Hacker News: Promarged

New comment by Promarged in "Show HN: Extension to highlight and tag users on Hacker News"

Promarged — Wed, 08 Aug 2018 20:04:24 +0000

http://hnblogs.thume.net/feed.xml returns 500 for me :(

New comment by Promarged in "Slack Is Buying HipChat from Atlassian"

Promarged — Fri, 27 Jul 2018 08:16:40 +0000

Sounds nice, too bad there are no screenshots so I can't see what does it look like without giving my e-mail.

Does it run on an open protocol? (Maybe HTTP or XMPP based?)

New comment by Promarged in "Address Verification and Full PGP Support"

Promarged — Wed, 25 Jul 2018 20:07:06 +0000

> It has the advantage of not relying on the Certificate Authority system

I wouldn't say it's an advantage, while CA system has many flaws at least it's monitored somehow (for example via Certificate Transparency) while putting keys in DNS would require the app to validate records (does GnuPG do that?), not to mention the queries are not encrypted (so are visible to any hop) and could be transparently replaced by your government or TLD operator. Many DNS providers do not allow adding "exotic" records.

For further info see e.g.: https://sockpuppet.org/blog/2016/10/27/14-dns-nerds-dont-con...

> and not requiring a full web stack (which some email clients and servers wouldn't want to open themselves up to).

Email clients and servers that do PGP usually have "full web stack" already to connect to keyservers.

Additionally while DANE or PKA lookups can be enabled in GnuPG only WKD is enabled by default ("auto-key-locate" is "local,wkd").

Nice nick by the way :)

New comment by Promarged in "GitLab 11.1 released with security dashboards and enhanced code search"

Promarged — Sun, 22 Jul 2018 20:24:24 +0000

Or cleaning up their work-in-progress, currently there are around 11307 issues open: https://gitlab.com/gitlab-org/gitlab-ce/issues

New comment by Promarged in "Neatly Bypassing Content Security Policy"

Promarged — Thu, 12 Jul 2018 09:58:20 +0000

Actually CSP can also block content modifications by extensions. I frequently get CSP reports from browsers using plugins that want to insert something on my site. Some time ago I also got CSP reports that indicated the AdBlocker couldn't touch the site too...

CONIKS vs. Key Transparency vs. Certificate Transparency vs. Blockchains

Promarged — Wed, 04 Jul 2018 08:05:32 +0000

Article URL: https://blog.okturtles.org/2017/02/coniks-vs-key-transparency-vs-certificate-transparency-vs-blockchains/

Comments URL: https://news.ycombinator.com/item?id=17455886

Points: 1

# Comments: 0

New comment by Promarged in "Google to developers: We take down your extension because we can"

Promarged — Wed, 04 Jul 2018 08:01:23 +0000

> I was only able to get the situation sorted because I know people who work at Google on the Chrome team.

Hehe, one thing all successfully resolved issues have in common - a friend inside of Google. Maybe that's by design... Google employees are not friends with bad guys!

Random oracle

Promarged — Mon, 02 Jul 2018 08:27:20 +0000

Article URL: https://en.wikipedia.org/wiki/Random_oracle

Comments URL: https://news.ycombinator.com/item?id=17440094

Points: 36

# Comments: 9

Zooko's triangle

Promarged — Wed, 27 Jun 2018 08:12:09 +0000

Article URL: https://en.wikipedia.org/wiki/Zooko%27s_triangle

Comments URL: https://news.ycombinator.com/item?id=17406546

Points: 1

# Comments: 0

New comment by Promarged in "Show HN: Maskmail – anonymous email address service"

Promarged — Tue, 26 Jun 2018 08:12:40 +0000

33mail probably...

New comment by Promarged in "Some clients use SRV lookups, a few (to their embarrassment) do not (2009)"

Promarged — Mon, 25 Jun 2018 07:56:29 +0000

> put my own domain-specific CA Cert in DNS directly.

Remember that this allows any of your government or people controlling the zone to transparently put the cert there too. (For potential problems see [0]).

With the CA system (that I personally also don't like) at least the certs are logged in Certificate Transparency logs so you see any potential attacks.

[0]: https://www.theguardian.com/technology/2010/oct/08/bitly-lib...

New comment by Promarged in "I discovered a browser bug"

Promarged — Thu, 21 Jun 2018 13:22:09 +0000

> Oh, I guess the vulnerability needs an extremely tenuous name and logo right? Here goes

I admire the extra touch here :)

New comment by Promarged in "Dell XPS 13 Review from a lifelong Mac user"

Promarged — Thu, 14 Jun 2018 20:46:45 +0000

> I recently sold an XPS 13, an i7 9543 model from 2015, which was the first laptop in a long time that I regretted buying.

I've got 9350 and it's also bad. Coil whine, one firmware update completely bricked it (fortunately was on warranty), "fun" with accessories (TB15 was a disaster). Would not recommend.

Actually it's only the NBD warranty that keeps me with Dell (used that and it's very convenient). Does Microsoft have something like that?

New comment by Promarged in "First atomic bet on Bitcoin Cash using new opcodes"

Promarged — Mon, 11 Jun 2018 18:26:27 +0000

This paper [0] (from 2013) linked from this article [1] was also executed on chain, see date here [2] and the actual script via API here [3].

[0]: https://eprint.iacr.org/2013/784

[1]: https://curiosity-driven.org/bitcoin-contracts

[2]: https://blockexplorer.com/tx/7ae5760af2105a5ba54a914f188686e...

[3]: https://blockexplorer.com/api/tx/7ae5760af2105a5ba54a914f188...

New comment by Promarged in "Inventor says Google is patenting work he put in the public domain"

Promarged — Sun, 10 Jun 2018 19:51:09 +0000

It reminds me of one person here on HN describing their interaction with Google w.r.t. their startup's novel idea.

New comment by Promarged in "Please, no GitHub (2015)"

Promarged — Sat, 09 Jun 2018 19:37:50 +0000

Yep, your link is more relevant. There is also this: https://www.gnu.org/software/repo-criteria-evaluation.html

New comment by Promarged in "AMPstinction"

Promarged — Fri, 08 Jun 2018 12:25:03 +0000

I have to agree, Google gives new meaning to "open source". Open source as "we share some source but the actual meat is in closed proprietary codebase that you cannot inspect". I still remember the AOSP maintainer (Google employee) leaving because he couldn't do his work properly because of Google's politics w.r.t. Android.

Or was that the open source that RMS warned us about?

Google/git-appraise: Distributed code review system for Git repos

Promarged — Wed, 06 Jun 2018 09:30:16 +0000

Article URL: https://github.com/google/git-appraise

Comments URL: https://news.ycombinator.com/item?id=17245599

Points: 2

# Comments: 1

New comment by Promarged in "GitTorrent: A Decentralized GitHub (2015)"

Promarged — Tue, 05 Jun 2018 07:37:58 +0000

ActivityPub is indeed both simple and extensible. Perfect for issues and comments, also PRs.

For the actual code behind PR I would just setup a git daemon and reference own repo. With appropriate CORS the code can even be cloned in a browser.

New comment by Promarged in "Chezscheme 9.5 in Debian Testing"

Promarged — Tue, 05 Jun 2018 07:28:49 +0000

I see only SSL_ERROR_BAD_CERT_DOMAIN. (but on http it looks very nice)