winstonschmidt
Joined 12 years ago
Karma
99
Submissions
18
Member since
Oct 22
Recent submissions
Comment · 4 years ago
You can use cloudinit with lxd to do something quite similar to a Dockerfile. I don't know anything like compose besides just bash scripts.
Comment · 4 years ago
Great tool! Does going through ytcast have any impact on whether the played video influences youtube's recommendation algorithm (which annoys me a lot)?
Comment · 4 years ago
I've been quite happy with tutanota since a couple of years.
Comment · 5 years ago
I really don't get the hate that Linux Desktop gets. When comparing Mac OS to Gnome the difference feels marginal (at least for normal users) these days - everything feels snappy, consistent and looks nice. What exactly are the pain points?
Comment · 5 years ago
I can't seem to think of any instances where that is the case. So my conclusion would be that it can not really be done. Or can you give some pointers?
(not saying there is no room for improvement)
Comment · 5 years ago
Check whether you can control your model using lirc, using an audio cable and a soundcard's line-out. Had it running with an Onkyo receiver.
Comment · 5 years ago
What's going on in this comment section? It seems more like of a reddit thread than the usual thoughtful HN comments. Propaganda? Ghostbusters? Whitehouse? "They"? Are troll farms targeting HN now?
Comment · 6 years ago
"higher level X would be rife with inner circle politics" - sadly seems to be in line with human nature.
FWIW, anecdotally, in my interactions with academia involved parties have mostly been surprisingly respectable - which is more that I can say for industry.
Comment · 7 years ago
Sadly, no. I had to remap I manually to cmd+^ on my German keyboard.
Comment · 7 years ago
Have you seen the machinery needed to cool down IBM's tiny qubit chip at the bottom? [1]
It would be nice if you could just stick these things into your PC over PCIe some day.
[1] https://c1.staticflickr.com/5/4403/23518086798_3d3af8313e.jp...
Comment · 9 years ago
Quite happy with Hews [1]. Unfortunately it doesn't seem to have a widget and hasn't been updated in a year (but it is open source).
[1] https://play.google.com/store/apps/details?id=com.leavjenn.h...
Comment · 11 years ago
They commented on this on Reddit:
https://www.reddit.com/r/fulldisclosure/comments/3anfjk/tuta...
"This is not a vulnerability in Tutanota. We have built Tutanota with multiple layers of protection for our users. We currently use TLS and DANE to protect authentication and data integrity and (only tunneled) RSA-OAEP and AES-CBC to provide confidentiality. We have always communicated this transparently, it is nothing new. Neither the confidentiality nor the integrity of our users' data has been at risk. However, we know that the implementation is not perfect regarding this detail. That is why we are going to implement the following features as soon as possible: - Signatures/MAC - 2-factor authentication - Algorithms resistant to attacks of quantum computers - Simple verification of downloaded Tutanota apps Regarding the described issue, we know of two possible attacks on AES-CBC. Neither of them is feasible against Tutanota users: - Bit flipping: You need access to the plain text email and you have to be the MITM. - -Plaintexts are available at the sender and recipient only. We use secure TLS algorithms and DANE to protect against MITM. - Padding oracle: There is no padding oracle in Tutanota. Tl;dr There is no known vulnerability in Tutanota. Security is the heart of Tutanota, and we will fix vulnerabilities immediately."
Comment · 11 years ago
That's very unfortunate, they were the only ones letting you download your private key.
Tutanota still have to make the keys manageable, but it is a good alternative, IMO: https://tutanota.com
Comment · 11 years ago
They commented on this on Reddit: http://www.reddit.com/r/fulldisclosure/comments/3anfjk/tutan...
"This is not a vulnerability in Tutanota. We have built Tutanota with multiple layers of protection for our users. We currently use TLS and DANE to protect authentication and data integrity and (only tunneled) RSA-OAEP and AES-CBC to provide confidentiality. We have always communicated this transparently, it is nothing new. Neither the confidentiality nor the integrity of our users' data has been at risk. However, we know that the implementation is not perfect regarding this detail. That is why we are going to implement the following features as soon as possible: - Signatures/MAC - 2-factor authentication - Algorithms resistant to attacks of quantum computers - Simple verification of downloaded Tutanota apps Regarding the described issue, we know of two possible attacks on AES-CBC. Neither of them is feasible against Tutanota users: - Bit flipping: You need access to the plain text email and you have to be the MITM. - -Plaintexts are available at the sender and recipient only. We use secure TLS algorithms and DANE to protect against MITM. - Padding oracle: There is no padding oracle in Tutanota. Tl;dr There is no known vulnerability in Tutanota. Security is the heart of Tutanota, and we will fix vulnerabilities immediately."