lvh

41 ms·

391.
by lvh 7y ago
GraalVM has several parts. If you want to run polyglot apps directly, yes, you need to install GraalVM. If you compile your JVM apps to native, no, you get a standalone binary. Truffle is a developer-facing API.
392.
by lvh 7y ago
We have a lot of structured data at Latacora: most of which off of APIs and appliances. You often want to build regression tests against it, but the real data is sensitive. We built this tool to redact the data so that the exact IPs, securi
393.
Show HN: Format-preserving redaction for structured test data(github.com)
1 points by lvh 7y ago|1 comments
394.
by lvh 7y ago
I'm not GP, but we have done several native Clojure CLI apps with Graal: https://github.com/latacora/wernicke https://github.com/latacora/recidiffist-cli https://github.com/la
395.
by lvh 7y ago
Minor point of order: ledger-cli has a lot of languages for one-off scripts but it's principally a C++ program.
396.
by lvh 7y ago
One of the easiest compared to what? Certainly not a Python point release. A couple of points: 1. Python core dev pretended Python 3 was good and ready by, like, 3.1. It wasn't. 2. While your problem may have been painless (I'm gl
397.
by lvh 7y ago
If you could do this with a proper regex: they’re easy to parse and don’t have a lot of structure, so you can do neat things like produce generators from them. Now, you can get your regex for regexes to produce new regexes! This can be usef
398.
by lvh 7y ago
Oh sure: I didn’t mean to imply nobody does, I’m definitely just talking to startups.
399.
by lvh 7y ago
Have you used Teams? I've had to once, to talk to people and Microsoft, and it was _hilariously_ bad. I don't know anyone who uses it in earnest, and I know people who have used Google Chat. (I do most of the sales calls for Latac
400.
by lvh 7y ago
Could you elaborate why you think GP is incorrect?
401.
by lvh 7y ago
I don't know if Lisp is to blame, but we had exactly the same thought, and I gave it a shot: https://github.com/lvh/regex-crossword I did the somewhat bruteforcy generate-strings-and-learn-from-that way, instead o
402.
by lvh 7y ago
I thought this was kinda neat so I taught a computer how to do it: https://github.com/lvh/regex-crossword/blob/master/src/lvh/r... Right now, it works using a logic programming engine (core.log
403.
by lvh 7y ago
A DAC works because you use it on a tiny surface area (measured in microns). The application was power transmission cables.
404.
by lvh 7y ago
The values suggested are north of the ultimate tensile strength for carbon nanotubes and graphene. It’s in the ballpark of the center of the earth. I don’t think it’s as simple as tightening a bolt.
405.
by lvh 7y ago
Unfortunately, patent offices think the courts will sort it out if they mess up, and courts think patent offices probably did an OK job vetting, and they both defer to each other more than they probably should. That said: there are only a h
406.
by lvh 7y ago
We use Fargate a lot for internal tooling. It's pretty great! Being able to schedule containers instead of Lambdas is nice, and genreally not having the restrictions of a Lambda environment is nice. We have, no joke, Lambdas that kick
407.
Reverse engineering a finite field multiplication operation(blog.quarkslab.com)
2 points by lvh 7y ago|0 comments
408.
by lvh 7y ago
Article mentions he wants to make the seed explicit so he can reproduce the same (randomly selected) environment. You can use any stream cipher you want instead, of course, but in my experience for video games the problem isn’t “I need a ra
409.
by lvh 7y ago
Why do you believe that is not the case?
410.
by lvh 7y ago
This is not an uncommon phenomenon and not specific to vuln research. It happens all the time in mathematics, the sciences... [0] Far more likely: there is a related cause that made two people think to try the same thing at approximately th
411.
by lvh 7y ago
I mean pre-auth in that you pass it a JWT with a shared credential that it parses for you, as opposed to an explicit auth'd credential.
412.
by lvh 7y ago
This is great, and pretty damning evidence of traditional, unsafe languages. Do we have any data on how much of iOS is implemented in unsafe code vs in macOS? In particular, I want to know if the difference in memory safety ratio correlates
413.
by lvh 7y ago
How is that distinct from the bait and switch trick in the post?
414.
by lvh 7y ago
That one is all 'tptacek.
415.
by lvh 7y ago
Yep! That works, but it's essentially the first option ("How to sign a JSON object") but with JSON as the outer serialization format instead of a comma in the middle. You also correctly identified why that is different from t
416.
by lvh 7y ago
That is literally the first thing suggested in the post. You can say the other thing is a "flawed approach" but that's the design problem being solved, so your answer is simply not responsive to the question.
417.
by lvh 7y ago
That's an excellent point, you're of course right and the blog post could do a better job explaining that. I'll amend.
418.
by lvh 7y ago
Why would you do that? If you already know what the header is, just validate the tag and ignore what the header has to say.
419.
by lvh 7y ago
It's not "better", it solves a materially different problem. The article already acknowledges that if you can afford to, you should just stick a tag on the outside. (That's what JWT does, but the actual thing recommended
420.
by lvh 7y ago
> In any case, you don't create a signature on a string per se, you create it on bytes, even if those bytes are derived from a string. Everyone is on the same page that at some point bytes go into a hash function. That's not t

More ›