gluegadget

Joined 17 years ago

Karma
1,184
Submissions
61
Member since
Apr 30
[ my public key: https://keybase.io/gluegadget; my proof: https://keybase.io/gluegadget/sigs/T35PzxZ5bXie_kZuV1jXf94gWsll6z2wU_9-VUkhEHo ]
View on Hacker News

Recent submissions

Comment · 5 years ago
Does the name mean 31?
Comment · 5 years ago
Off-topic but I tried https version of paulgraham.com but got a bad cert domain name error. SANs are for store.yahoo.com, leftover of Viaweb?
Comment · 5 years ago
But isn't this part of the point the author of the article is trying to make? In case of Superfish it was United States Department of Homeland Security who advised uninstalling it and in case of Sony's rootkit, a class-action lawsuit. In both cases higher authorities hired by people to protect them, protected them. Not FSF, nor the fact that the code wasn't GPL.

Even if Superfish was GPL licensed, the issue would've persisted. As article mentions even laptops coming with Linux pre-installed hardly come with the Kernel and userspace tools source code and you need to download them separately. Should Lenovo have preloaded Superfish as Linux kernel module and shipped it to its consumer laptops, United States Department of Homeland Security would have still advised removing it.

Comment · 5 years ago
Interestingly enough duck.com was owned by Google and they transferred the ownership to DuckDuckGo.
Comment · 6 years ago
A bit unrelated but I wrote https://github.com/amir/hepccn to list TCP connections by domains rather than just IPs. It filters connections to port 443 and 8443, downloads the peer certificate and then extracts the subject name (pretty sure I learned this trick from an article on Julia Evans' website but can't find it now). I wanted to add more functionalities to it but I stumbled upon an issue and that's for when SNI is enabled. I guess there's no way for me to recover the hostname the client has sent at the start of the handshaking process without introducing MITM, right?
Comment · 7 years ago
FP already existed at the time that OOP emerged as the savior. What currently in-practice paradigms do you think are likely to save us in 10-20 years?
Comment · 7 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton