Hacker News: helper

New comment by helper in "IRS to ditch biometric requirement for online access"

helper — Mon, 07 Feb 2022 21:17:27 +0000

Now we just need to get all the state government agencies to drop this requirement as well (looking at you, California).

Croc Full Plaintext Recovery – CVE-2021-31603

helper — Wed, 28 Apr 2021 13:15:26 +0000

Article URL: https://redrocket.club/posts/croc/

Comments URL: https://news.ycombinator.com/item?id=26968958

Points: 1

# Comments: 0

New comment by helper in "Slack’s Outage on January 4th 2021"

helper — Mon, 01 Feb 2021 16:12:01 +0000

Where's the button to provision more TGW capacity?

New comment by helper in "Slack is down"

helper — Wed, 06 Jan 2021 17:59:26 +0000

(2 days later) The status site now shows %99.9 uptime for the quarter.

New comment by helper in "Slack is down"

helper — Mon, 04 Jan 2021 19:39:57 +0000

That number is almost certainly updated manually. Check back tomorrow and see what it says.

If you look at the history page you can see its not 100% for every month: https://status.slack.com/calendar

New comment by helper in "Ask HN: How do you share passwords simply and securely?"

helper — Wed, 29 Apr 2020 17:11:18 +0000

Flashpaper is great if you have a trusted server and a trusted operator running it. Seriously, don't use a random flashpaper server on the internet if you want to keep your secrets secret.

New comment by helper in "Milan Airport WiFi sends your MAC address to advertisers and trackers"

helper — Wed, 06 Nov 2019 16:11:23 +0000

Based on the screenshots it looks like the mac address is leaking out because its in the referer. I would guess this isn't intentional and shouldn't be hard to fix.

I've worked with a number of captive portal systems and they all basically work the same way. The AP/controller intercepts http requests and redirects to the captive portal page with identifying information about the device (ip,mac,ssid,ap_mac,etc.). The captive portal http server shows the user a splash page to accept terms or enter a username/password or a credit card. Once the captive portal server decides the user should be allowed onto the network it needs to communicate that back to the wireless hardware which is done with the user's mac address.

Based on the requests it looks like they have some ads/trackers on the splash page that are getting requests with a referer set to the original splash page url (which includes the client mac address). A no-referrer meta tag or an intermediate redirect would prevent this from happening.

Thinking about the Go Proposal Process (Go Proposals, Part 1)

helper — Tue, 06 Aug 2019 03:28:37 +0000

Article URL: https://research.swtch.com/proposals-intro

Comments URL: https://news.ycombinator.com/item?id=20621876

Points: 1

# Comments: 0

New comment by helper in "Google Discontinues Hangouts on Air"

helper — Tue, 06 Aug 2019 01:29:55 +0000

What are the missing features?

New comment by helper in "Google Discontinues Hangouts on Air"

helper — Mon, 05 Aug 2019 22:19:20 +0000

I think hangout meet live streaming is supposed to be the replacement for hangouts on air[1].

[1]: https://support.google.com/meet/answer/9055488

New comment by helper in "JPEG XL Reaches Committee Draft"

helper — Sun, 04 Aug 2019 15:01:30 +0000

Ugh, I honestly couldn't tell if this article was a joke or not (it seems to not be). The more you read the more absurd it becomes.

I've not heard of JPEG XL before now. Why would you name it that? XL certainly doesn't make me think "wow that sounds like way better compression".

JPEG Blockchain: come on! Are you really so worried about being relevant that you have to talk about blockchains in your press release?

JPEG AI: I could image that this is real, but I'm fairly skeptical of anything that is taking about machine learning and blockchains in the same context.

Its so unnecessary too. A 3x quality improvement is massive. Why not just let that speak for itself? This press release makes me hope just a little bit that JPEG XL loses out to WebP or HEIF.

New comment by helper in "KIP-500: Replace ZooKeeper with a Self-Managed Metadata Quorum"

helper — Sat, 03 Aug 2019 21:47:30 +0000

Thanks for pointing that out. Thats what I get for not actually reading the proposal.

New comment by helper in "KIP-500: Replace ZooKeeper with a Self-Managed Metadata Quorum"

helper — Sat, 03 Aug 2019 04:25:37 +0000

Yeah, don't deploy it when its in beta or its first few releases. At some point it will be stable and safe at which point everyone from then on will benefit.

New comment by helper in "KIP-500: Replace ZooKeeper with a Self-Managed Metadata Quorum"

helper — Fri, 02 Aug 2019 19:44:10 +0000

As an operator, having fewer dependencies I have to deploy and worry about is a boon to my productivity.

If you were building a kafka like system in house for private use only, then yes I agree with your sentiment. If you are building something to be used by hundreds or thousands of organizations then the cost benefit tradeoffs shift to where it probably makes sense to pull the consensus logic into the primary application itself.

New comment by helper in "Why Generics?"

helper — Thu, 01 Aug 2019 00:06:22 +0000

Normally you wouldn't write that since the compiler will be able to infer the baz type based on buzz (assuming this is a call to a generic function).

New comment by helper in "Why Generics?"

helper — Thu, 01 Aug 2019 00:03:52 +0000

If you're just going to copy another language there really isn't much of a point in making a new language. Go is not java, or c# or rust.

Part of the explicit goal stated by the go team is that generics must still feel like go. If you slapped java generics onto go it would not feel like go.

New comment by helper in "Kernel analysis with bpftrace"

helper — Tue, 23 Jul 2019 17:08:58 +0000

It doesn't look like bpftrace is available in the default repos for Ubuntu 18.04.

New comment by helper in "The PGP Problem"

helper — Wed, 17 Jul 2019 07:08:06 +0000

MTA-STS prevents downgrade attacks.

The PGP Problem

helper — Wed, 17 Jul 2019 01:27:02 +0000

Article URL: https://latacora.singles/2019/07/16/the-pgp-problem.html

Comments URL: https://news.ycombinator.com/item?id=20455594

Points: 5

# Comments: 0

New comment by helper in "Declined Proposal: A built-in Go error check function, “try”"

helper — Wed, 17 Jul 2019 01:23:35 +0000

> Unfortunately, the community that has sprung up around Go is more or less opposed to new language features on principle.

I think this comes straight from the original go team. Rob Pike had a talk[1] that is partly about why go doesn't keep adding features and why it doesn't have certain features that other languages have. I think people who like go have bought into the idea that the go team has made good trade-offs to make go code easier to read and maintain at the expense of expressibility.

[1]: https://www.youtube.com/watch?v=rFejpH_tAHM