SAI_Peregrinus

Joined 12 years ago

Karma
7,383
Submissions
3,671
Member since
Apr 23
email: ycombinator at eufalconimorph.com
View on Hacker News

Recent submissions

Comment · 1 day ago
Yes, chicken eggs are the bird equivalent of menstruation.

Also your alcohol is fungal secretions.

Comment · 1 day ago
Just noting that your honey is made of bug secretions.

Just noting that your milk is made of cow secretions.

Etc.

Comment · 1 day ago
I've taken to using the three-em dash⸻it's very whimsical.
Comment · 2 days ago
If the yacht seller would take payment in cocaine, surely the government wouldn't prohibit the transaction…
Comment · 2 days ago
> Otherwise employees spend a huge chunk of their working day just logging into different services.

Instead they spend a huge chunk of their day logging into different services through a redirect via an SSO site. They don't have to have their password manager fill in new passwords each time. IME it doesn't actually save any time.

The advantage of SSO is the organization can ensure everyone is using the same security config. They can enforce a minimum password length for SSO. They can enforce 2FA for the SSO provider. Etc.

Comment · 2 days ago
Rich people take out loans against the value of their stocks. Those loans are liabilities. Then when they sell stocks (presumably after the value has increased) to repay the loans they only pay tax on the capital gains, not the total income. As long as capital gains tax + interest on loans is less than the equivalent income tax, they pay less tax.
Comment · 3 days ago
Flames are somewhat transparent. That's why you can see the wick of a candle through the flame that surrounds it. The same is happening here, the flame is all around the match head, not just in front.
Comment · 3 days ago
How are stocks not assets? They're shares of ownership in a company, without personal obligations to that company. They're certainly not liabilities. So what do you think they are?
Comment · 4 days ago
Χitter. Not Xitter. Use a Greek capital chi for proper pronunciation.
Comment · 5 days ago
What doesn't kill you postpones the inevitable.
Comment · 5 days ago
Some skeuomorphism is user-friendly, like buttons that animate like they're clicked when pressed down. Other skeuomorphism was user-hostile, like the various mouse-only interfaces where everything had to be dragged around to work.
Comment · 5 days ago
Congress created the laws which allow classification & declassification. The president is the authority over what gets classified, but should still be required to follow the procedures for doing so.
Comment · 8 days ago
Exporting keys under wrap isn't the problem. Importing new keys not generated by an HSM would be, if that's what happened and the HSM didn't actually generate the ridiculous keys. Since the HSM shouldn't be capable of generating such weak keys, it's likely they generated them externally somehow (typing by hand? all decimal digits being in increasing order is unlikely even for rand(255)-style insecure RNG calls) and imported them to the HSM.
Comment · 8 days ago
What testing would require it? I've done plenty of testing setting up internal CAs & HSMs, and none of it required weak keys. Generating a key with the same parameters as a real key is trivially easy, and has the benefit of testing your key generation at the same time!
Comment · 9 days ago
They were a root CA.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton