SiebenHeaven

6 ms·

1.
by SiebenHeaven 5y ago
Thanks for the pointer to your interesting paper. My understanding is that TLS spec did not enforce non-repeating nonce, only suggested it and left it to implementers to decide which led to the vulnerabilities you explored. This Samsung one
2.
by SiebenHeaven 5y ago
I am pretty surprised how they allowed reusing IV. Unique IV is explicitly mentioned to be an assumption for AES GCM (first sentence in security section of AES-GCM wikipedia page) How could anyone design TA (i.e application whose whole poin
3.
by SiebenHeaven 5y ago
"We do not break the userland"
4.
by SiebenHeaven 5y ago
Great article, I'm bookmarking it so I can point to it if and when required ;p
5.
by SiebenHeaven 5y ago
Question is would we really get any benefits by this - compilation would take longer by some x amount which may or may not be less than the time linking step takes currently.
6.
by SiebenHeaven 5y ago
If you have looked at rust, you would understand that "Written in Rust" means something more than just the face value. Written in Rust means that there will be less memory/concurrency bugs due to the language itself ruling ou
7.
by SiebenHeaven 5y ago
Most commonly used software such as browsers can abort on OOM, this isn't about those cases at all. In conditions that you do not want to abort, usually you can and would want to allocate pool before hand.
8.
by SiebenHeaven 5y ago
Ah yes, modern git for people using modern c++ If your plain old git works fine for you, there is no need to go looking for modern git IMHO.
9.
by SiebenHeaven 5y ago
Won't turning js off make you one of the few people in the world that do this and hence easier to fingerprint?
10.
by SiebenHeaven 5y ago
This is the real question. Especially for vaccines that mimic the spike protein to make another attenuated virus look like a coronavirus.
11.
by SiebenHeaven 6y ago
A ASUS phone (zenfone 2) had this hardware superresolution feature you are talking about
12.
by SiebenHeaven 6y ago
So ... Microsoft has a a threat modelling tool. Wonder if it existed and used when these designs were made.
13.
by SiebenHeaven 6y ago
Excellent example of why one should attempt to limit attack surface.
14.
by SiebenHeaven 6y ago
Why do you say that? (genuine question)
15.
by SiebenHeaven 6y ago
If you squint hard enough, deep learning can be seen as programming. A computer (human) is used to train a model (write and compile a program). The generated model (compiled program) is then used for inference (ran) on target machine with n
16.
by SiebenHeaven 6y ago
On second thoughts, maybe I underestimate developer productivity?
17.
by SiebenHeaven 6y ago
Fair enough, however I don't get how this ties up to "high speed trading systems". It can be said to be a general developer productivity advantage, not an advantage from technical perspective for this specific domain (which i
18.
by SiebenHeaven 6y ago
Seems like bending over backwards to use Java. If you are using Java in a c-like fashion, what's so bad with C++ which is c-like by default and has some Java-like features?
19.
by SiebenHeaven 6y ago
Or you could get fzf innyour current shell for most of the features (the command history search, file preview/open, etc). Familiar syntax is a big plus though, a point on which most shells leave a lot of desired.
20.
by SiebenHeaven 6y ago
I think there's an option in settings to select the primary display - if you set that to the external display, theoretically it should work. My laptop stops sleeping on lid close with this.
21.
by SiebenHeaven 6y ago
Beware, there is a sign-in wall on this "free" introduction that comes up after a couple of topics. Edit: this seems to be the case only on the mobile version
22.
by SiebenHeaven 6y ago
There's thousand such threats to humanity that need to be prevented even right now. The real problem is determining which threat is real and prioritising. Think of it like you are a celebrity. You recieve thousands of threats daily, mo
23.
by SiebenHeaven 7y ago
Seems significantly slower to me on my 3G network compared to hn
24.
by SiebenHeaven 7y ago
They have video conferencing/video calling software.
25.
by SiebenHeaven 8y ago
Are these as performant/optimised in terms of time and space complexity as they can be?