Hacker News: dylz

New comment by dylz in "Show HN: Privera – The Analytics' Anonymization Proxy"

dylz — Tue, 23 Feb 2021 17:18:04 +0000

What I meant was, you are cloud-hosting (assuming not CE) the part where the non-anonymised PII is sent to [as opposed to sanitised coming out of] and processing it; and in addition the only provider supported is one subject to https://en.wikipedia.org/wiki/CLOUD_Act

New comment by dylz in "Show HN: Privera – The Analytics' Anonymization Proxy"

dylz — Tue, 23 Feb 2021 17:11:23 +0000

I'd be interested when that happens. Not a fan of CF/lambda-only, prefer cloud agnostic deployment possibilities.

Have you gotten any legal review re: GDPR or passing user analytic data through a proxy in a non-EU area?

New comment by dylz in "Show HN: Privera – The Analytics' Anonymization Proxy"

dylz — Tue, 23 Feb 2021 17:07:19 +0000

Is there a way I can host CE on Docker, Serverless, or similar without AWS's "infinite cost" model?

New comment by dylz in "Show HN: Try Snowplow"

dylz — Sun, 21 Feb 2021 18:34:25 +0000

Is there an easy way to deploy this to my own infrastructure, possibly via k8s or docker containers - no aws?

New comment by dylz in "Free Music for Your Videos"

dylz — Thu, 04 Feb 2021 09:55:19 +0000

> If you wish to use my music for commercial purposes (online advertisements, podcasts etc), you will need to purchase a license

This clearly makes it not CC-BY. Maybe CC BY NC?

New comment by dylz in "Tell HN: If you bid on a car on eBay the seller gets your phone number"

dylz — Sat, 02 Jan 2021 00:57:20 +0000

They should get absolutely nothing at all until after payment, what the fuck.

eBay practically permanently bans everyone involved if you dare take conversation offsite on normal items.

New comment by dylz in "Ask HN: I use a VPN and Google appear to be the only one knowing my location"

dylz — Tue, 29 Dec 2020 23:45:41 +0000

HTML5 geolocation if you ever click allow even one time can granularly identify location based on where you are. It sends nearby MAC and correlates this to wardriving-equivalent scans. You do not need to be connected to wifi.

New comment by dylz in "Ask HN: How do you handle suspicious logins?"

dylz — Tue, 29 Dec 2020 00:53:38 +0000

My non-invasive way for basic security - nothing sent to third parties at all; no blocking of VPNs other than the usual anti-bruteforce stuff:

- GeoIP server side; trigger MFA (email a confirmation code) if country mismatch. Anything less is too granular unless you have some good reason for it, people moved to cheaper places during the pandemic, mobile connections geo horribly wrong when NATed

- Drop a random unique cookie (long-lasting) on the client; if this cookie is not present and valid/signed prompt for MFA

- Give the user an opportunity to revoke all logged in sessions

New comment by dylz in "Is it possible to host static websites on Amazon glacier"

dylz — Sat, 26 Dec 2020 11:46:42 +0000

Yes, but only you can access them and it will take several hours.

New comment by dylz in "Ask HN: Best Technology for an E-Christmas Get Together?"

dylz — Mon, 21 Dec 2020 10:14:28 +0000

Here: https://support.mozilla.org/en-US/kb/share-your-camera-or-sc...

It is a pliable in-game object, you can throw someone's screen, resize it, etc.

New comment by dylz in "Ask HN: Best Technology for an E-Christmas Get Together?"

dylz — Mon, 21 Dec 2020 04:28:12 +0000

It works well past 10 users on very high powered mobile. Less so on cheap phones.

It's really more that you are spraying high volume websocket and webrtc data continuously while doing realtime 3D/WebGL - you are practically running a full game at this point.

New comment by dylz in "Ask HN: Best Technology for an E-Christmas Get Together?"

dylz — Mon, 21 Dec 2020 01:17:23 +0000

https://hubs.mozilla.com/

New comment by dylz in "Ask HN: Would you pay for ARM-based dedicated instances?"

dylz — Sat, 19 Dec 2020 23:22:56 +0000

The sellers are usually $1.99-2.99 for this.

New comment by dylz in "Ask HN: A Web template created in just HTML and CSS. Would you consider buying?"

dylz — Wed, 16 Dec 2020 07:19:48 +0000

99%+ of them are all terrible. Think jQuery 1 written in 2020 with hundreds of useless includes, over 50 web fonts loaded simultaneously to frontload on the feature list while providing nothing of value.

New comment by dylz in "Improving DNS Privacy with Oblivious DoH"

dylz — Wed, 09 Dec 2020 05:02:01 +0000

Are ODOH resolvers by any disjoint partner available yet? The only one I see is the CF-owned and run one.

New comment by dylz in "Improving DNS Privacy with Oblivious DoH"

dylz — Wed, 09 Dec 2020 04:39:48 +0000

Discord already doesn't need geoip, since they just direct you at wherever the server location (that you chose) is

New comment by dylz in "With Proton and Steam Play, many Windows games now work on Linux"

dylz — Tue, 08 Dec 2020 05:50:48 +0000

CSGO relatively heavily suppresses "user maintained" community servers, the entire experience from onboarding to client launch prioritses the Valve-run official matchmade servers for casual/competitive/etc and any special game modes.

Server browser is a hidden afterthought behind a dropdown.

New comment by dylz in "With Proton and Steam Play, many Windows games now work on Linux"

dylz — Tue, 08 Dec 2020 02:52:07 +0000

Not parent, but have seen this before, or some competitor/pissed off outed person/partner in crime/etc hands it to anticheat team.

Private cheats usually require being vouched in, sometimes with ID scans, sometimes physically shipping you hardware.

New comment by dylz in "With Proton and Steam Play, many Windows games now work on Linux"

dylz — Mon, 07 Dec 2020 20:46:13 +0000

I appreciate that you are trying to do this with respect and hope you succeed.

I've done both sides (largely MMO-stuff as a kid), and for me, I'm done dealing with all this invasive garbage, and just spin up a fresh EC2 GPU instance when I want to play something, and simply don't play the games that choose to disrespect and abuse players to the point of not even allowing GPU passthrough (I can somewhat understand banning emulated GPUs; have dealt with people farming referral accounts a hundred at a time each queuing for games at <5 FPS).

New comment by dylz in "With Proton and Steam Play, many Windows games now work on Linux"

dylz — Mon, 07 Dec 2020 20:18:02 +0000

I'm guessing this is a mix of attestation and inspecting what they actually do instead of just blindly checking the certificate and that the signature is verified? I'm curious how well executed that works when it comes to less well behaved anticheats (like Riot's Vanguard generally stays hands off, but GameGuard will immediately heartbeat a "ban me" and intentionally cause a bluescreen to cause you to "lose any data collected by your debugger" when it notices it's being looked at).

This type of BS is super common in Asian countries/published MMOs and a bit less acceptable in the west (you still have EAC and battleye, but at least they make an attempt to use TLS?)

Another insane example: xigncode has long since advertised a feature that the game developers can remote control into your PC like VNC. I don't know whether any developer has chosen to actually enable it, but the fact that they push it as a feature is some serious clown-egg-face.