bascule

27 ms·

211.
by bascule 11y ago
This is one of the things I've always liked about JRuby. You can use the excellent tooling of the JVM ecosystem (e.g. YourKit, Coverity Dynamic Analyzer) to understand the behavior of your JRuby applications, and even attach directly t
212.
by bascule 11y ago
No, although I've been pinging Ben Laurie on having them slap version numbers on it periodically. I think that'd be nice. The (perhaps obviously biased) TLS Under Siege talk by Google's Neel Mehta ranked BoringSSL #1 (of 2) w
213.
by bascule 11y ago
Or BoringSSL: https://boringssl.googlesource.com/boringssl/
214.
by bascule 11y ago
Folsom Avenue? More like Folsom Street. See the eponymous fair. Also, this used to be Twitter HQ...
215.
by bascule 11y ago
See also: https://cryptosphere.io
216.
Speculation About The Eventual Death Of Bitcoin(tonyarcieri.com)
72 points by bascule 11y ago|108 comments
217.
by bascule 11y ago
For what it's worth, Tsukiji is shutting down and relocating this November: http://www.undercurrentnews.com/2014/12/31/tsukiji-market-re...
218.
by bascule 11y ago
You think security domain experts don't have the "right" to "bitch" (or perhaps, say, "inform") about potential security problems? I understand you're trying to "get things done" but crypto
219.
by bascule 11y ago
Macaroons are probably more interesting to people who don't already have a CapTP-like capability framework to build on. While you could express sturdy refs and live refs in terms of Macaroons, you can also express all sorts of things w
220.
by bascule 11y ago
Weave has other issues... like they homebrewed their own ECDHE-PSK-based transport encryption protocol on top of NaCl. Homebrewing your own crypto, especially transport encryption which has to solve problems like key exchange, replay attack
221.
by bascule 11y ago
Every computer science major should... double check they've entered all the correct input before pressing the submit button.
222.
by bascule 11y ago
Erlang and Elixir are both dynamically typed and do dynamic dispatch. Erlang does not know the types flowing through a call site in advance and therefore has to do dynamic dispatch. In particular, Erlang has a "code server" that a
223.
by bascule 11y ago
> 10x faster- obvious benefit Please put down the kool aid. If you can't back statements like this up, you're not helping anyone.
224.
Keywhiz: Square's system for distributing and managing secrets(square.github.io)
232 points by bascule 11y ago|31 comments
225.
by bascule 12y ago
Hmmm... http://blog.bittorrent.com/2014/12/10/project-maelstrom-the-... See also: https://www.tahoe-lafs.org/trac/tahoe-lafs
226.
by bascule 12y ago
"Catena" is also a password hashing function: http://eprint.iacr.org/2013/525.pdf
227.
by bascule 12y ago
Macaroons are pretty interesting: https://air.mozilla.org/macaroons-cookies-with-contextual-ca...
228.
by bascule 12y ago
bcrypt has a maximum input length of 72 bytes: https://www.usenix.org/legacy/events/usenix99/provos/provos_...
229.
Volapük: A Cautionary Tale for Any Language Community(tonyarcieri.com)
3 points by bascule 12y ago|0 comments
230.
by bascule 12y ago
Java HotSpot can inline both possibilities for bimorphic call sites. If this is really an issue I'm surprised V8 doesn't have a similar functionality.
231.
by bascule 12y ago
"For me personally, I don’t know any better. I have never used generics and I haven’t found a situation where I strongly require it." Sounds an awful lot like http://c2.com/cgi/wiki?BlubParadox
232.
by bascule 12y ago
I thought you were done? Apparently not! This is where I again point out that neither Java nor Go ensure that state sent over channels is actually isolated, and both allow data races. With Rust that is not the case. You have true isolation
233.
by bascule 12y ago
Considering you've backpedaled from "Rust isn't CSP" (because you misunderstood Rust channels) to "Rust doesn't have select" (which it does, and you didn't realize) to "Rust's select isn&#x2
234.
by bascule 12y ago
You mean like the select! macro in Rust?
235.
by bascule 12y ago
> doesn't follow CSP as much as go's Because it supports asynchronous messaging too? As if CSP were some concept that emerged fully formed from Tony Hoare's head like Athena from Zeus? I'm sorry you see dichotomies wh
236.
by bascule 12y ago
Rust supports both synchronous and asynchronous message passing over its channels. It's true that asynchronous message passing is generally associated with actor systems and not specifically with CSP, but it's also seen in many ex
237.
by bascule 12y ago
Rust has a different notion of memory safety than the Java or Go memory models. In fact, compared to Rust's memory model, both Java and Go are memory unsafe (in the Rust sense of safety, not the traditional sense) Namely, Rust's n
238.
by bascule 12y ago
If you really know what you're doing, you'd use a fast assembly implementation that's guaranteed to run in constant time, like curve25519/ed25519-donna, both of which you get for free if you just use libsodium.
239.
by bascule 12y ago
It's because nadeko is a young project and it hasn't been implemented yet. Coming soon!
240.
by bascule 12y ago
Rust has an asm! macro. You can implement the constant time operations in assembly. Here's a syntax extension that tries to use black magic to turn a subset of Rust code into corresponding asm! macros: https://github.com&#x2

More ›