joeyh

17 ms·

121.
by joeyh 10y ago
The bug was in cloudflare servers, not code run on customer's own web servers, right?
122.
by joeyh 10y ago
When git signs a commit it pipes the entire commit, including the message at the end, and all headers to git. Then it goes back and adds the signature in a new gpgsig header. I often see people getting this wrong in HN threads. Probably be
123.
by joeyh 10y ago
For a long time, you had to load 2+ mb of data to see a 140 character tweet. Twitter actually recently fixed this; the tweet text is available in the title now, so will be available very early in page load. Not only does this make twitter u
124.
by joeyh 10y ago
I'm very impressed with Dan's methodology here, and it matches my own experiences with dialup. One thing I wonder about is, it seems many dialup ISPs these days provide some kind of "accellerator", probably a web proxy t
125.
by joeyh 10y ago
I chatted about just this timeout issue with an engineer from a major CDN while he was at my house enjoying the dialup. Seems like simply a matter of resource management; slow connections do use more resources. Most CDN customers don't
126.
by joeyh 10y ago
While I wrote my comment from a free software POV, this also seems to apply to proprietary software hosted on Github. Both software in private repositories there, and software with published code whose license does not allow modification.
127.
by joeyh 10y ago
The primary way to use software is to run it.
128.
by joeyh 10y ago
Except Github is hosting software, and this license allows them to modify and use that software in any way they like, without complying with the software's normal license.
129.
by joeyh 10y ago
Github does not need to sell the content to do anything I described. The content is software, and they can run it, modify it, and sell access to the site that runs it. And "Service" is defined as "anything github is doing&quo
130.
by joeyh 10y ago
Solely to allow us to provide the Service and to host the Content you upload to the Website without violating any rights you have in it, you grant GitHub and our successors a nonexclusive, worldwide, transferable,
131.
by joeyh 10y ago
Since I temporarily have HN's attention with this side blog of mine, can I suggest one simple tweak: Please, please, if your site requires AJAX to work at all, then retry failed AJAX queries. Use exponential backoff or whatever but don
132.
by joeyh 10y ago
As well as running things over ssh (which IIRC requires double-shell-escaping), su -c and similar take a single parameter containing the command to run.
133.
by joeyh 10y ago
That's about Windows, but many uses of system() that involve non-static strings also probably get quoting wrong. Of course, avoiding the shell is the best way to avoid the problem. Sometimes, you can't avoid the shell. My preferre
134.
by joeyh 10y ago
joey@darkstar:~>touch true joey@darkstar:~>chmod +x true joey@darkstar:~>ls -l true -rwxr-xr-x 1 joey joey 0 Nov 18 10:53 true* joey@darkstar:~>if ./true; then echo yay; fi yay Just saying.
135.
by joeyh 10y ago
This reminds me of a over 10 year old security hole I noticed in tar: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=290435
136.
by joeyh 10y ago
Seems this is not the same form factor or pins as the CHIP. So it can't be swapped out to upgrade PocketCHIP, etc. They seem to be missing an opportunity here to create a standard. Pity, I had assumed that was the goal. (Of course, ma
137.
by joeyh 10y ago
The architecture, for the curious, is simply shellinabox serving up a shared screen session with tin in it run on a couple of VMs. That doesn't scale super well. Since it's been 5 years since I put that together, it's probabl
138.
by joeyh 10y ago
Be sure to check back on November 11th 2018, which is when the Morris worm will hit olduse.net.
139.
by joeyh 10y ago
Apologies for the overloaded terminal emulator on the website which is not letting many people run tin. Was not really expecting to be randomly on HN 5 years deep into olduse.net's run.
140.
by joeyh 10y ago
data Case = CaseSensitive | CaseInsensative This is just as efficient as the newtype, and leads to clearer code when matching on the value. Also, sometimes types you thought only had two inhabitants get a third one added later, wh
141.
by joeyh 10y ago
Ditto.
142.
by joeyh 10y ago
My grandfather worked as a structural engineer on the canel. I have old papers with calculations of stress on the concrete, done by hand. http://www.archive.org/details/panama-canal-lock-design-pape... Anyway, since co
143.
by joeyh 10y ago
Haskell has rotted my perl brain.
144.
by joeyh 10y ago
Also they use both plural and singular nouns, and hash them to different locations.
145.
by joeyh 10y ago
Cast your mind back to when SIGHUP first started getting sent to processes on logout. Some programs had to start making an new API call to block SIGHUP killing them. nohup was invented. Some admins probably disabled SIGHUP for a while as it
146.
by joeyh 11y ago
git can sign merges.
147.
by joeyh 11y ago
The existence of things that claim to have been committed as me, with no proof and not in the history of my master branch or a released tag, is irrelevant. My users use my release tags, and my master branch, they don't use random commi
148.
by joeyh 11y ago
If you're reading that as an argument against signing git commits, I suggest you re-read it.
149.
by joeyh 11y ago
If you're like me and gpg --export -a $KEY is 3000 lines of output due to lots of signatures on your key, try: gpg --export-options export-minimal -a --export $KEY I guess github wants to associate particular accounts with keys, but it
150.
by joeyh 11y ago
I decided to start signing all my commits as a matter of policy, since the cost to break SHA1 is now estimated at $75k. There are certainly git repos that it would be worth $75k to compromise, and a single birthday attack collision in SHA1

More ›