amenghra

47 ms·

1. 571.▲
   by amenghra 8y ago

   And when at 3.15am the ACLs kick-in, they’ll end up closing your report as “can’t repro”.
2. 572.▲
   Computational Duplo train track layouts(cr31.co.uk)

   215 points by amenghra 8y ago|19 comments
3. 573.▲
   by amenghra 8y ago

   My ssh key is stored in a yubikey. Haven’t had to type a password for ssh purpose in a long time!
4. 574.▲
   by amenghra 8y ago

   I have found (and reported) at least two similar bugs in Mac OS X's calculator. It's not just a Microsoft thing :) In both instances, Apple didn't respond to the bug report until many years later, when they just closed it.
5. 575.▲
   by amenghra 8y ago

   A fun exercice would be to compare this to SipHash.
6. 576.▲
   by amenghra 8y ago

   I think a non-cryptographic hash function which leverages AES-NI instructions (e.g. by performing one round of AES using a fixed key) will perform better in every possible way: high avalanche effect, low bias AND possibly better performance
7. 577.▲
   by amenghra 8y ago

   For those who don’t know, x86 had support for binary coded decimal (you end up wasting a bunch of bits). AAA converts the result of the addition of two valid unpacked BCD digits to a valid 2-digit BCD number.
8. 578.▲
   by amenghra 8y ago

   I thought about using Unicode, but it felt like cheating. Perhaps someone can fit two games in a single multibyte tweet?
9. 579.▲
   by amenghra 8y ago

   There’s a comment on the page. For some reason, emulators (at least the ones I tried) wait 4x what real machines wait when you use BIOS int 15b 86h. You can tweak the code if you want to play at a faster speed. There’s probably a sound expl
10. 580.▲
    by amenghra 8y ago

    Make sure you check out the floppy version from ~3 years ago. Fits in “old” tweets (ie 140 chars): https://www.quaxio.com/bootloader_retro_game_tweet/
11. 581.▲
    by amenghra 8y ago

    Linux vs BSD (ie Mac OS X). Sorry about that. Also, you shouldn’t paste weird looking things from the internet in your console :P
12. 582.▲
    by amenghra 8y ago

    You can do “magic” with relatively easy things. For example, spend a weekend with https://forthsalon.appspot.com or processing.org and see where you can get to...
13. 583.▲
    by amenghra 8y ago

    It's Tron-ish (the post says Tron, where did you read snake?) :P
14. 584.▲
    by amenghra 8y ago

    Have you heard about merged mining? It’s when one chain recognizes the mining being done on another chain. In some way, you aren’t restarting from scratch. Also, the code powering each cryptocurencies isn’t immutable. People adopt changes;
15. 585.▲
    by amenghra 8y ago

    The post from ~9 months ago by deraadt is worth reading: https://marc.info/?l=openbsd-tech&m=150317547021396&w=2
16. 586.▲
    by amenghra 8y ago

    Google is big enough they own/need several ASNs. Having a dedicated domain totally makes sense.
17. 587.▲
    by amenghra 9y ago

    If you are on a shoestring budget, you can get many things for free/cheap. Eg ask component manufacturers to send you samples, recycle electronics from things you or others throw away, etc.
18. 588.▲
    by amenghra 9y ago

    I authored http://jsfiddle.net/alokmenghrajani/0qo4kq7x/ over 3 years ago...
19. 589.▲
    by amenghra 9y ago

    You’ll notice someone gained access to your system (because the money will disappear) but you’ll have zero clue how they did it. Also, how do you prevent an employee from stealing the funds for themselves? There’s a reason companies use bug
20. 590.▲
    by amenghra 9y ago

    Our team is also doing some fun Bitcoin related things. Feel free to use the above links or email me: crypto+hn (at) squareup (dot) com
21. 591.▲
    by amenghra 9y ago

    There’s a difference between communism and monarchy. It’s not all black and white, but I don’t think you can call Dubai a communist city/state.
22. 592.▲
    by amenghra 9y ago

    You should read "Remote Timing Attacks are Practical" ( https://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf ) published in 2003 by David Brumley and Dan Boneh.
23. 593.▲
    by amenghra 9y ago

    Never host arbitrary user-uploaded files on your site. Put them in a sandboxed domain (e.g. per-user-random-string.<yourdomain>-userdata.com). Being able to upload arbitrary files has enabled many many web security bypasses, with the
24. 594.▲
    by amenghra 9y ago

    Proof that it doesn't work when used in an <img> tag: https://jsfiddle.net/8rcrfpwn/
25. 595.▲
    by amenghra 9y ago

    The first time I heard about IOTA was when I read https://shitcoin.com/iota-cannot-be-used-for-iot-loss-of-fun... It’s a fun read and you’ll probably end up unimpressed to say the least.
26. 596.▲
    by amenghra 9y ago

    But what if Santa is able to convert all that heat into toys...
27. 597.▲
    by amenghra 9y ago

    You know about Lego-backed money laundering? http://www.vocativ.com/underworld/crime/lego-heists/index.ht...
28. 598.▲
    by amenghra 9y ago

    I don't know in this particular case, but in the late 80s, IBM figured out how to move individual atoms (see https://en.wikipedia.org/wiki/IBM_(atoms) ).
29. 599.▲
    by amenghra 9y ago

    The right answer is to specify a HMAC when serving js from third parties. CSP/SRI already enables this. Ideally you should be able to serve content from your own domain + specify the hash, and let browsers optimize things by re-using c
30. 600.▲
    by amenghra 9y ago

    If you keep your wealth as cash, it will get wiped out over time by inflation. Now let’s imagine that you have enough money to buy 4 houses in a city/location you want to live in for the long term. I would say that’s pretty low risk be