A1kmm

15 ms·

121.
by A1kmm 5y ago
Even without using NewSQL databases, it is often very easy to structure your application for application-level sharding. For example, for https://corridorchat.com/ , we have a relatively small number of business accounts (te
122.
by A1kmm 5y ago
The fake FT232RL device in this article is actually a lot better than some of the devices on the market now. I bought an FT232RL breakout on eBay a year or so back, planning to use it in bit bang mode, and it turned out that while it worked
123.
by A1kmm 6y ago
Hi! I'd be interested to hear your thoughts on the pricing - I'm aiming for a low barrier to entry and high volume, hence doing it s a relatively low price per user, and on an annual basis, but would love to know your thoughts. Th
124.
Show HN: CorridorChat lets employees network through random 1:1 video chats(corridorchat.com)
2 points by A1kmm 6y ago|3 comments
125.
by A1kmm 6y ago
I think it is more likely to be lobbyists at companies with business models that directly benefit from short-term policies rather than hedge funds, who could just exit their long position on companies most affected. The key point is that th
126.
by A1kmm 7y ago
In the vast majority of cases integration is by the including a script controlled by the advertising network in the page they are advertising on. So for the purposes of the browser security model, the script already runs in the domain of th
127.
by A1kmm 7y ago
I worked around this with a script that patches the omni.ja zipfile to change the setting to require signing. It needs to be unpatched for updates - I don't allow my normal day-to-day Firefox instance to write to it's own binary a
128.
by A1kmm 7y ago
I wrote this to help with that exact same problem: https://github.com/A1kmm/enable-unsigned-firefox-addons
129.
by A1kmm 7y ago
The problem is the misuse of classifications to keep the public from finding out things which are in the public interest but embarrasing to the government. The raids are the furtherance of the suppression of public interest material being m
130.
by A1kmm 8y ago
Probably more that certain sites are using serverside XSS filters that allow third party content a elements with ping attributes, but not to inject arbitrary JavaScript.
131.
by A1kmm 8y ago
"Take your $thingOfValue elsewhere" still works, it is just that when thingOfValue == "eye balls", the number of people that need to do it before the cost of the loss of those eye balls outweighs the cost of doing someth
132.
by A1kmm 8y ago
All of the same concerns also apply to cash. Businesses can conceal payments they receive in cash. Money laundering doesn't really depend on the currency or form - explaining where wealth cames from is probably easier to fake with cash
133.
by A1kmm 8y ago
Giving customers of banks transparency of the models as a third party could be a good application of causal reasoning. Each individual customer of a bank only has their own parameters, and a yes / no output from the bank. A third party
134.
by A1kmm 8y ago
> only-encrypted (not signed) message (signing is good > practice), Or the client decrypts it even if unsigned, or the attacker signs the message. > clients that do not do MDC (MDC was introduced in 2000, every non-prototype clien
135.
by A1kmm 8y ago
If I have your key, I can send you an encrypted GPG message, without you needing to know who am, or for any kind of message from you back to me. HMACs require a shared secret. GPG does optionally support signing, which provides for integrit
136.
by A1kmm 8y ago
Here is an interesting article from 2013 about the natural history of these spiders with regards to water from Barbara York Main, who started the referenced study: http://ro.ecu.edu.au/cgi/viewcontent.cgi?article=1108&a
137.
by A1kmm 9y ago
It seems very similar in scope to Amazon Macie - it would be good if they mentioned how the two services are different.
138.
by A1kmm 10y ago
Looks like they don't, but they turn off usbhid on that particular port: https://github.com/CIRCL/Circlean/blob/master/circlean_fs/ro... However, that could be bypassed if the USB key acted lik
139.
by A1kmm 10y ago
If it is exactly 1 km you could triangulate to find someone's location. A program to do that would do a bisection search along a line (faking coordinates for the location of the device) to find the point on the line where you transitio
140.
by A1kmm 10y ago
> If entry is null and head is valid segfault on line 10. To get to line 10, we need prev->next == entry. Since we are talking about the case where entry == NULL, that requires prev->next == NULL The for loop condition is prev->
141.
by A1kmm 10y ago
That is a big assumption to make in this case. Firstly, the attacker has a level of control over the type of data that lies before the freed and wrongly coalesced block, and so they have a level of control over how the data they are overwri
142.
by A1kmm 10y ago
Looking at the A records tells an even more interesting story: (for i in *.zone; do expand $i | grep " A " | cut -c 50-; done) | sort | uniq -c | sort -n 1 75.45.179.76 16 75.45.176.15 16 75.45.176.16 25
143.
by A1kmm 10y ago
Lots of ways around this, for example: * Use an expensive KDF to derive the mutex name from some hardware attribute like the mac address or processor serial number (e.g. it takes 5s to compute, and must be done on each machine) - as soon as
144.
by A1kmm 10y ago
According to this article ( https://www.researchgate.net/publication/225376850_Compressi... ), the compressive strength of a perfect diamond is, from the weakest direction, -223.1 GPa. The difference in pressure between
145.
by A1kmm 10y ago
Or the money-for-SCBO thing is a scam and you don't actually get a working SCBO. The YouTube video could easily be a fake by the scammer to trick people into thinking that they will work.
146.
by A1kmm 10y ago
The situation could be even better if the proposition and proof could be written in a machine verifiable form using a proof assistant like Coq. Potentially you could have a section in a maths journal which 'papers' (in the form of
147.
by A1kmm 11y ago
I find most VCS software is not well suited to handling large immutable files (immutable in the sense there shouldn't be two different files with the same vendor, name, and exact version). With a distributed VCS, you probably don'
148.
by A1kmm 11y ago
It is a p-value, not a Bayesian probability. A p-value is the probability of seeing data as or more extreme purely due to chance, not the probability that your data is due to chance. In other words, X is the event of observing data as or mo
149.
by A1kmm 11y ago
All of the statistics are misleading. The third one is particularly so, because they are weighting by s$population * s$homicides_per_100000, i.e. 100000 * homicides which makes it completely meaningless). Starting from the data defined in t
150.
by A1kmm 11y ago
Their primary mission is to defend (including both protecting US information security and gathering intelligence) - cases like this show that they have compromised their direct information security defence mission to further their offensive

More ›