Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
BubRoss
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
76 ms
·
781.
▲
by
BubRoss
7y ago
FinecoBank, a bank with more than 1.3 million customers in Italy, makes customers pay to change their passwords, and suggests they Google their password to check if it is secure. Saved you a click.
782.
▲
by
BubRoss
7y ago
I hope you at least got a diamond with an official certificate containing the picture and signature of the child soldier that found it.
783.
▲
by
BubRoss
7y ago
You seem to be purposely ignoring what I am saying so that you contradict something I didn't say. I doubt people are writing the software for medical devices by directly writing to stack registers (which wouldn't mean the typical
784.
▲
by
BubRoss
7y ago
It is completely ridiculous if you think about the fact that they created a system where people can spam emojis, then banned them for doing it. If you don't want people to do something so easily filtered, just don't let them do i
785.
▲
by
BubRoss
7y ago
I meant working examples. Saying "it's insecure!" and then calling your own words evidence doesn't count. If there are actual exploits or security flaws, then demonstrate them with a working implementation. You seem t
786.
▲
by
BubRoss
7y ago
Why is the routing and fare calculation a big problem? I can see writing to a legacy system being slow, but I would think there could be constant caching somewhere of the data as it is read by anyone, and thus reads could be mostly fast, m
787.
▲
by
BubRoss
7y ago
I said directly. You seem to be implying that it is common for important embedded work to involve manually messing with stack registers directly by the programmer with assembly.
788.
▲
by
BubRoss
7y ago
Are you saying webasm will crash or that it is insecure? These are two different things and you seem to be conflating them. In your posts you have said that it is insecure but when you talk about specifics it just seems to be about crashi
789.
▲
by
BubRoss
7y ago
There is a big difference between modifying the stack control registers directly and modifying general purpose registers directly.
790.
▲
by
BubRoss
7y ago
I don't think they ever meant to actually make CPUs. I think they are just trying to create patents.
791.
▲
by
BubRoss
7y ago
I don't understand what you mean by "a piece of JavaScript code that makes use of such behaviour". Webasm is accessed by javascript, not the other way around. This really sounds like you have an axe to grind with webasm for
792.
▲
by
BubRoss
7y ago
Wouldn't that just corrupt your own program? If there is a security flaw you could demonstrate it.
793.
▲
by
BubRoss
7y ago
It isn't run through a run time, it is meant to be just in time compiled to native instructions. There isn't any garbage collection.
794.
▲
by
BubRoss
7y ago
It is meant to be compiled to native instructions, I don't think there is significant room for hardware acceleration.
795.
▲
by
BubRoss
7y ago
Can you link to an example of this exploit? Does javascript suffer from the same problem?
796.
▲
by
BubRoss
7y ago
You might have to give specific examples with wasm in mind instead of talking about ' combinatorial exoplosions in the state space of the amplified meta system '
797.
▲
by
BubRoss
7y ago
Shared memory can certainly do this. Even separate processes can use shared memory to communicate lock free using atomics. Other than that, I wonder if nested page tables that are normally used for virtualization can be used to separate add
798.
▲
by
BubRoss
7y ago
How would that work exactly and how would it be router insecurity?
799.
▲
by
BubRoss
7y ago
What do you mean by async concurrent and parallel? How is it more asynchronous than regular http?
800.
▲
by
BubRoss
7y ago
I'm not doing drugs all the time, I'm 'biohacking'.
801.
▲
by
BubRoss
7y ago
There -could- be a lot of things. Pfsense and ddwrt were some of the very first router software packages to address DNS rebind attacks. I think saying tomato is more secure and refined than some router that updates itself constantly to sec
802.
▲
by
BubRoss
7y ago
I don't think there is anything that a different language here is going to accomplish that a library couldn't, it seems like the main advantage is the environment that allows for more fluid iteration combined with functions for au
803.
▲
by
BubRoss
7y ago
Things like this seem to me to be putting a language where what you really want is just a focused IDE.
804.
▲
by
BubRoss
7y ago
I don't know what 'refined sugar' means but I have never heard glucose called that.
805.
▲
by
BubRoss
7y ago
Pfsense and ddwrt were some of the first router software packages to fix DNS rebind attacks if that's what you are talking about. If it is not, you will have to explain exactly the vulnerability works.
806.
▲
by
BubRoss
7y ago
This is one of the most insane things I have ever read here.
807.
▲
by
BubRoss
7y ago
Not that I agree that an armed population is the BEST way to avoid tyranny, but saying A helps avoid B isn't contradicted by saying 'we don't have A or B so that can't be true'
808.
▲
by
BubRoss
7y ago
Once I flashed my router with tomato I never had any problems with it again. It just works and needs nothing. Now that I set up a pi-hole I have to worry a lot less about telemetry from TVs and rogue devices. Good technology doesn't n
809.
▲
by
BubRoss
7y ago
I'm not an expert but I'll say a few things. First glucose is a molecule, so I don't think there can be a 'refined' version. Also if glucose was immediately burned it wouldn't have a chance to be turned into fa
810.
▲
by
BubRoss
7y ago
I thought it was a scalable object store service
More ›