kpcyrd

17 ms·

181.
by kpcyrd 9y ago
My most interesting projects are currently a security focused network sniffer[0] and a sandbox debugger[1] that I came up with while writing the sniffer to inspect what an attacker can and can't do assuming the process gets fully explo
182.
by kpcyrd 9y ago
- /* Assume for now that ALL x86 CPUs are insecure */ Before this patch the mitigation was active for all vendors.
183.
by kpcyrd 9y ago
Sure, but that definition of opensource wasn't implied with "closed source due to wasm".
184.
by kpcyrd 9y ago
Minified javascript isn't really open source either.
185.
by kpcyrd 9y ago
https://github.com/koute/stdweb There's a todomvc example app written in rust with no javascript besides the loader.
186.
by kpcyrd 9y ago
If you want to do this the traditional way, you would setup a user, then properly secure it (you might end up becoming a proxy) and then set a ForceCommand. After that, verify your config works, then set the password for that user to an emp
187.
by kpcyrd 9y ago
+1, I'm pretty sure the term was adopted from gangster rap where it roughly translates to "working hard to make money". I've seen it in use by people who don't work in sales.
188.
by kpcyrd 9y ago
audio only nudies are usually slightly less exciting.
189.
by kpcyrd 9y ago
Since the parent was deleted and I couldn't comment by the time I finished typing, here's the non-tl;dr: The main advantage is non-hierarchical routing. Your ip address is in fact the fingerprint of your public key, which is used
190.
by kpcyrd 9y ago
If you need something that works everytime, you're stuck with http and https due to outbound firewalls. Even installing a dns recursor on your laptop might not work. I'm tempted to setup a corporate-y network as a weekend project,
191.
by kpcyrd 9y ago
Use one of the cheap external disk cases and make sure it's on the desk.
192.
by kpcyrd 9y ago
60gb for AAA games isn't that uncommon. If you never uninstall any games, you're going to notice that 1tb isn't much. > assuming no new technology like IPFS comes along that might incentivize storing other people’s data ip
193.
by kpcyrd 9y ago
> So you connect to the NSA run bridge that routes you to the GCHQ/NSA/CSIS/ASIO run farm of internal relays. This isn't possible. Your tor daemon fetches the consensus from a directory server and picks the relays and
194.
Git-daemon-dummy – deprecate git:// for https://(git.zx2c4.com)
1 points by kpcyrd 9y ago|0 comments
195.
by kpcyrd 9y ago
Do you happen to know if this is still supported in eg. xterm?
196.
by kpcyrd 9y ago
It would be interesting to see how the new version compares to ipfs.
197.
by kpcyrd 9y ago
git clone git://git.codemadness.org/stagit Can we please stop doing that? Use https:// or anonymous ssh.
198.
by kpcyrd 9y ago
I have a grief with plain text logs. They are really nice if you want to read them manually with vim or less, but are super painful if you want to parse them automatically. It doesn't help much that a fair number of logging libraries h
199.
by kpcyrd 9y ago
I don't know why this is getting downvoted. I used to install systemd from backports on wheezy only because I don't have to write sysv-init scripts that way.
200.
by kpcyrd 9y ago
1) Run your miner on green energy 2) Green energy demand increases 3) More green energy 4) Save the world
201.
by kpcyrd 9y ago
It's very similar to nodejs web frameworks. If you start it you have a working webserver with your application in it.
202.
by kpcyrd 9y ago
Even if you could I would highly recommend against doing that, given that this would grant you access to every https connection that isn't hpkp secured. I actually have all webservices in my home network secured by https, all you need
203.
by kpcyrd 9y ago
Wouldn't there be a limit at some point? If apple starts paying 1 million, how many shady companies can afford paying 10 million? Also, if you can make 5 million with a single exploit through bug bounties, would you even bother selling
204.
by kpcyrd 9y ago
I've filed a pull request to include a CSP technique I've started adding on some of my apis: https://github.com/shieldfy/API-Security-Checklist/pull/5
205.
by kpcyrd 9y ago
I think this is a rather special usecase, this makes sense with inhouse applications where something like this might be common, but probably not something you want on the public api of a shop.
206.
by kpcyrd 9y ago
Some of these communities are actually very alive: https://map.hamburg.freifunk.net/
207.
by kpcyrd 9y ago
HEADLINE: Decent rust support DESCRIPTION: On rolling release distros there's currently a vim version that ships rust syntax highlighting, rustc and cargo. This is pretty much all you need to get started with rust development. Debian s
208.
by kpcyrd 9y ago
The name VARCHAR is confusing since it's not properly defined what a character is. 1 byte? Something on the unicode table? If it'd be named VARBYTE(255) it would be pretty obvious that a 255-emoji-string insert would fail. https:
209.
by kpcyrd 9y ago
I got excited for a moment, but debian stretch is not released as stable yet? https://www.debian.org/releases/
210.
by kpcyrd 9y ago
You can only compress to a certain level. For example, you can't compress a sufficiently random bitstream because there are no patterns. See also information theory. I wrote a game for programmers about 5 years ago that used a toy proo

More ›