bullen

57 ms·

751.
by bullen 5y ago
Yes, again if the database is compromised, it's compromised... I don't understand why so many people keep mentioning that when HTTPS does not solve that either?!
752.
by bullen 5y ago
Can you exaplin what a "2nd preimage attack" is and how HMAC solves it? If it's an attack you can do after the database is compromised it's not very interesting, and if it's an attack you can do over the wire then y
753.
by bullen 5y ago
Careful with not reading other comments... it's already explained. I misstype GB and Gb all the time because I talk about disc sizes and network all the time, but you see humans can adapt to my misstake and correct without having to te
754.
by bullen 5y ago
> Hash1(Hash1(username:realm:password):server_nonce:client_nonce) client_nonce? This is how the RFC works: Hash(Hash(username:password):server_nonce) What is the difference between Hash1 and Hash2? Hash(username:password) is what you sto
755.
by bullen 5y ago
You don't need cycles, unless power outages are frequent. (good point but power outages are probably going to be correlated to our capacity to make lithium batteries at all) Lithium has ~half the longevity compared to lead-acid unless
756.
by bullen 5y ago
You don't store them as plain text, you store them as hashes. And then you send a server salt/nonce and the browser hashes the plain text password with the salted hash in your database and then with the server salt/nonce. Sti
757.
by bullen 5y ago
A long time ago we had to work around disabled cookies by appending the session to every request URL... that was a fun time adding the session to all those <a href>... But for the simple hashing it's an old RFC that I like to quo
758.
by bullen 5y ago
I don't understand your point, if the database is leaked the security is compromised... well yes red is red, and green is green and HTTPS improves NOTHING of that. HTTPS is a huge waste of electricity. A more frugal way of securing log
759.
by bullen 5y ago
The problem with >1GB/s is the energy you need to saturate it. 10GB/s needs a 10+W router and you'll need atleast 50W of compute behind that. On lead-acid if you want long battery life and a good uptime you'll need at
760.
by bullen 5y ago
Ok, interesting that you think anything in life is voluntary. We'll see how history judges the affair, in my experience the only way to disseminate truth is to close down the forum where arguments are held: previously books, now the in
761.
by bullen 5y ago
Yes, the US imports as much oil as it exports: quality in, shit out. And the wasted energy is enourmous to even barely preserve the quality of life. I think Russia is not invading Ukraine as much as the US is slowly (expanding NATO over dec
762.
by bullen 5y ago
I put critical/unique data on Intel X-25E... 64GB 65nm SLC from 2011 with 100.000 writes per bit, peak SSD!
763.
by bullen 5y ago
I think Google is over because the problems we have now are harder and harder to google. That combined with stagnation of constructive and/or simple progress, all caused by lack of energy. Means there is less and less you don't kn
764.
by bullen 5y ago
That and one button joystick! But fortunately for us RR-Net and Nunchuk64 solves both problems. I load Super Mario Bros. 64 in 1 second over ethernet with codenet from my PC and then I play it with NES Mini I2C controller on C64!
765.
by bullen 5y ago
Well technically rupy is open-source (ALGPL, yet another license that still doesn't exist) and since fuse (source-available) is built on top, you can maybe call it open-source, specially since rupy is like 90% of the code.
766.
by bullen 5y ago
I now added a license.txt
767.
by bullen 5y ago
CAS? Me neither, but I know it does in practice. My intuition tells me the VM provides a layer decoupled from the hardware memory model so that there is less "friction" and the GC is required to reclaim shared memory that C++ woul
768.
by bullen 5y ago
I didn't know how small the MIT license was!!! "Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software w
769.
by bullen 5y ago
Not other than the one linked in the comment above. I have been reaching out to EVERYONE, and nobody can explain this to me, but I'll implement it myself soon so I can explain it.
770.
by bullen 5y ago
I'm running a Java server that is heavily concurrent on ARM, what bugs did he mention in particular?
771.
by bullen 5y ago
Maybe you could force a comment on downvotes or you loose karma?
772.
by bullen 5y ago
Ok, what security regressions?
773.
by bullen 5y ago
I know, I just go by "the code is so small, you should have time to read it". rupy is a minimalist, from scratch, HTTP app-server that uses non-blocking IO so it can scale comet-stream (SSE or not) which is much better than WebSoc
774.
by bullen 5y ago
That license in the cpp file is for the SHA256 code. My license is messy but if you search for "license" on the main github page you'll eventually find MIT + some ugly modifications I made.
775.
by bullen 5y ago
I agree, but let's give them "source available" and maybe they'll be more inclined to help? We all need to get out of the current legal/monetary system soon enough.
776.
by bullen 5y ago
You don't need to use Event-Source to use SSE, look at how I implemented it here: https://github.com/tinspin/fuse/blob/master/res/play.html#L1... The XHR ready state 3 was wrongly implemented i
777.
by bullen 5y ago
The data is here: http://fuse.rupy.se/about.html Under Performance. Per watt the fuse/rupy platform completely crushes all competition for real-time action MMOs because of 2 reasons: - Event driven protocol design, ave
778.
by bullen 5y ago
I think it might be your ISP. For example one of my ISPs cut off my SSH connections no matter what I do. They simply dislike hanging SSH connections. It's just random that your ISP like WebSockets more than long HTTP responses, and it
779.
by bullen 5y ago
I just found out gumroad pays VAT on recurring payments a couple of weeks ago. We probably need a new license though because piggybacking on MIT (or any other license) like I try to do is rubbing people the wrong way. But law and money are
780.
by bullen 5y ago
Ok, I agree but then I also have less time to work on real things and honestly I feel the whole legal/money part of our civilization is a huge waste of time in the face of energy problems that can't go away (2nd law of thermodynam

More ›