byuu

51 ms·

331.
by byuu 10y ago
Awesome, thanks for this! So it sounds like no real issues, then. But all the same, I should add syslogd_flags="-ss" as soon as possible on a new install. Also worth noting, Vultr 'helpfully' adds "PermitRootLogin y
332.
by byuu 10y ago
> When I attempted to link without that, the linker complained that it couldn't find main. Interesting that it worked for you without that. My guess would be because I also had main.o on the command line? It looks like yours didn&#x
333.
by byuu 10y ago
Interesting ... with section("text"), it crashes. With section(".text"), it works, but spews out this: <gibberish>.s: Assembler messages: <gibberish>.s:155: Warning: Ignoring changed section attribu
334.
by byuu 10y ago
> A REALLY smart deep packet inspection firewall would notice the conversation on port 80 was very SSH like not HTTP like, but whatever. Hahahah, I've abused this at a previous employer as well. They filtered out all outbound traffi
335.
by byuu 10y ago
Yeah, I take a lot of flack from this from other people. But I'm sorry; I'm not going to write the code in GNU as (and that godawful AT&T syntax) or nasm/yasm (and require another tool to build the library), require a sec
336.
by byuu 10y ago
That turns the address from a compile-time constant into a pointer. This function is used tens of millions of times a second, so that cost would add up. I covered this in my initial post, though :/
337.
by byuu 10y ago
Wow, that's very neat! Thank you! Does Clang support this as well? It looks like I don't need the main.o(.text) line either, which is good because that would be a large burden on users of the library. Also, just noting for others,
338.
by byuu 10y ago
Very cool! And I can use this menu over a VPS SSH session (so no color support) after the initial install? Usually I think of bsdinstall as being run pre-install, not post-install.
339.
by byuu 10y ago
Yeah, it's pretty nuts having to study the output of camcontrol and /dev, creating a devfs ruleset, adding that to /etc/rc.conf, adding your CD drive into /etc/fstab, and then tweaking a sysctl, just to burn a
340.
by byuu 10y ago
> Firewall: I don't think default to no firewall is a problem -- if you want something, you can set it up. I'm very curious about this one ... As far as I know, any remote holes without a firewall on a default install would be
341.
by byuu 10y ago
I have to agree. I'm reminded of OpenBSD's move in 6.0 to enforce W^X on binaries. This breaks the use of my cooperative threading library: in order to avoid requiring specific compilers/assemblers (for the portion that'
342.
by byuu 10y ago
Also be very wary of ../ or possibly ..\ in URIs. Say you have http://example.org/download?file=release/software-1.0.zip so that you can log download statistics. If you just fetch GET["download"] and ret
343.
by byuu 10y ago
> You want that to be line-based when expressions have side effects. No, I really don't. I don't want three lines instead of one line of code. And I don't want two named variables leaking into my scope. (I could encapsul
344.
by byuu 10y ago
Ah, I understand what you're saying now. I guess we'll have to agree to disagree, then. I am much more interested in predictability in my code than I am about reordering arguments in mature codebases. Lots of languages guarantee
345.
by byuu 10y ago
I definitely use -fwrapv already. Unfortunately, there is no -fhonor-precedence-associativity switch in GCC or Clang. And I would need it in both to support all the systems I target. But even moreso, yes !! I would love if we had a -fs
346.
by byuu 10y ago
If there's really a performance advantage to argument reordering then you can do it whenever there are less than two arguments that may have side effects. Safe instances would be: * constants * regular variables that aren't using
347.
by byuu 10y ago
That is not an abomination. Turning this: int val = a(b(c(), d()), e(f(), g())); Into this: auto _1 = c(); auto _2 = d(); auto _3 = b(_1, _2); auto _4 = f(); auto _5 = g(); auto _6 = e(_4, _5); int val
348.
by byuu 10y ago
After seeing P0145R3 on C++17 refinements to expression order guarantees (and many things like that before it) ... I think I've finally started to actively dislike C++ now as well, after nearly 20 years of using it daily. They had a go
349.
by byuu 10y ago
I can only see full speed on a Wii U CPU interpreter happening when the game has huge idle loops that you can skip over. If you're saying they hit it at 100% Wii U CPU load at fullspeed, then that's really impressive! :)
350.
by byuu 10y ago
> Not surprised at the system requirements- it has to emulate a 486 MHz PowerPC CPU. Yeah, to anyone who has tried to optimize a CPU interpreter before; dynamic recompilers are nothing short of magical. You'd be quite talented to em
351.
by byuu 10y ago
We like to romanticize our favorite games as being written by people as passionate as we are about said games. But the reality is that most (though certainly not all!!) of them are primarily there for a paycheck. They're expected to wo
352.
by byuu 10y ago
I made BML for that purpose. I posted about it before: https://news.ycombinator.com/item?id=8645591 To copy-paste the example: server path: /core/www/ host: example.com port: 80
353.
by byuu 10y ago
I'm aware of your opposition to DNSSEC+DANE from previous posts here. Like others, I'll agree it's not perfect. Nothing is. Verizon may sign the .com TLD, but that's fine: there are lots of registration providers that of
354.
by byuu 10y ago
My issue was that I can't find non-anti-bacterial hand soap at my local grocery store. The only option would be bar soap, and I hate those. They get all slimy on the bottom between uses, and it's gross and inconvenient. I would
355.
by byuu 10y ago
> There's a massive difference between "anyone can MitM this connection" and "a small number of nation-state actors might be able to MitM this connection if you do not implement HPKP." I agree completely. But the
356.
by byuu 10y ago
I would welcome key usage constraints to limit a wildcard cert to https only. But yeah I do hope you're right. I'll switch my domain off self-signing the moment a trusted CA offers a free wildcard cert with elliptic curve signing.
357.
by byuu 10y ago
This part is wrong, sorry. An attacker can sign his own certificate for your domain, and send you that. Then he can communicate with the real site on your behalf. Your only protection would be if you pre-installed said self-signed certifica
358.
by byuu 10y ago
Non-MITMable? Any of 2,000+ root and intermediary CAs can sign a certificate for any domain name. "That won't happen", except it did: we know of at least DigiNotar and MCS Holdings. Any hostile government can compel a CA to
359.
by byuu 10y ago
What if it just showed all HTTP and self-signed HTTPS site address bars with a light red background, instead? It would immediately jump out at you on Gmail that something was wrong. Chrome wants to eventually indicate all HTTP sites are ins
360.
by byuu 10y ago
If only we had a secure DNS system (let's hypothetically call it "DNSSEC"), where you could put your certificate hashes into a TLS record (to make up a name for it, how about "DANE"?) ... but surely if such a thing

More ›