brl

31 ms·

181.
by brl 18y ago
> This is the second integer-related security flaw in DJB's code (and apparently the first exploitable one ). Here is what DJB has to say about the exploitability of Guninski's bug: "In May 2005, Georgi Guninski claimed that some
182.
by brl 18y ago
Hmm, let's see. Things that I actually use frequently: * Textmate * VMWare Fusion * OmniGraffle * Microsoft Office * SciTools Understand * IDA Pro * Visual Hub * Little Snitch * Windows XP * ScreenFlow
183.
by brl 18y ago
OMG! When I started watching that I was thinking that if I was ever in a situation where this robot was chasing me uphill through a forest I would just run up to it and kick it over to slow it down. Then 30 seconds later they demonstrate h
184.
by brl 18y ago
> proxying system calls Locally calculating what needs to be on the remote stack then transferring it all across the network to a tiny 'syscall server' is very nice conceptually but turns out to have huge flaws in practice. The commerci
185.
by brl 18y ago
There is an easier way to produce sophisticated second stage shellcode than simply writing it in C and compiling it? There are certainly more tedious ways to write shellcode such as hand crafting position independent assembly code like it's
186.
by brl 18y ago
This is a version of userland execve() for OS X so the plan is to run something new in the memory space of the process which was exploited. The technique presented consists of a bootstrapping 'Auto-loader' which receives an arbitrary Mach-
187.
by brl 18y ago
I relate to the personality type described in this series of articles and I can assure you that I am not afflicted with ADHD or any other related impairment. Although I tend to be disorganized every other symptom of ADHD describes pretty m
188.
by brl 18y ago
Not only will you fight against the language, but the functional style code you produce will be awkward and unreadable by other Java programmers. If this doesn't matter because you are working alone, then why would you choose Java in the f
189.
by brl 18y ago
You don't need syntax for that. Regular function application has the highest precedence and functions always have exactly one argument.
190.
by brl 18y ago
The syntax in Haskell is very easy, in fact there is much less of it than in Ruby.
191.
by brl 18y ago
Santa Sangre is my favorite movie of all time. I've probably seen it about 25 times since I always make other people watch it and end up watching it with them. It still gets better every new time I see it. I think this is the only Jodorow
192.
by brl 18y ago
Lynch's Dune doesn't belong in the 'mindfuck' category, but perhaps it needs a category of it's own. Something like 'Random nonsense about leather boys and sand worms interspersed with recognizable incidents from science fiction novel of
193.
by brl 18y ago
I loved it too. People either love it or hate it.
194.
by brl 18y ago
We don't use TDD because we don't understand how to do it even though unit testing in principle seem like a pretty good idea. On the other hand, I can't imagine unit testing preventing most of the non-trivial bugs that turn up in our proje
195.
by brl 18y ago
I have trouble understanding your behavior in this thread. Either God has personally dispatched you on a mission to Hacker News to make sure that nobody is called a 'hero' unless they really deserve it, or you know this guy and he stole yo
196.
by brl 18y ago
I think you can easily make mistakes judging people in both directions. It's just that making a false negative error (not identifying an asshole) can turn out a lot worse than a false positive (judging somebody as an asshole who really isn
197.
by brl 18y ago
I've never seen the online book posted on here before. Or are you just talking about weekly SICP related stories?
198.
by brl 18y ago
For the default password length of 10 characters they use ~60 bits of MD5 output. That's more than enough information to uniquely identify the master password.
199.
by brl 18y ago
Oh, you're absolutely right of course. I completely overlooked that. In that case, I think that the top two prizes should go to one Fourier transform related algorithm and one algorithm from public-key cryptography.
200.
by brl 18y ago
This scheme is hugely flawed. If you steal a password list from a website you can identify all the passwords generated by this utility (10 characters, uniform distribution over alphanumeric characters) and then simply crack the master passw
201.
by brl 18y ago
Euclid's Algorithm
202.
by brl 18y ago
I think it would be hard to argue that any other single modern algorithm had as much effect on the world as RSA.
203.
by brl 18y ago
Not sure what the point of implementing monads in Ruby is. It's like implementing 'pointers' so that you can talk about programming in C.
204.
by brl 18y ago
He dismisses the ability to put two open documents side by side on the screen as not very useful but if you write code on your computer this is the most important thing in the world.
205.
by brl 18y ago
Yes, I mean it's not unusual to take the shortcuts described in the article to produce working code. Even the very best programmers who turn in immaculately maintainable software do not just sit down at their desk and type perfect code int
206.
by brl 18y ago
Everybody writes shit code when they implement something new to get it working as quickly as possible. What matters is spending an extra 10-30 minutes before checking your code in to turn that sloppy code into a work of art. It's really th
207.
by brl 18y ago
This is a terrible attitude. If you don't write maintainable code then the price you pay for it later is that your project eventually ends up permanently stuck in the mud. There is a line that you can cross where no amount of refactoring w
208.
by brl 18y ago
It's pretty arbitrary really. It's rare to need more than 2 gigs of memory in a single user process. On the other hand, the more address space you have in the kernel the easier it is to use spare memory for IO buffer caching.
209.
by brl 18y ago
This article is already a very high level description of Linux memory management (specifically on 32 bit Intel processors). If you want to move down to lower levels of abstraction and learn more details, then keep reading that blog! On th
210.
by brl 18y ago
Submit more articles like this one and less Web 2.0 gossip please.

More ›