cipherboy

17 ms·

181.
by cipherboy 7y ago
I don't think so. It has been a while since I've done PHP but that reads like an inclue-gone-missing (likely with MySQL connection configuration information) causing the database to fail rather than MySQL breaking the include.
182.
by cipherboy 7y ago
Make sure you're running an up-to-date kernel [0] because the version shipped didn't support the wifi card shipped in the 7th gen. [0]: https://bugzilla.redhat.com/show_bug.cgi?id=1733369
183.
by cipherboy 7y ago
Pagure [0], Fedora's git forge, hosts code, issues, docs, and pull requests as four separate git repositories under the hood [1]. However, only project administrators can clone most of those repos. [0]: https://pagure.io&#x2
184.
by cipherboy 7y ago
> Could an international, decentralized curve be constructed by standards bodies from several geopolitical adversaries such as US, China, Russia and Turkey all simultaneously issuing 1 point each to create a combined 4-point curve, so th
185.
by cipherboy 7y ago
Yes, this is a separate issue. jackson-databind is a XML/JSON parser so I was presuming a web stack here and that your customer wouldn't necessarily know what your backend was. Which also means that it is up to you to secure it pr
186.
by cipherboy 7y ago
The correct response is to audit how you use it, especially what other libraries you have on the classpath. Per another comment on this submission [0], its unlikely that you've satisfied all the requirements for exploiting these CVEs.
187.
by cipherboy 7y ago
jackson-databind is the name of the package on Fedora and on RHEL. We addressed this issue last week by updating to 2.10, though I think F30 and F31 updates still needs karma [0]. The other jackson packages are mostly Java package hierarchy
188.
by cipherboy 7y ago
Yes! Free if you're working on an open source project (check out Oregon State University's Open Source Lab's POWER offerings: VMs (+/- GPUs) and Jenkins integrations). That's what I use. If you're working on so
189.
by cipherboy 7y ago
Yeah, perhaps fully-auditable core would've been a better example. One that runs a full Linux stack for a mainstream distro. I'm personally most interesting in profiling and tuning to my workload to run on FPGAs. But that's m
190.
by cipherboy 7y ago
And think about what fully opening up POWER like this begins to enable! IBM has poured a ton of money into having roughly the same ecosystem for POWER as x86: nearly every major Linux distribution ships ppc64le ports [0] (most at full parit
191.
by cipherboy 7y ago
Hiding in the details of your comment and partially in reply to the parent... You can't fab the same POWER9 that ships from IBM, but like you implied, someone could (eventually) fab a POWER9 CPU built on an open-source core. The microw
192.
by cipherboy 7y ago
Fedora [0], Red Hat [1], Ubuntu [2], and SUSE [3] all have their own ppc64le ports as well so there are lots of choices out there if anyone is interested. Even Gentoo has one [4][5]! [0]: https://alt.fedoraproject.org/alt&#x
193.
by cipherboy 7y ago
I'd like to recommend the friendly people at Oregon State University Open Source Labs [0] who host POWER resources for open source projects. If you're looking to see what the ISA can do on P8 or P9 system, I'd definitely cont
194.
by cipherboy 7y ago
\o Happy to answer questions anyone has. I mostly wrote this to scratch my own itch.
195.
Show HN: High-Level Python Interface over Mate Soos's CryptoMiniSat(github.com)
4 points by cipherboy 7y ago|1 comments
196.
by cipherboy 7y ago
'jgrahamc posted a Perl implementation of Alan Turing's method which made HN a couple of times [0], [1]. This is much better than brute force. For something a little more accessible on mobile, I made this [2] at the time based on
197.
by cipherboy 8y ago
This is an issue with compression not TLS. The threat model is this: the Mallory controls some number of bytes in a web page. Can she exfiltrate data about Alice's session (e.g., bank account number) by only knowing the size of the com
198.
by cipherboy 8y ago
That something can be minimized to "a browser" when SPAKE+2FA support is finalized in Kerberos. Admittedly, only really useful for enterprise clients who already have krb5 deployed, but still it is something better than JS.
199.
by cipherboy 8y ago
I'll shamelessly plug this for Kerberos since SPAKE is a variant of PAKE... Kerberos has a draft for adding SPAKE to Kerberos: https://tools.ietf.org/html/draft-ietf-kitten-krb-spake-prea... This was implemented s