Hacker News: mrmagooey

SSHaha: social engineering via SSH

mrmagooey — Tue, 15 Jan 2019 11:00:47 +0000

Article URL: http://mrmagooey.github.io/articles/sshaha-social-engineering-via-ssh

Comments URL: https://news.ycombinator.com/item?id=18910270

Points: 1

# Comments: 0

New comment by mrmagooey in "Console.table()"

mrmagooey — Thu, 14 Jun 2018 05:47:25 +0000

I made something similar as a fun little project https://github.com/mrmagooey/taboo, does the same print function but also does some basic querying, deletes and updates, left and inner joins. I had no idea that the inbuilt version existed though.

New comment by mrmagooey in "In Colorado, opioid deaths fall following marijuana legalization"

mrmagooey — Tue, 17 Oct 2017 02:10:14 +0000

The paper reports:

> Colorado’s legalization of recreational cannabis sales and use resulted in a 0.7 deaths per month (b = −0.68; 95% confidence interval = −1.34, −0.03) reduction in opioid-related deaths.

Which if I understand right, they're pretty sure it did something, but that something might be so small that the value of reporting it is negligible.

New comment by mrmagooey in "Essential Phone, available now"

mrmagooey — Fri, 18 Aug 2017 01:38:34 +0000

> If there's a serious vulnerability that actually needs your attention, you will read about it in the news

The ol' security through tech press approach. Seriously though, you can't have the security of your devices dependent on whether or not someone has come up with a catchy name for their exploit. The exploits with names like broadpwn and stagefright are the exceptions, not the rules, there are plenty of critical CVE's that have never had cool names or tech articles written about them. Even if an exploit has a cool name and some press, what if people don't upvote it when it gets posted here (or reddit/wherever)?

Speeding up Container Builds

mrmagooey — Thu, 20 Jul 2017 07:04:52 +0000

Article URL: http://mrmagooey.github.io/articles/speeding-up-container-builds

Comments URL: https://news.ycombinator.com/item?id=14810541

Points: 1

# Comments: 1

Australian Defence files to be moved after Chinese buy-in

mrmagooey — Tue, 20 Jun 2017 01:03:35 +0000

Article URL: http://www.abc.net.au/news/2017-06-20/security-concerns-over-defence-files-in-data-centres/8632360

Comments URL: https://news.ycombinator.com/item?id=14591532

Points: 10

# Comments: 0

New comment by mrmagooey in "Securing your API: a modern alternative to CSRF tokens"

mrmagooey — Wed, 14 Jun 2017 04:41:28 +0000

Isn't JWT a modern alternative to CSRF tokens?

New comment by mrmagooey in "NIST’s new password rules – what you need to know"

mrmagooey — Wed, 23 Nov 2016 00:20:03 +0000

You don't I guess, I'm just using 4 as an example (it's also the number of words used in xkcd's password strength comic).

New comment by mrmagooey in "NIST’s new password rules – what you need to know"

mrmagooey — Tue, 22 Nov 2016 23:59:33 +0000

Aren't passphrases kind of a bad choice for passwords? If all you are ever really guessing is the symbols that make up someones password, and you know that for example they have 4 words that make the passphrase, then you effectively only have to iterate 4 symbols with a known list of possibilities for each symbol (i.e. the dictionary).

If you compare the permutation space of a short passwords (length 7) with random characters (say ~80 potential symbols), with a long(er) password made up of 4 english words (say ~3000 potential symbols, the most commonly used english words).

    character_symbols = 80
    word_symbols = 3000
    number_of_character_password_symbols = 7
    number_of_word_password_symbols = 4
    permutation_space_characters = character_symbols**number_of_character_password_symbols
    permutation_space_words = word_symbols**number_of_word_password_symbols
    print('%.2E' % permutation_space_characters, '%.2E' % permutation_space_words)
    ('2.10E+13', '8.10E+13')

The words space is four times bigger, but in the same magnitude as the short (bad) password. I'm not an expert here, so I might have stuffed it up, but it seems like passphrases shouldn't really be encouraged?

I do love the recommendation to remove time-based password expiry though.

New comment by mrmagooey in "Taking PHP Seriously"

mrmagooey — Thu, 13 Oct 2016 23:14:16 +0000

I'm surprised no one has posted this fairly thorough criticism of PHP from a few years ago https://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/

New comment by mrmagooey in "Poll on macOS 10.12 is broken"

mrmagooey — Tue, 11 Oct 2016 12:27:21 +0000

This is a common error message for a number of CMS's (in this case probably WordPress) when overloaded, and shouldn't reflect upon the validity of the source.

Spacemacs Release v0.200.x

mrmagooey — Wed, 05 Oct 2016 01:53:57 +0000

Article URL: https://github.com/syl20bnr/spacemacs/blob/v0.200.0/CHANGELOG.org

Comments URL: https://news.ycombinator.com/item?id=12641096

Points: 5

# Comments: 0

New comment by mrmagooey in "The Ethernet PAUSE frame"

mrmagooey — Tue, 23 Aug 2016 00:08:20 +0000

Is there a concern that the mechanism allows for DoS? How do they mitigate the situation that the author describes?

New comment by mrmagooey in "I Love Go; I Hate Go"

mrmagooey — Tue, 02 Aug 2016 06:45:04 +0000

There's several hundred Y Combinator companies, but I don't think I've seen a commensurate number of posts to HN. You'd know if it was open slather on Y Combinator companies posting self-promotion material to HN because this post would not be at the top, it would be some launch page for a company ending in 'ly'.

I typically only notice YC companies mentioned here when it is a Techcrunch (or similar) article about them.

New comment by mrmagooey in "Use AWS Lambda to self-host the comments for your blog"

mrmagooey — Sat, 07 May 2016 01:07:25 +0000

I wouldn't have thought the GC would be expensive enough to warrant turning it off, interesting thought though.

Ubuntu on IBM

mrmagooey — Thu, 05 May 2016 10:56:40 +0000

Article URL: http://partners.ubuntu.com/ibm

Comments URL: https://news.ycombinator.com/item?id=11635070

Points: 47

# Comments: 6

New comment by mrmagooey in "Emacspeak 43.0 (SoundDog) Unleashed"

mrmagooey — Mon, 30 Nov 2015 23:26:12 +0000

Can't really read the whole thing at work as I feel self-conscious reading a page tiled in labradors on work time.

New comment by mrmagooey in "On FPGAs as PC Coprocessors (1996)"

mrmagooey — Mon, 16 Nov 2015 10:46:22 +0000

There have been a few projects to generate VHDL/Verilog using an LLVM backend, a quick google brings up some interesting presentations. I imagine constraints similar to those that the links OP brings up are why these aren't more mainstream.

New comment by mrmagooey in "Rental America: Why the poor pay $4,150 for a $1,500 sofa (2014)"

mrmagooey — Wed, 10 Jun 2015 05:07:26 +0000

You exploit peoples interest or addiction to various chemical substances and they devote entire government departments to chase you down, but you exploit peoples interest or addiction to the latest consumer products and you might get some tax breaks.

New comment by mrmagooey in "Tesla battery storage will accelerate exit of coal generators"

mrmagooey — Mon, 04 May 2015 01:38:44 +0000

Agreed, also need to keep in mind that "power utility" can describe 3 discrete agents in electricity markets: the generator, distributor and retailer. The distributors may find themselves with a more active role to play as everyone becomes a sporadic generator.