Hacker News: kroeckx

New comment by kroeckx in "Is my blue your blue?"

kroeckx — Tue, 28 Apr 2026 08:08:04 +0000

As others have pointed out, the 2nd color is not something I would call either blue or green. Except for the first, it never showed anything I would call blue. So really I have told it the border where I still call something green. So is my green your green?

New comment by kroeckx in "OpenSSL: Stack buffer overflow in CMS AuthEnvelopedData parsing"

kroeckx — Tue, 27 Jan 2026 20:32:07 +0000

The correct URL is https://security-tracker.debian.org/tracker/CVE-2025-15467

You're pointing to one of the other security issues for which a fix was released today.

New comment by kroeckx in "OpenSSL: Stack buffer overflow in CMS AuthEnvelopedData parsing"

kroeckx — Tue, 27 Jan 2026 19:12:47 +0000

A test was added in this commit: https://github.com/openssl/openssl/commit/6297ac45d72ded9b45...

New comment by kroeckx in "Debian bookworm live images now reproducible"

kroeckx — Thu, 27 Mar 2025 15:13:01 +0000

It's my understanding that is about generating the .iso file from the .deb files, not about generating the .deb files from source. Generating .deb from source in a reproducible way is still a work in progress.

New comment by kroeckx in "A Texas "moth man" photographed 550 species in his own yard"

kroeckx — Sat, 17 Aug 2024 18:56:26 +0000

https://www.inaturalist.org/lifelists/cmeckerman?view=tree&t... says he has 1044 different species of the order Lepidoptera.

New comment by kroeckx in "A Texas "moth man" photographed 550 species in his own yard"

kroeckx — Sat, 17 Aug 2024 09:03:09 +0000

On iNaturalist there are many people who monitor a specific area like their garden. Those contain links to such projects:

https://www.inaturalist.org/projects/home-projects-umbrella

https://www.inaturalist.org/projects/museum-grounds-and-gard...

There probably are a lot more such projects on it.

New comment by kroeckx in "Intent to end OCSP service"

kroeckx — Wed, 24 Jul 2024 03:07:49 +0000

For the major browsers, this probably makes little difference, but for anything else, this will most likely result in not verifying the revocation status of certificates anymore or making things slower.

As far as I know, most browser vendors already download the CRLs, and then update the browsers based on what they downloaded. For instance firefox seems to be using CRLite. There is a lack of support for something like that in the non-major browsers and non-browsers. The alternative they have is to download the CRL instead of the OCSP reply, which is larger, probably making things slower. Or they could just not check the status, which is most likely what will happen.

CRLite changes the failure mode of the status check, it no longer just ignores error in downloading the status information.

We need better support for something like CRLite.

New comment by kroeckx in "Passkeys: The beginning of the end of the password"

kroeckx — Wed, 03 May 2023 20:44:15 +0000

Is a passkey a software implementation of a FIDO key? Where the implementation could use something like the TPM to protect the key.

New comment by kroeckx in "OpenSSL Security Advisory [7th February 2023]"

kroeckx — Tue, 07 Feb 2023 18:03:46 +0000

Yes, the dates are correct.

New comment by kroeckx in "Audio CD ripping – optical drive accuracy listing"

kroeckx — Mon, 07 Nov 2022 21:35:35 +0000

C2 is error detection, not correction. C1 is the error correction. I think what wikipedia is trying to say is that the C2 error detection just points out something is wrong, even after the C1 error correction, and so you can't fix it. But a data CD has additional error correction, so it can correct more errors.

New comment by kroeckx in "Audio CD ripping – optical drive accuracy listing"

kroeckx — Mon, 07 Nov 2022 21:27:51 +0000

An audio CD has 2352 audio bytes per sector. The sector also contains C1 error correction and C2 error detection.

On a data CD, those 2352 bytes are split in 2048 data bytes, plus an additional 4 error detection, 276 error correction, plus some other bytes including an address. So there is an extra layer of error correction.

New comment by kroeckx in "Audio CD ripping – optical drive accuracy listing"

kroeckx — Mon, 07 Nov 2022 17:34:22 +0000

As one of the other links explains, ripping the same CD on the same drive a 100 time might still not produce the correct rip. Something like AccurateRip works by having multiple copies of the CD scanned, and then voting which one is the correct version.

I forgot that CTDB (http://db.cuetools.net/) exists, which is is an alternative to AccurateRip. CUETools is open source Windows software to rip CDs. Instead of just providing a checksum of the track, it provides error correction information. So instead of just getting that you probably have a bad rip, and keep getting a bad rip, it's possible to correct the rip. EAC has a CTDB plugin that's installed by default, whipper currently doesn't support it.

AccurateRip is not something from EAC, it's from dbpoweramp.

New comment by kroeckx in "Audio CD ripping – optical drive accuracy listing"

kroeckx — Mon, 07 Nov 2022 09:27:07 +0000

This is based on submission to AccurateRip. As I understand it, it's how many tracks submitted by users owning that drive match the what AccurateRip considers the correct rip.

New comment by kroeckx in "Audio CD ripping – optical drive accuracy listing"

kroeckx — Mon, 07 Nov 2022 08:29:35 +0000

If you care about accurate rips on Linux, the best tool to use is whipper: https://github.com/whipper-team/whipper. It makes use of the AccurateRip database, which is used to calculate the statistics. I don't know about any other native Linux application that makes use of it. Other tools like cdparanoia, and all the other wrappers around it, just attempt to read it multiple times and still get the wrong result, as the post shows.

New comment by kroeckx in "Low Energy Chest Fridge"

kroeckx — Fri, 04 Nov 2022 10:13:48 +0000

I assume that he measured the power consumption himself. You can find a lot of cheap devices that you can plug between your wall socket and the device. They are not usable for measurement at low power. If you try to measure something in the 0 - 1 W range, most just show 0, others even show something like 30 W.

New comment by kroeckx in "How to request removal of your contact info from Google search results"

kroeckx — Wed, 26 Oct 2022 07:24:54 +0000

There isn't a "remove result" button. At the bottom there is a "Privacy settings", "How Search works" and "Cached" button, while the screenshot shows "Remove result" and "How Search works".

Having unsuccessfully gone through 2 different procedures to try to remove that page from Google search result, I have little faith that it will work now.

New comment by kroeckx in "Students break acceleration world record for electric vehicles"

kroeckx — Wed, 12 Oct 2022 20:49:09 +0000

For the torque, you can use a low current using more windings, which has the same effect of having a higher current with less windings.

The acceleration you can reach is mostly limited by the peak current and the force constant, but the maximum speed you can reach at that acceleration is mostly limited by the voltage you have available because of the back-EMF. A simplified formula is that the voltage you need is R * I + v * BEMF. The higher the voltage is, the better the insulation between the windings needs to be. You need to find a balance between the different properties.

New comment by kroeckx in "Finnish govt agency warns of unusual aircraft GPS interference"

kroeckx — Sun, 13 Mar 2022 10:21:38 +0000

The newer satellites, of which 5 are in orbit, also have a directional antenna with which they will be able to boost the signal strength 20 dB (100 * power), using a new military M-code that no longer needs the other signals to lock on. The signal is sent both over the wide area and the spot beam antenna. Older satellites will only sent it over a wide area antenna. As far as I understand, this is not operational yet, but is planned for this year.

New comment by kroeckx in "Finnish govt agency warns of unusual aircraft GPS interference"

kroeckx — Sun, 13 Mar 2022 10:00:22 +0000

In 2000, Bill Clinton has banned the use of Selective Availability. Newer satellites, decided in 2007, first launched in 2018 don't even have the capability anymore.

New comment by kroeckx in "Uniting the Linux random-number devices"

kroeckx — Thu, 17 Feb 2022 22:35:42 +0000

I'm still not really convinced about how much entropy is collected by the jitter entropy technique. I've been looking at https://github.com/smuellerDD/jitterentropy-library previously, which is for instance used by OpenWRT. It's hard to do a proper estimation of the entropy, because depending on how you measure it, you get different results. The library has been changed, but it's probably still overestimating the entropy.