djmdjm

11 ms·

61.
Beginners' guide to flying quadcopters(phreakmonkey.com)
3 points by djmdjm 12y ago|0 comments
62.
by djmdjm 12y ago
AFAIK neither Rust nor Go supports all the platforms that OpenBSD runs on.
63.
by djmdjm 12y ago
There's a non-portable version of OpenSSH too. This strategy produces high-quality software while making developers' lives easier. (All in my highly-biased opinion)
64.
by djmdjm 12y ago
"isn't standards compliant" how?
65.
by djmdjm 12y ago
afl is great - it is hands-down the most easy to use fuzzer I've ever played with and it managed to find a couple of (non-exploitable) crashes in OpenSSH that intensive human review and my own fuzzer missed. I can't recommend it h
66.
by djmdjm 12y ago
That quote is not from the article. In fact the BBC article says the exact opposite "two women in Sweden accuse Mr Assange, 43, of sexual assault." I'm inclined to believe the BBC over an unreferenced quote.
67.
by djmdjm 12y ago
The features generated are >200nm wide and the writeup doesn't mention a path to scaling this down so it isn't clear why this provides any advantage over conventional lithography.
68.
by djmdjm 12y ago
Being able to call it from inside a chroot, or within a syscall-based sandbox (like SECCOMP_FILTER).
69.
by djmdjm 12y ago
Wealth redistribution as practiced through government doesn't hands giant wads of cash over to poor people that lay around waiting to be targetted by scammers. The redistrubtive mechanisms are almost always free or heavily subsidised s
70.
by djmdjm 12y ago
AFAIK the relation to EC is that pairing-based cryptography is a popular (among academics at least) user of GF2m elliptic curves.
71.
by djmdjm 12y ago
oh, thanks - I stand corrected.
72.
by djmdjm 12y ago
I haven't heard anyone recommending against the GF2m curve fields recommended by the IETF and NIST standards. Take this with an appropriately large grain of salt - I haven't followed the fallout of Joux' work very closely (be
73.
by djmdjm 12y ago
This actually came out about half-way through last year. It's a good attack on DLP-based cryptosystems, like ECDSA and ECDA when they use small-characteristic fields. Most EC crypto in use uses large-characteristic prime curve fields (
74.
by djmdjm 12y ago
IMO this isn't implausible - if I were making a single-file exploit then I'd probably just include most of OpenSSH in that single file.
75.
by djmdjm 12y ago
So, there are usually four sshd processes involved in handling a connection: 1 - master sshd, listens for incoming connections. When it accepts one it forks and executes a new sshd to handle it. It executes a new sshd to ensure that each
76.
by djmdjm 12y ago
So: 1) this is probably bullshit. cf. http://seclists.org/oss-sec/2014/q2/247 2) from the memory dump, it looks like it is post-authentication so the impact would be quite limited (stealing the password hash
77.
by djmdjm 12y ago
It's very likely that the Bluetooth protocol will be reverse engineered very shortly after launch anyway.
78.
Venera: The Soviet Exploration of Venus(mentallandscape.com)
121 points by djmdjm 12y ago|39 comments
79.
by djmdjm 12y ago
So far, two of the clean starts (Apple's and GnuTLS) are known for the critical "goto fail" bugs. How would your clean start be different?
80.
Thinking in Animation Frames: Tuning Blink for 60 Hz(groups.google.com)
4 points by djmdjm 13y ago|1 comments
81.
by djmdjm 13y ago
More details on the hostname canonicalisation here: http://blog.djm.net.au/2014/01/hostname-canonicalisation-in-...
82.
by djmdjm 13y ago
Yeah, that's wrong and I'll fix it. Impact: if your username is > 511 characters long and truncates to another valid username that is exactly 511 characters long then you will see their "last logged in" date instead o
83.
by djmdjm 13y ago
It's amazing that, after all these years, PHP still has the ability to horrify me. Hello again, old friend.
84.
by djmdjm 13y ago
We committed a regression test fix separately.
85.
by djmdjm 13y ago
Nope. That's all. The newkey struct in turn contains a bunch of OpenSSL context structures, and one of these includes a cleanup callback pointer for the MAC (message authentication code) in use. For most ciphers this was being initiali
86.
by djmdjm 13y ago
It's https://en.wikipedia.org/wiki/Galois_Counter_Mode and IIRC it was added to OpenSSL in the 1.0.1 release. Don't let my hazy recollection be a substitute for checking your platform though :) (see some good
87.
by djmdjm 13y ago
The authentication method used is completely orthogonal to this bug.
88.
by djmdjm 13y ago
No, there are at least three of us (myself, Markus and Darren are the most regular committers) and we all work on other stuff in OpenBSD with varying frequency.
89.
by djmdjm 13y ago
How can I check my data's audit trail to ensure my it wasn't misused?
90.
by djmdjm 13y ago
A substantial problem with a Mercury colony is that the planet is much deeper into the Sun's gravity well than earth - about a factor of 2. IANARS, but I think the rocket equation is exponential for the gravitation that needs to be overcome

More ›