hf

9 ms·

31.
by hf 12y ago
Being among the most zealous to worship at the altar of Kernighan and Ritchie, I, nevertheless, over the years, have come to appreciate the positions expressed in this fine, albeit often humdrum, collection. Concrete examples of the insanit
32.
by hf 12y ago
Cray's rather famous anti-parallelization quip, "If you were plowing a field, which would you rather use: Two strong oxen or 1024 chickens?"[0], reminds me somewhat of one of Donald Knuth's statements: "During the p
33.
by hf 12y ago
While we are busy dispensing wisdom: Do use PermitRootLogin without-password instead of 'yes' in /etc/ssh/sshd_config if you absolutely must have ssh root access.
34.
by hf 12y ago
Both scenarios you mentioned would, I believe, benefit from using keychain (see below). Let's suppose I have an account tests@host which runs the tests (scripts) that need to login to an array of machines. In order for keychain to be
35.
by hf 12y ago
A few commenters do not seem to be aware that it is perfectly possible to use passphrase-protected keys for automated tasks (cronjobs and the like). The excellent (though unfortunately named) keychain[0] utility provides a ready and powerfu
36.
by hf 12y ago
What is more, you can specify an abstraction for the tedious double-ssh where you first connect to some internet-facing host in order to gain access to an internal machine: Host $ALIAS User $USER HostName $INTERNAL
37.
by hf 12y ago
The situation with beginner-friendly SSH tutorials is, in a much lesser degree perhaps, comparable to the crypto texts: Good will alone does more harm than good. This treatment ssh does not mention ssh-agent and, more importantly perhaps,
38.
by hf 12y ago
Outstanding! Although, at first glance, the image-by-image mode of distribution seems obstructive to widespread dissemination (as is the case with similiar publications of the same kind and magnitude[0]), the generous licensing makes more t
39.
by hf 12y ago
Seeing as how they seem to be going out of their way to mention Open Content and public domain in one sentence, I would venture to guess that there's nothing standing in the way of compiling a torrent archive. Redistribution is not adr
40.
by hf 12y ago
This interface paradigm has, I believe, become known as gamification ; an example from another domain, language learning, would be Duolingo[0]. Engaging as such applications are with their stimulus of powerful primordial triggers, they all
41.
by hf 12y ago
The opening paragraph asserts that simply not publishing ("censoring") such concrete, recipe-like exploits of the deficiencies of our shared infrastructure "won't make practices like those outlined [in the article] disap
42.
by hf 12y ago
Enticing; depth and vision. Coherence is always tricky, but, to my mind, they pull it off. To be quite honest: Debian/kFreeBSD is still my version of FreeBSD, but that's just laziness.
43.
by hf 12y ago
An impressive collection to be sure. Slightly hyperbolical, the British Pathé archive puts it thusly: "This archive is a treasure trove unrivalled in historical and cultural significance that should never be forgotten."[0] Howeve
44.
by hf 12y ago
As glossarian in residence I cannot but expand the above app-sec acronyms: * CBC - Cipher block chaining: https://en.wikipedia.org/wiki/Cipher_block_chaining#Cipher-b... * CFB - Cipher feedback: https://en.w
45.
by hf 12y ago
Of course, encfs aims to hit a very specific sweet spot with their emphasis on backup-friendly per-file encryption as opposed to Truecrypt's container approach. Which is begging the question, naturally. edit: To wit, whether an alterna
46.
by hf 12y ago
I removed this sentence from my previous comment to parent: From a layman's perspective, I should think the encfs authors came away from that analysis with a feeling of achievement: to have been audited (however quickly) and yet to li
47.
by hf 12y ago
As this surfaced, I was chiefly impressed by the fact that encfs was amenable to such a by-and-by[0] audit: the code-base must be at least somewhat legible. This "auditability" seems to me a strength worth nurturing. [0] Where &q
48.
by hf 12y ago
I don't want to sound overly enthusiastic, but I do think that this fits the bill 90% of the way. Great presentation[0]; pricing explicit and almost exactly what I would have imagined; and, of course, sane pick-up and delivery. I ev
49.
by hf 12y ago
Coincidentally, this is something I have researched just last week for my area. I would love to store boxes upon boxes of things that I will need in another two years (eg. baby clothes), will sell eventually, or plain don't want aroun
50.
by hf 12y ago
I believe one of the more famous Richards were mentioned in this everlasting classic: Richard P Feynman, who, on having picked a certain lock, complained that "[t]he trouble with playing a trick on a highly intelligent man like Mr. Tel
51.
by hf 12y ago
Vacillating between floating away on my recently-inflated feeling of self-worth and trying to keep you engaged on a very uneven playing field (as in my not knowing Adam from Eve, so to speak), I'll simply opt for another Thank you.
52.
by hf 12y ago
While by no means as well-formatted, the following list contains the output of my now-redacted script: http://pastebin.com/NT2TKRTM
53.
by hf 12y ago
For the uninitiated: LTO stands for Link-time optimization and happens when the compiler merges/links all separately-compiled object files into one (executable or library). Although it seems obvious that this might be a good idea, why
54.
by hf 12y ago
A stamp of approval if ever there was one. Thank you. What, however, hinders adoption as a "working man's" TLS library? Neglecting performance and variety of cipher support, would or should anything prevent me from using
55.
by hf 12y ago
Undoubtedly these excellent books call for a unique presentation. I, however, would like to see simple text-only list companion to go along with it. Turns out, this is not just a matter of grep'ing through the source: the only actual
56.
by hf 12y ago
Absolutely astounding: I have been looking for this book ever since I pored over it in the Wolfson Reading Room in Manchester Central Library 5 years ago. I didn't take down the authors' names, though, referring to it as "th
57.
by hf 12y ago
Trevor Perrin (of TACK fame) wrote TLS Lite in Python. I submitted a link to TLS Lite a few days ago, but, alas, showed poor judgement in timing: https://news.ycombinator.com/item?id=7564740 Direct link: http://
58.
by hf 12y ago
Leaving all those unsavoury associations of perfecting surveillance en masse aside: Are they quite sure their transmission channels are strictly uni-directionnal?
59.
by hf 12y ago
I didn't know about fuzzers before this whole imbroglio -- not denoted as such, at least. If you know `crashme` you already know one fuzzer, which "intended to test the robustness of Unix and Unix-like operating systems by executi
60.
by hf 12y ago
The commit message contains a rather succinct, albeit drastic description-cum-definition of Heartbleed: > [A] 64K Covert Channel in a critical protocol.

More ›