Hacker News: lobster2342

New comment by lobster2342 in "Una GPS smart watch – Repairable, USB-C charging, developer-friendly"

lobster2342 — Tue, 28 Jul 2026 19:32:41 +0000

I just finished swimming, tracked by a Garmin Forerunner 910x which I bought back in 2015 and I have been constantly using since. Wrist band replaced once each side. Battery lifetime still amazing, even with longer bike rides and GPS. Data can be analyzed locally. Uptime since I bought it: almost 100%.

Amazing peace of Hardware.

Also their algorithms are cool. If the watch tells me to rest more than 24 hours, I know, I will be tired the next day.

The two features that I miss are built in heartrate monitor and temperature sensor. I payed around 500€ back then. Over the years I use this watch, the price became very reasonable.

New comment by lobster2342 in "Launch HN: SubImage (YC W25) – See your infra from an attacker's perspective"

lobster2342 — Tue, 25 Feb 2025 08:23:35 +0000

Hi, interresting goal that you have in mind.

Working in a huge enterprise, I see a clear benefit for this kind of product, as we are really struggeling to keep track.

I understand that you are very early in boot-strapping, but what I was missing while skimming over the videos and links and webpage is a better high-bird view or contextualization of the apporach.

I was considering a demo, but the two options (chat and quick chat) were a bit unclear to me what they would archive / how they are structured.

Again, I have full understanding that you are still working on this. Good luck with this project.

New comment by lobster2342 in "The Backbone of Cybersecurity: Hardware Security Modules"

lobster2342 — Tue, 11 Jun 2024 19:14:26 +0000

Yeah, there is one flaw that I recently noted: how does the HSM authenticate legitimate users?

Like "I am an app, dear HSM, please perform following crypto operation for me."

If an attacker can pretend to be a legitimate HSM user, then she does not need key access, she just asks the HSM to perform a crypto operation on her behalf.

On the other hand, if the HSM needs secrets in order to authenticate legitimate users, then those secrets are prone to those attacks, against an HSM shall protect.

Or dont i get it?