joeyh

25 ms·

271.
by joeyh 13y ago
Steve Thomas: Yes this is scary but I believe everything is/was over https. So this just means that it was host based security. Meaning we have to trust that Cryptocat didn't store/transfer encrypted messages or leak their
272.
by joeyh 13y ago
Actually, I have not received the one for moreutils yet. However, we got 1 report for the Debian Installer, which I hope means only 1 problem was found.. which is nice, as the d-i code is mostly not written with this kind of robustness in m
273.
by joeyh 13y ago
Having received one of the bugs (that was not exploitable), I appreciated it in the short term. :P I hope a free version of this can be built, it would be a nice additional QA step to run before release.
274.
by joeyh 13y ago
FWIW, it's probably not entirely accurate to say that Fay has a runtime. Any more than some jquery-using code does. I think ghcjs does have a traditional runtime of a sort, but don't quote me on that. :)
275.
by joeyh 13y ago
There's also Fay < https://github.com/faylang/fay/wiki> which provides a lighter-weight compilation of Haskell to JS, omitting stuff like threading and type classes. Nice thing about Fay is you can read
276.
by joeyh 13y ago
There are ports of ghc to both Android and IOS. I've run ghc directly on Android. ghci not so much, so you're technically right about there being no interpreter.
277.
by joeyh 13y ago
Thanks for that correction. Makes this all even crazier, if Wired is straight up trying to send him a message this way.
278.
by joeyh 13y ago
79DEBE35 is a key in the possession of Wired, I'm sure they'll enjoy passing your message on the the NSA via their parent media giant. Edit: Also, it's not very hard to generate a different key with signature 79DEBE35, and pu
279.
by joeyh 13y ago
I remember 768 bit asymetric keys in the mid 90's, and the paranoid had perhaps a 1024 bit key (I'm not very paranoid, and I got a 2048 bit key before 2000). A 768 bit RSA key was factored in 2009; the NSA could probably do it ear
280.
by joeyh 13y ago
Interesting, the encrypting key is "Verax (Informed Democracy Front)" and claims to have been created on May 20th. I can't tell what key the message is encrypted for. They may have used --hidden-recipient
281.
by joeyh 13y ago
joey@gnu:~>gpg --recv-keys 2512E3C7 gpg: requesting key 2512E3C7 from hkp server pool.sks- keyservers.net gpg: key 2512E3C7: "Joey Hess <joeyh@debian.org>" 24 new signatures gpg: Total number processed: 1
282.
by joeyh 13y ago
chunks <- Streams.toList i let feed = decode (BL.fromChunks chunks) :: Maybe Feed You lose streaming here; this reads the entire response body into memory before sending it to Aeson to decode. Which is a shame since both A
283.
by joeyh 13y ago
Seems appropriate that the default C program, as it were, segfaults.
284.
by joeyh 13y ago
I also love that, to connect to a XMPP server, a client needs to use SRV. Which AFAIK cannot be queried via gethostbyname, getaddrinfo, or any other standard interface. So you need to pull in a nonstandard resolver library, or to fork off `
285.
by joeyh 13y ago
Wow, I love that prison has a less restrictive arbitrary length limit than does twitter!
286.
by joeyh 13y ago
Here's a blog via snail mail service for the incarcerated. http://betweenthebars.org/ It's been running for 3 years. Incidentially, one of the the people who runs it was a good friend of Aaron Swartz. http://mako.cc/copyrighteous/aaron-
287.
by joeyh 13y ago
In a way RCS is a better architectural fit for this than git, because you can check /etc/shadow in and only one file is used to version it, unlike with git where the whole /etc/.git/ directory has to be locked down to avoid exposing its con
288.
by joeyh 13y ago
Recently the git-annex assistant has gained the ability to check selected files directly into git, so you can have your diffs too if you want them. http://git-annex.branchable.com/design/assistant/blog/day_22...
289.
by joeyh 14y ago
Attacker claims to have done so in this irc log: http://pastebin.com/7WXRDyAg > 07:52 < HTP> the CCrypter class of the linode application context was accessable from outside the wwwroot using undocumented ColdFusion methods. i
290.
by joeyh 14y ago
Storing a passphrase (or unlocked private key) in memory is storing it electronically. Once the attacker has root, they can dump the memory and access this information. The attacker claims to have gigabytes of data, which could well inclu
291.
by joeyh 14y ago
It's quite likely that someone has left root logged in on hvc0 (the LISH console) on their Linode, while logging out of LISH. Probably more than one person. Also, access to LISH even without a root password provides access to some scrollbac
292.
by joeyh 14y ago
I live 30+ miles from any town of any size and there's still sufficient light pollution seeping over the horizon to make the hills stand out black against the sky. I'm lucky I can see the milky way at all, although somewhat washed out. Bein
293.
School of Haskell(haskell.fpcomplete.com)
3 points by joeyh 14y ago|0 comments
294.
by joeyh 14y ago
Nice example of using Software Transactional Memory. Which is starting to be available in things like gcc, but is much much nicer in Haskell for reasons involving purity and monads. Particularly this function, which changes a variable in th
295.
by joeyh 14y ago
An interesting term to look up when considering something like this is the cost to "endow a terabyte": To ensure that it's preserved continually, paid as an up-front cost. IIRC archive.org manages this for somewhere around $2000 per terabyt
296.
by joeyh 14y ago
A foundation is one approach, and a valid one. You might end up with something like archive.org, except with a Wayback Machine that serves up actual historical content. (This would be an interesting direction for archive.org to take their W
297.
by joeyh 14y ago
They have around 10800000 sites. Some users have more than one.
298.
by joeyh 14y ago
I'm 1.5 hours from Knoxville in the most rural possible direction. (Lived in the Bay Area in the past, still like to visit.)
299.
by joeyh 14y ago
I use kerosene lights by choice in the winter in weeks like this one when there is no sunshine. So, here's my firstish world problems take on it. May not apply to people for whom a gallon of kerosine is a significant fraction of their month
300.
by joeyh 14y ago
Ah, see, I can remeber your full name, Peter .. just had trouble getting there from the HN username. :) As I recall, you were the secretary of CSLUG.. Indeed, querying my external memory for your posts, I find meeting minutes you posted th

More ›