arielby

13 ms·

61.
by arielby 12y ago
Rust always has unwinding, and the finalizer can just call `abort` to make this as linear as you can.
62.
by arielby 12y ago
A function named "createFileWithContents" is clearly intentional - through its creator probably just hadn't realised the security implication, making this a negligent, rather than malicious, backdoor, not unlike default route
63.
by arielby 12y ago
UTC just provides a labeling for TAI/TT seconds, so a count-of-UTC-seconds timestamp is identical to a count-of-TAI-seconds timestamp (assuming the same epoch). Both are different from a count-of-non-leap-UTC-seconds aka POSIX time.
64.
by arielby 12y ago
According to the C FAQ, Whenever an array appears in an expression, the compiler implicitly generates a pointer to the array's first element, just as if the programmer had written &a[0]. The exceptions are when the array is the ope
65.
by arielby 12y ago
Outer space is very, very far from thermal equilibrium. The temperature of the interplanetary plasma is different from the temperature of the redshifted-big-bang-light (CMB) which is different from the temperature of sunlight. The temperatu
66.
by arielby 12y ago
Enough of the internet works for me with `javascript.enabled` set to false.
67.
by arielby 12y ago
The rather-low percentage hardware faults limiting availability may not be just because of rarity but more because hardware has a rather small set of "noise" failure modes, which are easily handled by redundancy, while programmer&
68.
by arielby 12y ago
You can check your libc version by running libc - e.g. `/lib/x86_64-linux-gnu/libc.so.6`
69.
by arielby 12y ago
The more important sites have user credentials that should be secret, and therefore have to use SSL anyway, so NSA will do their best to break it anyway.
70.
by arielby 12y ago
That's an argument against showing scary warnings on self-signed certs, not against SSL. It would be nice if there was a httpr:// scheme that would be like HTTPS but without certificate checking.
71.
by arielby 12y ago
What's exactly the difference between cookies and session identifiers exactly? There's no law requiring you to send kilobytes of cookies (news.ycombinator.com gets by with a 22-byte cookie). Of course the way HTTP cookies handle a
72.
by arielby 12y ago
Police-States would try to trojan the CA infrastructure anyway – its too much tempting a target. Inspecting proxies work well enough with HTTP 1.1, there's no real need to improve them, and even if we do, it should be done via a proxy
73.
by arielby 12y ago
`safercopy` also does not always terminate, say if one of the passed pointers point to invalid memory, which then segfaults when accessed. Similarly, you can have problems if the destination buffer overlaps the saved return address of the s
74.
by arielby 12y ago
Actually, with time, the sign of (iXX)((uXX)x-(uXX)y) is the "odometer comparison" of x and y, which handles overflow more gracefully than the typical < comparison.
75.
by arielby 12y ago
You can also do the comparison over larger integers, for example int cmp(int x, int y) { return (int) (((long)x-(long)y)>>32); }
76.
by arielby 12y ago
I have 150 processes on my Linux laptop, but very rarely are more than 4 of them runnable at the same time.
77.
by arielby 12y ago
Arsenic & Mercury are elements, which also can't be neutralised by the right chemical reactions.
78.
by arielby 12y ago
LCD and LED displays are made of little coloured rectangles, and many programs are writing for them.
79.
by arielby 12y ago
First-Order Logic (and therefore SQL, which is based on it) sucks at describing graphs and highly heterogeneous structures. If you're working with these, you should have a better representation.
80.
by arielby 12y ago
Run-time code generation being faster than static code generation isn't fundamentally weird: as an example, take a program that takes (pure) C code as input, evaluates it, and returns its exit status – compiling the code and running it
81.
by arielby 12y ago
Macro-scale evolution does not go through epigenetics, but mostly "knob tweaks".
82.
by arielby 12y ago
These adjustments look so impressive... not.
83.
by arielby 12y ago
A shell certainly is not supposed to evaluate random environment variables.
84.
by arielby 12y ago
Environment variables are not supposed to be "evaling options in transit". They are a decent method for passing small amount of data to a program you start.
85.
by arielby 12y ago
Note that if you try to do the exploit via the hostname or another common option, the CVE-2011-0997 fix will stop you. However, the fix is incomplete - it does not check all options, only the ones the old CVE's fixers thought of.
86.
by arielby 12y ago
ISC DHCP Client has a check_option_values function (at the end of dhclient.c), which (if it is properly used, I don't understand the surrounding code enough) should prevent this from being exploited.