dchest

56 ms·

631.
by dchest 9y ago
No it didn't. GPLv3 was created to cover the case of hardware vendors not allowing to run modified code. They still have to abide by the terms of the license even if they use GPLv2 -- that is, releasing the source code.
632.
by dchest 9y ago
This doesn't make any sense. For the opposite opinion of many lawyers from many companies, see the list of licenses that come with multimedia systems in automobiles or in your smartphone.
633.
by dchest 9y ago
Acorn (awesome image editor for Mac) uses SQLite as .acorn image format. Schema: sqlite> .schema CREATE TABLE image_attributes ( name text, value blob); CREATE TABLE layers (id text, parent_id text, sequence integer, u
634.
by dchest 9y ago
I watched the talk video and I don't remember it was stated anywhere that Google will replace UEFI/Intel ME. The correct title is "Replace your exploit-ridden firmware with a Linux kernel".
635.
by dchest 9y ago
If you fork after launching threads, your program is an unexpected state, so it may corrupt data or crash. The same happens on macOS, it's just that Apple added a contract that you can't initialize ObjC classes after forking.
636.
by dchest 9y ago
As far as I understood, the module isn't launching threads at import time. On the contrary, the problem is that since pg is linked against macOS's Kerberos and LDAP frameworks, as soon as the Objective-C runtime realizes that NSPl
637.
by dchest 9y ago
It has to do with defender's vs attacker's costs. PBKDF2, which is usually instantiated with SHA-2, even with huge amount of rounds is still a lot cheaper for the attacker than for the defender, since the attacker can use GPU&#x2F
638.
by dchest 9y ago
Patents.
639.
by dchest 9y ago
Shots fired. Here's an tweet from Jean-Philippe Aumasson, one of the authors of BLAKE(2) (uses ChaCha ARX construction) and NORX (uses modified ChaCha replacing addition with an approximation based on XOR, AND, shift operations): &quot
640.
by dchest 9y ago
I'm not sure how fs.copyFile is implemented, but file copying is not the same as reading the contents of file and then writing it into another file, which is easy to implement. There are also permissions, extended attributes, access co
641.
by dchest 9y ago
You can pull today's or future versions as it's still open source under the same license. Please read the above quote.
642.
by dchest 9y ago
Beginning today, all official Caddy binaries come with an End User License Agreement (EULA) that designates them either for Personal (non-commercial) or Commercial use. To be clear, this EULA applies only to Caddy binaries you download; it
643.
by dchest 9y ago
use smelly format unreadable by virtually anyone outside of your code Aaarrgh. It is readable by everyone! It's an identifier, you don't need to convert it to something else: its conversion is identity function.
644.
by dchest 9y ago
If those two are using SHA-1, like git, you are still using a standard Lovely, so I can officially claim I use a standard that is required by many commenters here if I just hash random bytes! Should I use a NIST-approved standard or may
645.
by dchest 9y ago
What do you need to decode it for? It's an identifier that you store, no need to decode it. Or do you mean, you want to optimize storage by compressing those identifiers into as little bits as possible? Then just store random bytes and
646.
by dchest 9y ago
Why do you need VARCHAR? If you use SQL, you can use a fix char type to store fixed-length random strings as IDs. If you use SQL which supports native UUID type, sure, go ahead and use it. But the world is not limited to SQL databases or ev
647.
by dchest 9y ago
Yes, with a power-of-two alphabet length there's no bias. The poster seems to be confused about modulo bias claims, which apply to non-power-of-two alphabets, not a particular way of calculating modulus.
648.
by dchest 9y ago
2. A library like jQuery is so popular, and is so often served from googles CDN, that chances are a user already has it in their local cache from when they downloaded it on some other site. Which of these versions do you have cached? 3.2.
649.
by dchest 9y ago
What? It's just a random string of letters. Don't be afraid of using random strings of letters! You don't need a standard for that .
650.
by dchest 9y ago
Check the code below: var masks = [15, 31, 63, 127, 255] ... var mask = masks.find(function (i) { return i >= alphabet.length - 1 }) ... var byte = bytes[i] & mask if (alphabet[b
651.
by dchest 9y ago
This is a good library.
652.
by dchest 9y ago
UUID is a misguided standard that should have been killed long ago if not for compatibility reasons, so I'm glad it's not in JS.
653.
by dchest 9y ago
(replying to myself as I can no longer edit:) My favorite feature in it is .entropy(n) method: when you want some fixed amount of unpredictable bits, but don't want to calculate how long the random string should be in your encoding to
654.
by dchest 9y ago
OK, so you use a non-standard representation of UUIDs because you can convert it to the standard representation for compatibility reasons. Fair enough, it's a good reason to do this if that's what you want. But then you complain t
655.
by dchest 9y ago
Yes, but the holy UUID standard specifies multiple ways of generating them from sticks and stones, invented before people knew how to properly generate random bytes.
656.
by dchest 9y ago
Wait, why would you base64-encode UUID? You can encode 16 random bytes and not have a few bits spoiled by UUID version number. But then, there are people who'd like to use 62-character alphabet, avoiding any special characters. This pa
657.
by dchest 9y ago
It would be a pretty long line, containing a function wrapping crypto.randomBytes, window.crypto.getRandomValues, window.msCrypto.getRandomValues selected at runtime, and then a few lines to select characters avoiding modulo bias. Try?
658.
by dchest 9y ago
My version: https://gist.github.com/dchest/751fd00ee417c947c252
659.
by dchest 9y ago
According to their videos, their most recent chips are made by TSMC, but the older ones are made in Russia (I believe these are used for war applications). When the Russian factory switches to a better fab process, they'll also use it
660.
by dchest 9y ago
Agree! It now even has a nice GUI https://github.com/Tarsnap/tarsnap-gui

More ›