Hacker News: ff7c11

New comment by ff7c11 in "Anyone can access deleted and private repository data on GitHub"

ff7c11 — Thu, 25 Jul 2024 00:50:14 +0000

A fork of a private repo is private. When you make the original repo public, the fork is still a private repo, but the commits can now be accessed by hash.

New comment by ff7c11 in "Reverse engineering a car key fob signal"

ff7c11 — Fri, 15 Mar 2024 05:34:31 +0000

Is it hard to brute force? If so, it is still something that can be sniffed, though you can't unlock the car without first recording a genuine button press.

New comment by ff7c11 in "The importance of cash in a technological society"

ff7c11 — Sun, 12 Nov 2023 14:19:06 +0000

If cash disappears, will we return to a barter economy? People will still trade amongst themselves.

New comment by ff7c11 in "EasyList is in trouble and so are many ad blockers"

ff7c11 — Wed, 19 Oct 2022 22:58:40 +0000

Easylist should serve the Indian browser (based on user-agent) with a giant file (expensive), a corrupt file, or some response which causes the app the crash. If the browser crashes on every startup due to a malicious response from the Easylist server, users will likely delete it.

New comment by ff7c11 in "Has tiktok_us been breached?"

ff7c11 — Mon, 05 Sep 2022 00:09:31 +0000

I don't believe the kids behind this Twitter account. I don't know why they're doing it exactly, probably some form of clout or to scam buyers on darknet marketplaces, but I know that many of their screenshots are faked. I know people at one of the companies they claimed to have hacked - they posted a Ruby on Rails directory structure as proof of hacking them but the company does not have Ruby code. So I would not trust any of their tweets.

New comment by ff7c11 in "Replibyte – Seed your database with real data"

ff7c11 — Mon, 11 Jul 2022 00:09:50 +0000

Trying to think how to anonymise datetimes hurts my head. You might want to randomise the date of an event. But you also need this random date to be consistent with respect to both the current time and the order of other related rows in the database.

New comment by ff7c11 in "FalsiScan: Make it look like a PDF has been hand signed and scanned"

ff7c11 — Fri, 21 Jan 2022 16:11:40 +0000

Signature_example.pdf 8====> :)

New comment by ff7c11 in "Sega Europe suffers major security breach"

ff7c11 — Thu, 30 Dec 2021 23:07:21 +0000

Also, if you don't have a public access block in place, a private bucket can contain public files! Even if you can't list the files in the bucket, there are tools which try to guess common file names from guessed bucket names e.g. sega-secret-sauce.s3.amazonaws.com/.env - if someone uploaded a file there without setting the ACL correctly there could be an unprotected file in the private bucket.

New comment by ff7c11 in "Sega Europe suffers major security breach"

ff7c11 — Thu, 30 Dec 2021 18:39:30 +0000

By temporarily defacing the Sega website and modifying files I think they have crossed the line. Enumerating what access they have, rooting through S3 and reporting it is OK, but by messing around like script kiddies they can no longer claim good faith. Publicising that you've illegally defaced the website is a little silly. Of course, Sega should not have got themselves so completely owned. Sega deserved to be punished, but these VPN twits have clearly committed a crime and Sega should maybe sue their company.

New comment by ff7c11 in "AWS Account Takeover via Log4Shell"

ff7c11 — Thu, 23 Dec 2021 01:03:38 +0000

So if they didn't create a new user account and IAM account what would you see? If they just used the remote shell and the installed aws cli e.g. `aws s3 ls` would you be able to detect it? This article is an ad.

New comment by ff7c11 in "AWS down again?"

ff7c11 — Fri, 10 Dec 2021 14:18:10 +0000

${jndi:ldap://AWS Down}?

New comment by ff7c11 in "Hong Kong: Police Raid Tiananmen Square Museum"

ff7c11 — Thu, 09 Sep 2021 21:26:27 +0000

Don't do this. People live in Taiwan. It's not fair to use them as pawns. Keep the status quo rather than provoke war and chaos.

New comment by ff7c11 in "Old Vidme embeds turn into porn after domain purchase"

ff7c11 — Fri, 23 Jul 2021 20:53:28 +0000

I had a personal project that I got bored with so I let the domain expire. Then I got emails from former users saying that the domain was now hosting malware. So yeah I would like it for all the old links to the site to somehow know that the owner has changed. Not sure what a reasonable solution would look like though.

New comment by ff7c11 in "A better business model for video folks"

ff7c11 — Thu, 08 Jul 2021 23:51:11 +0000

Probably just publish a few videos to Youtube and ask future subscribers to follow your non-Youtube channel instead.

New comment by ff7c11 in "Interactive IPA Chart"

ff7c11 — Thu, 06 May 2021 21:49:36 +0000

What is a good way to communicate audio information. Listening to audio doesn't necessarily explain how the sound was made (well it does kind of), whereas seeing a word in IPA makes it easy to reproduce (for people familiar with IPA) and compare.

English writing is not a good phonetic system for representing speech even for the English language: IMO a 1-to-1 mapping between pronunciation and spelling should be the goal.

You might want to explain how to pronounce the word in a British or Australian accent or compare it to how a word was pronounced 200 years ago. In that case you can use a phonetic alphabet to show the difference.

The idea is to have a writing system which can be used to accurately record all possible sounds. It's helpful for learning languages with bad alphabets such as English (https://www.teachingenglish.org.uk/article/teaching-pronunci...), for describing accents and for comparing languages and linguistics work.

PS: I don't know IPA so I'm probably wrong about everything.

New comment by ff7c11 in "Interactive IPA Chart"

ff7c11 — Thu, 06 May 2021 21:25:27 +0000

I think they're identical.

New comment by ff7c11 in "Interactive IPA Chart"

ff7c11 — Thu, 06 May 2021 21:22:59 +0000

French speakers often struggle with beach/bitch :)

New comment by ff7c11 in "Bringing civic tech to Taiwan's coronavirus pandemic response [audio]"

ff7c11 — Mon, 04 Jan 2021 22:39:55 +0000

The UK is also "literally an island", though 4 times as big as Taiwan. Taiwan banned flights from China early on, and now only allows entry to residents and those on business. The UK has still not stopped international travel. Quarantine on arrival in the UK is weak and unenforced, compared to Taiwan where the only way out of the airport is in a quarantine taxi to an approved place and you get tracked by your phone for 2 weeks. By consistently refusing to take timely action, and refusing to take things seriously, the UK forefeited its island advantage.

New comment by ff7c11 in "Ask HN: Relocating to London After Brexit"

ff7c11 — Sun, 27 Dec 2020 14:10:43 +0000

Swiss tech companies find that there isn't enough talent within Switzerland unless they are focusing purely on the Swiss market. Cost of living is higher than London in somewhere like Geneva. For growing US tech companies, what is the main reason why they want to open a tech office in Europe? If it's just regulatory / business / tax stuff, there's no need to employ developers: it could just be business & legal side. If it's access to talent then London is still great. Perhaps that will decline as it won't be as easy to bring EU citizens over to work there. I know that the Silicon Valley salaries can be several times higher than in London, but for some Europeans it just doesn't seem super attractive to live and work in the US.

New comment by ff7c11 in "Bletchley Park’s contribution to WW2 'over-rated'"

ff7c11 — Tue, 20 Oct 2020 08:57:37 +0000

Yeah looks like the book publishers conned the BBC into writing a news piece to advertise it.