dividuum

47 ms·

511.
by dividuum 8y ago
Cloud shell allows Google to see what I type on the shell machine. So if I ssh from there into the target, nothing is gained and it's MITMable by Google. The only difference is that it's less likely to happen.
512.
by dividuum 8y ago
It is possible to create a SRI enforcing bookmarklet and use that to bootstrap the rest of the app from untrusted sources. That way users could drag/drop their current version to the bookmark bar, thereby effectively "installing&q
513.
by dividuum 8y ago
While that's better it just shifts the problem: Now you have to trust the JS code you're being sent. If an attacker can hijack their current approach, I would think that sending out modified JS wouldn't be to difficult to do
514.
by dividuum 8y ago
I spent 5 minutes trying to find out what and how this is supposed to work and all I figured out is that there's some kind of Hyperledger Sawtooth blockchain (whatever that is). No idea how that's helping with authentication for a
515.
by dividuum 8y ago
I would have hoped for some shared secret approach where the extension can generate one-time use urls for their bundled resources on demand and use those instead of easily predictable urls. It seems that extensions like ad blockers that are
516.
by dividuum 8y ago
This TLSF implementation should be able to do that: https://github.com/mattconte/tlsf
517.
by dividuum 8y ago
I only poked into the source code on github a bit, so I might be entirely wrong, but from what I understand, the original Lua runtimes (stock Lua, Luajit, etc) were modified for a new syntax? If so, what's the motivation for this appro
518.
by dividuum 8y ago
Odd borders are funny. Here's two other examples: The utter chaos in Baarle. They even have nested enclaves. So area of Netherlands surrounded by Belgium surrounded by Netherlands. https://en.wikipedia.org/wiki/Baa
519.
by dividuum 8y ago
Even if the downloads where encrypted, an all seeing observer could probably still detect what you download. See https://news.ycombinator.com/item?id=14070130 as an example. I'm not sure how easy it would be to fingerp
520.
by dividuum 8y ago
> do not try to run Raspberry Pi from SD cards in "production" under any circumstances on a large scale Can't confirm. I've written about this before, but I'm mainly responsible for running the https:/&#x2F
521.
by dividuum 8y ago
Last time I read about this [1], the firmware had some issues that prevented the boot process from working 100% reliable. Do you have any experience with network booting the RPi? [1] https://github.com/raspberrypi/firmw
522.
by dividuum 8y ago
One of my constant pain point with all distributed data stores is that it's really hard to find out how they behave if something breaks. Be it the network, local storage and so on. How do I find out what's wrong? Are there guides
523.
by dividuum 8y ago
Self rolled. Built in Python.
524.
by dividuum 8y ago
The fact that there's a 0-byte file instead of a completely broken file system is already the result of a journal. You can reliably observe this with ext4.
525.
by dividuum 8y ago
I operate a digital signage service ( https://info-beamer.com ). It's using a custom built Linux OS that is highly optimized to deal with file system corruption and unexpected reboots: * The OS is is always read-only. While t
526.
by dividuum 8y ago
Same on Android. It's also implemented as a VPN.
527.
by dividuum 8y ago
I've been trying to see how that works for 15 minutes now and the furthest I get is to Tuen Mun, which is still in Hong Kong. I'm probably missing something trivial.
528.
by dividuum 8y ago
> It teaches us a lot, it is how I got into the industry. Absolutely. I played a lot of games and often prolonged their attraction by simply digging into their data files and fiddling with them. I remember writing a terrain editor[1] for
529.
by dividuum 8y ago
The overhead is really minimal. I happened to have an old program around that uses LuaJIT or Lua5.1. It calls a two functions that each increments a C int. Using the FFI, calling this function 500 million times takes 0.7 seconds. Calling it
530.
by dividuum 8y ago
I solved this my SaaS by internally logging all the requests and then using the Measurement Protocol ( https://developers.google.com/analytics/devguides/collection... ) to send them from the server-side. While doing
531.
by dividuum 8y ago
You can easily replace their domain with any other IPFS gateway. On top of that they add further validation to the idea that IPFS is a good idea. Seems like an overall win to me.
532.
by dividuum 8y ago
We have the long tradition of sending encrypted or puzzle-like postcards to our local hackerspace. Three years ago we created this postcard: https://entropia.de/Datei:2015-01-27-back.jpg It's 200 bytes, a valid x85 ELF
533.
by dividuum 8y ago
You'll have spammers 1 minute after something like this goes live. A search engine isn't only about finding things with your key word in it. It's also about rejecting low quality content you're probably not interested in
534.
by dividuum 8y ago
My favorite part of Lua tables is the syntax feature that makes it possible to use a single table argument when calling a function like this: some_func{ key = value; another_key = another_func{ foo = "bar";
535.
by dividuum 8y ago
There's duktape ( https://duktape.org/ ), which, from skipping over the documentation seems very similar to Lua when it comes to embedding: It also uses the stack based approach. Looks like there's some ES6/7 s
536.
by dividuum 8y ago
I really like the Lua reference manual. All on a single page (e.g. https://www.lua.org/manual/5.3/manual.html ), covers the complete syntax/semantic of the language, a few concepts as well as its Lua and C emb
537.
by dividuum 8y ago
That does indeed work. Pretty neat. For anyone trying, here is basically all you need: data:text/html,<script crossorigin="anonymous" integrity="..." src="..."> In total that should be a lot s
538.
by dividuum 8y ago
Was it this one? https://github.com/airbornio/signed-web-apps
539.
by dividuum 8y ago
> Inb4 security vuln in a builtin is used to pivot across tabs or reveal state in other tabs. Although I don't know all the internals of how chrome isolates tabs, I'm not sure how that's supposed to happen. If I understand
540.
by dividuum 8y ago
Any reasonable multiplayer game works like this. They mention it in the linked article: "We don’t share the state of other players if it doesn’t need to be shared, so we can avoid common cheats like “map hacks”. Essentially the client

More ›