consp

Joined 10 years ago

Karma
4,578
Submissions
1,919
Member since
Feb 4
ignores everyone, my comments are fire & forget, don't expect a response and if you think I'm wrong, that is your problem not mine.
View on Hacker News

Recent submissions

Comment · 5 days ago
When you underpromise and deliver sales will still tell you they could have sold the overpromise for even more and should have gone with that.
Comment · 8 days ago
Where my parents live they leave the door unlocked, easily invite people in and there is strong social cohesion. Where I live that's invalidating your home insurance since it's "asking to be robbed" and people don't talk to each other or report crimes.

Difference between the countryside and the city I guess.

Comment · 8 days ago
Why not treat both as bad instead of pointing to whataboutism to make a point?
Comment · 8 days ago
I'm the recovery account to at least two accounts of real people with the same name (the people are real, despite the uncommon name). Don't bother reporting it via the link in the mails, it does nothing. I'm not even sure this isn't some Google shenanigans either.
Comment · 8 days ago
If they put the match ratio value lenient enough to not reject a lot of people in bad lighting conditions you can make a dog match. So it's likely useless.
Comment · 10 days ago
> https://www.php2shell.com/

Boy, do I hate these PR websites masquerading as vulnerability reports. It's slop all the way down with these companies.

Comment · 10 days ago
8 hours of highly concentrated work is a unbearable load to do continuously for days, you definitely need some "normal" task as well. I can't imagine anyone claiming to do "12 hour work days" to engage in anything thoughtful for more than 12 minutes.
Comment · 10 days ago
Makes more sense.

I'm sure the Utimaco's used (haven't worked with one) also allow all slots to contain the same name or keys with the same name and the device always selecting the first one if you only provide the name and not the slot ID or token identifier. Don't ask how I found out the hard way.

Comment · 10 days ago
I would not expect anyone to be on the lookout continuously, but like the researcher doing a "yolo" and trying. There are enough people out there that it is likely to happen at least once in a while. Or for instance someone looking for a firmware exploit in a downstream device.
Comment · 10 days ago
I'm still flabergasted the HSM allowed this key to be generated. Then again, I've worked with HSMs, there are always many mistakes in the firmware, usually less severe though.
Comment · 10 days ago
> and presumably nobody would try to brute-force a private key.

Why not? There are examples of RNGs providing very poor entropy which might be a reason to check it (looking at you Sony).

Comment · 10 days ago
That got nuked by the looks of it.
Comment · 11 days ago
The great depression was just as much a wealth concentration at the cost of the 95% as is happening now, history will repeat itself. Speculation followed by wealth inequality followed by tarifs followed by reduced international trade. Sounds familiar.
Comment · 11 days ago
History should be a lesson on why. Wouldn't be the first time a German far right party became a dictatorship from a minority rule.
Comment · 12 days ago
Add a frontline draft (no exceptions) to that and let's see how it goes. You can manage away cost but not that.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton