erglkjahlkh

20 ms·

31.
by erglkjahlkh 12y ago
In the country where I live no one does solar. The reason is that it doesn't get heavy subsidies, and the utilities have dropped their prices to discourage competitors from entering the market. We also screwed up the feed-in tariff sys
32.
by erglkjahlkh 12y ago
As long as it supports root windowless mode, whatever works is fine for me. Also, it must work out of the box on most common distributions, without requiring extra software installation. Configuration is fine though, not even X11 forwarding
33.
by erglkjahlkh 12y ago
Where are the benchmarks? Seriously, I'd expect this thing to fly.
34.
by erglkjahlkh 12y ago
This indeed is commendable. There are more possibilities than what he has touched so far. He could add automatically reloading live code, and link the testing suite... You see a bug, correct it, and the test suite runs continuously at the s
35.
by erglkjahlkh 12y ago
Shipping a targeted policy is simply a matter of practicality. Linux has actual 3rd party applications, and forcing all the vendors to either ship with policies or let the applications fail to run correctly would be a kiss of death to the M
36.
by erglkjahlkh 12y ago
He mentioned kernel, c libraries, and "all the tools". Well, kernel is in one repository. The (gnu) c library is in one repository. The tools, well the category of stuff like "ls" and "cat" is afaik in one repo
37.
by erglkjahlkh 12y ago
Then again, 90 days contains 2.5 of their fix cycles. If the vulnerability really is serious, and they can't fix it in that time line, they should exit the business.
38.
by erglkjahlkh 12y ago
puts on his compliance hat Many organizations are mandated (by statutes etc) to use elliptic curve based cryptography already. It is not because RSA is broken, but because the key sizes would have to be uneconomically large. The key size
39.
by erglkjahlkh 12y ago
It seems I have some reading to do! I will check this out..
40.
by erglkjahlkh 12y ago
That's too simple for specification. For instance: How much are you ready to pay for the performance in terms of usability, and what are the actual use cases? For instance NFS is pretty poor if your use case is serving shared network d
41.
by erglkjahlkh 12y ago
Or, what you are building requires somewhat complex components, but you'd rather focus on something else? Many frameworks have their own component libraries. I'm not talking simple tooltips, I'm talking about real components.
42.
by erglkjahlkh 12y ago
I have participated in sales, and I did not want to get into hours long discussion (boring, and not really important) about what Power/AIX offers so I boiled it down for potential customers like this: If you want the best with insane p
43.
by erglkjahlkh 12y ago
It is also bad in following dependencies, and links the whole libraries. The result is like spaghetti, import on library and half of the standard libraries come with it. Some optimizations have been already done to prevent that, but the wor
44.
by erglkjahlkh 12y ago
In other words, this card is cryptographically nonsense. On the other hand, nearly every attack against passwords is non-targeted, software trolling for matches with word lists and such. A user of qwertycard is paradoxically safe, especiall
45.
by erglkjahlkh 12y ago
What really scares is me is "combined with third party service provider support" part. That means it is not just you who has the capability to flip the switch. Imagine someone breaking into service provider's database, acquir
46.
by erglkjahlkh 12y ago
Usability wise, no one wants to strap on devices and carry them around. They must be non-noticeable to users, and require no active maintenance (for instance synchronizing data). We are still a long way from conveniently wearable computin
47.
by erglkjahlkh 12y ago
The ugly truth is, the reason for Reddit's popularity growth in long term is /r/gonewild and its children. It's so integral part of Reddit, not even the femi-nazi-caterpillartrack-crazies dare to even attempt SJW'in
48.
by erglkjahlkh 12y ago
Extremely light weight? It may be complex, but x509 is based on ASN.1 and one of the most compact and efficient way to represent and handle certificates. There are so many tools supporting it properly, and many of them are extremely hard to
49.
by erglkjahlkh 12y ago
This. They had well defined, implemented, and tested technologies to support creating extremely bug free and working software. For some reason they decided to abandon all that previous work. I can not believe they were that inept, they must
50.
by erglkjahlkh 12y ago
Hey a web site that informs me about the most efficient warez sites. How well thought of them to produce that for me!
51.
by erglkjahlkh 12y ago
For one, it fails to handle memory fragmentation. The effect is that your application seems to grow and grow. It is not very common to cause real problems, but compression is something JVMs learned a long time ago. There are also afaik a fe
52.
by erglkjahlkh 12y ago
The majority of the programs do not really need to guarantee latency. That being said, it is well known that Golang's present GC performs poorly. It presently fails to free memory in certain cases, and has pretty high overhead. There i
53.
by erglkjahlkh 12y ago
While I understand your comment, I have to disagree. Programming languages should be kind of boring, and support the average developers' work. That is why Haskell will ultimate fail and fade away - most of the developers on this planet
54.
by erglkjahlkh 12y ago
It is about economics. The attacks on crypto systems have complexities, and still at the end of the day they require things like raw calculation power. Could they break even single 16384-bit RSA key pair? Probably yes, but they wouldn'
55.
by erglkjahlkh 12y ago
Thank you for good links. What is also somewhat scary is font enumeration. It is somewhat uncommon to find two computer with the exactly same set of installed fonts. I have noticed that especially on Windows platform many applications bundl
56.
by erglkjahlkh 12y ago
Just a fast hobby project for the holidays. The motivation being following: Accidentally disregarding known information-security vulnerabilities and exposures may lead to dire consequences. Tracking CVEs reliably requires great amount of wo
57.
Show HN: Cvesync – Synchronizing new CVEs to issue management system(github.com)
1 points by erglkjahlkh 12y ago|1 comments
58.
by erglkjahlkh 12y ago
Also, the experiment's requirement lead into the operators disabling almost every single safety mechanism. The automated systems disallowed the actions they were trying to do, so they disconnected most important security measures. Oper
59.
by erglkjahlkh 12y ago
As are services like Whispersystems RedPhone... Why bother cracking RedPhone when you can just trigger something remotely on the completely unaccredited radio chip, or the SIM, or the OS platform itself. A modern phone does not have one ope
60.
by erglkjahlkh 12y ago
It's not supposed to really encrypt anything. It's an obfuscation method. It doesn't matter how "broken" it is, as long as anti-virus applications have no idea about how to "decrypt" it. They might as well

More ›