codys

16 ms·

1. 391.▲
   by codys 12y ago

   Yep, I was imediately reminded on onion routing (which is what tor uses) when reading the article.
2. 392.▲
   by codys 12y ago

   What is being complained about here? The obvious thing that stands out to me is potential timing attacks: 'and' doing short circuit eval, and '==' exiting early when the first byte is non-equal (or the lengths are non-eq
3. 393.▲
   by codys 12y ago

   And an even slower page fault mechanism. PPC generally ends up relying on hugepages to try to match pagefault speeds on x86
4. 394.▲
   by codys 13y ago

   Which is the reason for the AGPL license. Those people contributed their code under the MIT license. This is absolutely allowed.
5. 395.▲
   by codys 13y ago

   ustr [1] is another library to consider. It uses a variable sized header to avoid having large (percentage wise) overhead for short strings. 1: http://www.and.org/ustr/
6. 396.▲
   by codys 13y ago

   > So please don’t speculate about the impact of the deal either outside or inside Google So google employees aren't supposed to discuss their impression of the deal at all, even internally? That seems rather heavy handed.
7. 397.▲
   by codys 13y ago

   Parallel Construction, anyone? They just happened to be executing a search of his gmail account and certainly hadn't looked over this trove of emails from people trying to be secretive?
8. 398.▲
   by codys 13y ago

   Linux has functionality to wipe encryption keys from memory (and require their re-entry) without unmounting the encrypted filesystem (see "luksSuspend" in the cryptsetup man page). Unfortunately, I don't know of any screen lo
9. 399.▲
   by codys 13y ago

   I agree, though you may be underestimating the amount of space heavy users of file syncing services can consume: For a single (1) robotics project in college we had CAD models, fundraising materials, reports, and documentation in dropbox. I
10. 400.▲
    by codys 13y ago

    I was not aware pinning memory in the CPU cache was even possible. Is this done via some Linux interface? Or directly by using some hardware feature of the CPU? In any case, it sounds like a very interesting way of maintaining greater prote
11. 401.▲
    by codys 13y ago

    Well, hassle Brother to release some Free printer drivers. They are one of the last major holdouts.
12. 402.▲
    by codys 13y ago

    And some of those things certainly benefit from being integrated into the FS. I wonder if any knowledge at the filesystem level (as opposed to the block level, where bcache and dm-cache operate) could help L2ARC make better caching choices.
13. 403.▲
    by codys 13y ago

    I was speaking about the preserved-across-reset portion (which this submission is related to) only.
14. 404.▲
    by codys 13y ago

    This (L2ARC being considered "valid" even after a reboot) sounds quite a bit like ZFS is growing features that already exist in Linux's bcache (and maybe dm-cache? I'm not sure how it treats data).
15. 405.▲
    by codys 13y ago

    The Guardian article (which is listed as the source) has been "taken down pending an investigation".
16. 406.▲
    by codys 13y ago

    I don't understand. You've linked to a copy of the LGPLv2.1 in infininote's git repo. Are you saying that their choice of licence primarily caused their product to be less popular?
17. 407.▲
    by codys 13y ago

    Their tagline does say "create" rather than "share".
18. 408.▲
    by codys 14y ago

    >> While TorrentFreak has learned that various ISPs will start the implementation at different times, it remains a mystery which company will be spying on filesharers. Lets be clear here, they are spying on _all internet users_, not
19. 409.▲
    by codys 15y ago

    Repo "corruption" via dropbox does not need a SHA-1 collision. Git uses other files for tracking things, for example: .git/refs/* and .git/HEAD, which point to particular objects (via SHA-1 hashes). If one of these has a "confilicted change
20. 410.▲
    by codys 15y ago

    Interestingly, there doesn't appear to be any info on how it was actually booby-trapped. The sourceforge release [1] only references the BBC article [2]. The BBC article, in turn, makes no statement as to any malicious content, it only indi
21. 411.▲
    by codys 15y ago

    Sweet. And not so sweet: I get a nice failure to build the "convert-utility" on link. It seems that there is some work to be done on this. I expect the best thing would be for the knowledge/info contained within the source to be merged into
22. 412.▲
    by codys 15y ago

    I see a trac browser for SVN, but i see no SVN link. Any idea what that may be or what an easy way to determine it is?