bascule

32 ms·

271.
by bascule 12y ago
We're aiming for a project where all commits receive public scrutiny. This includes how the project is governed. We're discussing contributing guidelines here: https://github.com/clearcrypt/clearcrypt/pul
272.
by bascule 12y ago
See also: http://cryptosphere.org/
273.
by bascule 13y ago
floats :(
274.
Nuke TLS from Orbit(clearcryptocode.org)
5 points by bascule 13y ago|0 comments
275.
by bascule 13y ago
Does this use InvokeDynamic?
276.
by bascule 13y ago
I don't care about PHP
277.
by bascule 13y ago
Event driven I/O like this? (hey look ma, it's callback-free!) https://github.com/celluloid/nio4r https://github.com/celluloid/celluloid-io Actor framekworks like this? http:/&#x2F
278.
by bascule 13y ago
Those are just the data races they found, though. There are quite likely many more.
279.
by bascule 13y ago
There's a reason why that extra tooling exists: to solve a wider range of problems
280.
by bascule 13y ago
> That is a lot of tooling to handle concurrency. Comparatively I think Node has some advantages. Node forces everything into a single-threaded event loop. That's great if you're writing a chat server. It's not so great if
281.
by bascule 13y ago
It's easy to say that, but when Go added a race detector, they immediately found 40 data races in the standard library
282.
by bascule 13y ago
Sidebar: Rust solves this problem by tracking the lifetime of memory throughout the program, ensuring there's no unsafely shared mutable state.
283.
by bascule 13y ago
It's not a dichotomy. The answer is that both models are useful, and most systems support hybrid threaded and evented modes. Node.js only supports one model, which is a huge drawback.
284.
by bascule 13y ago
Do you know what threads cost? Probably not. Linux has an O(1) scheduler. Threads do have a cost in terms of virtual memory, but on 64-bit architectures, this is a non-issue. Optimizing for "C10K" (which, btw, was a big number i
285.
by bascule 13y ago
http://celluloid.io/ https://github.com/jruby/jruby/wiki/Concurrency-in-jruby > Speaking of -- have you ever heard of evented i/o? Yes, I wrote a Ruby wrapper to libev before Ry wrote
286.
by bascule 13y ago
> In a synchronous language, you HAVE TO go to one shard, then another, then another, and the time is 10x longer. Have you ever heard of threads?
287.
by bascule 13y ago
First: reactor-based event loops aren't always a performance optimization. Round tripping I/O operations through an event loop adds latency. Node's approach is great if you have large numbers of mostly idle connections, such
288.
by bascule 13y ago
You're confusing concurrency and parallelism. Node is a single-threaded event loop. It can only do one thing at a time. Node can perform many operations concurrently, but they're not running in parallel. If any one operation block
289.
by bascule 13y ago
In addition to everything else that's wrong with DNSSEC, using Shamir to share a digital signature key is a silly idea. Multisignature trust systems / threshold signatures provide the same functionality, but without having a singl
290.
by bascule 13y ago
Yes, you are correct. Unless browser extensions are used (and even then) the web is not a good platform for cryptography. The web is a platform for letting a potential attacker run untrusted code on your computer without all hell breaking l
291.
by bascule 13y ago
It's actually correcting the mistakes of C++: - Ownership: means no unsafely shared mutable state, checked at compile time with no runtime overhead. Also, no explicit deallocations! - A real type system: Rust's type system is insp
292.
by bascule 13y ago
Ditto for me, but I came from a largely C background prior to Ruby
293.
by bascule 13y ago
Nice! I've been wanting to play around with this particular combination (Rust, Capn' Proto, and ZeroMQ) myself. Glad to see others are doing it.
294.
by bascule 13y ago
Rust is a high-level systems programming language. Go is a low-level managed language runtime
295.
by bascule 13y ago
Be sure to check out Reel: https://github.com/celluloid/reel
296.
by bascule 13y ago
There's an entire section on the problems of HTTPS in the OP because I anticipated this question in advance! :O
297.
by bascule 13y ago
You're running into a basic bootstrapping problem: the person providing the file wants you to be able to check that the file is authentic, but you have no cryptographic mechanism to verify that. What they're assuming is that someo
298.
by bascule 13y ago
This post is talking about the W3C WebCrypto API, which allows browsers to expose native versions of cryptographic primitives directly into the browser. This mitigates an entire class of attacks that things like "crypto.js" can&#x
299.
What's wrong with in-browser cryptography?(tonyarcieri.com)
73 points by bascule 13y ago|43 comments
300.
by bascule 13y ago
You should really watch Ola Bini's talk "Expressing Abstraction - Abstracting Expression" from Strange Loop 2012: http://www.infoq.com/presentations/Language-Expressiveness tl;dw: there are many types of

More ›