ambrop7

38 ms·

1. 331.▲
   by ambrop7 13y ago

   Actually, -g should not change the output of the compiler in any other way than the presence of debug symbols. I can confirm that right here, where I'm building code for an ARM microcontroller, the resulting .bin files produced by objd
2. 332.▲
   by ambrop7 13y ago

   Hence the "or". In this case, stupidity is equally unacceptable.
3. 333.▲
   by ambrop7 13y ago

   I am interested to hear your opinion: at what point should a vulnerability be considered unacceptable?
4. 334.▲
   by ambrop7 13y ago

   As I said: It's not just another security bug. It's an easy to spot bug, in the most critical part of the code, of a fundamental security library. THIS is what makes it unacceptable. It pretty much means the change has never gone
5. 335.▲
   by ambrop7 13y ago

   If you configure that hotspot name with WPA-PSK, it should not attempt to connect to hotspots with the same name that are not WPA-PSK. If the hotspot it tries to connect to does not have a matching PSK, it should fail the handshake (and no,
6. 336.▲
   by ambrop7 13y ago

   Anyone can hide his access point in a backpack and claim to be Starbucks. Or anything else - most people don't care, they'll hook themselves to just about anything. This isn't true of home networks using PSK, where the AP and
7. 337.▲
   by ambrop7 13y ago

   Unless your box has already been pwnd and the update installer has been modified to not install that update in the way it was meant to be.
8. 338.▲
   by ambrop7 13y ago

   It's getting attention because: - It's an easy to spot bug, - in the most critical part of the code, - of a fundamental security library, - and it's been there for a long time, nobody knows how many systems have already been
9. 339.▲
   by ambrop7 13y ago

   > a subset would be good i guess No. NCD was designed with the goal that you can program whatever the heck you want. By design, the core NCD language does not have any knowledge of network things. Only some commands do.
10. 340.▲
    by ambrop7 13y ago

    I was just saying that NCD is not particularly exposed to attacks in the first place. Yes, the DHCP needs to be moved outside, but everything else is pretty much a non-issue. The IPC that NCD can do (if you use it) is no more exposed than D
11. 341.▲
    by ambrop7 13y ago

    This was not designed for end users, it was designed for programmers who want to implement their very specific network configuration requirements - in a language well suited for the task where dynamic configurations are easy to implement pr
12. 342.▲
    by ambrop7 13y ago

    Here I should mention my NCD programming language[1], originally developed for programming network configurations. Contrasted to networkd, it is an imperative programming language with a twist (backtracking) that makes it practical for this
13. 343.▲
    by ambrop7 13y ago

    Assuming that Timmy and Diane are simulating a universe identical to their own, they will not succeed at changing their future relative to their simulation (almost by definition). One solution to this is that they never have the idea to try
14. 344.▲
    by ambrop7 13y ago

    I learned about the for loop hack from avr-libc[1][2]. It even does some preprocessor abuse to implement different kinds of atomic and non-atomic sections. [1] http://www.nongnu.org/avr-libc/user-manual/group__util
15. 345.▲
    by ambrop7 13y ago

    If they went the NIH way and implemented the XML parsing themselves, this never would have been an issue.
16. 346.▲
    by ambrop7 13y ago

    1. Define exactly what the deserialization output should be. 2. Implement it that exactly that way. Now it's simple. Does the definition in part (1) include execution of arbitrary commands?
17. 347.▲
    by ambrop7 13y ago

    And there is no need to make it parallel. There is very little computation the init itself needs to do - most of the time it is waiting for things to happen, and the time it takes to react to events is negligible.
18. 348.▲
    by ambrop7 13y ago

    Personally I dislike how Python3 is infected with Unicode. It introduces quite some complexity (and probably inefficiency) when all you want to do is work with bytes. Even if I am actually dealing with UTF-8, I should have a choice to treat
19. 349.▲
    by ambrop7 13y ago

    Finished, see my top level comment.
20. 350.▲
    by ambrop7 13y ago

    Here, I just made one: http://www.thingiverse.com/thing:193022 Yes, it rotates and passes shafts successfully :) Based on this model[1] with some modifications for printability. I've printed it in 6 parts and glued it
21. 351.▲
    by ambrop7 13y ago

    Printing in progress, stay tuned for results ;) Proof: http://www.pasteall.org/pic/show.php?id=63268 I've cut each stator into two parts vertically so it can actually be assembled by gluing them around the rotor,
22. 352.▲
    by ambrop7 13y ago

    My thoughts exactly. The design of the unix shell is broken, and not anything else. In particular, the lack of a well supported list/array. If there was a list type, you could store filenames in a list, and there would be no reason for
23. 353.▲
    by ambrop7 13y ago

    I think the author is just taking into account the Dunning–Kruger effect.
24. 354.▲
    by ambrop7 13y ago

    Thanks for the link, that is some interesting info. I've only skimmed it, but yes, I'm aware that DHCP requests can be made without a discover phase (I've had to read the RFC to implement DHCP in NCD ;). I suspect that it&#x2
25. 355.▲
    by ambrop7 13y ago

    Actually, if you use efficient software, you can get lots of stuff running in basically no time. In particular that means avoiding shell scripts and using as little external commands as possible. In fact, I'm pretty sure that if the au
26. 356.▲
    by ambrop7 13y ago

    I think it's because the seas are textured while the land is all the same color, which is the opposite of how it is in reality.
27. 357.▲
    by ambrop7 13y ago

    The "condom" can be designed to be transparent with regard to one or more kind of power negotiation, though this would require a microcontroller, and possibly some analog circuicity for proprietary resistance-based negotiations.
28. 358.▲
    by ambrop7 13y ago

    Yeah, since it feels like a plane the up/down controls should be inverted.
29. 359.▲
    by ambrop7 13y ago

    The interpreter is a userspace program. You can run if from a terminal if you wish and use it as a general purpose scripting language (though it's not quite that useful in that regard, yet). Oh, and it also runs in the browser ;) http
30. 360.▲
    by ambrop7 13y ago

    For complex setups you sooner or later have to dynamically add/remove rules, based on values only known at runtime (such as an IP address obtained by DHCP). Then, a simple list of rules doesn't suffice, and some kind of programmin