ablankst

4 ms·

1.
by ablankst 9y ago
I'm on the engineering team at Blockstack, and wrote the client-side encryption functions used by applications. I totally agree with the idea that if software uses encryption, it should be documented, open-source, and ideally use a sta
2.
by ablankst 9y ago
The following example is pretty much the chief reason why I will not be porting much software to Python 3: $ python3 Python 3.6.3 (default, Oct 3 2017, 21:45:48) [GCC 7.2.0] on linux Type "help", "copyright",
3.
Show HN: Hosted Preview of the Blockstack Browser(github.com)
6 points by ablankst 9y ago|0 comments
4.
by ablankst 9y ago
> Even if thousands of developers from HN switch, that would hardly move the needle. Ordinary users just won't care about any of this. Thousands of developers from HN make websites . If they switch to Firefox, at the very least, th
5.
by ablankst 9y ago
I agree about this ethical concern, but this attack also shows that reporting the holes to manufacturers is of limited use -- these exploits have been known to manufacturers since at least March, and while patches have shipped, the comput
6.
by ablankst 9y ago
From [1] "in the case of blocking workloads, it’s extremely difficult to determine the number of threads that optimizes overall throughput because it’s hard to determine when a request will be completed." So the argument they make
7.
by ablankst 11y ago
Have you thought much about address space randomization? It's a reasonably effective security strategy, but it essentially requires enough unused bits in the address space. If you have a system with one big memory space, presumably you
8.
by ablankst 12y ago
This is actually an interesting point. A compromised user table could conceivably be used for all sorts of nefarious purposes. If the attackers "having access" to the information in that table includes the ability to modify th
9.
by ablankst 12y ago
What about this exploit really requires a US supply chain? Why do you believe that the Five Eyes have fewer exploits for hardware originating from BRICS nations? Don't intelligence agencies have explicit missions to spy on those countr
10.
by ablankst 12y ago
Let the switch cost something like 1 unit and the analysis on the Wikipedia example still holds - at the switch, drivers face a choice between a 41 minute route and a 45 minute route. Yes, this paradox is a property of the specifics of the
11.
by ablankst 13y ago
In Go, and other type-safe languages, the compiler usually knows exactly which ints are being used as pointers. This is the difference between "precise" and "conservative" GC and is one of the reasons that comparing GC p
12.
by ablankst 13y ago
If you check out the draft ( http://tools.ietf.org/html/draft-ietf-httpbis-http2-04 ), it looks like either the client or the server is able to initiate and send data along the HTTP/2.0 streams. And in Section 2.2: