Hacker News: asjfkdlf

New comment by asjfkdlf in "OpenID Coming to SSH"

asjfkdlf — Tue, 25 Mar 2025 14:07:42 +0000

It states that it doesn’t require major changes because it all happens under the SSH protocol. A new program is needed on the client to sign in and you can already run a custom program on the server to authorize the key.

New comment by asjfkdlf in "Ask HN: What are the best programmable holiday lights?"

asjfkdlf — Tue, 10 Dec 2024 02:12:00 +0000

I bought these and they are great. They strike a balance of programmable, but have a kit. Relatively simple for a novice

New comment by asjfkdlf in "Show HN: Documind – Open-source AI tool to turn documents into structured data"

asjfkdlf — Mon, 18 Nov 2024 15:41:31 +0000

I am looking for a similar service that turns any document (PNG, PDf, DocX) into JSON (preserving the field relationships). I tried with ChatGPT, but hallucinations are common. Does anything exist?

New comment by asjfkdlf in "How Discord stores trillions of messages (2023)"

asjfkdlf — Sun, 29 Sep 2024 14:48:20 +0000

Aren’t they using a NoSQL store? They migrated from Casandra to Scylla DB

New comment by asjfkdlf in "MTA Open Data Challenge"

asjfkdlf — Fri, 27 Sep 2024 15:07:48 +0000

The prize is very underwhelming. If they really want people to spend effort on it, they need to make the prize worth it.

New comment by asjfkdlf in "AES-Gem (AES with Galois Extended Mode)"

asjfkdlf — Sun, 14 Jul 2024 12:01:58 +0000

How does this compare to other GCM alternatives such as AES-SIV and AES GCM-SIV?

New comment by asjfkdlf in "Sam Bankman-Fried sentenced to 25 years in prison"

asjfkdlf — Fri, 29 Mar 2024 13:51:51 +0000

To be a deterrent, it just needs to curb some percentage of behavior. Not stop it completely. Do you think people are murdering at the same rate as if there was no punishment? It could be, but I would bet the numbers would go up significantly.

New comment by asjfkdlf in "We Found 28,000 Apps Sending TikTok Data. Banning the App Won't Help"

asjfkdlf — Thu, 02 Mar 2023 20:19:47 +0000

There are some really good findings about TikTok APK used in many apps. In addition I agree that better privacy laws that would affect all companies, even US ones, would be the ideal.

The statement that this ban won't help is completely wrong though. Passing universal privacy laws will take years, if ever. Banning TikTok has bipartisan appeal. Don't let perfect be the enemy of good. Tiktok can still influence people through the feed and collect even more data through the app itself.

Obviously we should work towards a privacy law around this, but this is a reasonable first step to address the most dangerous actor.

Fidelity asks for login password via telephone keypad

asjfkdlf — Fri, 13 Jan 2023 01:28:03 +0000

When I called Fidelity they asked me to type my login password on the phone keypad so they can verify my identity.

At first I thought it was a little weird, but then I began to wonder how that would work. Each number of the keypad can have up to 3 characters, so how do they verify my password? Are they keeping passwords in plain text? Or are they converting passwords to numbers and store that in addition to hashed password? Anyone have any insight?

Comments URL: https://news.ycombinator.com/item?id=34362823

Points: 3

# Comments: 1

New comment by asjfkdlf in "NY Sabotages Right to Repair Bill [video]"

asjfkdlf — Tue, 03 Jan 2023 16:31:29 +0000

I envy your experiences. I personally have had the opposite experience. It’s important to remember that your personal experience may not be the same as others. As this movement is very popular in the general public, my guess is many others have had bad experiences with trying to repair their device (i.e. $500+ for a simple repair from the manufacturer).

I personally don’t care for Louis and he may be a jerk as you suggested, but I try to look at ideas instead of people. Some really bad people have had good ideas. If you follow ideas instead of people, it’s not an issue if you agree with someone on one topic and disagree with almost everything else they have said.

New comment by asjfkdlf in "AirTag catches United lying about location of lost suitcase"

asjfkdlf — Tue, 03 Jan 2023 00:50:21 +0000

Don’t attribute to malice what can be equally be explained by stupidity

NY Sabotages Right to Repair Bill [video]

asjfkdlf — Thu, 29 Dec 2022 07:59:13 +0000

Article URL: https://www.youtube.com/watch?v=7xGBB-717AI

Comments URL: https://news.ycombinator.com/item?id=34170525

Points: 427

# Comments: 331

New comment by asjfkdlf in "HackerRank (YC S11) DMCA'ed the SymPy Docs [fixed]"

asjfkdlf — Wed, 20 Apr 2022 01:23:06 +0000

This is a horrible abuse of the DMCA. HackerRank does not own the copyright to independent solutions.

New comment by asjfkdlf in "Exploring the Security Implications of GraphQL"

asjfkdlf — Thu, 13 Jan 2022 15:28:12 +0000

There is some useful information here, but saying docs are more secure than introspection makes no sense. The person can learn about your file upload endpoint through docs. Security through obscurity is not a reasonable security strategy.

New comment by asjfkdlf in "Postgres, Kafka, and a mysterious 100 GB"

asjfkdlf — Tue, 07 Dec 2021 22:53:58 +0000

Had this exact thing happen in production when we turned off an audit DB replication slot. We got lucky and caught it before our entire app went down. It’s one of the many foot-guns we have found with Postgres.

New comment by asjfkdlf in "Designing a service for password-less temporary access to resources"

asjfkdlf — Sat, 28 Dec 2019 19:13:31 +0000

I have implemented something similar, but used 12 characters. 6 is way too few for a secure URL

New comment by asjfkdlf in "Show HN: Microfronts – Front-end solution for running multiple frameworks as one"

asjfkdlf — Sun, 08 Dec 2019 15:25:49 +0000

It looks like the code is running in iframes, so yes it would do hard navigation, but it would not change the domain the user sees.

New comment by asjfkdlf in "Year 2038 problem"

asjfkdlf — Tue, 13 Nov 2018 02:32:09 +0000

"There is no universal solution for the Year 2038 problem"

New comment by asjfkdlf in "LastPass autofill exploit"

asjfkdlf — Wed, 27 Jul 2016 13:01:08 +0000

No, that is not possible. Extensions in Chrome run in a different execution context than the website. The website's document.creatElement is different from the extension's.

If the website could override extension functions, attacks would already be possible by overriding Regex functions.

New comment by asjfkdlf in "Mailhero – a more permanent temporary email"

asjfkdlf — Fri, 27 May 2016 12:10:14 +0000

You can do it with google apps too, but it's a little more difficult. Login into an account and setup an alias.

There is a limit to the number of aliases, but you can just create more accounts with aliases that forward to your email.