kevhito

11 ms·

61.
by kevhito 9y ago
It's strange, many news organizations report this as "200,000 organizations", but others as "200,000 computers". Which are very different. Some of the bigger universities alone probably have hundreds to thousands of
62.
by kevhito 9y ago
> ... but I could not find any good documentations on it. Completely agree. I wanted to set up some simple traffic shaping on gcp and aws nodes my students will be using for some networking projects. I've used both netem and tc in t
63.
by kevhito 10y ago
It's no different than: public class LinkedList { ... public int size() { if (head == null) { return 0; } else { int n0 = 1 + head.size(); } } Actually, it is different
64.
by kevhito 10y ago
Well, that's why I said "mostly". The thing I need to protect, the key, is a very specific piece of data, which is used for one specific purpose, and I can take specific measures to prevent that secret from leaking. Everythin
65.
by kevhito 10y ago
Alternate reality rules of the game are: nobody speaks, you pick any two doors you like, and you win the prize behind both of them. The odds of wining this game is obviously 2/3. Monty will gesture at you to point to a door. You point
66.
by kevhito 10y ago
I was responding to your nonsense advice that 12+ character random ASCII is somehow better or more secure than a "correct horse battery staple" or diceware-style password. They have identical security properties, given appropriate
67.
by kevhito 10y ago
> It's a false dichotomy. What part of the parent are you responding to here? > Your private keys are just "obscure" information that requires some effort to find too. I think this is highly misleading. There is nothing
68.
by kevhito 10y ago
Please don't give security advice unless you know what you are talking about. It just spreads misinformation.
69.
by kevhito 10y ago
Well then your instructor was doing it wrong, and that's a shame. I teach this course regularly, in Java (and previously in C++). Week 1: "it's just some magic, don't worry about it" Week 2: arrays are a thing, hey
70.
by kevhito 10y ago
Go has "defer", which is great. Perhaps it should have a similar "whenever" construct. val, err := foo() if err != nil return err vee, err := bar() if err != nil return err Would beco
71.
by kevhito 10y ago
I don't really understand your comment. > Most investors have poor returns because they defer to their self-defeating cognitive biases, they don't take the time to understand investing, and they often naively believe they have
72.
by kevhito 10y ago
So you are telling me a valid optimization for Go is to elide the entire contents of all goroutines? And by that argument, since main() itself is an implicitly-called goroutine (so far as I know), then the compiler can elide the entire cont
73.
by kevhito 10y ago
I don't understand. By your argument, and some of the replies, because "you're not guaranteed a goroutine will run at any particular time", the compiler is free to elide any suffix of a goroutine's code, even if tha
74.
by kevhito 10y ago
I was tempted to poke a little fun at you for having trouble with sed -- among my peers, 's/foo/bar/g' used pretty much daily, even just in informal emails/conversations. But I'm glad I looked at the list
75.
by kevhito 10y ago
> someone out there has made assumptions which will now be invalid I was thinking about this as well, but I think the key is that they guarantee only the semantics that are _documented_. If you make assumptions beyond the documentation,
76.
by kevhito 10y ago
> there is a deterministic formula for converting monotonic clock time to wall clock time I think "deterministic" is not really right here, since you can only convert monotonic times in the past, not the future, and only after
77.
by kevhito 10y ago
> ship all the chunks over with a sequential number Except that if you ship them too fast, they will at best simply build up in a buffer somewhere (e.g. near a bottleneck link), or more likely they will overflow causing many of your pack
78.
by kevhito 10y ago
I've had one for about 6 months that I use for gmail. I like it, easy to set up, works pretty much out of the box , security story seems reasonable, and device is physically pretty sturdy so far. For at least 2 linux boxes I use, I ne
79.
by kevhito 10y ago
> reliability (1 million switchings without hiccup?) That's about 20 cycles ("switchings") per day for 150 years. I was curious so I tried to look up reliability/endurance ratings. For a fairly durable-looking "
80.
by kevhito 10y ago
It sounds to me like you would like to be a representative on your local city council, or a town board. Why not run for election? Then you can do everything you mentioned. In principle, frequent voting might sound nice. But I don't kno
81.
by kevhito 10y ago
Oh, just found this: > The Duration type could be simplified with this: instead of using a u64 for seconds with a seperate u32 for nanoseconds, it could just be a single u128/i128 count of nanoseconds. Of course, just a single u64 a
82.
by kevhito 10y ago
I wasn't able to find any real justification beyond (a) one vague mention of "some algorithms... such as certain cryptographic algorithms" and (b) the fact that clang supports it. Can you point to something more specific? Jus
83.
by kevhito 10y ago
This is a somewhat older rant (at least 2015, I think). And the title is misleading. It is really "Why I wish there were a product similar to but different than smartcards, HSMs, YubiKeys, etc." Because there isn't much in th
84.
by kevhito 10y ago
Yes, 2048 is tiny. I've been using a 4096-word dictionary I found online for years, along with my family and two kids since they were about 6 years old. There is absolutely no trouble with a 4096 word dictionary. Yes, they (and me too)
85.
by kevhito 10y ago
Everything in the article is spot on, I only wish they went further and recommended passphrases more strongly. It's correct horse battery staple and all that. As for your calculation, you are about right. Except memorizing a completely
86.
by kevhito 10y ago
I help maintain/develop an app that allows users to draw and simulate logic circuits on a canvas. Text plays a minor but important role for labeling various components, showing bit and hex values, etc. The app uses system fonts, and it
87.
by kevhito 10y ago
> Switches are very simple devices. If the switch mechanism is not enclosed, ... Sarcasm, I hope? I spent an hour this weekend replacing some micro switches in some decrepit robots. These are about 5mm^3, which is pretty tiny, but huge o
88.
by kevhito 10y ago
Irrelevant. It works fine for passwords too. The security of "correct horse battery staple" method is (nearly) optimally resistant to GPU (or any other) brute force attack.
89.
by kevhito 10y ago
> no one really cares Maybe. Or maybe they care and simply have a different perspective on what is the best approach. Or maybe they have different priorities. Optimizing for one variable (e.g. making one specific course awesome) at the e
90.
by kevhito 10y ago
I think it's mostly just me. It's not so much "get in line", but "before you complain about getting in line, maybe consider why there is a line in the first place". Getting burned by pissing off one or two peop

More ›