halayli

53 ms·

571.
by halayli 12y ago
maybe it's time for paid subscription model?
572.
by halayli 12y ago
I would suggest using PKI certificate extensions and create an extension in the certificate that has a list of permissions. Beta Server provides a certificate to Gamma server with the permissions it has, and after validation, it will look i
573.
by halayli 12y ago
skimming through the source is one thing, but reading with the intent to thoroughly understand it to a level that you can comfortably modify it is something else.
574.
by halayli 12y ago
Usually you don't just go read source code for the heck of it. You read the source code either to contribute a feature or fix a bug. There's no point in reading the src otherwise because you won't find a good enough reason to
575.
Strlen(buf); Not as Simple as You'd Think(webmon.com)
2 points by halayli 12y ago|0 comments
576.
by halayli 12y ago
Knowledge is not absolute. Yes you can be a C expert and still not know every single little detail about C or any other language for that matter.
577.
by halayli 12y ago
It's not poor. Using REPORT will confuse the API users a lot more than using POST. Not many know what REPORT indicates and it probably will confuse a lot of proxies, and clients. REST sticklers need not take REST as a bible.
578.
by halayli 12y ago
here's a similar technique I use in lthread to generate functions: https://github.com/halayli/lthread/blob/master/src/lthread_s... the arguments are complete function signature
579.
by halayli 12y ago
If you are advertising it as a high performance RPC, you shouldn't be using protobufs. Cap'n proto and flatbuffers are much faster.
580.
by halayli 12y ago
Neither Python nor PHP are thin glues. They have their own GCs, and are byte code interpreted. How is that a "thin" glue on top of c? They are an environment on their own happened to be written in C.
581.
by halayli 12y ago
> "Also, PHP is a fairly thin glue layer on top of a lot of C libraries" Your definition of thin, and glue are kinda... off.
582.
by halayli 12y ago
For the curious, argv[0] can be null if exec* function didn't pass arguments to the program.
583.
by halayli 12y ago
yep. I was referring to superfish's case.
584.
by halayli 12y ago
SO is like an advanced news group. Once you post something it's there forever because they publish their DB every month and it's up for grab and copying.
585.
by halayli 12y ago
Usually sniffing refers to capturing packets. But yes if you can read and write then you can definitely decrypt the traffic since you can provide the user with a trusted cert.
586.
by halayli 12y ago
If you have a computer between the user and net, then yes all bets are off because you can generate certs the browser will trust.
587.
by halayli 12y ago
Yes, but MiTM isn't the same as sniffing packets over a wifi in a cafe, which what Graham claimed.
588.
by halayli 12y ago
Right but this only means you can decrypt data coming from websites using a starfish cert. It doesn't mean you can decrypt your bank traffic because you have this proxy installed which is what Graham is claiming.
589.
by halayli 12y ago
Can someone explains to me how Graham claims he can decrypt the intercepted traffic? The proxy communicates securely with the intended website. It's just the browser <-> proxy communication that's vulnerable but that's
590.
by halayli 12y ago
Unless I am missing something, the only traffic you can decrypt is between the browser and the proxy which is localhost, not the proxy and the website(traffic you see on the wire).
591.
$4k/Month Ultra Modern Castro Studio – Tech Employees Preferred(sfbay.craigslist.org)
7 points by halayli 12y ago|1 comments
592.
by halayli 12y ago
It's a spectrum. Trying to ship a perfect software from the start will probably end up like OS/360 project. Then K&R came along and designed what we know now as unix. An OS that wasn't complete and fully featured like OS&
593.
by halayli 12y ago
haven't hit this problem much. But I do have a solid iMac that I use for development.
594.
by halayli 12y ago
Try to get rid of distracting habits (remove fb app, log out, block news sites, reddit etc...). It might be hard in the beginning and you'll catch yourself opening reddit or going to fb without thinking. Once your brain is less addicte
595.
by halayli 12y ago
I use vagrant + virtualbox (runs ubuntu via vagrant setup) + ansible to bootstrap the VM. I've had this setup for 2 years now. No issues and I get to use sublime to edit files locally while they are shared with the VM.
596.
by halayli 12y ago
Many of those "tricks" have nothing to do with C99. If someone uses this switch macro in a codebase I am working on, I'll most probably punch them in the face.
597.
by halayli 12y ago
Looking at the alternatives listed, it's clear that they have no competitor.
598.
by halayli 12y ago
Webmon currently monitors your website from 4 locations and correlate the results to figure out status of your website. However, it doesn't look into JS errors generated because it doesn't actually render the content. But we are w
599.
Ask HN: How do you market your online service?
1 points by halayli 12y ago|0 comments
600.
Show HN: Free website monitoring by Webmon(webmon.com)
1 points by halayli 12y ago|0 comments

More ›