georgerobinson

16 ms·

91.
by georgerobinson 11y ago
What about timing attacks?
92.
by georgerobinson 11y ago
What if the Android update system is split into two channels: critical updates and feature updates. The latter can be issued via the OEM or carrier - whereas the former is issued by Google. Since Google own the trademark on the Android name
93.
by georgerobinson 11y ago
I once jumped-in on a PHP project where the previous developers had written: $page = $_GET['page']; include ($page.".php"); Whilst allow_url_include ( http://php.net/manual/en/filesy
94.
by georgerobinson 11y ago
> Safer languages is a good place to start. Could (and should) a safer language pre-empt that you should first check strlen(str) != 0 before doing strcmp? I know of no language which does this. > Input validation can be made to be mac
95.
by georgerobinson 11y ago
Just to be clear, do you browse and read email in a virtual-machine or is this statement referring to the behaviours of security researchers more generally? If so, have you ever forgot to use the virtual machine and instead browsed or read
96.
by georgerobinson 11y ago
> Isn't the Chrome sandbox a better assurance than Chrome-under-Docker? Sorry, are you referring to Native Client or Chrome's site isolation?
97.
by georgerobinson 11y ago
I'm working to deepen my knowledge and experience with: 1. Networks and protocols I know most of the TCP/IP stack, physical through to application layer, but lack expertise in most of it. For example, it couldn't tell you how
98.
by georgerobinson 11y ago
I have a regexp set up that immediately moves all incoming emails with no-reply to my spam folder. If I am expecting such an email I can look in my spam folder manually.
99.
by georgerobinson 11y ago
Does anyone think that JavaScript could overtake PHP as the "go-to" language for server-side scripting with Node.js as the "go-to" runtime? Despite my indifference to Node.js, I can see the unification of client-side and
100.
by georgerobinson 11y ago
If you look at the Super Guppy with it's loading bay open [1] you can't help but wonder where they put all the wiring and hydraulics between the cockpit and the rest of the plane? [1]: https://en.wikipedia.org/wik
101.
by georgerobinson 11y ago
I picked up a pair of Bose SoundTrue On Ear headphones. I'd been stalking them for a while but they've been priced at £129.95 for months. I ordered them yesterday for little over £70. Very happy!
102.
by georgerobinson 11y ago
Sorry, it doesn't look like it! I did find the same presentation but from another event: https://www.youtube.com/watch?v=d6pU4C4PVoY However, I cannot recall whether this was a subject of the talk or whether I asked it
103.
by georgerobinson 11y ago
Would a client that supports TCP Fast Open then fallback to the standard 3-way handshake once it's SYNs timed out?
104.
by georgerobinson 11y ago
> Do you have a link for this? It seems hard to believe given how relatively low the numbers of those vehicles are In 2013, HGVs were the cause of approx. 65% of all deaths of a cyclist ( http://www.bbc.co.uk/news/uk-
105.
by georgerobinson 11y ago
I had a fear of flying (still do, but I can manage it better) and sleeping would have been the best thing to get through the flight. However, I could never do it. Therefore, I would do everything possible to distract myself from the fact th
106.
by georgerobinson 11y ago
I spend most of the week in London, where cycling is an incredibly popular mode of transport given the slow buses, heaving tubes, and the more widespread push to exercise and be healthy. A pedestrian myself, I've observed that the larg
107.
by georgerobinson 11y ago
In her interview, just over a year ago, my girlfriend was asked: "How many coffees are sold in London each week?". I can't remember her derivation, but I remember her saying the interviewer was taken aback by her answer. Late
108.
by georgerobinson 11y ago
If you're embarrassed by the first version of your product (i.e. suppose it's buggy, or is lacking in it's UI) then it's probably not ready to ship? There is nothing worse than shipping a half-baked product.
109.
Ask HN: What are some open source projects in need of contributions?
4 points by georgerobinson 11y ago|2 comments
110.
by georgerobinson 11y ago
Second this too! I've been with Fastmail since 2011 and their service is excellent.
111.
by georgerobinson 11y ago
I'm puzzled. Can you explain what you mean by bringing to a halt? Do you mean a dropped packet might terminate the TCP connection; or at worst result in the timeout of a segment and a return to slow start? Nevertheless, I would have th
112.
by georgerobinson 11y ago
Is this not quite risky, even for personal use? How do you contact family and friends who aren't savvy enough to setup their own email server? What about replying to job interviews? It would really suck if you didn't get the job b
113.
by georgerobinson 11y ago
If you want to do a domain availability check without using one of the webforms you can usually determine whether a domain name has been reserved or not with a simple DNS query: $ dig in any example.com
114.
by georgerobinson 11y ago
> Threads are heavyweight — switching threads is inefficient, they have considerable memory overhead, and the OS will bog down if you make too many of them. I didn't realize Posix threads were that inefficient? First, I can't s
115.
by georgerobinson 11y ago
Is there anything that makes this sort of practice unlawful?
116.
by georgerobinson 11y ago
I would think so. Let's use "unlimited" in the context of public transport. You have paid for a Travelcard on the London Underground Zones 1 to 6, including peak hours. If there is congestion on the line, or it's a busy
117.
by georgerobinson 11y ago
I agree that denial of service attacks are at best unlawful. However, an attack? I think not. For it to be an attack I would presume there must be some evidence of malice and intent. I have seen no such evidence of this.
118.
by georgerobinson 11y ago
I see you're very much concerned about liability and financial compensation here. I'm no lawyer so I don't know whether it could be a criminal offence to export prefixes like this either intentionally or by accident. However,
119.
by georgerobinson 11y ago
There is a great chapter on BGP by Hari Balakrishnan. I believe the chapter is available on MIT Open Courseware. It should be under the Computer Networks class. Edit: found it. See Lecture 4: http://ocw.mit.edu/courses/
120.
by georgerobinson 11y ago
I'm more than happy to participate in a technical interview and I always prepare the best I can. However, I find it odd that technical interviews don't work both ways. The interviewer can ask you to solve problem x, but if you ask

More ›