djmdjm

16 ms·

91.
by djmdjm 14y ago
IIRC at various times, the Time100 online poll has been led by L. Ron Hubbard, Ayn Rand, Kemal Ataturk and Paul Atreides.
92.
by djmdjm 14y ago
What's remarkable about this is how the poster finds these casual encounters with homelessness "unremarkable". No other western city that I have visited has the massive, in-your-face homelessness as SF. I don't know enough about the causes
93.
by djmdjm 14y ago
They'll be flying off the shelves faster than you can say "Veblen good"
94.
by djmdjm 14y ago
[someone who has no inside or even detailed knowledge of the case] says Carmen Ortiz is lying. How does this advance the debate?
95.
by djmdjm 14y ago
I hope this doesn't mean further abandoning the Thinkpad design values (centered around excellence in functional design) to compete on the ones that Apple has been so successful on (excellence in visual design). If they do they won't win an
96.
by djmdjm 14y ago
I much prefer Meld ( http://meldmerge.org/ ) when I want a graphical tool, but usually just edit the conflicts in vim.
97.
Introducing Chrome's next-generation Linux sandbox(blog.cr0.org)
10 points by djmdjm 14y ago|1 comments
98.
by djmdjm 14y ago
Sorry, read sbierwagen's comment for the bad news: metamaterials like those used to construct this lens are tuned for very specific wavelengths so unless your photographic aesthetic is centered on a very particular colour of IR then you wil
99.
by djmdjm 14y ago
Does it really serve anyone to have another ridiculous language war every time someone posts a microbenchmark that shows their favourite language winning?
100.
by djmdjm 14y ago
What are the advantages of this over regular flow cytometry? I guess it would allow instant imaging of morphological changes, but this would require staining anyway (right?) at which point one could use flow to separate out suspicious cells
101.
by djmdjm 14y ago
Duck typing makes for difficult debugging in large programs.
102.
by djmdjm 14y ago
Please explain how a string length would need more than size_t to represent it.
103.
by djmdjm 14y ago
FYI OpenSSH's sshd is not vulnerable, despite using OpenSSL. Back in 2002 and after a different ASN.1 bug, Markus Friedl observed that RSA verification used the OpenSSL's full ASN.1 parser to parse PKCS#1 RSA signatures despite them having
104.
by djmdjm 15y ago
If this is true, then Kickstarter just handed over editorial control to anyone who can write a spambot or with a little patience.
105.
by djmdjm 15y ago
Hell, for most of then you aren't even protected against remote code execution. Google for "PHP arbitrary script execution" and weep.
106.
by djmdjm 15y ago
It's not awesome if the applications so developed by amateurs grows to store PII, financial information or do anything that has any security consequences whatsoever since it is likely to be riddled with "game over" security vulnerabilities.
107.
by djmdjm 15y ago
I was very surprised at the use of OCB and not one of the other more widely-used authenticated encryption modes like EAX or GCM.
108.
by djmdjm 15y ago
Except he wasn't lying about his own personal life, he was accused of lying about previous employers, places that employ others who may have an interest in not seeing their companies' names dragged through mud.
109.
by djmdjm 15y ago
Which part? The fragmentation or the bit about the Android version hitting "1 million downloads in just 3 days"?
110.
by djmdjm 15y ago
It doesn't have to solve the halting problem, just contain the code from interacting with the wider system except through tightly-defined interfaces. "does this code make any far jumps" is an answerable question when you can constrain the m
111.
by djmdjm 15y ago
The lulz stop when people start getting killed.
112.
by djmdjm 15y ago
It's a testament to the quality and reach of his vision that these words are coming to you via systems that recognisably Unix and written in C _40 years_ after Ritchie (and colleagues) created their progenitors. His work has literally defin
113.
by djmdjm 15y ago
"we will start sending out new ssh credentials to the active developers who had kernel.org accounts before" um no. You _should_ be asking developers to send you new SSH credentials. Generating users' private keys on their behalf is complete
114.
by djmdjm 15y ago
I'd like to help, but I have no idea how to build Python modules for Windows any more. I once figured it out by following some guide that was linked to from python.org, but that broke when more recent versions of Python required more recent
115.
by djmdjm 15y ago
It isn't worth fixing this - the likelihood of a hash collision is infinitesimal
116.
by djmdjm 15y ago
He didn't know how to evaluate the security impact or what to do about it. But he knew enough to know he should take it seriously. This is commonly referred to as "being paranoid" and is a natural reaction given the situation. Commendable
117.
by djmdjm 15y ago
Yes, py-bcrypt produces identical hashes (it was intended to be compatible)
118.
by djmdjm 15y ago
Bear in mind that the likelihood here is something like 2^-186
119.
by djmdjm 15y ago
No, py-bcrypt uses the reference implementation from OpenBSD.
120.
by djmdjm 15y ago
I'm the py-bcrypt author. py-bcrypt is a thin wrapper around the original reference implementation of bcrypt from the authors of the paper describing it (Provos and Mazieres). The discrepancy in hash length is totally harmless (adding somet

More ›