cleeus

8 ms·

31.
by cleeus 9y ago
> If you’re making a native app, your tech stack choices are pretty limited. On the macOS side, you’ll use Xcode, Swift, and AppKit. On Windows, you’ll use Visual Studio, C#, and WPF or UWP. Or you could use C++ and Qt and suddenly have
32.
by cleeus 9y ago
I few years ago I envisioned exactly this, something like a cross between bugzilla and kickstarter/patreon. I want something fixed/done and want to pay someone a small amount to do it. Even registered a domain for that. If someone
33.
by cleeus 9y ago
I have seen some solar companies in my region, but I honestly am not convinced yet that solar is the way to go. Does anyone know if solar can sustain itself? (Does a photovoltaic panel produce more electric energy during its lifetime than w
34.
by cleeus 10y ago
at which point we first need to talk about the type of coverage ... tree coverage or line coverage (or something else?)
35.
by cleeus 10y ago
well, not at all times. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3416
36.
by cleeus 10y ago
As a counter example: My Kyocera Mita FS1020-D is working well since 2004. Reliable things (printers) with moving parts can be built.
37.
by cleeus 10y ago
I moved three relatives who's computing skill vary between "What is a file, again? Help me, my Internet is gone?!!" and "How do I use this scanner to get that document into a PDF file and send it via Thunderbird?" o
38.
by cleeus 10y ago
doesn't look to bad except: - I can't find automated tests - The vision module is a binary blob (of course this was also stated in the previous HN discussion) The rest is basically just a bunch of glue and bootloader code.
39.
by cleeus 10y ago
Do you happen to know where the code is? Can you post a link?
40.
by cleeus 10y ago
One thing to note: usually there is no OpenWRT support on UniFi hardware. I tend to go with TP-Link and flash.
41.
by cleeus 10y ago
negative altitude ... so integer overflow it was ...
42.
by cleeus 10y ago
One thing I routinely do is compiling a monolithic kernel without module support (and exactly the modules the hardware needs). This way injecting a module into the kernel should be a little harder.
43.
by cleeus 10y ago
Same thing in germany: you won't get a hospital to use this, ever. Selling to hospitals is enterprise sales ^10 - we see sales cycles between 3 to 8 years (that is from initial lead to project delivery). It might have a chance in devel
44.
by cleeus 10y ago
at that point ... maybe you just want to go bare metal?
45.
by cleeus 10y ago
It's the feudalism age of the internet. Everyone needs a lord for protection.
46.
by cleeus 10y ago
btw, the reference FastCGI C library libfcgi also alters the environment to emulate legacy CGI and may also be vulnerable (haven't checked).
47.
by cleeus 10y ago
I think the CGI "standard" is to be blamed. Whoever the f*ck had the briliant idea to alter the environment variables of a server child process through incoming HTTP headers should have his browsers environment variables altered b
48.
by cleeus 10y ago
tl;dr if an attacker can flip certain bits in one of the last phases of a SHA3 execution (e.g. through power glitching on a device) and can compare the result with that of a correct execution, the internal state of the function can be fully
49.
by cleeus 10y ago
aha, they intend to keep the ARM HQ in the UK. Well ... let's see what they say in 10 years because you know, once a company is sold, the buyer can do whatever the fuck he wants with the thing he just bought.
50.
by cleeus 10y ago
At this point we must ask which Update of VS 2015 as MS just replaced the Optimizer with an SSA based one. https://blogs.msdn.microsoft.com/vcblog/2016/05/04/new-code-...
51.
by cleeus 10y ago
Wireless input devices usually talk in the 2.4GHz and 5GHz bands of wifi. They are allowed to, since the spectrum is basically open for anything (AFAIK) but they effectively jam wifi when in use. So this is intentional while the USB3.0 cabl
52.
by cleeus 10y ago
everybody repeat after me: reliable. attribution. of. hacks. is. impossible.
53.
by cleeus 10y ago
love this quote: > Every researcher knows about publication bias, but the practice is so widespread that it is not considered a serious problem.
54.
by cleeus 10y ago
in germany, the highest court ruled exactly the opposite: https://de.wikipedia.org/wiki/Grundrecht_auf_Gew%C3%A4hrleis... rough translation: "The right to confidentiality and integrity on IT systems" google t
55.
by cleeus 10y ago
I didn't read anything about the notion of trust levels in the directives text. Can you point me to the law? As far as I can see, any signature that is/appears to be qualified (regardless how it came to life) is considered equal t
56.
by cleeus 10y ago
If you use a smartcard, you should use a class2/class3 card reader with pin-pad and never enter the pin on you computer. So the machine can replace the hash that is to be signed, but cannot intercept and replay the PIN.
57.
by cleeus 10y ago
On the one hand, eIDAS (the e-signature part) is definitely a good thing as it will replace a lot of weak national signature laws with something modestly safe. On the other hand it will also replace strict signature laws (e.g. german) with
58.
by cleeus 10y ago
compiler bugs - use of uninitialized memory
59.
by cleeus 10y ago
Yes, but there is just not a way to regulate journals other then by market forces - which seem to fail through information asymmetry about the journal quality and maybe some monopoly inducing positive feedback effects. Maybe law could break
60.
by cleeus 10y ago
corporate IT security policy?

More ›