eliteraspberrie

15 ms·

91.
by eliteraspberrie 13y ago
Interestingly, there was a rift between GnuTLS and GNU a couple years ago: http://lwn.net/Articles/529522/
92.
by eliteraspberrie 13y ago
BTW, Windows is the only one mainstream OS I'm aware of, that actually attempts to implement some form of GUI-level isolation, starting from Windows Vista. Is GetAsyncKeyState still available in Windows Vista? I'm guessing it is
93.
by eliteraspberrie 13y ago
That's a good way of doing it. I would have prefered scrypt but PBKDF2 is good enough. (Something changed with HN recently, I get the downvotes too.)
94.
by eliteraspberrie 13y ago
How does your app derive a key from the user's password?
95.
The State of Crypto in Python (PyCon US 2014)(pyvideo.org)
3 points by eliteraspberrie 13y ago|1 comments
96.
by eliteraspberrie 13y ago
OpenSSL aims to be cross-platform, so their options are to use kernel-specific cryptography where possible, and a generic implementation where one isn't available; or always use the generic implementation. They probably reasoned at one
97.
by eliteraspberrie 13y ago
The faster way of doing this: def fourier_transform(signal, period, tt): """ See http://en.wikipedia.org/wiki/Fourier_transform How come Numpy and Scipy don't implement this ???
98.
by eliteraspberrie 13y ago
One feature you can start using right now: prove an assertion with the WP plugin. [1] It's especially useful to prove the absence of some undefined behaviour, bounds on variables, or invariance conditions. [1] http://frama-c
99.
by eliteraspberrie 13y ago
With regard to the Linux kernel, for example, their policy was to not look for vulnerabilities and only contribute features: Did you try to fix any vulnerabilities? No, we did not look for or find any vulnerabilities in the course of our
100.
by eliteraspberrie 13y ago
People who are wrongfully charged have no recourse, except in the most egregious or best publicized cases. It's even a police tactic to charge someone as a punishment in itself. His best option now is to move on with his life, success
101.
Keynote by Poul-Henning Kamp at FOSDEM '14(youtube.com)
4 points by eliteraspberrie 13y ago|0 comments
102.
by eliteraspberrie 13y ago
I don't have personal experience with it, but apparently these things are booked months in advance, on a contract basis. The engineer doing the audit spends an agreed number of weeks finding as many problems as they can, and hand you a
103.
by eliteraspberrie 13y ago
Helium ( https://gethelium.com ) is less expensive for items priced less than $25, since they charge 2% rather than $0.50.
104.
by eliteraspberrie 13y ago
The cost of a cryptography code review is about $5-10k per week.
105.
by eliteraspberrie 13y ago
Looks like a good use case for Hammer: https://github.com/UpstandingHackers/hammer
106.
by eliteraspberrie 13y ago
It is part of the Tarsnap bug bounty ( http://www.tarsnap.com/bugbounty.html ). When I first heard of the bounty I gave it a shot but could never find anything. I ended up learning from the code, which is priceless.
107.
by eliteraspberrie 13y ago
Isn't it a good thing? Companies should be competing for talent, not vice versa. Once you reach the level of Jean-Marie Hullot and his team, you are lifetimes past the please hire me routine. So he spent the next couple years travell
108.
by eliteraspberrie 13y ago
You can set the value of the karma threshold automatically, to some multiple of the standard deviation of karma for all of HN. So you won't have to constantly revise it. I assume the distribution of karma here is exponential, so take t
109.
by eliteraspberrie 13y ago
That was the Sefnit botnet which started to use the Tor network heavily in mid-August 2013.
110.
by eliteraspberrie 13y ago
If exporting chips to the US were against Chinese laws, yes, of course.
111.
by eliteraspberrie 13y ago
If I were to export a single chip to Iran, I would be a legitimate target of NSA. When Huawei sold network monitoring equipment to Iran -- knowing full well that equipment is used to target and kill people, and in contravention of US export
112.
by eliteraspberrie 13y ago
So they got a taste of their own medicine. Huawei has spied on and stolen from US companies. For example, Huawei copied Cisco's iOS -- including source code comments and bugs -- and even copied their user manuals verbatim. [1, pp. 8-10
113.
by eliteraspberrie 13y ago
This is the new model for non-petty theft. Rather than target individual credit card holders, just target the watering holes -- which, like credit cards themselves (in the US) have near zero security.
114.
by eliteraspberrie 13y ago
We're told that the software profession must be made more accessible, and that programming should be taught to all children. Great, I agree. No child without the command line! Let's also consider another industry: cars. Car owners
115.
Satellite imagery of possible debris of MH370 by AMSA(amsa.gov.au)
2 points by eliteraspberrie 13y ago|0 comments
116.
by eliteraspberrie 13y ago
I suppose the grass is greener on the other side. As a Canadian I trust the US tech industry. Everything that has been exposed in the US has been happening here too, and then some. The options are: spend lots of money to be spied on here; s
117.
by eliteraspberrie 13y ago
It's hard to believe unless you see it with your own eyes. I have. They literally make stuff up.
118.
by eliteraspberrie 13y ago
In most countries in Europe, people have a "right of reply," which is the right to respond to printed allegations in the same publication that they were made (and with the same prominence, i.e. on the same page). Does anyone know
119.
by eliteraspberrie 13y ago
That's my impression too. The most basic air force can defend against drones, let alone Russia's. Even this supposedly stealth drone is very obvious, from behind. Any IRST system would detect it immediately.
120.
by eliteraspberrie 13y ago
These exploits usually target browsers running on Windows, which until recently did not have ASLR or DEP enabled by default (and still doesn't in the case of some browser plugins). Many Linux distros like Debian or Ubuntu have had RELR

More ›