Hacker Newsnew | past | comments | ask | show | jobs | submit | more cclements's commentslogin

I really think companies like Apple and Google can execute like nobodies business in the car market, but then I see how uniformly terrible software made by car companies is, and wonder if they didn't think the same...

Here's to hoping they knock it out.


There may be good arguments why not to use Tor, but this doesn't seem to be one of them.


I'd never thought of it in the terms that the article author presents, but I think he has a point.

If you are a reporter, you have a very good reason to use Tor. When searched at a border or by some police force, having tools made for privacy and security is going to be expected. Having tools for human rights activists is going to cause trouble.


I know it wasn't what you were asking, but compiling on osx was fairly easy for me:

https://github.com/hashcat/hashcat/blob/master/BUILD.md#buil...


Agreed. This one is also quite good:

http://gabrielecirulli.github.io/hn-special/


Good points. I'm in the camp that sees the claimed benefits of SIT as a logical extension of cardio exercise to the set/rest/set approach of weightlifting, but this study doesn't really answer that question. I'd really like to see an "equal time" comparison group to account for newb gains (e.g. MICT for 10 min vs SIT for 10 min) as well as directly compare the effect of the different approaches.


Nope, same here.


I've been fortunate enough to enjoy success in the tech field, but by far the accomplishment that I'm most proud of is that I was able to bring friends with me. This isn't something that I ever would have envisioned starting out that I would be this proud of.

I grew up in a very small town in the US with not a lot of opportunity and lucked into getting hired by an information security firm in a bigger city back when many companies had never heard of firewalls. I had close tech savvy friends from back home that were struggling and was able to convince my employer to hire them.

Since then, they've become very successful in their own right. Yes, they are very smart and have worked hard, but knowing what I do now about the power of networking and getting the right opportunity at the right time, I like to think that how I was able to help them made a huge difference in how their lives turned out.


That is really cool, I know some really good people that I hope I can help some day too


You know, reading this and some of the comments, especially about run-away authority with the “cops making stops to take money” make me think. I recoil as I’m sure many do about the increasing ubiquity of potential surveillance technology such as this. I think about the slippery slopes that we have evidence of (see: patriot act). But then another part of me thinks back to the “dirty cop” comment. It seems like cops carrying cameras is a strong mitigation to such behavior. The counter argument that such recordings might “going missing” when convenient for the officer comes up then. The sentiment I read often is the solution to that problem is citizens with cameras as well. And that brought me back to the notion of “ubiquity” again. If and when these things are everywhere, then they aren’t just in “normal citizen’s” homes, they are in NSA agent’s homes too, uploading details to the same manufacturer’s servers, carrying the same vulnerabilities. Of course, there are loopholes and restrictions authorities can implement, but can they get them all? A good chunk of my job is penetration testing, and my experience definitely makes me think not.


"The counter argument that such recordings might “going missing” when convenient for the officer comes up then"

That's because it's what it is happening right now. See last week's trending HN story, especially the "the FBI provided two blank CDs, claiming the recording devices malfunctioned" bit (yeah, sure):

http://www.npr.org/2014/10/29/359725475/can-authorities-cut-...

https://news.ycombinator.com/item?id=8527469


I think a better solution to the problem of the cop's recording going missing is to automatically find the cop guilty of everything he's accused of when that happens, without a trial. That'll stop that problem right quick.


Hi there, this looks interesting. How does Sentry differ from Moloch[1]? They appear to be pretty similar, but then your website doesn't really contain much info to go off of.

1. https://github.com/aol/moloch


I haven't used Moloch myself, so I can't judge with complete accuracy, but here's my take:

1. Use case: Moloch, with it's focus on PCAP, is a cool network forensics tool, to be sure. Our focus is not only on security, but also on performance and troubleshooting. We use the traffic data as a foundation for integration with IDS alerts and latency (and jitter) data. The ability to pivot between views and visually correlate this data is incredibly (and surprisingly) useful for IT Staff who want to know at a glance if things are correlating or not. So I would suggest that Moloch is a little more limited in it's scope, at least in it's default configuration.

2. Usability: This ties in with the point below too. Our focus is making network analysis approachable for the average IT guy. Keeping things light, visual, and easy to use is super, super important to us. It's really the top item on our list under, you know, having correct data.

3. Maintainability (or SLAs, or whatever you want to call it). When I look at Moloch, I'm reminded of Zimbra, the free email server. Last time I installed Zimbra, it involved installing a lot of different stuff, configuring it all, and groking a LOT of documentation for different components before it was working to satisfaction. This is perfect for a certain market segment, the IT guy who has the time and energy to - not really roll his own - but to be really involved in everything that's going on.

the Sentry is not for that IT guy. We market to IT staff who don't have the time to install and maintain a bunch of components for a single tool. They have a security / network vision need (sorry about the buzzword) that needs to be filled, and they don't have a month to stumble through a complex linux install. Don't get me wrong, I personally am all about complex linux installs, I love getting into things myself, but this product is pre-packaged, with batteries included.

Hope that answers some of your questions!


I agree, that's really annoying. Thankfully it looks like they may be slowly introducing some of these features to the K line. The 4790k for example is the first k chip that advertises support for VT-d. Still no vPro though.

http://ark.intel.com/compare/80806,80807


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: