heavenlyhash

40 ms·

301.
by heavenlyhash 12y ago
I was recalling "Multicollisions in iterated hash functions" published at CRYPTO by Antoine Joux in 2004 talks about this subject. https://www.iacr.org/archive/crypto2004/31520306/multicollis... It
302.
by heavenlyhash 12y ago
Hi moxie, might I ask if you've considered SHA-384 instead? If I understand correctly, SHA-256 is part of the SHA-2 family of hash algorithms, and like SHA-1, when used alone it is subject to length extension attacks. SHA-384 is also a
303.
by heavenlyhash 12y ago
SSL would have partially mitigated this attack, but it's not a full solution either. SSL is transport layer security -- you still fully trust the remote server not to give you cat memes. What if this wasn't necessary? Why can&#
304.
by heavenlyhash 12y ago
Tangentially related: readers interested in alternatives to bash might be interested in a golang library called Gosh that provides shell-ish dsl, which you can see an example of here: [1]. Author here; I use it regularly to replace bash scr
305.
by heavenlyhash 12y ago
Oh man. Nice string interpolation. Can shell script with a shebang. All those little niceties like the `.?` operator. Map literal definitions. Type inferring declarations (like golang: strongly typed, but not wearing out your keyboard)
306.
by heavenlyhash 12y ago
The distinction between this and the coroutine-esqe approach provided by something like Quasar (linked in a sibling comment) is that even with the best of future/promise APIs, the callbacks/futures/promises paradigm of code i
307.
by heavenlyhash 12y ago
Right. As an amusement, this is great, and I can hardly improve upon the visual aid of monkeys frenzying over a lego structure. And indeed even as an educational opportunity to explore how very much not-random CPU scheduling over unguarded
308.
by heavenlyhash 12y ago
This is a remarkably poor idea. Thread scheduling may be difficult to predict precisely. This is a radically different property than being random. A good source of randomness is becomes no more predictable given previous outputs. Being ab
309.
by heavenlyhash 12y ago
This. Or, similarly, just put all your dependencies in a path relative to your executable. Problem solved. I'm an enormous fan of docker for solving linux sysad woes (stacking up magic numbers in /etc/passwd, etc), and it&#
310.
by heavenlyhash 12y ago
https://github.com/polydawn/siphon-cli might address your needs for now. It's just a tiny little wrapper around terminals that shuttles the connection over a unix socket... which in the case of docker, you can pu
311.
by heavenlyhash 12y ago
I quite like checked exceptions. They're actually one of the few things that keeps me writing java for more projects instead of switching more of my time to golang -- golang takes the far opposite approach, and with either returning e
312.
by heavenlyhash 12y ago
I believe the segment that cast shade on instanceof checks was doing so in the process of mentioning "pattern matching" features from other languages. It would be difficult to suggest the utility of pattern matching without expla
313.
by heavenlyhash 12y ago
Personal anecdote, I stopped trying to develop for MC Forge in version 1.7 because the gradle build they switched to was unbelievably slow and difficult to use. After several days of poking it, I still couldn't understand why asking g
314.
by heavenlyhash 12y ago
"Dependency management! Whee!" indeed. I totally share the author's feelings that fetching master to do deployments is pretty rough for repeatability. Vendoring fixes the core repeatability problem, but leaves a lot of other
315.
by heavenlyhash 13y ago
git is "the stupid content tracker", not "the stupid merge tool". Even for things you have no intention of branching or merging, it still gives you control over versioning... and there's a huge gap between the leve
316.
by heavenlyhash 13y ago
When I can't avoid referring to binary blobs in git, I put them in a separate repo and link them with submodules. It keeps the main repo trim and the whole thing fast while still giving me end-to-end integrity guarantees. I wrote htt
317.
by heavenlyhash 13y ago
I suspect that constant factor memory usage should go hand in hand with the criticality of constant factor cpu usage. If a constant time cpu algorithm was not also constant factor memory, then the timing of cache misses (or gc, alike) would
318.
by heavenlyhash 13y ago
Ah, I stand corrected. (I had drawn my impression of Mono from https://en.wikipedia.org/wiki/Boehm_garbage_collector#Uses_a... 's current statement: "The Boehm GC is used by many projects that are implemented
319.
by heavenlyhash 13y ago
Perhaps the docs don't highlight it enough, but I think you should find what you're looking for under http://www.robovm.com/docs#using-the-command-line-tool It's actually what you get when building on linux w
320.
by heavenlyhash 13y ago
Niklas (the RoboVM lead dev) talked briefly about how the GC is used on the list here: https://groups.google.com/d/msg/robovm/etAxWMYvRTU/huXKmPA-J... If I understand correctly, when used in "precis
321.
by heavenlyhash 13y ago
I've successfully used RoboVM to ship native linux binaries from jvm bytecode, in addition to the headlining cross-platform-mobile features. It's fantastic. It worked pretty much out-of-box with a few commands from the Getting S
322.
by heavenlyhash 13y ago
The author of scala at one point made some very good responses to questions about compile times on a stackoverflow question here: http://stackoverflow.com/questions/3606591/why-does-intellij...
323.
by heavenlyhash 13y ago
You might be interested in Nifty: http://nifty-gui.lessvoid.com/ It's hardly any "best practice" or "standard", but it looks like people are managing to ship projects with it. Performance is reason
324.
by heavenlyhash 13y ago
It's possible to perform compare-and-swaps in java just like it is in C. They compile right down to the same primitives that flip bits in metal: you'll get CMPXCHGL instructions (using x86_64 as an example) from the jvm just as y
325.
by heavenlyhash 13y ago
I've been doing a lot of research lately into more deterministic dependency management and reproducible builds by leveraging hashes via git. You might be interested in MDM[1], which is a general-purpose dependency manager for binary bl
326.
by heavenlyhash 13y ago
Check out the email from Michael J Gruber on the git mailing list: http://git.661346.n2.nabble.com/Transparently-encrypt-reposi... There's a fairly complete example there, plus discussion. (It's worth mentioning
327.
by heavenlyhash 13y ago
have you seen the git smudge and clean filters? they provide a way to perform scripts like this automatically on commit and checkout.
328.
by heavenlyhash 13y ago
Sounds like you might like https://github.com/heavenlyhash/mdm ... yummy hashes for determinism, good for binary blobs, embeds semantic links in git, and uses git transports so you can swap out network or local filesys