Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
GlitchMr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
17 ms
·
121.
▲
by
GlitchMr
7y ago
I sorta wonder what will happen to ads in Microsoft's own games (in particular Solitaire). I kinda hope they will be removed, but I doubt that would actually happen.
122.
▲
by
GlitchMr
7y ago
I kinda disagree. With C, you risk old autoconf scripts breaking, depending on library versions that operating systems don't include anymore, compilers learning how to exploit undefined behaviour they didn't exploit before, progra
123.
▲
by
GlitchMr
7y ago
For something more ridiculous, feel free to check out this 281 language Polyglot: https://codegolf.stackexchange.com/questions/102370/add-a-la...
124.
▲
by
GlitchMr
7y ago
Destroying Haskell with 1 line of C: https://www.ioccc.org/2019/burton/prog.c
125.
▲
by
GlitchMr
7y ago
Yeah, kinda agreeing here. The hash length will need to be increased anyway, but concatenation of SHA1 and SHA256 will be 104 bytes in total when displayed (40 + 64), which is a lot. It may be a better to display SHA-256 commit hashes, but
126.
▲
by
GlitchMr
7y ago
To be fair, the prefix problem would exist no matter what hash function would you pick. GitHub displays 7 characters of a hash, giving 28 bits. You could very quickly generate collisions with birthday attack in pretty much no time. Prefixes
127.
▲
by
GlitchMr
7y ago
This doesn't work for collision resistance attacks. git commits aren't password hashes. Specifically, the attacker's goal in this case is to find different values a and b for which hash(a) = hash(b), rather than finding a val
128.
▲
by
GlitchMr
7y ago
By the way, this may be rather obvious, but concatenating hash algorithms is a terrible idea for passwords. A password cracker could easily pick the less secure algorithm to crack, and ignore the other hash. Note that git doesn't conce
129.
▲
by
GlitchMr
7y ago
I'm well aware concatenation wouldn't necessarily improve the strength. However, the idea is, even if SHA-1 was hopelessly broken. CONCAT(SHA1(x), SHA256(x)) would be at least as strong as SHA-256 (where "at least" means
130.
▲
by
GlitchMr
7y ago
I wonder if it would make sense to use `concat(sha1, sha256)` hash algorithm. This wouldn't change the prefixes while improving strength of an algorithm (by including SHA256 in a hash).
131.
▲
by
GlitchMr
7y ago
Yes.
132.
▲
by
GlitchMr
7y ago
Not really. A lot of DOM tests involve try/catch, and checking whether the exceptions are precisely right. Web applications tend to not intentionally throw exceptions. Acid3 also tested some other things like SVG fonts. SVG fonts speci
133.
▲
by
GlitchMr
7y ago
Acid1 and Acid2 are kinda legacy. Acid1 is so old that IE6 passes it. Acid2 was mentioned in an article. Acid3 is kinda... controversial. Its tests were kinda nonsensical and hardly useful. Some of things it asked for (in particular about S
134.
▲
by
GlitchMr
7y ago
After it became clear they had no criminal intent, they decided to change the crime to one that doesn't require criminal intent. The initial charges were on "third-degree burglary", but then changed to "misdemeanor tresp
135.
▲
by
GlitchMr
7y ago
Unfortunately, while HTTPS is very common, this isn't really the case with HSTS Preload, so active MitM attacks are still a threat.
136.
▲
by
GlitchMr
7y ago
Same. When I heard about Scihub, this was the page I usually downloaded papers from. I used to have access to a lot of journals, but downloading a journal was annoying. Meanwhile, Scihub provided a field to put an URL in, and you got a PDF
137.
▲
by
GlitchMr
7y ago
Unfortunately, providing access to everyone would be incompatible with publishers' business models. As long it's more profitable to not provide the access the everyone, business will continue to do so.
138.
▲
by
GlitchMr
7y ago
Those aren't lost sales. Nobody sane would pay $40 or so for a 20 pages paper. Even if Scihub didn't exist. Publishers know nobody pays that. There are other options free for academic, such as subscriptions universities pay for or
139.
▲
by
GlitchMr
7y ago
I don't think copyright will be extended again because of successful SOPA protests. Disney knows they cannot really succeed now at extending copyright, so they don't bother to.
140.
▲
by
GlitchMr
7y ago
This is malware, as simple as that. Chances are Google will soon blocklist this extension as side-loading extensions is NOT supported, see https://blog.chromium.org/2013/11/protecting-windows-users-f... .
141.
▲
by
GlitchMr
7y ago
> We’re happy to be the first VPN provider to open source apps on all platforms (Windows, macOS, Android, and iOS) and undergo an independent security audit. I believe Mullvad did that first. Both security audit and providing an open sou
142.
▲
by
GlitchMr
7y ago
Back-up software can use NTFS/ReFS Shadow Copy in Windows. This shouldn't cause issues with SQLite. Copying files is only an issue for manual back-ups done without special software.
143.
▲
by
GlitchMr
7y ago
As I said in a comment you responded to. > Programs can deal with the issue by performing atomic full writes by performing renames, but most programs don't bother to. SQLite cannot do that, because it cannot afford doing full writes
144.
▲
by
GlitchMr
7y ago
Yes. However, keep in mind it's not just SQLite, but pretty much every program that has any kind of state. For instance, a program may save its state into a file every time it changes by truncating the file and then writing new content
145.
▲
by
GlitchMr
7y ago
Realistically, I don't think they could have purchased either of those. GOG is a rather niche store with a strategy contrary to Epic Games (in fact, there is this popular item on a functionality wishlist: https://www.gog.com
146.
▲
by
GlitchMr
7y ago
It's complicated. There is in fact a hidden option that makes the web browser less unique, but using it has side-effects such as retrieving pages in English with UTC timezone, noticeably reducing the browser view point size, breaking W
147.
▲
by
GlitchMr
7y ago
SHA-256 is shorter, and there isn't much of a difference between SHA-256 and SHA-512 (they are both using SHA-2 algorithm).
148.
▲
by
GlitchMr
7y ago
There are multiple reasons. 1. Using instructions that don't exist on a given CPU will cause the program to crash. 2. `core::arch` exists so that stable Rust programs could make use of SIMD instructions for performance (in particular,
149.
▲
by
GlitchMr
7y ago
You don't need macros for generic code either :), Rust has generics. fn sqr<T: Copy + Mul>(x: T) -> T::Output { x * x }
150.
▲
by
GlitchMr
7y ago
A function internally called by `errno` macro is part of an ABI, and changing its name will break all already compiled applications for no real reason. Most operating systems provide stable libc ABI (exception: OpenBSD). So it's a rath
More ›