amenghra

58 ms·

691.
[2003] Myths and Mysteries of Science(lhup.edu)
1 points by amenghra 9y ago|0 comments
692.
by amenghra 9y ago
This example isn't great (PI is too trivial), but it seems to touch on the concept of dependency injection. I would much rather work with a codebase that uses DI than one that doesn't. In practice, it seems languages like Java hav
693.
by amenghra 9y ago
https://en.wikipedia.org/wiki/Fantastic_Voyage_II:_Destinati...
694.
by amenghra 9y ago
"circular hash attack" left me confused and waiting to hear the full story. I totally agree with "Extraordinary claims require extraordinary evidence".
695.
by amenghra 9y ago
... or create 19 fake accounts (or pick 19 random people you don't care about) and then target'em all.
696.
by amenghra 9y ago
laie makes it sound like they found two things (free-start collision attack and circular hash attack). I agree the free-start part isn't very interesting but I don't think we have enough information to confirm or dismiss whether t
697.
by amenghra 9y ago
It's unfortunate that proof.py doesn't give an example of a message block that leads from h0 to the q._h constant. I.e. Free-start collisions don't let you create two PDFs with the same sha256 hash.
698.
by amenghra 9y ago
0rtt is only for resuming sessions. I believe the first handshake won't be any faster with 1.3. Still neat.
699.
by amenghra 9y ago
Search for "distance bound protocol" if you want to read about current crypto research to prevent relaying.
700.
by amenghra 9y ago
In 2017, one ought to use browsers' native crypto API instead of doing crypto in js...
701.
by amenghra 9y ago
Also relevant: http://hackaday.com/2015/03/28/arduino-srl-to-distributors-w...
702.
by amenghra 9y ago
You can do EMV in under 4 seconds. Source: https://squareup.com/townsquare/weve-chipped-away-at-emv-tra... and http://www.digitaltransactions.net/news/story/With-an-Update...
703.
by amenghra 9y ago
Sharing your apartment with your newborn is terrible. It's so much easier when you get them their own space early, no hearing all the crying in the middle of the night and all.
704.
by amenghra 9y ago
For code: create a readme (for your future self) that documents the state of things and dump the whole folder/project on github. Often times, you'll have a hard time running old stuff you wrote (finding the same versions of the co
705.
by amenghra 9y ago
Some languages have built-in support for writing grammars (parsers, lexers). In many cases, it encourages engineers to write re-usable pieces of code instead of one-off and hard to read regular expressions. Too bad that's not the case
706.
[1989] Security Problems in the TCP/IP Protocol Suite [pdf](users.ece.cmu.edu)
3 points by amenghra 9y ago|0 comments
707.
by amenghra 9y ago
Great work, congrats!
708.
by amenghra 9y ago
I think the car analogy isn't that bad. New classes of security issues get discovered over time. Development processes which are considered "state of the art" at one point can become unacceptable 10 years down the road. A dec
709.
by amenghra 9y ago
http://alf.nu/ZipQuine
710.
Keylogger Found in Audio Driver of HP Laptops(bleepingcomputer.com)
29 points by amenghra 9y ago|3 comments
711.
by amenghra 9y ago
If you are browsing the web with a 10 year old browser you are opening yourself up to a ton of security bugs. Whether json responses contain a while loop or not isn't going to make a difference. The reason Google and Facebook keep this
712.
by amenghra 9y ago
TLS 1.3 may solve some things. It depends what you lean by "the privacy issues"...
713.
by amenghra 9y ago
Get an icestick (fpga on a USB stick). You can use an entire open source tool chain (thanks to great reverse engineering work) although I would use the default tools even if it implies running Windows in a VM. Some other boards a pretty sma
714.
by amenghra 10y ago
There are websites such as https://www.datarefuge.org/ (Building refuge for federal climate & environmental data) which have archived the data. Sad nevertheless. There are also files on archive.org, but I feel they are
715.
by amenghra 10y ago
Languages that bind you to a garbage collector aren't always well suited for "systems programming". You might not want to pay the memory or latency cost. It's not always clear cut though. I think Go is a great language f
716.
by amenghra 10y ago
Charles proxy, Paros, Burp and Fiddler are all great tools to intercept and modify traffic. Great for debugging or just inspecting/reversing/hacking in general. Im glad if similar tools are being made available as browser extensio
717.
by amenghra 10y ago
You would think curl's perf is bound by the network latency/bandwidth and that intrusive lists wouldn't make a signifiant difference.
718.
by amenghra 10y ago
Look at https://www.google.com/maps/@35.3772801,-120.0623295,12136m/... Keep zooming in until you see cars and buildings. Then you'll realize how big this plant is (it's not even the largest such project
719.
by amenghra 10y ago
Sure, but that seems a minor difference. There are more important differences: go.secrets calls panic() if it fails to lock, memguard seems to log a warning with Printf. go.secrets protects against buffer overflows and underflows using a ca
720.
by amenghra 10y ago
Sports trainers have said this kind of stuff. Helps with mental preparation.

More ›