half-kh-hacker

12 ms·

91.
by half-kh-hacker 7y ago
To be fair, this is three-and-a-bit years of experience in this area, so it's not like I've learned this in my eight weeks of lectures...
92.
by half-kh-hacker 7y ago
I would love to do something like that to HotSpot but with W^X being a thing I don't think it'd be easy with these Unsafe tricks. I'd probably have to do some JNI hackery...
93.
Circumventing the JVM's Bytecode Verifier(anthony.som.codes)
83 points by half-kh-hacker 7y ago|15 comments
94.
by half-kh-hacker 7y ago
yGuard seems to focus mainly on removing dead code and emitting small names, so this looks like size optimization.
95.
by half-kh-hacker 7y ago
A little, but you can balance the obfuscation's complexity so that the HotSpot JIT is able to inline the transform. Of course, this comes with a trade-off that custom deobfuscation transformers will also be able to inline these, but th
96.
by half-kh-hacker 7y ago
Sorry for being a bit late with the reply; I did consider following up, but didn't due to other factors, and found a placement elsewhere. (mainly, my distance from London.) This is great advice, though. Thanks.
97.
by half-kh-hacker 7y ago
As someone also working in the Java obfuscation space, it's cool to see old obfuscators becoming open-source. yGuard seems to only provide shrinking and remapping at this moment in time, however. Heavier-duty obfuscators will also inco
98.
by half-kh-hacker 7y ago
Here in the UK, some schools mandate unpaid 1-3 week work placements. I actually applied for a place at Citymapper and got a promising reply, but eventually I guess it fell through the cracks because I didn't receive any communication
99.
by half-kh-hacker 7y ago
I dunno, I just did some back-of-the-envelope calculations and it seems to be okay: With 8 high-end GPUs, we see a Blowfish speed of about 100 kilohashes per second. [0] We assume we're cracking bcrypt strength 10, so we divide this nu
100.
by half-kh-hacker 7y ago
But surely word lists are publically available for English words too?
101.
by half-kh-hacker 7y ago
> a particular large internet company https://opensource.google/docs/using/agpl-policy/ ?
102.
by half-kh-hacker 7y ago
I sent in a pull request for Signal-Desktop this month and am yet to receive any reply whatsoever for 20 days now.
103.
by half-kh-hacker 7y ago
I don't mind things being created in the $HOME directory but the inconsistent casing as different applications create folders can be annoying
104.
by half-kh-hacker 7y ago
Crockford actually puts this requirement in most of the software that he writes. A few years ago he told a story where he had to relicense JSLint for IBM, stating "I give permission for IBM, its customers, partners, and minions, to use
105.
by half-kh-hacker 7y ago
If you're already on Coinbase, you can cash out there by sending your Lumens over. Otherwise, you can go through one of the Stellar exchange frontends and convert the lumens (there are a few institutions set up to accept lumens and con
106.
by half-kh-hacker 7y ago
It's surprising that nobody here's mentioned Wasabi, since they have free egress.
107.
by half-kh-hacker 7y ago
Kotlin has [] but it can't be used with the null-safe navigation operator (?.) If you want to index a datastructure that could be null, you use ?.get(...) instead of ?[...]
108.
by half-kh-hacker 7y ago
> Sites that "still work with JS disabled" are in the minority on those lists. You'd be surprised how many sites are still viewable without JS enabled.
109.
by half-kh-hacker 7y ago
This is a cool project, but it's kind of ruined by Discord's inane TOS. I hope we can get people to move to something open.
110.
by half-kh-hacker 7y ago
I built mine using a DZ60 PCB, an aluminium case, and some ZealPC Zilent (revision 2) switches.
111.
by half-kh-hacker 7y ago
I've taken to using DDG and when I find that the results are unsatisfactory, I stick a '!g' at the start or the end of my query, and it redirects to the google results page.
112.
by half-kh-hacker 7y ago
Without HSTS, you can inspect the cert and click through the invalid certificate warning. With HSTS, that button goes away in browsers.
113.
by half-kh-hacker 7y ago
If you don't shade libraries, I imagine managing a classpath can become quite difficult.
114.
by half-kh-hacker 7y ago
Regarding: > - I don't think China is any more evil than the US. In my opinion, citizens of China have it far worse, due to things like the Great Firewall. I'd much rather live in the US than China, at least it's vaguely d
115.
by half-kh-hacker 7y ago
I use Firefox Nightly and I haven't seen an 'install Chrome' banner on YouTube. The use of Shadow DOM v0 is a pretty good push, though. Chrome is way faster to load a YouTube page than FF. I hope they update their version of
116.
by half-kh-hacker 7y ago
So, if you're a non-English speaker, doesn't this render distinguishability for real IDNs completely useless? Compare http://xn--j1ail.xn--p1ai and https://xn--d1aqf.xn--p1ai - If rendered to punycode, th
117.
by half-kh-hacker 8y ago
The website actually uses the default font for your browser. I've always changed this to a sans-serif font.
118.
by half-kh-hacker 8y ago
I'm not a Rust expert, but I think ownership and borrowing go away after compile-time.
119.
by half-kh-hacker 8y ago
I don't use KDE as a desktop environment, but KDEConnect works just fine outside of KDE in my experience.
120.
by half-kh-hacker 8y ago
> Java 9, 10, and 11 have not changed the bytecode Off the top of my head, JEP 309, implemented in Java 11, introduces a new instruction called `constantdynamic`

More ›