JoachimSchipper

13 ms·

91.
by JoachimSchipper 8y ago
Fox-IT | several roles | Delft, the Netherlands | ONSITE | https://www.fox-it.com Fox-IT (part of NCC group) is the leading cybersecurity company in the Netherlands. We are hiring for many positions; for my department specifical
92.
by JoachimSchipper 8y ago
One ever right? I wouldn't count that as "frequent" - lots of programs in memory-safe languages have more/worse bugs than qmail. Of course, the existence of one significant not-too-vulnerable C program doesn't reall
93.
by JoachimSchipper 8y ago
Why would you assume that? Presumably the maintainer is pretty knowledgeable about their project, and the maintainer may be willing to "sell" their time (on the project) for less than market rate.
94.
by JoachimSchipper 8y ago
That is very interesting, but it does sound like you’re measuring engagement (or, less charitably, the effectiveness of the self-organizing distributed boiler room of patio11 fame) rather than, say, assets and earnings. I’d call the latte
95.
by JoachimSchipper 8y ago
Duplicate, see https://news.ycombinator.com/item?id=18382975 instead.
96.
by JoachimSchipper 8y ago
> There's a lot you can do with a collateralized-cryptographic-asset-on-a-distributed-ledger (or stablecoin) that you can't do with a bank account. (...) That would be like if all banks implemented the same standard, and you co
97.
by JoachimSchipper 8y ago
... but in this particular case, people used their e-mail addresses as PBKDF2 salts, so we do have some idea. ;-) (Of course, blaming whatever engineer isn't useful.)
98.
by JoachimSchipper 8y ago
DuckDuckGo just really doesn’t matter to this piece (which is about ideology and power, not tech). Still an error that they shouldn’t have made, but it is a “minor” error.
99.
by JoachimSchipper 8y ago
Because antivirus software itself is pretty terrible? https://arstechnica.com/information-technology/2017/01/antiv... seems a pretty decent overview.
100.
by JoachimSchipper 8y ago
Yes, sorry for writing such a short message - I figured you were probably aware of these considerations, but I was pretty sure that not all your readers were. ;-)
101.
by JoachimSchipper 8y ago
Putting a proxy on your own hostname solves the performance problem, but you need something that parses and re-sends requests, not just a general HTTP proxy - otherwise, the third party can e.g. serve malicious Javascript code to your users
102.
by JoachimSchipper 8y ago
For the specific case of acoustic signals, see https://www.tau.ac.il/~tromer/acoustic/ . For "CPU voltage fuzzing", Google "glitch attack" (e.g. https://wiki.newae.com/Tutorial_A
103.
by JoachimSchipper 8y ago
> cron ... absorbed by the systemd borg This has already happened, right? https://wiki.archlinux.org/index.php/Systemd/Timers Not a systemd fan, myself.
104.
by JoachimSchipper 8y ago
AFAIK, Common Lisp doesn't have a portable threading/multiprocess story, and asdf appears to target the standard / lowest common denominator.
105.
by JoachimSchipper 8y ago
Why do you expect rapid change? Mature industries tend to grind out a few percentage points of efficiency per year; the kind of growth you see in new markets - the internet, mobile - is not the norm, and does not drive most economic growth.
106.
by JoachimSchipper 8y ago
No particular recommendation, but: where have interesting colleagues - or other people you've met - ended up? Could you join them, or learn from their experiences?
107.
by JoachimSchipper 8y ago
Really ? Randomly clicking e.g. Providers > Azure, I see a significant loading animation (the grey lines) - likely slower than just loading a simple new page each time. (Compare e.g. https://docs.python.org/3/libra
108.
by JoachimSchipper 8y ago
CPU usage (but not memory usage) seems to be addressed by the section "Brotli can compress faster than gzip and still produce smaller files", quoting https://blogs.akamai.com/2016/02/understanding-brotlis
109.
by JoachimSchipper 8y ago
I was indeed thinking of (1), albeit just using radix sort - your permutation trick is nicer. But (2) doesn't work in general, because information theory may not allow storing more information in the input array than is already there;
110.
by JoachimSchipper 8y ago
> Can you still solve it in O(N) time and O(1) space if when your code returns the answer the input must be unchanged? I don't think that is possible in general. In some cases, such as your "small integers only" case, th
111.
by JoachimSchipper 8y ago
It's not exactly PGP's security model, but: - if you use SMTP-via-TLS and (IMAP/POP/MAPI)-via-TLS, attackers really can't intercept your mail - unauthenticated encryption still protects your mail spool at rest. Of c
112.
by JoachimSchipper 8y ago
Yes, what bitfields do on the bus is very undefined. Admittedly, a compiler is free to implement a dereference of uint32_t by loading four separate bytes, too, hence the imprecise "very undefined" in the first line...
113.
by JoachimSchipper 8y ago
The original link works for me, for what that is worth...
114.
by JoachimSchipper 8y ago
On one hand, that is ahead of the state-of-the-art; on the other hand, that advance was foreseen. Scary as hell, but no paradigm-breaking sorcery.
115.
by JoachimSchipper 8y ago
Agree. I've used 'uint64_t thing_id' in somewhat-similar situations, to make it visually obvious which type you're dereferencing. (That is, thing_do(foo.other_thing_id) still compiles, but at least it looks wrong.)
116.
by JoachimSchipper 9y ago
To be fair to Linux, it does support an ever-growing list of hardware. It’s not exactly lean, but continually increasing in size is hard to avoid in its case...
117.
by JoachimSchipper 9y ago
I'd just send an e-mail to people who employ "quantum programmers" - there are groups at Google, IBM and Microsoft, as well as at many universities. I do know that the industry groups employ engineers as well as more "pu
118.
by JoachimSchipper 9y ago
You'll be interested in CryptDB.
119.
by JoachimSchipper 9y ago
Yes, quite a bit more informative. Seems Lockheed made an error, but the government didn't detect that error and accepted the planes. I can see why that would lead to a dispute...
120.
by JoachimSchipper 9y ago
There was a way to phrase this that doesn't make believers feel nearly as unwelcome on HN. Please try to find it next time.

More ›