aexaey

13 ms·

61.
by aexaey 10y ago
Truly impressive overall. Unfortunately, it looks like training set was way too small. Look for example at reconstruction of #13 here: https://phillipi.github.io/pix2pix/images/index_facades2_los... Notice white t
62.
by aexaey 10y ago
/bin/false is commonly specified instead of a shell in /etc/passwd for accounts that are not supposed to have interactive logins.
63.
by aexaey 10y ago
There is also an sstrip tool [1], written by the same Brian Raiter already mentioned here. It strips a bit more eagerly: $ gcc tiny.c -O3 -o tiny; wc -c tiny 8456 tiny $ strip tiny; wc -c tiny 6224 tiny $ sstrip tiny; wc -c
64.
by aexaey 10y ago
Also, you don't actually need a "true" binary for a shell of any reasonable vintage: # which true /usr/bin/which: no true in (/usr/local/sbin:/usr/local/bin:/usr/sb
65.
by aexaey 10y ago
1GB is pretty close to the average it seems: 65,110,000 [1] * 90% [2] * 18.2% [3] = 10665018 subscribers 10PB / 10665018 = 937MB per subscriber per month. [1] Total population of the UK, https://en.wikipedia.org/wiki&#x
66.
by aexaey 10y ago
> Intel platforms also had an ARC processor That is true for older designs. But didn't Intel switch from ARC to SPARC for their ME core not that long ago? Discussed here a while back: https://news.ycombinator.com/ite
67.
by aexaey 10y ago
Most Chromebooks have embedded controller running on ARM specifically. https://www.chromium.org/chromium-os/ec-development
68.
by aexaey 10y ago
Also: nft add rule nat ip saddr {10.0.0.0/8, 192.168.0.0/16} tcp dport {http, https} dnat 1.2.3.4 vs. iptables -t nat -A PREROUTING -m tcp -p tcp -s 10.0.0.0/8 --match multiport --dports 80,443 -j DNAT --to 1.2.3.4
69.
by aexaey 10y ago
> Otherwise, the future is bleak for your smart toaster Well, no. Smart toaster is going to be just fine. And that's the core of the problem here. Much like it is the case with polluting diesel cars, owners are reasonable happy with
70.
by aexaey 10y ago
Care to elaborate how/why exactly CDN would be different here?
71.
by aexaey 10y ago
> Ycombinator.com, why do you have a TTL of 12 seconds? You either meant to say 60 seconds, or forgot to factor your local caching DNS resolver in. Here: $ dig +short soa ycombinator.com ns-225.awsdns-28.com. awsdns-hostmaster.amaz
72.
by aexaey 10y ago
From what I understood looking at the photos in the article, "relays" are some fancy-looking external box. It is quite possible that those are "pulse relays", i.e. RPi sends a short voltage pulse to switch relay on, then
73.
by aexaey 10y ago
WiFi handles the same problem by having CSMA/CA (Carrier Sense Multiple Access/Collision Avoidance) and MAC-level retransmissions: http://www.labs.hpe.com/personal/Jean_Tourrilhes/Linux/Linux...
74.
by aexaey 10y ago
Are you suggesting that people should get paid for receiving traffic?
75.
by aexaey 10y ago
There are a surprising number of users for ptrace. E.g. upstart uses it to count forks (presumably to mitigate fork bombs), as geofft has pointed out above.
76.
by aexaey 10y ago
And for earlier kernel versions, there is an STAP patch: 1) On the host, save the following in a file with the ".stp" extension: probe kernel.function("mem_write").call ? { $count = 0 } probe syscall
77.
by aexaey 10y ago
Good point, edited to clarify.
78.
by aexaey 10y ago
CVE-2016-5195 This flaw allows an attacker with a local system account to modify on-disk binaries, bypassing the standard permission mechanisms that would prevent modification without an appropriate permission set. This is ach
79.
by aexaey 10y ago
Indeed, Dutch view this two ways to use bicycle very differently. There are even completely different verbs to describe that: - fietsen i.e. literally "bicycling" would refer to riding an opafiets [1] bicycle, at moderate spee
80.
by aexaey 10y ago
Not quite. Weakness is later in the chain. Secure second-stage loader (BL2) loads secure third-stage loader (BL31) from insecure flash storage, then verifies it by calculating SHA-256 hash of it and comparing that to the value stored in th
81.
by aexaey 10y ago
As far as I understood, "high fructose" in HFCS is only high relative to the corn syrup that was hydrolyzed, but not processed with isomerase, i.e. essentially compared to corn syrup with no fructose at all. Most commonly used HFC
82.
by aexaey 10y ago
Why can't I? For the purpose of this argument, Windows and Mac keyboards aren't all that different. See for yourself - modern mac keyboards have two layouts: - Full / 105-key layout, which is a copy of Windows 105-key layout
83.
by aexaey 10y ago
For me, killer feature of Chromebook is keyboard layout - standardized throughout lineup, and with all non-essential keys thrown out. Lower row with bare minimum: ctrl, alt, space, alt and ctrl - just plain excellent - clean layout, left ct
84.
by aexaey 10y ago
I wonder how much of this recent IPv4 address count stagnation OP is talking about, is in fact due to increasing prevalence of carrie-grade NAT as opposed to real IPv4 deployment slowdown.
85.
by aexaey 10y ago
Oops, QUIC is now supported: https://github.com/mholt/caddy/releases/tag/v0.9.0
86.
by aexaey 10y ago
Sure, if you want to serve TCP reset / ICMP port-unreachable to blocked users, then yes - iptables or external firewall is a more natural way to do it. But what if you want to serve different content to "blocked" users? i.e.
87.
by aexaey 10y ago
- Can Caddy work as a reverse proxy to other backend services? Yes. Use this in your Caddyfile: proxy /api 10.20.30.40:8080 - And if so, can I use QUIC for the backend No, QUIC is not supported at the moment: https:/&#x2F
88.
by aexaey 10y ago
There are some features in Caddy that are simply outstanding - HTTP/2 and Let's Encrypt integration, to name a few - both pretty much work out-of-the-box with zero-configuration. On the other hand, there are still some gaping hole
89.
by aexaey 10y ago
Well done for first steps. Even (one of) mail servers' IPv6 record has a valid reverse record, very nice! Now, how about adding reverse to the main AAAA too? Also, what's up with one of MX'es lacking IPv6 address? With both
90.
by aexaey 10y ago
Helium [...] is critical to [...] MRI scanner Is that still the case, now that high-temperature superconductors are available, which work just fine while being cooled with much cheaper liquid nitrogen instead of requiring liquid hel

More ›