Viewing profile — zauguin
zauguin
HN member- Joined
- Mon, Feb 22, 2021, 3:31 PM UTC
- HN karma
- 335
- Public activity
- 97 items
- HN profile
- View on Hacker News ↗
About zauguin
No profile information was provided.
Recent public activity
-
comment
Comment #46710160
Can't that just be done by sealing to PCRs? By protecting the unsealing key with PCR which depends on the OS (I usually use the secure boot signing key PCRs since they are differen…
-
comment
Comment #46371820
This seems highly misleading. > - Remove the data. This is much harder than it sounds. Many PDF tools won't let you change the content of a PDF, not because it isn't possible, but …
-
comment
Comment #43308020
I'm somewhat disturbed by the idea that anyone would think that you shouldn't stop when "driving in even semi-dense traffic in any bigger city" if you can't see. Of course you shou…
-
comment
Comment #40909994
This is a step in that direction. What they are proposing is not so much "no bootloader" but using a small Linux as bootloader. I'm using a similar setup for some time and it gives…
-
comment
Comment #38708825
This often leads to extremely annoying codebase because languages trying to enforce styleguides without proper options just leads to inconsistency once any code in another language…
-
comment
Comment #38041820
According to NFTStorage's Terms and Conditions: > The Service is offered for the creation and storage of NFTs. Use of the Service to store other types of data is not permitted. Do …
-
comment
Comment #37713910
Regarding 2.: Most of these objects do not directly correspond to rendered elements. Basically every page has one (typically) content stream which will contain all rendered element…
-
comment
Comment #37692581
(2017) (?) (Based on referring to the Cortex A73 as "ARM's latest A-Series processor")
-
comment
Comment #37519880
While there is a glyph like that there's no nice way to access it. There is no font feature to enable slashedzero by default and slashedzero is not mapped to U+0030 U+FE00 (Unicode…
-
comment
Comment #37309999
APCA works great, but it has a very weird and restrictive license. Before you consider it for anything you should probably take a detailed look at that and consider if it's really …
-
comment
Comment #37245020
There's no need to appeal yet. With "punishment order" they probably refer to a german "Strafbefehl" which isn't a full sentence but a simplified system to avoid trials which only …
-
comment
Comment #37212826
Potentially. Last I tried to boot Windows was a Windows 10 which could deal with this, it just disabled some functionalities relying in the TPM (aka. Windows Hello(?)). It might be…
-
comment
Comment #37212763
On Linux with tpm2-tools installed you can run To set the owner password (mainly for Storage) ``` tpm2_changeauth -c owner file:- ``` To set the endorsement password (e.g. to verif…
-
comment
Comment #37212604
The site uses [unjustifiable] together with [Hypher]. [unjustifiable]: https://www.npmjs.com/package/unjustifiable?activeTab=readme [Hypher]: https://github.com/bramstein/hypher
-
comment
Comment #37184390
> or, even better, to prevent the HSM from being used by anything without my overt permission Can't you already do that with an existing TPM? You just set an owner authentication p…
-
comment
Comment #37084394
According to the Open Source Definition of the OSI it's not: > The program must include source code [...] The source code must be the preferred form in which a programmer would mod…
-
comment
Comment #37034047
If all media outlets no longer receive traffic from big tech companies there's actually a decent chance that it will not affect their traffic much. If only some news outlets would …
-
comment
Comment #36629758
> OTOH if the display is already 2300EUR, I can't see how the OP can possibly make any money on this, especially with free global shipping, returns, etc, etc. I don't think they ar…
-
comment
Comment #36629729
Could you give a few more details on this? While the 32'' screen is a bit too expensive for me, I would probably find interesting usecases for he 16'' version if there weren't the …
-
comment
Comment #36629353
It's really more an acute mistake.
-
comment
Comment #35931305
Usually systems have a KEK (key exchange key) from Microsoft installed, then Microsoft can revoke keys on their own withot involvement of the UEFI forum, board manufacturers or any…
-
comment
Comment #35301773
As far as I understand it Cloudflare's DNS proxy service is for it's authoritative DNS service (and therefore only transfers content of Cloudflare customers), while the parent refe…
-
comment
Comment #35208235
> To dig into this traffic, the easiest option is to use an HTTP-debugging tool (such as HTTP Toolkit) to see the raw interactions, and configure Docker to use this as your HTTP pr…
-
comment
Comment #34287629
> and {"scheme": "nin:DE", "id": "..."} for a German citizen. (This is to refer to "a legal entity that can own something and that we have an agreement with") Off-topic, but there …
-
comment
Comment #34145252
That's not really what we see though given that while in their late 20s / early 30s many people reconsider their view of social media, the older generation of people in their 50s /…