GUI.
80.
by qb45 9y ago
> I'll probably get downvoted for this. Obliged :) No, seriously, why are people doing that?
81.
by qb45 9y ago
> "Holds" rather than "has", and importantly that system-wide lock must be held by things like SendMessageW (which sends a message and waits for its processing before returning) which is pretty critical for UI updates
82.
by qb45 9y ago
At the same time, don't be too harsh on yourself - like you aren't condemned to a lifetime of a helpless victim, men aren't exactly condemned to be brainless animals following their dick everywhere. At least sometimes; I ta
83.
by qb45 9y ago
Mz never questioned that no means no, only that events before Cheryl finally said "no" could have played out differently if she were faster to react to his pretty obvious sexual moves. And that it is unclear why he believed that
84.
by qb45 9y ago
Seriously, it doesn't look like either USA or Russia are enthusiastic to sign that kind of deal in the current climate and if they don't then who even cares? Putin on nukes, 2016: https://www.youtube.com/watch?v=kq
85.
by qb45 9y ago
Not only that, they are basically turning this whole mental health thing into a farce.
86.
by qb45 9y ago
> CosmosDB Indeed, given projects like Google Spanner the stuff she wrote about CosmosDB doesn't really sound that jaw dropping. Devil is in the details, I suppose, but still no reason to make it sound as if global replication and h
87.
by qb45 9y ago
For the record, I would be willing to make bets that this sort of high horse white knight moralizing tone as the OP presented will fall on deaf ears where it matters most but whatever.
88.
by qb45 9y ago
It is already illegal, but now you can be charged with more offenses than before. Also, the penalty may possibly be higher than for trespassing (didn't check if it's true). It seems to be a common thing in the US. In similar way,
89.
by qb45 9y ago
> Perhaps it is an outgrowth of the fact that people are basically institutionalized from ages 13-22. I would also add that this institutionalization largely deprives youth of contact with adult role models, forcing them to figure out ma
90.
by qb45 9y ago
There is a popular conspiracy theory than nobody actually understands it and avantgarde artists are in fact con artists. Not that I care enough to be offended, though. And hell, if this is that "meta" meaning in their art, I mus

More ›